last executing test programs: 4.389502898s ago: executing program 0 (id=933): r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$unix(r0, &(0x7f0000000540)=@abs={0x0, 0x0, 0x4e23}, 0x6e) 4.164907416s ago: executing program 0 (id=936): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) getcwd(&(0x7f0000000240)=""/204, 0xcc) 4.009483859s ago: executing program 0 (id=939): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000340)=0x4000000) 3.798028246s ago: executing program 0 (id=941): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000300)={'dt2811\x00', [0x2f00, 0x1, 0xd09a, 0xfff7ffff, 0x3, 0x4, 0x20000004, 0x6, 0xffe, 0x9, 0xc, 0x1001, 0x9, 0x80003, 0x10003, 0x6, 0x1000005, 0x40000009, 0x830, 0x30000, 0x10003, 0x4, 0x800, 0xe2df, 0x2, 0xd, 0x7, 0x5, 0x4, 0x5, 0x70f]}) 2.818322254s ago: executing program 1 (id=955): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") quotactl$Q_GETQUOTA(0xffffffff80000701, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0xee00, 0x0) 2.332534073s ago: executing program 1 (id=963): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=@newlink={0x58, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, 0x40000, 0x21863}, [@IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @loopback}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4044030}, 0xc0) 2.086884343s ago: executing program 3 (id=966): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615, 0xef}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x8}, @IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x9}]}}}]}, 0x48}}, 0x0) 1.9979655s ago: executing program 1 (id=967): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x268, 0x0, 0x43, 0xa0, 0x100, 0x98, 0x1d0, 0x178, 0x178, 0x1d0, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0xff000000, 'veth0_to_bond\x00', 'ip6erspan0\x00', {}, {}, 0x0, 0x0, 0x25}, 0x12a, 0xe0, 0x100, 0x0, {0x0, 0x7a010000}, [@inet=@rpfilter={{0x28}, {0x8}}, @common=@unspec=@helper={{0x48}, {0x0, 'ftp-20000\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast1, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2c8) 1.808283855s ago: executing program 1 (id=969): syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000800)='./file0\x00', 0x800, &(0x7f0000000280)=ANY=[@ANYBLOB="757466382c6869646500757466382c6f76657272696465726f636b7065726d2c6d61703d6f66662c6d61703d6e6f726d616c4173656c22d32006783b507330303030303033372c756e686964652c756e686964652c6f76657272696465726f636b7065726d2c6d6170726d616c3b6e6f726f636b2c00"], 0x2, 0x6b1, &(0x7f0000001100)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x16c) 1.630965789s ago: executing program 3 (id=971): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x17}}, @in6={0xa, 0x4e22, 0x3ff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}], 0x12) 1.419843386s ago: executing program 3 (id=973): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x2, 0x0, 0xfffffff9, 0x3}}) 1.36968341s ago: executing program 1 (id=974): syz_mount_image$xfs(&(0x7f0000000500), &(0x7f0000000000)='./file0\x00', 0x2218a5d, &(0x7f0000000140), 0x0, 0x96a4, &(0x7f0000002080)="$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") quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000001480)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 1.179108766s ago: executing program 3 (id=976): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000040), 0x4) 1.028532448s ago: executing program 2 (id=977): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x88}, @NFTA_SET_DESC={0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x78}}, 0x0) 970.119092ms ago: executing program 3 (id=978): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000240)={0x16, 0x98, 0xfa00, {0x0, 0x3, 0xffffffffffffffff, 0x10, 0x3, @in={0x2, 0x4e24, @rand_addr=0x64010102}}}, 0xa0) 884.723579ms ago: executing program 3 (id=979): syz_mount_image$ocfs2(&(0x7f0000000300), &(0x7f0000000040)='./file3\x00', 0x2000000, &(0x7f00000001c0)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6865617274626561743d6e6f6e652c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c636f686572656e63793d62756666657265642c6572726f72733d636f6e74696e75652c757365725f78617474722c626172726965723d30303030303030303030303030303032363131352c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030362c696e74722c6a6f75726e616c5f6173796e635f636f6d6d69742c00535d4e036013ec9e6e7ecdee3849b40884b95e94f35cec9600cd19beb0"], 0x1, 0x4433, &(0x7f0000004480)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000480)={{}, {}, [], {0x4, 0x6}}, 0x24, 0x3) 863.383221ms ago: executing program 2 (id=980): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000001c0), 0x35c, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f00000013c0)=""/4096, 0x5}], 0x1, 0x0, 0x0) 709.170013ms ago: executing program 2 (id=981): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4055}, 0x0) 538.281367ms ago: executing program 2 (id=982): r0 = socket$caif_stream(0x25, 0x1, 0x5) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) 409.871007ms ago: executing program 2 (id=983): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000900)={0x0, 0x0, 0x2, 0x7, 0x2000, 0x2}, 0x14) 281.767637ms ago: executing program 0 (id=984): r0 = syz_open_dev$radio(&(0x7f0000000080), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x8000, 0x0, 0x0, 0x2080, 0x5}) 210.726023ms ago: executing program 2 (id=985): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000080), 0x3, 0x4cd, &(0x7f00000000c0)="$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") syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e7400090598ff7f0000100109050b"], 0x0) 4.26342ms ago: executing program 0 (id=986): syz_mount_image$exfat(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000040)={[{@utf8}, {@discard}, {@keep_last_dots}, {}, {@iocharset={'iocharset', 0x3d, 'koi8-r'}}, {@errors_remount}, {@iocharset={'iocharset', 0x3d, 'macgreek'}}, {@keep_last_dots}, {@sys_tz}, {@dmask={'dmask', 0x3d, 0x5}}]}, 0x1, 0x1534, &(0x7f0000002d00)="$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") mount$nfs(&(0x7f0000000500)='\xb2\x83\x87J9I\xc3i\xe4\x81\xc5:\xccLD\x8d\xd8\xc7\x90v\xc7\xdcM\x1d\xf2\x8b\x82\x90\xa4\xdd\x98\xb8\rQh#\xfacl\x01\x8cC\x1f|\xa5\xcb\x8f\xe5\xbb]\xa0\xea\xc4\x03\xf2\xf5\xf4\xa1\x9a-\xf5\x9e\x16\x1cx\xf1|$\xd8.\xff\xf6\x00\x00\x00\x00\xe2\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x20100a, 0x0) 0s ago: executing program 1 (id=987): r0 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90f, 0x9, '\x00', @p_u32=&(0x7f0000000200)=0x9}}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.140' (ED25519) to the list of known hosts. syzkaller login: [ 66.938570][ T5775] cgroup: Unknown subsys name 'net' [ 67.048821][ T5775] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 68.446537][ T5775] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 69.890168][ T5789] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 69.903452][ T5797] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 69.909690][ T5794] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.911981][ T5797] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 69.919165][ T5794] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 69.927977][ T5799] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 69.934730][ T5794] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.942190][ T5799] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 69.949488][ T5794] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.962121][ T5794] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 69.970764][ T5794] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 69.982129][ T5799] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.989912][ T5797] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 69.995516][ T5798] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 69.997293][ T5799] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 70.005699][ T5798] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 70.013857][ T5799] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 70.019482][ T5798] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 70.025858][ T5799] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 70.033409][ T5798] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 70.039430][ T5797] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 70.049549][ T5798] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 70.061200][ T5798] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 70.063483][ T5799] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.549251][ T5786] chnl_net:caif_netlink_parms(): no params data found [ 70.596190][ T5785] chnl_net:caif_netlink_parms(): no params data found [ 70.621174][ T5784] chnl_net:caif_netlink_parms(): no params data found [ 70.768728][ T5787] chnl_net:caif_netlink_parms(): no params data found [ 70.818261][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.825805][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.834777][ T5786] bridge_slave_0: entered allmulticast mode [ 70.842002][ T5786] bridge_slave_0: entered promiscuous mode [ 70.857511][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.864941][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.872386][ T5786] bridge_slave_1: entered allmulticast mode [ 70.879718][ T5786] bridge_slave_1: entered promiscuous mode [ 70.887312][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.894526][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.901866][ T5784] bridge_slave_0: entered allmulticast mode [ 70.908646][ T5784] bridge_slave_0: entered promiscuous mode [ 70.928448][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.935753][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.943282][ T5785] bridge_slave_0: entered allmulticast mode [ 70.950073][ T5785] bridge_slave_0: entered promiscuous mode [ 70.975797][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.983192][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.990483][ T5784] bridge_slave_1: entered allmulticast mode [ 70.997784][ T5784] bridge_slave_1: entered promiscuous mode [ 71.005666][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.013077][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.020458][ T5785] bridge_slave_1: entered allmulticast mode [ 71.027954][ T5785] bridge_slave_1: entered promiscuous mode [ 71.088929][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.124913][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.140599][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.153081][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.166445][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.177811][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.264487][ T5786] team0: Port device team_slave_0 added [ 71.283970][ T5785] team0: Port device team_slave_0 added [ 71.304782][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.312359][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.319569][ T5787] bridge_slave_0: entered allmulticast mode [ 71.328306][ T5787] bridge_slave_0: entered promiscuous mode [ 71.338465][ T5786] team0: Port device team_slave_1 added [ 71.360087][ T5784] team0: Port device team_slave_0 added [ 71.368953][ T5784] team0: Port device team_slave_1 added [ 71.378381][ T5785] team0: Port device team_slave_1 added [ 71.392784][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.399975][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.407591][ T5787] bridge_slave_1: entered allmulticast mode [ 71.414431][ T5787] bridge_slave_1: entered promiscuous mode [ 71.446402][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.453546][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.480279][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.548659][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.556193][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.582668][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.600345][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.607850][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.634502][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.646926][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.654289][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.680507][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.693364][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.700360][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.726487][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.740909][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.754058][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.761380][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.787486][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.820307][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.895449][ T5787] team0: Port device team_slave_0 added [ 71.919034][ T5784] hsr_slave_0: entered promiscuous mode [ 71.925850][ T5784] hsr_slave_1: entered promiscuous mode [ 71.938312][ T5786] hsr_slave_0: entered promiscuous mode [ 71.946162][ T5786] hsr_slave_1: entered promiscuous mode [ 71.953051][ T5786] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.961704][ T5786] Cannot create hsr debugfs directory [ 71.968844][ T5787] team0: Port device team_slave_1 added [ 72.041736][ T5785] hsr_slave_0: entered promiscuous mode [ 72.048367][ T5785] hsr_slave_1: entered promiscuous mode [ 72.055093][ T5785] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.063140][ T5785] Cannot create hsr debugfs directory [ 72.093318][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.100358][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.102060][ T50] Bluetooth: hci2: command tx timeout [ 72.126917][ T5799] Bluetooth: hci1: command tx timeout [ 72.132418][ T50] Bluetooth: hci3: command tx timeout [ 72.139071][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.188354][ T50] Bluetooth: hci0: command tx timeout [ 72.195500][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 72.202888][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.204340][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.216787][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.243054][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.379072][ T5787] hsr_slave_0: entered promiscuous mode [ 72.386159][ T5787] hsr_slave_1: entered promiscuous mode [ 72.393464][ T5787] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.401372][ T5787] Cannot create hsr debugfs directory [ 72.633701][ T5784] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 72.655154][ T5784] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 72.677493][ T5784] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 72.690441][ T5784] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 72.762374][ T5786] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.782970][ T5786] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.795792][ T5786] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.806513][ T5786] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 72.914322][ T5785] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.952227][ T5785] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.966503][ T5785] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.977590][ T5785] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.019226][ T5787] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 73.030567][ T5787] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 73.065046][ T5787] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 73.075698][ T5787] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.133755][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.206797][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.246876][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.254450][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.269807][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.288340][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.295529][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.360593][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.388029][ T5786] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.436802][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.448514][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.455749][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.489428][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.496739][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.544796][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.570603][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.577836][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.602258][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.609421][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.640520][ T5787] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.690502][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.697891][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.762505][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.769680][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.839829][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.010700][ T5784] veth0_vlan: entered promiscuous mode [ 74.079347][ T5784] veth1_vlan: entered promiscuous mode [ 74.183907][ T50] Bluetooth: hci3: command tx timeout [ 74.183949][ T5789] Bluetooth: hci2: command tx timeout [ 74.195877][ T5799] Bluetooth: hci1: command tx timeout [ 74.204259][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.212589][ T5784] veth0_macvtap: entered promiscuous mode [ 74.246064][ T5784] veth1_macvtap: entered promiscuous mode [ 74.261848][ T5799] Bluetooth: hci0: command tx timeout [ 74.277811][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.337120][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.358219][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.383038][ T5784] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.392660][ T5784] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.404963][ T5784] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.413955][ T5784] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.468353][ T5786] veth0_vlan: entered promiscuous mode [ 74.489717][ T5786] veth1_vlan: entered promiscuous mode [ 74.507349][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.557631][ T5785] veth0_vlan: entered promiscuous mode [ 74.596474][ T5785] veth1_vlan: entered promiscuous mode [ 74.616874][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.637532][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.657825][ T5786] veth0_macvtap: entered promiscuous mode [ 74.712259][ T5786] veth1_macvtap: entered promiscuous mode [ 74.725459][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.726155][ T5785] veth0_macvtap: entered promiscuous mode [ 74.745349][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.767590][ T5785] veth1_macvtap: entered promiscuous mode [ 74.795186][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.806324][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.824756][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.844418][ T5787] veth0_vlan: entered promiscuous mode [ 74.877355][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.888138][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.900427][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.915828][ T5787] veth1_vlan: entered promiscuous mode [ 74.932426][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.953330][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.972000][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.991299][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.004052][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.025813][ T5786] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.040939][ T5786] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.049708][ T5786] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.063319][ T5786] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.087474][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.100013][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.117490][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.134985][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.157732][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.203641][ T5785] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.218256][ T5785] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.227271][ T5785] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.244305][ T5785] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.340244][ T5787] veth0_macvtap: entered promiscuous mode [ 75.379237][ T5787] veth1_macvtap: entered promiscuous mode [ 75.509690][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.520204][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.532851][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.555044][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.565897][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.578429][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.588658][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.599648][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.612476][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.668805][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.682465][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.697768][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.708794][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.719729][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.730840][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.745205][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.767597][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.796920][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.817616][ T5787] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.831703][ T5787] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.846429][ T5787] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.857245][ T5787] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.909559][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.935026][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.999224][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.020693][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.121319][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.129227][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.181341][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.189318][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.264003][ T5789] Bluetooth: hci1: command tx timeout [ 76.264015][ T50] Bluetooth: hci2: command tx timeout [ 76.275766][ T5799] Bluetooth: hci3: command tx timeout [ 76.342352][ T5799] Bluetooth: hci0: command tx timeout [ 76.469929][ T5881] syz.2.8[5881]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 76.664632][ T5881] loop2: detected capacity change from 0 to 4096 [ 76.863953][ T5881] ntfs: volume version 3.1. [ 76.908846][ T5892] loop0: detected capacity change from 0 to 2048 [ 77.006738][ T5892] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.239711][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.938916][ T5925] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 78.341302][ T5799] Bluetooth: hci3: command tx timeout [ 78.346778][ T5799] Bluetooth: hci1: command tx timeout [ 78.352996][ T5789] Bluetooth: hci2: command tx timeout [ 78.420930][ T5799] Bluetooth: hci0: command tx timeout [ 78.817323][ T5956] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 78.861277][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 79.031134][ T5964] netlink: 12 bytes leftover after parsing attributes in process `syz.1.42'. [ 79.073696][ T5964] netlink: 8 bytes leftover after parsing attributes in process `syz.1.42'. [ 79.100883][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 79.105783][ T9] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 79.105868][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 79.105885][ T9] usb 3-1: config 0 has no interface number 0 [ 79.105926][ T9] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 79.105951][ T9] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 79.105974][ T9] usb 3-1: config 0 interface 52 has no altsetting 0 [ 79.107253][ T9] usb 3-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 79.107278][ T9] usb 3-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 79.107298][ T9] usb 3-1: Manufacturer: syz [ 79.127745][ T9] usb 3-1: config 0 descriptor?? [ 79.370312][ T9] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.52/input/input5 [ 79.570789][ T5788] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 79.756543][ C0] synaptics_usb 3-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 79.765704][ T9] usb 3-1: USB disconnect, device number 2 [ 79.820748][ T5788] usb 1-1: Using ep0 maxpacket: 32 [ 79.834672][ T5788] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 79.857020][ T5788] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.892617][ T5788] usb 1-1: config 0 descriptor?? [ 79.947615][ T5788] as10x_usb: device has been detected [ 79.972158][ T5788] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 80.042036][ T5788] usb 1-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 80.091318][ T5994] netlink: 'syz.1.55': attribute type 1 has an invalid length. [ 80.117357][ T5788] as10x_usb: error during firmware upload part1 [ 80.127674][ T5788] Registered device nBox DVB-T Dongle [ 80.142647][ T5788] usb 1-1: USB disconnect, device number 2 [ 80.234483][ T5788] Unregistered device nBox DVB-T Dongle [ 80.262999][ T5788] as10x_usb: device has been disconnected [ 80.328748][ T6000] netdevsim netdevsim1: Firmware load for './file0/../file0' refused, path contains '..' component [ 80.495660][ T6004] loop1: detected capacity change from 0 to 512 [ 80.545138][ T6004] ======================================================= [ 80.545138][ T6004] WARNING: The mand mount option has been deprecated and [ 80.545138][ T6004] and is ignored by this kernel. Remove the mand [ 80.545138][ T6004] option from the mount to silence this warning. [ 80.545138][ T6004] ======================================================= [ 80.644018][ T6004] EXT4-fs error (device loop1): ext4_orphan_get:1425: comm syz.1.61: bad orphan inode 15 [ 80.684068][ T6004] ext4_test_bit(bit=14, block=5) = 0 [ 80.695537][ T6004] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.768246][ T6004] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters [ 80.823275][ T6004] EXT4-fs error (device loop1): ext4_free_inode:356: comm syz.1.61: bit already cleared for inode 13 [ 80.895658][ T5787] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.250117][ T6006] loop2: detected capacity change from 0 to 32768 [ 81.300047][ T6006] [ 81.300047][ T6006] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 81.300047][ T6006] [ 81.399135][ T6006] ERROR: (device loop2): diWrite: ixpxd invalid [ 81.399135][ T6006] [ 81.411045][ T6025] loop1: detected capacity change from 0 to 2048 [ 81.442307][ T6006] ERROR: (device loop2): remounting filesystem as read-only [ 81.472963][ T6006] ERROR: (device loop2): txCommit: [ 81.472963][ T6006] [ 81.493330][ T6025] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 82.267750][ T6050] netlink: 56 bytes leftover after parsing attributes in process `syz.1.81'. [ 82.286985][ T6050] netlink: 12 bytes leftover after parsing attributes in process `syz.1.81'. [ 82.316101][ T6050] netlink: 31 bytes leftover after parsing attributes in process `syz.1.81'. [ 82.347915][ T6050] netlink: 'syz.1.81': attribute type 3 has an invalid length. [ 82.365321][ T6057] loop3: detected capacity change from 0 to 256 [ 82.371102][ T6050] netlink: 'syz.1.81': attribute type 2 has an invalid length. [ 82.391056][ T6050] netlink: 31 bytes leftover after parsing attributes in process `syz.1.81'. [ 82.423900][ T787] cfg80211: failed to load regulatory.db [ 82.507813][ T6057] FAT-fs (loop3): Directory bread(block 64) failed [ 82.541004][ T6057] FAT-fs (loop3): Directory bread(block 65) failed [ 82.549066][ T6057] FAT-fs (loop3): Directory bread(block 66) failed [ 82.583026][ T6057] FAT-fs (loop3): Directory bread(block 67) failed [ 82.613719][ T6057] FAT-fs (loop3): Directory bread(block 68) failed [ 82.660943][ T6057] FAT-fs (loop3): Directory bread(block 69) failed [ 82.672189][ T6057] FAT-fs (loop3): Directory bread(block 70) failed [ 82.678791][ T6057] FAT-fs (loop3): Directory bread(block 71) failed [ 82.689077][ T6057] FAT-fs (loop3): Directory bread(block 72) failed [ 82.697244][ T6057] FAT-fs (loop3): Directory bread(block 73) failed [ 82.730151][ T6067] loop2: detected capacity change from 0 to 256 [ 82.799148][ T6071] netlink: 24 bytes leftover after parsing attributes in process `syz.0.92'. [ 82.881467][ T6067] FAT-fs (loop2): Directory bread(block 64) failed [ 82.909616][ T6067] FAT-fs (loop2): Directory bread(block 65) failed [ 82.933126][ T6067] FAT-fs (loop2): Directory bread(block 66) failed [ 82.939925][ T6067] FAT-fs (loop2): Directory bread(block 67) failed [ 82.974747][ T6067] FAT-fs (loop2): Directory bread(block 68) failed [ 82.990830][ T6067] FAT-fs (loop2): Directory bread(block 69) failed [ 83.001252][ T6067] FAT-fs (loop2): Directory bread(block 70) failed [ 83.035963][ T6067] FAT-fs (loop2): Directory bread(block 71) failed [ 83.046221][ T6067] FAT-fs (loop2): Directory bread(block 72) failed [ 83.070909][ T6067] FAT-fs (loop2): Directory bread(block 73) failed [ 83.169312][ T6076] loop0: detected capacity change from 0 to 256 [ 83.194353][ T6076] exfat: Deprecated parameter 'utf8' [ 83.254279][ T6076] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 83.377253][ T6083] loop3: detected capacity change from 0 to 64 [ 83.497654][ T6083] Trying to free block not in datazone [ 83.695916][ T6089] netlink: 12 bytes leftover after parsing attributes in process `syz.2.101'. [ 83.724816][ T6089] netlink: 20 bytes leftover after parsing attributes in process `syz.2.101'. [ 84.211889][ T6110] netlink: 40 bytes leftover after parsing attributes in process `syz.1.111'. [ 84.237740][ T6110] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 84.256565][ T6114] netlink: 'syz.2.113': attribute type 4 has an invalid length. [ 84.263485][ T6116] loop3: detected capacity change from 0 to 512 [ 84.268882][ T6114] netlink: 152 bytes leftover after parsing attributes in process `syz.2.113'. [ 84.301311][ T6116] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 84.313153][ T6114] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 84.343744][ T6116] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 84.475221][ T6116] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2867: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 84.507456][ T6122] loop1: detected capacity change from 0 to 164 [ 84.554313][ T6116] EXT4-fs (loop3): 1 truncate cleaned up [ 84.565019][ T6125] netlink: 40 bytes leftover after parsing attributes in process `syz.0.118'. [ 84.578586][ T6116] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.652177][ T6122] Unsupported NM flag settings (8) [ 84.715563][ T5784] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.761275][ T6128] netlink: 'syz.0.120': attribute type 10 has an invalid length. [ 84.781951][ T6128] netlink: 40 bytes leftover after parsing attributes in process `syz.0.120'. [ 84.816688][ T6128] team0: entered promiscuous mode [ 84.830199][ T6128] team_slave_0: entered promiscuous mode [ 84.856365][ T6128] team_slave_1: entered promiscuous mode [ 84.891063][ T6128] team0: entered allmulticast mode [ 84.896479][ T6128] team_slave_0: entered allmulticast mode [ 84.904614][ T6128] team_slave_1: entered allmulticast mode [ 84.911561][ T6128] bridge0: port 3(team0) entered blocking state [ 84.918306][ T6128] bridge0: port 3(team0) entered disabled state [ 84.929829][ T6128] bridge0: port 3(team0) entered blocking state [ 84.936790][ T6128] bridge0: port 3(team0) entered forwarding state [ 84.946216][ T6133] netlink: 'syz.3.121': attribute type 10 has an invalid length. [ 85.001144][ T6133] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.043571][ T6133] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 85.220248][ T6143] loop3: detected capacity change from 0 to 64 [ 85.408979][ T6149] netlink: 24 bytes leftover after parsing attributes in process `syz.0.129'. [ 86.543081][ T6153] loop0: detected capacity change from 0 to 40427 [ 86.597641][ T6153] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 86.631447][ T6153] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 86.691238][ T6153] F2FS-fs (loop0): invalid crc value [ 86.757068][ T6153] F2FS-fs (loop0): Found nat_bits in checkpoint [ 86.943374][ T6153] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 86.980916][ T6153] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 86.984107][ T6201] netlink: 20 bytes leftover after parsing attributes in process `syz.2.153'. [ 87.056689][ T6201] veth2: entered promiscuous mode [ 87.087021][ T6153] fscrypt (loop0, inode 3): Error -61 getting encryption context [ 87.110760][ T6201] veth2: entered allmulticast mode [ 87.448923][ T6212] netlink: 28 bytes leftover after parsing attributes in process `syz.1.159'. [ 87.473314][ T6212] netlink: 28 bytes leftover after parsing attributes in process `syz.1.159'. [ 87.483852][ T6212] netlink: 32 bytes leftover after parsing attributes in process `syz.1.159'. [ 87.748074][ T6222] loop3: detected capacity change from 0 to 64 [ 87.970029][ T6224] loop1: detected capacity change from 0 to 4096 [ 88.014400][ T6224] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 88.076007][ T6224] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 88.116403][ T6224] ntfs3: loop1: mft corrupted [ 88.124628][ T6224] ntfs3: loop1: Failed to load $Extend (-22). [ 88.154399][ T6224] ntfs3: loop1: Failed to initialize $Extend. [ 89.198015][ T6240] loop2: detected capacity change from 0 to 40427 [ 89.251728][ T6240] F2FS-fs (loop2): invalid crc value [ 89.316772][ T6240] F2FS-fs (loop2): Found nat_bits in checkpoint [ 89.327178][ T6273] QAT: Stopping all acceleration devices. [ 89.480787][ T6240] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 89.520199][ T6281] xt_ecn: cannot match TCP bits for non-tcp packets [ 90.060941][ T27] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 90.271041][ T27] usb 4-1: Using ep0 maxpacket: 16 [ 90.305310][ T27] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 90.318078][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.328444][ T27] usb 4-1: Product: syz [ 90.333202][ T27] usb 4-1: Manufacturer: syz [ 90.338599][ T27] usb 4-1: SerialNumber: syz [ 90.347578][ T27] r8152-cfgselector 4-1: config 0 descriptor?? [ 90.350844][ T787] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 90.427979][ T6313] sock: sock_timestamping_bind_phc: sock not bind to device [ 90.503240][ T6315] netlink: 197276 bytes leftover after parsing attributes in process `syz.1.206'. [ 90.612692][ T787] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 90.631087][ T787] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.641545][ T787] usb 1-1: Product: syz [ 90.645777][ T787] usb 1-1: Manufacturer: syz [ 90.650583][ T787] usb 1-1: SerialNumber: syz [ 90.680482][ T787] usb 1-1: config 0 descriptor?? [ 90.787551][ T27] r8152-cfgselector 4-1: Unknown version 0x0000 [ 90.814581][ T27] r8152-cfgselector 4-1: USB disconnect, device number 2 [ 90.831151][ T5777] udevd[5777]: setting owner of /dev/bus/usb/004/002 to uid=0, gid=0 failed: No such file or directory [ 90.839546][ T6325] loop2: detected capacity change from 0 to 256 [ 90.858840][ T6326] kAFS: unable to lookup cell ' [ 90.858840][ T6326] $)-.ÌײfÍY¹Ç²a×ïÅ2sˆ [ 90.858840][ T6326] ' [ 90.926841][ T787] hso 1-1:0.0: Failed to find BULK IN ep [ 90.974755][ T787] usb-storage 1-1:0.0: USB Mass Storage device detected [ 91.169683][ T6337] netlink: 'syz.2.213': attribute type 75 has an invalid length. [ 91.216971][ T787] usb 1-1: USB disconnect, device number 3 [ 91.413151][ T6341] loop2: detected capacity change from 0 to 256 [ 91.437433][ T6341] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 91.500491][ T6341] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 91.531960][ T6341] FAT-fs (loop2): Filesystem has been set read-only [ 91.538872][ T6341] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 91.580931][ T6341] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 91.589537][ T6341] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 91.616326][ T6341] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 91.640753][ T6341] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 91.649398][ T6341] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 91.674033][ T6341] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 91.707948][ T6341] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 91.719988][ T6341] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 91.729049][ T6341] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 91.759611][ T6341] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 91.768889][ T6341] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 91.787149][ T6341] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 91.805599][ T6341] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 91.818249][ T6341] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 91.828064][ T6341] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 91.841517][ T6341] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 91.856114][ T6341] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 91.875864][ T6341] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 91.891445][ T6341] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 91.905009][ T6341] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 91.927241][ T6341] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 91.949832][ T6341] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 91.960388][ T6341] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 91.961048][ T6343] loop1: detected capacity change from 0 to 32768 [ 91.969288][ T27] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 91.987802][ T6343] XFS: noikeep mount option is deprecated. [ 91.989766][ T6341] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 92.011151][ T6341] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 92.027999][ T6341] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 92.041776][ T6341] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 92.059027][ T6341] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 92.073022][ T6341] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 92.081824][ T6341] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 92.090391][ T6341] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 92.099210][ T6341] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 92.111594][ T6341] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 92.121951][ T6341] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 92.131215][ T6341] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 92.140023][ T6341] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 92.150213][ T6341] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 92.151446][ T6343] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 92.159351][ T6341] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 92.176883][ T27] usb 4-1: Using ep0 maxpacket: 32 [ 92.186006][ T27] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 92.210727][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.229625][ T27] usb 4-1: config 0 descriptor?? [ 92.231398][ T6341] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 92.245011][ T27] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 92.269388][ T6341] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 92.278604][ T6341] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 92.319431][ T6341] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 92.364236][ T6341] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 92.394599][ T6341] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 92.403644][ T6343] XFS (loop1): Ending clean mount [ 92.419770][ T6341] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 92.443262][ T6343] XFS (loop1): Quotacheck needed: Please wait. [ 92.449997][ T6341] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 92.469121][ T6341] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 92.479347][ T6341] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 92.507966][ T6341] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 92.536532][ T6341] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 92.546191][ T6341] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 92.551065][ T6343] XFS (loop1): Quotacheck: Done. [ 92.561280][ T6341] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 92.569957][ T6341] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 92.586676][ T6341] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 92.597002][ T6341] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 92.609881][ T6341] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 92.638310][ T6341] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 92.648599][ T6341] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 92.667103][ T6341] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 92.680447][ T6341] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 92.687892][ T27] gspca_nw80x: reg_r err -71 [ 92.696341][ T6341] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 92.706514][ T6341] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 92.717269][ T6341] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 92.721724][ T27] nw80x: probe of 4-1:0.0 failed with error -71 [ 92.747780][ T6341] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 92.773833][ T27] usb 4-1: USB disconnect, device number 3 [ 92.789588][ T6341] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 92.797268][ T5787] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 92.824109][ T6341] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 92.838481][ T6341] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 92.853770][ T6341] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 92.863634][ T6341] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 92.872766][ T6341] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 92.891186][ T6341] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 92.899783][ T6341] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 92.925761][ T28] audit: type=1800 audit(1756225226.932:2): pid=6341 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.217" name="file1" dev="loop2" ino=1048596 res=0 errno=0 [ 93.180113][ T6377] capability: warning: `syz.0.232' uses deprecated v2 capabilities in a way that may be insecure [ 93.432499][ T6389] loop3: detected capacity change from 0 to 8 [ 93.747280][ T6398] netlink: 2 bytes leftover after parsing attributes in process `syz.3.241'. [ 93.921944][ T6407] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 93.970186][ T6407] No such timeout policy "syz1" [ 94.228350][ T6419] loop0: detected capacity change from 0 to 2048 [ 94.271093][ T967] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 94.322722][ T6419] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 94.483322][ T967] usb 3-1: unable to get BOS descriptor or descriptor too short [ 94.511751][ T967] usb 3-1: not running at top speed; connect to a high speed hub [ 94.560594][ T967] usb 3-1: config 56 has an invalid interface number: 129 but max is 0 [ 94.569511][ T967] usb 3-1: config 56 has no interface number 0 [ 94.594209][ T967] usb 3-1: config 56 interface 129 altsetting 224 endpoint 0x86 has invalid maxpacket 512, setting to 64 [ 94.606606][ T967] usb 3-1: config 56 interface 129 has no altsetting 0 [ 94.616795][ T967] usb 3-1: New USB device found, idVendor=1410, idProduct=9011, bcdDevice=e5.d2 [ 94.639522][ T967] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.677418][ T967] usb 3-1: Product: syz [ 94.689036][ T967] usb 3-1: Manufacturer: syz [ 94.710705][ T967] usb 3-1: SerialNumber: syz [ 94.731429][ T6411] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 94.921553][ T6435] process 'syz.0.260' launched '/dev/fd/-1' with NULL argv: empty string added [ 94.985518][ T967] option 3-1:56.129: GSM modem (1-port) converter detected [ 95.047401][ T967] usb 3-1: USB disconnect, device number 3 [ 95.077208][ T967] option 3-1:56.129: device disconnected [ 95.099380][ T6427] loop1: detected capacity change from 0 to 32768 [ 95.179118][ T6427] ea_get: invalid extended attribute [ 95.195778][ T6427] ffff888076baf230: 04 00 00 00 .... [ 95.362138][ T6439] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 95.388350][ T6433] loop3: detected capacity change from 0 to 32768 [ 95.520070][ T6433] ERROR: (device loop3): diAllocAG: error reading iag [ 95.520070][ T6433] [ 95.571088][ T6433] ialloc: diAlloc returned -5! [ 95.940144][ T6453] netlink: 24 bytes leftover after parsing attributes in process `syz.3.269'. [ 96.259514][ T6463] netlink: 12 bytes leftover after parsing attributes in process `syz.2.274'. [ 96.295678][ T6463] netlink: 68 bytes leftover after parsing attributes in process `syz.2.274'. [ 96.335723][ T6463] netlink: 12 bytes leftover after parsing attributes in process `syz.2.274'. [ 96.364403][ T6463] netlink: 68 bytes leftover after parsing attributes in process `syz.2.274'. [ 96.365243][ T6467] netlink: 44 bytes leftover after parsing attributes in process `syz.1.276'. [ 96.418134][ T6467] netlink: 43 bytes leftover after parsing attributes in process `syz.1.276'. [ 96.448653][ T6467] netlink: 'syz.1.276': attribute type 5 has an invalid length. [ 96.463983][ T6467] netlink: 43 bytes leftover after parsing attributes in process `syz.1.276'. [ 96.481904][ T6471] x_tables: duplicate underflow at hook 4 [ 96.764369][ T6481] loop0: detected capacity change from 0 to 1024 [ 96.857486][ T6490] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 96.860814][ T6481] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 97.002635][ T6481] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.283507][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 97.723900][ T6512] netlink: 8 bytes leftover after parsing attributes in process `syz.0.298'. [ 97.918642][ T6520] loop2: detected capacity change from 0 to 2048 [ 97.971500][ T6520] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 98.014222][ T6520] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 98.302301][ T6533] ALSA: mixer_oss: invalid OSS volume 'Ä' [ 98.450457][ T6540] netlink: 'syz.0.310': attribute type 3 has an invalid length. [ 98.450566][ T6540] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.310'. [ 99.244865][ T6569] loop0: detected capacity change from 0 to 164 [ 99.247813][ T6563] loop3: detected capacity change from 0 to 4096 [ 99.294085][ T6563] ntfs3: loop3: It is recommened to use chkdsk. [ 99.301380][ T6569] iso9660: Corrupted directory entry in block 0 of inode 1920 [ 99.319180][ T6563] ntfs3: loop3: try to read out of volume at offset 0x3fffffc0c00 [ 99.352407][ T6563] ntfs3: loop3: try to read out of volume at offset 0x3fffffc0c00 [ 99.374980][ T6563] ntfs3: loop3: try to read out of volume at offset 0x3fffffc0c00 [ 99.387766][ T6563] ntfs3: loop3: try to read out of volume at offset 0x3fffffc0c00 [ 99.430232][ T6563] ntfs3: loop3: try to read out of volume at offset 0x3fffffc1c00 [ 99.463995][ T6563] ntfs3: loop3: try to read out of volume at offset 0x3fffffc2c00 [ 99.505220][ T6563] ntfs3: loop3: try to read out of volume at offset 0x3fffffc4c00 [ 99.525111][ T6563] ntfs3: loop3: try to read out of volume at offset 0x3fffffc8c00 [ 99.541737][ T6563] ntfs3: loop3: try to read out of volume at offset 0x3fffffd0c00 [ 99.655640][ T6577] loop0: detected capacity change from 0 to 512 [ 99.723272][ T6577] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2802e028, mo2=0002] [ 99.746193][ T6577] System zones: 1-12 [ 99.757615][ T6577] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 33261: comm syz.0.327: invalid block [ 99.786633][ T6577] EXT4-fs (loop0): Remounting filesystem read-only [ 99.841994][ T6577] EXT4-fs (loop0): 1 truncate cleaned up [ 99.849108][ T6577] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.060115][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.422403][ T6603] netlink: 'syz.2.338': attribute type 9 has an invalid length. [ 100.447631][ T6603] netlink: 'syz.2.338': attribute type 9 has an invalid length. [ 100.647207][ T6610] snd_dummy snd_dummy.0: control 2:8:3:syz1:4 is already present [ 101.001973][ T6604] loop1: detected capacity change from 0 to 32768 [ 101.080793][ T27] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 101.301143][ T27] usb 3-1: Using ep0 maxpacket: 8 [ 101.311696][ T27] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 101.337723][ T27] usb 3-1: config 0 has no interface number 0 [ 101.356202][ T27] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 101.361811][ T6630] binder: 6629:6630 ioctl c018620c 200000000100 returned -22 [ 101.370778][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.417125][ T27] usb 3-1: Product: syz [ 101.421582][ T27] usb 3-1: Manufacturer: syz [ 101.426256][ T27] usb 3-1: SerialNumber: syz [ 101.455940][ T27] usb 3-1: config 0 descriptor?? [ 101.716048][ T6642] loop1: detected capacity change from 0 to 512 [ 101.740547][ T27] usb 3-1: Found UVC 0.04 device syz (046d:08c3) [ 101.760207][ T27] usb 3-1: No valid video chain found. [ 101.774937][ T6642] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 101.788876][ T27] usb 3-1: USB disconnect, device number 4 [ 101.877401][ T6642] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 18 vs 41 free clusters [ 101.910923][ T6642] Quota error (device loop1): write_blk: dquota write failed [ 101.920266][ T6642] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 101.931566][ T6642] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.359: Failed to acquire dquot type 0 [ 101.990084][ T6642] EXT4-fs (loop1): 1 truncate cleaned up [ 101.997327][ T6642] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.086072][ T6642] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 5 index 2 [ 102.120927][ T6642] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 131074 [ 102.135930][ T6642] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.359: Failed to acquire dquot type 1 [ 102.231596][ T5787] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.604994][ T6664] loop3: detected capacity change from 0 to 4096 [ 102.618589][ T6664] ntfs3: Unknown parameter 'nohide_dot_file—šANRpŒzÎs' [ 103.233231][ T6690] loop0: detected capacity change from 0 to 64 [ 103.279727][ T6692] sctp: [Deprecated]: syz.3.383 (pid 6692) Use of int in max_burst socket option. [ 103.279727][ T6692] Use struct sctp_assoc_value instead [ 103.641703][ T6677] loop1: detected capacity change from 0 to 32768 [ 103.679680][ T6677] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.374 (6677) [ 103.783488][ T6677] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 103.809000][ T6677] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 103.835130][ T6677] BTRFS info (device loop1): force zlib compression, level 3 [ 103.843011][ T6677] BTRFS info (device loop1): force clearing of disk cache [ 103.850288][ T6677] BTRFS info (device loop1): setting nodatasum [ 103.861142][ T6677] BTRFS info (device loop1): disabling tree log [ 103.868502][ T6677] BTRFS info (device loop1): enabling disk space caching [ 103.877095][ T6677] BTRFS info (device loop1): disk space caching is enabled [ 104.106386][ T6726] loop2: detected capacity change from 0 to 164 [ 104.113080][ T6677] BTRFS info (device loop1): auto enabling async discard [ 104.291824][ T6677] BTRFS error (device loop1: state M): unrecognized mount option '00000000000000000000' [ 104.294910][ T6732] loop3: detected capacity change from 0 to 64 [ 104.620320][ T5787] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 104.860762][ T8] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 105.098367][ T8] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 105.128100][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.147634][ T8] usb 4-1: Product: syz [ 105.163460][ T8] usb 4-1: Manufacturer: syz [ 105.168129][ T8] usb 4-1: SerialNumber: syz [ 105.196992][ T8] usb 4-1: config 0 descriptor?? [ 105.291736][ T6759] warning: `syz.1.409' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 105.454309][ T8] hso 4-1:0.0: Failed to find BULK IN ep [ 105.481783][ T8] usb-storage 4-1:0.0: USB Mass Storage device detected [ 105.743510][ T8] usb 4-1: USB disconnect, device number 4 [ 106.159972][ T6795] tipc: Can't bind to reserved service type 1 [ 106.911190][ T967] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 107.078909][ T6835] loop2: detected capacity change from 0 to 4096 [ 107.127083][ T967] usb 4-1: unable to get BOS descriptor or descriptor too short [ 107.155468][ T967] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 107.198296][ T967] usb 4-1: New USB device found, idVendor=046d, idProduct=c539, bcdDevice= 0.40 [ 107.216615][ T967] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.225152][ T6835] ntfs: volume version 3.1. [ 107.235992][ T967] usb 4-1: Product: syz [ 107.240242][ T967] usb 4-1: Manufacturer: syz [ 107.250796][ T967] usb 4-1: SerialNumber: syz [ 107.272969][ T967] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 107.348344][ T6841] comedi comedi3: aio_aio12_8: I/O port conflict (0x5,32) [ 107.510032][ T5788] usb 4-1: USB disconnect, device number 5 [ 108.428219][ T6855] loop0: detected capacity change from 0 to 32768 [ 108.620109][ T6855] JBD2: Ignoring recovery information on journal [ 108.668173][ T28] audit: type=1326 audit(1756225242.672:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6880 comm="syz.3.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe59f98ebe9 code=0x7ffc0000 [ 108.803265][ T28] audit: type=1326 audit(1756225242.672:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6880 comm="syz.3.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe59f98ebe9 code=0x7ffc0000 [ 108.876454][ T6855] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 108.897017][ T28] audit: type=1326 audit(1756225242.672:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6880 comm="syz.3.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=232 compat=0 ip=0x7fe59f98ebe9 code=0x7ffc0000 [ 108.984539][ T28] audit: type=1326 audit(1756225242.672:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6880 comm="syz.3.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe59f98ebe9 code=0x7ffc0000 [ 109.084858][ T28] audit: type=1326 audit(1756225242.672:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6880 comm="syz.3.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe59f98ebe9 code=0x7ffc0000 [ 109.256099][ T5785] ocfs2: Unmounting device (7,0) on (node local) [ 109.340062][ T6870] loop2: detected capacity change from 0 to 40427 [ 109.377948][ T6899] bond1: entered allmulticast mode [ 109.383720][ T6899] 8021q: adding VLAN 0 to HW filter on device bond1 [ 109.390479][ T6870] F2FS-fs (loop2): invalid crc value [ 109.468880][ T6870] F2FS-fs (loop2): Found nat_bits in checkpoint [ 109.641151][ T6909] netlink: 'syz.3.475': attribute type 1 has an invalid length. [ 109.643856][ T6870] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 110.402184][ T6934] ./file0: Can't open blockdev [ 110.924891][ T6952] lo: entered promiscuous mode [ 110.938952][ T6952] lo: entered allmulticast mode [ 110.941969][ T6926] loop3: detected capacity change from 0 to 32768 [ 110.949969][ T6952] tunl0: entered promiscuous mode [ 110.970953][ T6952] tunl0: entered allmulticast mode [ 110.985096][ T6952] gre0: entered promiscuous mode [ 110.990483][ T6952] gre0: entered allmulticast mode [ 110.991512][ T6926] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.484 (6926) [ 111.003667][ T6952] gretap0: entered promiscuous mode [ 111.015786][ T6952] gretap0: entered allmulticast mode [ 111.026677][ T6952] erspan0: entered promiscuous mode [ 111.036501][ T6952] erspan0: entered allmulticast mode [ 111.043071][ T6952] ip_vti0: entered promiscuous mode [ 111.048664][ T6952] ip_vti0: entered allmulticast mode [ 111.050792][ T6926] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 111.059851][ T6952] ip6_vti0: entered promiscuous mode [ 111.071724][ T6952] ip6_vti0: entered allmulticast mode [ 111.078921][ T6952] sit0: entered promiscuous mode [ 111.084709][ T6952] sit0: entered allmulticast mode [ 111.090976][ T6926] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 111.096220][ T6952] ip6tnl0: entered promiscuous mode [ 111.100351][ T6926] BTRFS info (device loop3): force zlib compression, level 3 [ 111.106478][ T6952] ip6tnl0: entered allmulticast mode [ 111.123696][ T787] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 111.134893][ T6952] ip6gre0: entered promiscuous mode [ 111.136864][ T6926] BTRFS info (device loop3): force clearing of disk cache [ 111.147530][ T6952] ip6gre0: entered allmulticast mode [ 111.149007][ T6952] syz_tun: entered promiscuous mode [ 111.158628][ T6926] BTRFS info (device loop3): setting nodatasum [ 111.165263][ T6926] BTRFS info (device loop3): disabling tree log [ 111.174870][ T6926] BTRFS info (device loop3): enabling disk space caching [ 111.179562][ T6952] syz_tun: entered allmulticast mode [ 111.187955][ T6926] BTRFS info (device loop3): disk space caching is enabled [ 111.188366][ T6952] ip6gretap0: entered promiscuous mode [ 111.216461][ T6952] ip6gretap0: entered allmulticast mode [ 111.232182][ T6952] bridge0: entered promiscuous mode [ 111.245041][ T6926] BTRFS info (device loop3): auto enabling async discard [ 111.247916][ T6952] bridge0: entered allmulticast mode [ 111.276050][ T6952] vcan0: entered promiscuous mode [ 111.290924][ T8] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 111.297445][ T6952] vcan0: entered allmulticast mode [ 111.309411][ T6952] bond0: entered promiscuous mode [ 111.311112][ T787] usb 2-1: Using ep0 maxpacket: 8 [ 111.315329][ T6926] BTRFS error (device loop3: state M): unrecognized mount option '00000000000000000000' [ 111.334230][ T6952] bond_slave_0: entered promiscuous mode [ 111.341948][ T787] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 111.343488][ T6952] bond_slave_1: entered promiscuous mode [ 111.360593][ T787] usb 2-1: config 179 has no interface number 0 [ 111.367545][ T787] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 111.386409][ T6952] bond0: entered allmulticast mode [ 111.399737][ T6952] bond_slave_0: entered allmulticast mode [ 111.400137][ T787] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 111.417750][ T6952] bond_slave_1: entered allmulticast mode [ 111.428072][ T787] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 111.428470][ T6952] team0: entered promiscuous mode [ 111.449786][ T6952] team_slave_0: entered promiscuous mode [ 111.450523][ T787] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 111.457252][ T6952] team_slave_1: entered promiscuous mode [ 111.480444][ T787] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 111.482662][ T6952] team0: entered allmulticast mode [ 111.494918][ T5784] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 111.504162][ T6952] team_slave_0: entered allmulticast mode [ 111.509734][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 111.522307][ T787] usb 2-1: config 179 interface 65 has no altsetting 0 [ 111.530467][ T6952] team_slave_1: entered allmulticast mode [ 111.534547][ T8] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 111.539424][ T6952] dummy0: entered promiscuous mode [ 111.547257][ T787] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 111.557991][ T6952] dummy0: entered allmulticast mode [ 111.564035][ T787] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.569864][ T6952] nlmon0: entered promiscuous mode [ 111.586570][ T6952] nlmon0: entered allmulticast mode [ 111.587346][ T8] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 111.603669][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.617940][ T6952] caif0: entered promiscuous mode [ 111.623656][ T6952] caif0: entered allmulticast mode [ 111.623963][ T8] usb 1-1: Product: syz [ 111.641304][ T8] usb 1-1: Manufacturer: syz [ 111.664356][ T6952] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 111.670510][ T8] usb 1-1: SerialNumber: syz [ 111.747102][ T787] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input6 [ 111.764309][ T8] usb 1-1: config 0 descriptor?? [ 111.791341][ T6954] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 111.822539][ T5141] input input6: unable to receive magic message: -110 [ 111.832985][ T8] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input7 [ 111.880944][ T5141] input input6: unable to receive magic message: -32 [ 112.307438][ T5141] input input6: unable to receive magic message: -32 [ 112.321055][ T967] usb 1-1: USB disconnect, device number 4 [ 112.321163][ C0] usbtouchscreen 1-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 112.355674][ T5141] input input6: unable to receive magic message: -32 [ 112.426296][ T787] usb 2-1: USB disconnect, device number 2 [ 112.432411][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 112.457220][ T787] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 112.699709][ T6980] netlink: 'syz.3.502': attribute type 39 has an invalid length. [ 112.710493][ T6980] netlink: 'syz.3.502': attribute type 4 has an invalid length. [ 112.725507][ T6980] netlink: 152 bytes leftover after parsing attributes in process `syz.3.502'. [ 112.798350][ T6980] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 112.845788][ T6980] syz.3.502 (6980) used greatest stack depth: 20904 bytes left [ 112.858617][ T6972] loop2: detected capacity change from 0 to 40427 [ 112.918176][ T6972] F2FS-fs (loop2): invalid crc value [ 112.955524][ T6972] F2FS-fs (loop2): Found nat_bits in checkpoint [ 113.153706][ T6972] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 113.552785][ T7004] netlink: 'syz.3.510': attribute type 6 has an invalid length. [ 113.615285][ T7006] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 113.633717][ T7006] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 114.314913][ T28] audit: type=1326 audit(1756225248.322:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7034 comm="syz.2.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe62c98ebe9 code=0x7ffc0000 [ 114.378528][ T28] audit: type=1326 audit(1756225248.322:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7034 comm="syz.2.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe62c98ebe9 code=0x7ffc0000 [ 114.438089][ T28] audit: type=1326 audit(1756225248.322:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7034 comm="syz.2.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7fe62c98ebe9 code=0x7ffc0000 [ 114.510903][ T28] audit: type=1326 audit(1756227826.336:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7034 comm="syz.2.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe62c98ebe9 code=0x7ffc0000 [ 114.739720][ T7049] bridge_slave_0: left allmulticast mode [ 114.765994][ T7049] bridge_slave_0: left promiscuous mode [ 114.776392][ T7049] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.811909][ T7049] bridge_slave_1: left allmulticast mode [ 114.827877][ T7049] bridge_slave_1: left promiscuous mode [ 114.838637][ T7049] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.906791][ T7033] loop0: detected capacity change from 0 to 32768 [ 114.931962][ T7049] bond0: (slave bond_slave_0): Releasing backup interface [ 114.963549][ T7033] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.523 (7033) [ 115.000998][ T7033] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 115.012570][ T7049] bond0: (slave bond_slave_1): Releasing backup interface [ 115.026382][ T7033] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 115.073190][ T7033] BTRFS info (device loop0): force zlib compression, level 3 [ 115.099536][ T7033] BTRFS info (device loop0): force clearing of disk cache [ 115.112716][ T7049] team0: Port device team_slave_0 removed [ 115.118568][ T7033] BTRFS info (device loop0): setting nodatasum [ 115.138894][ T7033] BTRFS info (device loop0): disabling tree log [ 115.170779][ T7033] BTRFS info (device loop0): enabling disk space caching [ 115.190742][ T7049] team0: Port device team_slave_1 removed [ 115.206858][ T7033] BTRFS info (device loop0): disk space caching is enabled [ 115.227269][ T7049] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.255350][ T7049] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 115.291645][ T7049] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.307875][ T7049] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.358515][ T7033] BTRFS info (device loop0): auto enabling async discard [ 115.393777][ T7064] netlink: 20 bytes leftover after parsing attributes in process `syz.2.537'. [ 115.427522][ T7064] netlink: 16 bytes leftover after parsing attributes in process `syz.2.537'. [ 115.508197][ T7033] BTRFS error (device loop0: state M): unrecognized mount option '00000000000000000000' [ 115.591827][ T787] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 115.641741][ T7083] loop2: detected capacity change from 0 to 512 [ 115.705827][ T5785] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 115.724646][ T7083] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.760870][ T7083] ext4 filesystem being mounted at /113/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 115.816295][ T787] usb 4-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 115.836100][ T787] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.856837][ T787] usb 4-1: config 0 descriptor?? [ 115.878566][ T787] gspca_main: spca508-2.14.0 probing 8086:0110 [ 116.002688][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.210893][ T7097] netlink: 24 bytes leftover after parsing attributes in process `syz.2.544'. [ 116.241896][ T7097] netlink: 24 bytes leftover after parsing attributes in process `syz.2.544'. [ 116.261206][ T23] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 116.269387][ T7097] netlink: 36 bytes leftover after parsing attributes in process `syz.2.544'. [ 116.326666][ T787] gspca_spca508: reg_read err -71 [ 116.336559][ T787] gspca_spca508: reg_read err -71 [ 116.366746][ T787] gspca_spca508: reg_read err -71 [ 116.381394][ T787] gspca_spca508: reg_read err -71 [ 116.396903][ T787] gspca_spca508: reg write: error -71 [ 116.407020][ T787] spca508: probe of 4-1:0.0 failed with error -71 [ 116.447320][ T787] usb 4-1: USB disconnect, device number 6 [ 116.467709][ T23] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 116.482369][ T23] usb 1-1: config 0 has no interface number 0 [ 116.527323][ T23] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 116.553232][ T23] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 116.563253][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.578679][ T23] usb 1-1: Product: syz [ 116.583109][ T23] usb 1-1: Manufacturer: syz [ 116.587739][ T23] usb 1-1: SerialNumber: syz [ 116.601656][ T23] usb 1-1: config 0 descriptor?? [ 116.616229][ T23] yurex 1-1:0.50: USB YUREX device now attached to Yurex #0 [ 116.876084][ C1] yurex 1-1:0.50: yurex_interrupt - overflow with length 8, actual length is 8 [ 117.107331][ T5854] usb 1-1: USB disconnect, device number 5 [ 117.120822][ T7124] loop3: detected capacity change from 0 to 1024 [ 117.130925][ T5854] yurex 1-1:0.50: USB YUREX #0 now disconnected [ 117.307435][ T7127] bond0: Unable to set up delay as MII monitoring is disabled [ 117.816448][ T7146] loop0: detected capacity change from 0 to 512 [ 117.856581][ T7146] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 117.948594][ T7146] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.966796][ T7156] syz.3.573 uses obsolete (PF_INET,SOCK_PACKET) [ 118.014167][ T7146] ext4 filesystem being mounted at /141/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.164511][ T7146] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #15: comm syz.0.569: corrupted xattr block 19: overlapping e_value [ 118.300044][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.368062][ T7168] netlink: 56 bytes leftover after parsing attributes in process `syz.3.578'. [ 119.010367][ T27] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 119.211467][ T27] usb 1-1: Using ep0 maxpacket: 8 [ 119.229153][ T27] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 119.248336][ T27] usb 1-1: config 179 has no interface number 0 [ 119.268814][ T27] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 119.284921][ T27] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 119.296906][ T27] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 119.318948][ T27] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 119.331006][ T27] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 119.356431][ T27] usb 1-1: config 179 interface 65 has no altsetting 0 [ 119.370539][ T27] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 119.384348][ T7212] netlink: 'syz.2.600': attribute type 3 has an invalid length. [ 119.403475][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.434624][ T7212] netlink: 8 bytes leftover after parsing attributes in process `syz.2.600'. [ 119.463126][ T27] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input8 [ 119.541022][ T5141] input input8: unable to receive magic message: -110 [ 119.556673][ T5141] input input8: unable to receive magic message: -32 [ 119.587430][ T5141] input input8: unable to receive magic message: -32 [ 119.646273][ T5141] input input8: unable to receive magic message: -32 [ 119.684505][ T5141] input input8: unable to receive magic message: -32 [ 119.783029][ T5141] input input8: unable to receive magic message: -32 [ 119.946038][ T8] usb 1-1: USB disconnect, device number 6 [ 119.946190][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 119.963682][ T8] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 120.157050][ T7208] loop1: detected capacity change from 0 to 32768 [ 120.178655][ T7208] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.598 (7208) [ 120.244467][ T7208] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 120.268710][ T7228] Driver unsupported XDP return value 0 on prog (id 25) dev N/A, expect packet loss! [ 120.273073][ T7208] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 120.306614][ T7208] BTRFS info (device loop1): using free space tree [ 120.430321][ T7245] loop2: detected capacity change from 0 to 256 [ 120.436331][ T7208] BTRFS info (device loop1): enabling ssd optimizations [ 120.473860][ T7208] BTRFS info (device loop1): auto enabling async discard [ 120.552424][ T7245] FAT-fs (loop2): Directory bread(block 64) failed [ 120.559072][ T7245] FAT-fs (loop2): Directory bread(block 65) failed [ 120.600450][ T7245] FAT-fs (loop2): Directory bread(block 66) failed [ 120.607059][ T7245] FAT-fs (loop2): Directory bread(block 67) failed [ 120.652298][ T7245] FAT-fs (loop2): Directory bread(block 68) failed [ 120.666130][ T5787] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 120.679325][ T7245] FAT-fs (loop2): Directory bread(block 69) failed [ 120.690723][ T7245] FAT-fs (loop2): Directory bread(block 70) failed [ 120.697463][ T7245] FAT-fs (loop2): Directory bread(block 71) failed [ 120.739395][ T7245] FAT-fs (loop2): Directory bread(block 72) failed [ 120.765811][ T7245] FAT-fs (loop2): Directory bread(block 73) failed [ 120.772633][ T27] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 120.892644][ T5777] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop1 scanned by udevd (5777) [ 121.010504][ T27] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 121.029807][ T27] usb 4-1: config 1 has no interface number 1 [ 121.066319][ T27] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 121.100073][ T27] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 121.171023][ T27] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 121.185831][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.224285][ T27] usb 4-1: Product: syz [ 121.228551][ T27] usb 4-1: Manufacturer: syz [ 121.253791][ T27] usb 4-1: SerialNumber: syz [ 121.541641][ T27] usb 4-1: 2:1 : unsupported format bits 0x80 [ 121.653779][ T27] usb 4-1: USB disconnect, device number 7 [ 121.743419][ T5801] udevd[5801]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 122.298989][ T7298] netlink: 'syz.3.634': attribute type 21 has an invalid length. [ 122.323948][ T7298] netlink: 8 bytes leftover after parsing attributes in process `syz.3.634'. [ 122.702415][ T7312] openvswitch: netlink: Flow actions attr not present in new flow. [ 122.815371][ T7314] loop1: detected capacity change from 0 to 64 [ 122.931445][ T7291] loop0: detected capacity change from 0 to 32768 [ 123.018571][ T7291] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 123.066309][ T7325] netlink: 48 bytes leftover after parsing attributes in process `syz.2.645'. [ 123.294740][ T7291] XFS (loop0): Ending clean mount [ 123.319090][ T7304] loop3: detected capacity change from 0 to 32768 [ 123.521424][ T5785] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 123.584819][ T7338] netlink: 'syz.2.652': attribute type 3 has an invalid length. [ 124.079852][ T27] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 124.289664][ T27] usb 3-1: Using ep0 maxpacket: 16 [ 124.311830][ T27] usb 3-1: config index 0 descriptor too short (expected 65, got 36) [ 124.333686][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.369633][ T27] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 124.397062][ T27] usb 3-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 124.407356][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.422491][ T27] usb 3-1: config 0 descriptor?? [ 124.437034][ T27] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input9 [ 124.719291][ T5788] usb 3-1: USB disconnect, device number 5 [ 124.763004][ T787] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 124.970497][ T787] usb 1-1: Using ep0 maxpacket: 16 [ 124.979047][ T787] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 125.005928][ T787] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid maxpacket 262, setting to 64 [ 125.034995][ T787] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.046612][ T787] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.076389][ T787] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 125.099988][ T7387] netlink: 16 bytes leftover after parsing attributes in process `syz.3.673'. [ 125.116993][ T787] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 125.126200][ T787] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 125.135201][ T787] usb 1-1: Manufacturer: syz [ 125.146504][ T787] usb 1-1: config 0 descriptor?? [ 125.434808][ T27] usb 1-1: USB disconnect, device number 7 [ 125.636303][ T7404] bond0: (slave batadv0): Releasing backup interface [ 125.727355][ T7404] bridge_slave_0: left allmulticast mode [ 125.746671][ T7404] bridge_slave_0: left promiscuous mode [ 125.754831][ T7404] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.766717][ T7404] bridge_slave_1: left allmulticast mode [ 125.779608][ T7404] bridge_slave_1: left promiscuous mode [ 125.787693][ T7412] loop2: detected capacity change from 0 to 2048 [ 125.798571][ T7404] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.829933][ T7404] bond0: (slave bond_slave_0): Releasing backup interface [ 125.852324][ T7412] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 125.890129][ T7404] bond0: (slave bond_slave_1): Releasing backup interface [ 126.050183][ T7404] team0: Port device team_slave_0 removed [ 126.147267][ T7404] team0: Port device team_slave_1 removed [ 126.173110][ T7404] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.196475][ T7404] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 126.241295][ T7404] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.280498][ T7404] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 126.584983][ T7434] loop2: detected capacity change from 0 to 1024 [ 126.924702][ T7446] netlink: 20 bytes leftover after parsing attributes in process `syz.3.703'. [ 126.971483][ T7446] netlink: 20 bytes leftover after parsing attributes in process `syz.3.703'. [ 126.977228][ T7450] netlink: 72 bytes leftover after parsing attributes in process `syz.0.704'. [ 126.998633][ T7446] netlink: 36 bytes leftover after parsing attributes in process `syz.3.703'. [ 127.113580][ T7454] bridge_slave_0: left allmulticast mode [ 127.152646][ T7454] bridge_slave_0: left promiscuous mode [ 127.166564][ T7454] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.178254][ T7454] bridge_slave_1: left allmulticast mode [ 127.185954][ T7454] bridge_slave_1: left promiscuous mode [ 127.193800][ T7454] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.230064][ T7454] bond0: (slave bond_slave_0): Releasing backup interface [ 127.239071][ T7454] bond_slave_0: left promiscuous mode [ 127.246219][ T7454] bond_slave_0: left allmulticast mode [ 127.264289][ T7454] bond0: (slave bond_slave_1): Releasing backup interface [ 127.273653][ T7454] bond_slave_1: left promiscuous mode [ 127.280716][ T7454] bond_slave_1: left allmulticast mode [ 127.325984][ T7454] team_slave_0: left promiscuous mode [ 127.332964][ T7454] team_slave_0: left allmulticast mode [ 127.366195][ T7454] team0: Port device team_slave_0 removed [ 127.373336][ T7454] team_slave_1: left promiscuous mode [ 127.378918][ T7454] team_slave_1: left allmulticast mode [ 127.399595][ T7454] team0: Port device team_slave_1 removed [ 127.406170][ T7454] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.414326][ T7454] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.424785][ T7454] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.433524][ T7454] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.545425][ T7462] ip6erspan0: entered promiscuous mode [ 127.879721][ T787] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 128.068185][ T7482] loop2: detected capacity change from 0 to 4096 [ 128.082610][ T787] usb 2-1: config 0 has an invalid interface number: 235 but max is 0 [ 128.104653][ T787] usb 2-1: config 0 has no interface number 0 [ 128.131399][ T7482] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 128.154121][ T787] usb 2-1: config 0 interface 235 altsetting 16 endpoint 0x5 has invalid wMaxPacketSize 0 [ 128.160277][ T7484] bridge0: port 3(team0) entered disabled state [ 128.176706][ T7482] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 128.194144][ T787] usb 2-1: config 0 interface 235 has no altsetting 0 [ 128.205110][ T787] usb 2-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=3e.18 [ 128.222739][ T787] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.231601][ T7482] ntfs: (device loop2): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 128.243529][ T787] usb 2-1: Product: syz [ 128.244425][ T7484] bridge_slave_0: left allmulticast mode [ 128.248103][ T787] usb 2-1: Manufacturer: syz [ 128.258664][ T7482] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 128.274970][ T787] usb 2-1: SerialNumber: syz [ 128.276308][ T7488] loop3: detected capacity change from 0 to 1024 [ 128.281453][ T7482] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 128.297972][ T7484] bridge_slave_0: left promiscuous mode [ 128.305166][ T787] usb 2-1: config 0 descriptor?? [ 128.312531][ T7484] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.328726][ T787] keyspan 2-1:0.235: Keyspan 1 port adapter converter detected [ 128.345070][ T7482] ntfs: volume version 3.1. [ 128.359223][ T7482] ntfs: (device loop2): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 128.375720][ T7484] bridge_slave_1: left allmulticast mode [ 128.391380][ T787] keyspan 2-1:0.235: found no endpoint descriptor for endpoint 87 [ 128.405114][ T7482] ntfs: (device loop2): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 128.426702][ T787] keyspan 2-1:0.235: found no endpoint descriptor for endpoint 7 [ 128.434927][ T7484] bridge_slave_1: left promiscuous mode [ 128.443650][ T787] keyspan 2-1:0.235: found no endpoint descriptor for endpoint 81 [ 128.454717][ T7484] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.464913][ T787] keyspan 2-1:0.235: found no endpoint descriptor for endpoint 1 [ 128.474625][ T7482] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 128.487852][ T787] keyspan 2-1:0.235: found no endpoint descriptor for endpoint 85 [ 128.502946][ T7482] ntfs: (device loop2): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 128.518107][ T7482] ntfs: (device loop2): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 128.545708][ T787] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 128.556287][ T7484] bond0: (slave bond_slave_0): Releasing backup interface [ 128.593730][ T787] usb 2-1: USB disconnect, device number 3 [ 128.621443][ T787] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 128.669549][ T787] keyspan 2-1:0.235: device disconnected [ 128.688003][ T7484] bond0: (slave bond_slave_1): Releasing backup interface [ 128.718720][ T5801] udevd[5801]: setting mode of /dev/bus/usb/002/003 to 020664 failed: No such file or directory [ 128.733251][ T7484] team_slave_0: left promiscuous mode [ 128.738924][ T7484] team_slave_0: left allmulticast mode [ 128.749418][ T5801] udevd[5801]: setting owner of /dev/bus/usb/002/003 to uid=0, gid=0 failed: No such file or directory [ 128.840628][ T7492] kAFS: unable to lookup cell '' [ 128.854802][ T7484] team0: Port device team_slave_0 removed [ 128.865543][ T7484] team_slave_1: left promiscuous mode [ 128.888310][ T7484] team_slave_1: left allmulticast mode [ 128.937983][ T7484] team0: Port device team_slave_1 removed [ 128.967609][ T7484] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.009380][ T7484] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 129.012350][ T7494] loop2: detected capacity change from 0 to 1024 [ 129.025770][ T7484] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.041136][ T7484] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 129.183572][ T12] hfsplus: b-tree write err: -5, ino 4 [ 129.567451][ T7515] SET target dimension over the limit! [ 129.737180][ T7518] loop1: detected capacity change from 0 to 2048 [ 129.846895][ T7518] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 129.960519][ T7530] loop0: detected capacity change from 0 to 1024 [ 130.064289][ T3464] hfsplus: b-tree write err: -5, ino 4 [ 130.196853][ T7536] loop3: detected capacity change from 0 to 128 [ 130.295525][ T5801] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 130.312667][ T7536] autofs4:pid:7536:autofs_fill_super: called with bogus options [ 130.406283][ T7542] netlink: 'syz.1.750': attribute type 15 has an invalid length. [ 130.873090][ T7560] delete_channel: no stack [ 130.999165][ T7566] loop0: detected capacity change from 0 to 2048 [ 131.047134][ T7566] NILFS (loop0): unrecognized mount option ">" [ 131.357442][ T7582] netlink: 64 bytes leftover after parsing attributes in process `syz.3.770'. [ 131.398147][ T7582] netlink: 64 bytes leftover after parsing attributes in process `syz.3.770'. [ 132.034337][ T7610] dlm: no local IP address has been set [ 132.042682][ T7610] dlm: cannot start dlm midcomms -107 [ 132.088823][ T23] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 132.146384][ T7614] netlink: 60 bytes leftover after parsing attributes in process `syz.0.786'. [ 132.161538][ T7614] netlink: 60 bytes leftover after parsing attributes in process `syz.0.786'. [ 132.266913][ T7620] loop3: detected capacity change from 0 to 16 [ 132.276526][ T7620] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 132.289006][ T23] usb 3-1: Using ep0 maxpacket: 16 [ 132.306531][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 132.324647][ T23] usb 3-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.5a [ 132.346617][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.423006][ T23] usb 3-1: config 0 descriptor?? [ 132.454691][ T23] pegasus_notetaker: probe of 3-1:0.0 failed with error -22 [ 132.657500][ T23] usb 3-1: USB disconnect, device number 6 [ 132.820832][ T7636] kernel profiling enabled (shift: 17) [ 132.861773][ T7638] netlink: 28 bytes leftover after parsing attributes in process `syz.3.798'. [ 133.023279][ T7646] netlink: 16 bytes leftover after parsing attributes in process `syz.3.802'. [ 133.218746][ T23] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 133.262539][ T7656] netlink: 152 bytes leftover after parsing attributes in process `syz.3.807'. [ 133.273115][ T7656] netlink: 12 bytes leftover after parsing attributes in process `syz.3.807'. [ 133.324442][ T7658] netlink: 'syz.2.808': attribute type 10 has an invalid length. [ 133.420688][ T23] usb 2-1: unable to get BOS descriptor or descriptor too short [ 133.427827][ T7658] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode [ 133.439969][ T23] usb 2-1: not running at top speed; connect to a high speed hub [ 133.441712][ T7658] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode [ 133.450425][ T23] usb 2-1: config 5 has an invalid interface number: 64 but max is 0 [ 133.459933][ T7658] team0: Port device wlan1 added [ 133.467778][ T23] usb 2-1: config 5 has no interface number 0 [ 133.474875][ T23] usb 2-1: config 5 interface 64 has no altsetting 0 [ 133.504951][ T23] usb 2-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice=28.39 [ 133.528543][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.549488][ T23] usb 2-1: Product: syz [ 133.553737][ T23] usb 2-1: Manufacturer: syz [ 133.573134][ T23] usb 2-1: SerialNumber: syz [ 133.624146][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.630694][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.837727][ T23] snd-usb-audio: probe of 2-1:5.64 failed with error -71 [ 133.863175][ T23] usb 2-1: USB disconnect, device number 4 [ 134.025879][ T7665] loop2: detected capacity change from 0 to 32768 [ 134.041712][ T7665] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9 [ 134.169238][ T5777] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9 [ 134.207291][ T7676] netlink: 8 bytes leftover after parsing attributes in process `syz.2.817'. [ 134.236960][ T7662] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 134.395762][ T7680] loop0: detected capacity change from 0 to 256 [ 134.534849][ T7680] FAT-fs (loop0): Directory bread(block 64) failed [ 134.580031][ T7680] FAT-fs (loop0): Directory bread(block 65) failed [ 134.586760][ T7680] FAT-fs (loop0): Directory bread(block 66) failed [ 134.622104][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 134.622121][ T28] audit: type=1326 audit(1756227846.629:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7687 comm="syz.2.823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe62c98ebe9 code=0x7ffc0000 [ 134.655192][ T7680] FAT-fs (loop0): Directory bread(block 67) failed [ 134.668586][ T7680] FAT-fs (loop0): Directory bread(block 68) failed [ 134.675319][ T7680] FAT-fs (loop0): Directory bread(block 69) failed [ 134.683813][ T7680] FAT-fs (loop0): Directory bread(block 70) failed [ 134.690941][ T7680] FAT-fs (loop0): Directory bread(block 71) failed [ 134.709901][ T7680] FAT-fs (loop0): Directory bread(block 72) failed [ 134.728382][ T7680] FAT-fs (loop0): Directory bread(block 73) failed [ 134.731600][ T28] audit: type=1326 audit(1756227846.629:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7687 comm="syz.2.823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe62c98ebe9 code=0x7ffc0000 [ 134.785262][ T28] audit: type=1326 audit(1756227846.659:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7687 comm="syz.2.823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fe62c98ebe9 code=0x7ffc0000 [ 134.836376][ T28] audit: type=1326 audit(1756227846.659:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7687 comm="syz.2.823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe62c98ebe9 code=0x7ffc0000 [ 134.837686][ T7693] xt_bpf: check failed: parse error [ 134.870259][ T7694] netlink: 28 bytes leftover after parsing attributes in process `syz.2.825'. [ 134.904641][ T28] audit: type=1326 audit(1756227846.659:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7687 comm="syz.2.823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe62c98ebe9 code=0x7ffc0000 [ 135.062965][ T7700] openvswitch: netlink: Message has 8 unknown bytes. [ 135.076416][ T7699] xt_l2tp: missing protocol rule (udp|l2tpip) [ 135.261307][ T7707] loop2: detected capacity change from 0 to 16 [ 135.283385][ T7707] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 135.287176][ T7709] loop0: detected capacity change from 0 to 256 [ 135.458286][ T5799] Bluetooth: hci0: command 0x0c1a tx timeout [ 135.487906][ T7709] FAT-fs (loop0): Directory bread(block 64) failed [ 135.498457][ T7709] FAT-fs (loop0): Directory bread(block 65) failed [ 135.533123][ T7709] FAT-fs (loop0): Directory bread(block 66) failed [ 135.568809][ T7709] FAT-fs (loop0): Directory bread(block 67) failed [ 135.598370][ T7709] FAT-fs (loop0): Directory bread(block 68) failed [ 135.608787][ T7709] FAT-fs (loop0): Directory bread(block 69) failed [ 135.615494][ T7709] FAT-fs (loop0): Directory bread(block 70) failed [ 135.658756][ T7709] FAT-fs (loop0): Directory bread(block 71) failed [ 135.665527][ T7709] FAT-fs (loop0): Directory bread(block 72) failed [ 135.708341][ T7709] FAT-fs (loop0): Directory bread(block 73) failed [ 136.067385][ T7734] loop1: detected capacity change from 0 to 65 [ 136.114979][ T7734] BFS-fs: bfs_fill_super(): NOTE: filesystem loop1 was created with 512 inodes, the real maximum is 511, mounting anyway [ 136.437622][ T7746] loop0: detected capacity change from 0 to 512 [ 136.449296][ T7746] EXT4-fs: Ignoring removed nomblk_io_submit option [ 136.537466][ T7746] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.574535][ T7746] ext4 filesystem being mounted at /204/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 136.683592][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.716229][ T7760] Unsupported ieee802154 address type: 0 [ 136.991336][ T7772] xt_CT: You must specify a L4 protocol and not use inversions on it [ 137.198261][ T7778] __nla_validate_parse: 3 callbacks suppressed [ 137.198278][ T7778] netlink: 8 bytes leftover after parsing attributes in process `syz.3.865'. [ 137.545543][ T7797] netlink: 'syz.3.873': attribute type 1 has an invalid length. [ 137.554731][ T7797] netlink: 216 bytes leftover after parsing attributes in process `syz.3.873'. [ 137.568062][ T5854] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 137.598276][ T7797] NCSI netlink: No device for ifindex 0 [ 137.778492][ T5854] usb 1-1: Using ep0 maxpacket: 16 [ 137.802230][ T5854] usb 1-1: config 0 interface 0 altsetting 67 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 137.847969][ T5854] usb 1-1: config 0 interface 0 has no altsetting 0 [ 137.854682][ T5854] usb 1-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 137.874273][ T5854] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.912465][ T5854] usb 1-1: config 0 descriptor?? [ 137.986297][ T7811] loop2: detected capacity change from 0 to 512 [ 138.155815][ T5854] usbhid 1-1:0.0: can't add hid device: -71 [ 138.172702][ T5854] usbhid: probe of 1-1:0.0 failed with error -71 [ 138.203165][ T5854] usb 1-1: USB disconnect, device number 8 [ 138.516093][ T7806] loop1: detected capacity change from 0 to 32768 [ 138.570702][ T7806] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 138.722277][ T28] audit: type=1800 audit(1756227850.729:17): pid=7806 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.879" name="file1" dev="loop1" ino=17058 res=0 errno=0 [ 138.768070][ T27] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 138.838951][ T5787] ocfs2: Unmounting device (7,1) on (node local) [ 139.011553][ T27] usb 4-1: Using ep0 maxpacket: 16 [ 139.032724][ T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 139.054767][ T27] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 139.066392][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.091480][ T27] usb 4-1: Product: syz [ 139.100316][ T27] usb 4-1: Manufacturer: syz [ 139.112839][ T27] usb 4-1: SerialNumber: syz [ 139.128208][ T27] usb 4-1: config 0 descriptor?? [ 139.140978][ T27] hub 4-1:0.0: bad descriptor, ignoring hub [ 139.151425][ T27] hub: probe of 4-1:0.0 failed with error -5 [ 139.173235][ T27] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input12 [ 139.177938][ T787] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 139.379219][ T787] usb 1-1: Using ep0 maxpacket: 16 [ 139.391611][ T787] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 139.417811][ T787] usb 1-1: config 0 has no interface number 0 [ 139.432732][ T787] usb 1-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 139.469845][ T787] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.485082][ T787] usb 1-1: Product: syz [ 139.502879][ T787] usb 1-1: Manufacturer: syz [ 139.507553][ T787] usb 1-1: SerialNumber: syz [ 139.543393][ T787] usb 1-1: config 0 descriptor?? [ 139.560464][ T787] hub 1-1:0.132: bad descriptor, ignoring hub [ 139.566635][ T787] hub: probe of 1-1:0.132 failed with error -5 [ 139.585833][ T787] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.132/input/input13 [ 139.686774][ T787] input: failed to attach handler mousedev to device input13, error: -2 [ 139.765198][ T7847] netlink: 8 bytes leftover after parsing attributes in process `syz.2.897'. [ 140.638817][ T7830] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 140.837736][ T7830] usb 3-1: Using ep0 maxpacket: 32 [ 140.845824][ T7830] usb 3-1: config 0 has an invalid descriptor of length 49, skipping remainder of the config [ 140.867722][ T7830] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 140.898335][ T7830] usb 3-1: New USB device found, idVendor=0421, idProduct=00a0, bcdDevice=c8.e1 [ 140.907450][ T7830] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.939351][ T7830] usb 3-1: config 0 descriptor?? [ 140.960344][ T7830] usb 3-1: bad CDC descriptors [ 140.981109][ T7830] usb 3-1: bad CDC descriptors [ 141.141765][ T7884] loop3: detected capacity change from 0 to 32768 [ 141.157100][ T787] usb 3-1: USB disconnect, device number 7 [ 141.393792][ T7897] netlink: 'syz.3.921': attribute type 64 has an invalid length. [ 141.408608][ T7897] netlink: 20 bytes leftover after parsing attributes in process `syz.3.921'. [ 141.418931][ T7897] netlink: 'syz.3.921': attribute type 64 has an invalid length. [ 141.427261][ T7897] netlink: 20 bytes leftover after parsing attributes in process `syz.3.921'. [ 141.630167][ T7905] netlink: 8 bytes leftover after parsing attributes in process `syz.3.925'. [ 141.769415][ T7909] batadv_slave_0: entered promiscuous mode [ 141.775317][ T7909] batadv_slave_0: entered allmulticast mode [ 141.830298][ T7909] netlink: 'syz.3.927': attribute type 8 has an invalid length. [ 142.077809][ T787] usb 1-1: USB disconnect, device number 9 [ 142.154134][ T7919] loop3: detected capacity change from 0 to 4096 [ 142.203185][ T7925] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 142.212017][ T7919] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 142.533358][ T7936] loop2: detected capacity change from 0 to 1024 [ 142.778922][ T7941] comedi: valid board names for 8255 driver are: [ 142.820443][ T7941] 8255 [ 142.830623][ T7941] comedi: valid board names for vmk80xx driver are: [ 142.849856][ T7941] vmk80xx [ 142.861970][ T7941] comedi: valid board names for usbduxsigma driver are: [ 142.875763][ T7941] usbduxsigma [ 142.882892][ T7941] comedi: valid board names for usbduxfast driver are: [ 142.904354][ T7941] usbduxfast [ 142.914794][ T7941] comedi: valid board names for usbdux driver are: [ 142.944761][ T7941] usbdux [ 142.979547][ T7941] comedi: valid board names for ni6501 driver are: [ 143.002571][ T7941] ni6501 [ 143.011485][ T7941] comedi: valid board names for dt9812 driver are: [ 143.041289][ T7941] dt9812 [ 143.044310][ T7941] comedi: valid board names for ni_labpc_cs driver are: [ 143.087330][ T7941] ni_labpc_cs [ 143.104531][ T7941] comedi: valid board names for ni_daq_700 driver are: [ 143.141619][ T7941] ni_daq_700 [ 143.144979][ T7941] comedi: valid board names for labpc_pci driver are: [ 143.173081][ T7941] labpc_pci [ 143.182809][ T7941] comedi: valid board names for adl_pci9118 driver are: [ 143.207576][ T7941] pci9118dg [ 143.210849][ T7941] pci9118hg [ 143.218827][ T7941] pci9118hr [ 143.222102][ T7941] comedi: valid board names for 8255_pci driver are: [ 143.247466][ T7941] 8255_pci [ 143.268737][ T7941] comedi: valid board names for s526 driver are: [ 143.288024][ T7941] s526 [ 143.292177][ T7941] comedi: valid board names for multiq3 driver are: [ 143.307631][ T7941] multiq3 [ 143.312811][ T7941] comedi: valid board names for pcmuio driver are: [ 143.334901][ T7941] pcmuio48 [ 143.347430][ T7941] pcmuio96 [ 143.353586][ T7941] comedi: valid board names for pcmmio driver are: [ 143.375917][ T7941] pcmmio [ 143.383498][ T7941] comedi: valid board names for pcmda12 driver are: [ 143.401457][ T7941] pcmda12 [ 143.417724][ T7941] comedi: valid board names for pcmad driver are: [ 143.430697][ T7941] pcmad12 [ 143.450658][ T7941] pcmad16 [ 143.462301][ T7941] comedi: valid board names for ni_labpc driver are: [ 143.481835][ T7941] lab-pc-1200 [ 143.494393][ T7941] lab-pc-1200ai [ 143.507514][ T7941] lab-pc+ [ 143.514104][ T7941] comedi: valid board names for atmio16 driver are: [ 143.555306][ T7941] atmio16 [ 143.560940][ T7941] atmio16d [ 143.608701][ T7941] comedi: valid board names for ni_at_ao driver are: [ 143.618003][ T7941] at-ao-6 [ 143.625624][ T7941] at-ao-10 [ 143.644444][ T7941] comedi: valid board names for ni_at_a2150 driver are: [ 143.654816][ T7941] ni_at_a2150 [ 143.662518][ T7941] comedi: valid board names for adq12b driver are: [ 143.670683][ T7941] adq12b [ 143.673667][ T7941] comedi: valid board names for mpc624 driver are: [ 143.679485][ T7972] loop1: detected capacity change from 0 to 512 [ 143.689113][ T7941] mpc624 [ 143.692110][ T7941] comedi: valid board names for c6xdigio driver are: [ 143.723003][ T7941] c6xdigio [ 143.735154][ T7941] comedi: valid board names for aio_iiro_16 driver are: [ 143.777996][ T7941] aio_iiro_16 [ 143.781461][ T7941] comedi: valid board names for aio_aio12_8 driver are: [ 143.795156][ T7972] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.804518][ T7941] aio_aio12_8 [ 143.811327][ T7941] aio_ai12_8 [ 143.859942][ T7941] aio_ao12_4 [ 143.863306][ T7941] comedi: valid board names for fl512 driver are: [ 143.883829][ T27] usb 4-1: USB disconnect, device number 8 [ 143.899719][ T7972] ext4 filesystem being mounted at /273/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 143.934426][ T7941] fl512 [ 143.957313][ T7941] comedi: valid board names for dmm32at driver are: [ 143.963981][ T7941] dmm32at [ 143.967036][ T7941] comedi: valid board names for dt282x driver are: [ 144.019048][ T7941] dt2821 [ 144.022133][ T7941] dt2821-f [ 144.025343][ T7941] dt2821-g [ 144.047803][ T7941] dt2823 [ 144.050801][ T7941] dt2824-pgh [ 144.054093][ T7941] dt2824-pgl [ 144.088801][ T5787] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.090900][ T7941] dt2825 [ 144.110485][ T7941] dt2827 [ 144.118976][ T7941] dt2828 [ 144.155019][ T7941] dt2829 [ 144.160084][ T7941] dt21-ez [ 144.163255][ T7941] dt23-ez [ 144.166297][ T7941] dt24-ez [ 144.177585][ T7941] dt24-ez-pgl [ 144.181029][ T7941] comedi: valid board names for dt2817 driver are: [ 144.210553][ T7941] dt2817 [ 144.213567][ T7941] comedi: valid board names for dt2815 driver are: [ 144.233031][ T7941] dt2815 [ 144.236068][ T7941] comedi: valid board names for dt2814 driver are: [ 144.269029][ T7941] dt2814 [ 144.272033][ T7941] comedi: valid board names for dt2811 driver are: [ 144.306753][ T7941] dt2811-pgh [ 144.310180][ T7941] dt2811-pgl [ 144.313493][ T7941] comedi: valid board names for dt2801 driver are: [ 144.329419][ T7941] dt2801 [ 144.332438][ T7941] comedi: valid board names for das6402 driver are: [ 144.350063][ T7941] das6402-12 [ 144.357598][ T7941] das6402-16 [ 144.387238][ T7941] comedi: valid board names for das1800 driver are: [ 144.393989][ T7941] das-1701st [ 144.428111][ T7941] das-1701st-da [ 144.431732][ T7941] das-1702st [ 144.435091][ T7941] das-1702st-da [ 144.468139][ T7941] das-1702hr [ 144.471525][ T7941] das-1702hr-da [ 144.475099][ T7941] das-1701ao [ 144.484365][ T7941] das-1702ao [ 144.493203][ T7941] das-1801st [ 144.498038][ T7941] das-1801st-da [ 144.502651][ T28] audit: type=1326 audit(1756227856.510:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8000 comm="syz.2.968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe62c98ebe9 code=0x7ffc0000 [ 144.506536][ T7941] das-1802st [ 144.562151][ T7941] das-1802st-da [ 144.566119][ T7941] das-1802hr [ 144.587328][ T7941] das-1802hr-da [ 144.590946][ T7941] das-1801hc [ 144.594263][ T7941] das-1802hc [ 144.602357][ T8005] loop1: detected capacity change from 0 to 164 [ 144.621972][ T8005] Unable to read rock-ridge attributes [ 144.622450][ T28] audit: type=1326 audit(1756227856.510:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8000 comm="syz.2.968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe62c98ebe9 code=0x7ffc0000 [ 144.640209][ T8005] Unable to read rock-ridge attributes [ 144.677092][ T7941] das-1801ao [ 144.680494][ T7941] das-1802ao [ 144.683789][ T7941] comedi: valid board names for das800 driver are: [ 144.699390][ T28] audit: type=1326 audit(1756227856.510:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8000 comm="syz.2.968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7fe62c98ebe9 code=0x7ffc0000 [ 144.702238][ T8005] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 144.740172][ T7941] das-800 [ 144.743271][ T7941] cio-das800 [ 144.746577][ T7941] das-801 [ 144.762261][ T7941] cio-das801 [ 144.765627][ T7941] das-802 [ 144.786278][ T7941] cio-das802 [ 144.796413][ T7941] cio-das802/16 [ 144.807134][ T7941] comedi: valid board names for isa-das08 driver are: [ 144.832006][ T28] audit: type=1326 audit(1756227856.510:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8000 comm="syz.2.968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe62c98ebe9 code=0x7ffc0000 [ 144.837172][ T7941] isa-das08 [ 144.888063][ T28] audit: type=1326 audit(1756227856.510:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8000 comm="syz.2.968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe62c98ebe9 code=0x7ffc0000 [ 144.917595][ T7941] das08-pgm [ 144.920854][ T7941] das08-pgh [ 144.939113][ T7941] das08-pgl [ 144.948383][ T7941] das08-aoh [ 144.951723][ T7941] das08-aol [ 144.977071][ T7941] das08-aom [ 144.980332][ T7941] das08/jr-ao [ 144.983712][ T7941] das08jr-16-ao [ 144.997804][ T7941] pc104-das08 [ 145.001241][ T7941] das08jr/16 [ 145.004577][ T7941] comedi: valid board names for das16m1 driver are: [ 145.022528][ T7941] das16m1 [ 145.043340][ T7941] comedi: valid board names for dac02 driver are: [ 145.058823][ T7941] dac02 [ 145.061743][ T7941] comedi: valid board names for rti802 driver are: [ 145.085332][ T7941] rti802 [ 145.088608][ T7941] comedi: valid board names for rti800 driver are: [ 145.095321][ T7941] rti800 [ 145.100566][ T7941] rti815 [ 145.103630][ T7941] comedi: valid board names for pcm3724 driver are: [ 145.110881][ T7941] pcm3724 [ 145.114328][ T7941] comedi: valid board names for pcl818 driver are: [ 145.156074][ T7941] pcl818l [ 145.167251][ T7941] pcl818h [ 145.170339][ T7941] pcl818hd [ 145.173481][ T7941] pcl818hg [ 145.176629][ T7941] pcl818 [ 145.207423][ T7941] pcl718 [ 145.210510][ T7941] pcm3718 [ 145.213552][ T7941] comedi: valid board names for pcl816 driver are: [ 145.236371][ T7941] pcl816 [ 145.239511][ T7941] pcl814b [ 145.242566][ T7941] comedi: valid board names for pcl812 driver are: [ 145.253982][ T7941] pcl812 [ 145.257091][ T7941] pcl812pg [ 145.260222][ T7941] acl8112pg [ 145.287025][ T7941] acl8112dg [ 145.290412][ T7941] acl8112hg [ 145.293628][ T7941] a821pgl [ 145.296663][ T7941] a821pglnda [ 145.317196][ T7941] a821pgh [ 145.320477][ T7941] a822pgl [ 145.323624][ T7941] a822pgh [ 145.326655][ T7941] a823pgl [ 145.367005][ T7941] a823pgh [ 145.370117][ T7941] pcl813 [ 145.373081][ T7941] pcl813b [ 145.376212][ T7941] acl8113 [ 145.396004][ T7941] iso813 [ 145.404374][ T7941] acl8216 [ 145.409833][ T7941] a826pg [ 145.412829][ T7941] comedi: valid board names for pcl730 driver are: [ 145.438775][ T7941] pcl730 [ 145.441786][ T7941] iso730 [ 145.464907][ T7941] acl7130 [ 145.477156][ T7941] pcm3730 [ 145.487057][ T7941] pcl725 [ 145.490066][ T7941] p8r8dio [ 145.493112][ T7941] acl7225b [ 145.496232][ T7941] p16r16dio [ 145.527010][ T7941] pcl733 [ 145.530041][ T7941] pcl734 [ 145.533010][ T7941] opmm-1616-xt [ 145.536503][ T7941] pearl-mm-p [ 145.567306][ T7941] ir104-pbf [ 145.575352][ T7941] comedi: valid board names for pcl726 driver are: [ 145.603293][ T7941] pcl726 [ 145.606408][ T7941] pcl727 [ 145.619821][ T7941] pcl728 [ 145.622928][ T7941] acl6126 [ 145.625968][ T7941] acl6128 [ 145.647064][ T7941] comedi: valid board names for pcl724 driver are: [ 145.667153][ T7941] pcl724 [ 145.670360][ T7941] pcl722 [ 145.674347][ T7941] pcl731 [ 145.681898][ T7941] acl7122 [ 145.685046][ T7941] acl7124 [ 145.712569][ T7941] pet48dio [ 145.715754][ T7941] pcmio48 [ 145.729170][ T7941] onyx-mm-dio [ 145.739236][ T7941] comedi: valid board names for pcl711 driver are: [ 145.760502][ T7941] pcl711 [ 145.763507][ T7941] pcl711b [ 145.768436][ T8017] loop1: detected capacity change from 0 to 32768 [ 145.784374][ T7941] acl8112hg [ 145.787889][ T7941] acl8112dg [ 145.791368][ T7941] comedi: valid board names for amplc_pc263 driver are: [ 145.807031][ T7941] pc263 [ 145.820078][ T7941] comedi: valid board names for amplc_pc236 driver are: [ 145.838495][ T7941] pc36at [ 145.846976][ T7941] comedi: valid board names for amplc_dio200 driver are: [ 145.877148][ T8017] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 145.887440][ T7941] pc212e [ 145.897161][ T7941] pc214e [ 145.908721][ T7941] pc215e [ 145.916499][ T7941] pc218e [ 145.920809][ T7941] pc272e [ 145.930554][ T7941] comedi: valid board names for comedi_parport driver are: [ 145.939643][ T7941] comedi_parport [ 145.943500][ T7941] comedi: valid board names for comedi_test driver are: [ 145.971787][ T7941] comedi_test [ 145.975273][ T7941] comedi: valid board names for comedi_bond driver are: [ 146.014202][ T7941] comedi_bond [ 146.225239][ T8047] loop2: detected capacity change from 0 to 512 [ 146.227591][ T8017] XFS (loop1): Ending clean mount [ 146.280216][ T8047] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.985: iget: bad i_size value: 38620345925642 [ 146.348428][ T8047] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.985: couldn't read orphan inode 15 (err -117) [ 146.377215][ T5787] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 146.405968][ T8028] loop3: detected capacity change from 0 to 32768 [ 146.431726][ T8047] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.532286][ T8028] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 146.555108][ T8051] loop0: detected capacity change from 0 to 256 [ 146.589914][ T8028] [ 146.592306][ T8028] ====================================================== [ 146.597766][ T8051] exfat: Deprecated parameter 'utf8' [ 146.599321][ T8028] WARNING: possible circular locking dependency detected [ 146.599344][ T8028] 6.6.102-syzkaller #0 Not tainted [ 146.616868][ T8028] ------------------------------------------------------ [ 146.623995][ T8028] syz.3.979/8028 is trying to acquire lock: [ 146.629911][ T8028] ffff8880589409d8 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x165/0x4360 [ 146.643214][ T8028] [ 146.643214][ T8028] but task is already holding lock: [ 146.650829][ T8028] ffff888058946ab8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x410/0x11f0 [ 146.660368][ T8028] [ 146.660368][ T8028] which lock already depends on the new lock. [ 146.660368][ T8028] [ 146.670828][ T8028] [ 146.670828][ T8028] the existing dependency chain (in reverse order) is: [ 146.679939][ T8028] [ 146.679939][ T8028] -> #5 (&oi->ip_xattr_sem){++++}-{3:3}: [ 146.687846][ T8028] down_read+0x46/0x2e0 [ 146.692523][ T8028] ocfs2_init_acl+0x2fa/0x720 [ 146.697720][ T8028] ocfs2_mknod+0x12e5/0x20f0 [ 146.702825][ T8028] ocfs2_create+0x196/0x410 [ 146.707839][ T8028] path_openat+0x1277/0x3190 [ 146.712958][ T8028] do_filp_open+0x1c5/0x3d0 [ 146.717979][ T8028] do_sys_openat2+0x12c/0x1c0 [ 146.723255][ T8028] __x64_sys_open+0x11f/0x140 [ 146.728474][ T8028] do_syscall_64+0x55/0xb0 [ 146.733404][ T8028] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 146.739879][ T8028] [ 146.739879][ T8028] -> #4 (jbd2_handle){++++}-{0:0}: [ 146.747172][ T8028] start_this_handle+0x1e9d/0x20c0 [ 146.752809][ T8028] jbd2__journal_start+0x2bb/0x5b0 [ 146.758511][ T8028] jbd2_journal_start+0x2a/0x40 [ 146.764043][ T8028] ocfs2_start_trans+0x376/0x6c0 [ 146.769534][ T8028] ocfs2_setattr+0x102f/0x1b20 [ 146.774863][ T8028] notify_change+0xb0d/0xe10 [ 146.780001][ T8028] chown_common+0x3f9/0x5a0 [ 146.785047][ T8028] do_fchownat+0x168/0x270 [ 146.790001][ T8028] __x64_sys_lchown+0x85/0x90 [ 146.795209][ T8028] do_syscall_64+0x55/0xb0 [ 146.800151][ T8028] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 146.806565][ T8028] [ 146.806565][ T8028] -> #3 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 146.815095][ T8028] down_read+0x46/0x2e0 [ 146.819777][ T8028] ocfs2_start_trans+0x36a/0x6c0 [ 146.825239][ T8028] ocfs2_setattr+0x102f/0x1b20 [ 146.830544][ T8028] notify_change+0xb0d/0xe10 [ 146.835673][ T8028] chown_common+0x3f9/0x5a0 [ 146.840771][ T8028] do_fchownat+0x168/0x270 [ 146.845694][ T8028] __x64_sys_lchown+0x85/0x90 [ 146.850967][ T8028] do_syscall_64+0x55/0xb0 [ 146.855895][ T8028] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 146.862300][ T8028] [ 146.862300][ T8028] -> #2 (sb_internal#5){.+.+}-{0:0}: [ 146.869880][ T8028] ocfs2_start_trans+0x26b/0x6c0 [ 146.875332][ T8028] ocfs2_mknod+0xe47/0x20f0 [ 146.880348][ T8028] ocfs2_create+0x196/0x410 [ 146.885356][ T8028] path_openat+0x1277/0x3190 [ 146.890456][ T8028] do_filp_open+0x1c5/0x3d0 [ 146.895472][ T8028] do_sys_openat2+0x12c/0x1c0 [ 146.900661][ T8028] __x64_sys_open+0x11f/0x140 [ 146.905888][ T8028] do_syscall_64+0x55/0xb0 [ 146.910814][ T8028] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 146.917265][ T8028] [ 146.917265][ T8028] -> #1 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{3:3}: [ 146.927867][ T8028] down_write+0x97/0x1f0 [ 146.932629][ T8028] ocfs2_reserve_local_alloc_bits+0x126/0x24b0 [ 146.939345][ T8028] ocfs2_reserve_clusters_with_limit+0x1bf/0xba0 [ 146.946273][ T8028] ocfs2_mknod+0xdee/0x20f0 [ 146.951406][ T8028] ocfs2_create+0x196/0x410 [ 146.956516][ T8028] path_openat+0x1277/0x3190 [ 146.961631][ T8028] do_filp_open+0x1c5/0x3d0 [ 146.966644][ T8028] do_sys_openat2+0x12c/0x1c0 [ 146.971829][ T8028] __x64_sys_open+0x11f/0x140 [ 146.977102][ T8028] do_syscall_64+0x55/0xb0 [ 146.982036][ T8028] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 146.988448][ T8028] [ 146.988448][ T8028] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}: [ 146.999126][ T8028] __lock_acquire+0x2ddb/0x7c80 [ 147.004490][ T8028] lock_acquire+0x197/0x410 [ 147.009508][ T8028] down_write+0x97/0x1f0 [ 147.014523][ T8028] ocfs2_reserve_suballoc_bits+0x165/0x4360 [ 147.020931][ T8028] ocfs2_reserve_new_metadata_blocks+0x404/0x940 [ 147.027845][ T8028] ocfs2_init_xattr_set_ctxt+0x2f8/0x6e0 [ 147.033989][ T8028] ocfs2_xattr_set+0xb6d/0x11f0 [ 147.039436][ T8028] ocfs2_set_acl+0x4e1/0x590 [ 147.044548][ T8028] ocfs2_iop_set_acl+0x1ab/0x2a0 [ 147.049995][ T8028] vfs_set_acl+0x803/0xa60 [ 147.054944][ T8028] do_set_acl+0xf5/0x180 [ 147.059694][ T8028] path_setxattr+0x39f/0x550 [ 147.064827][ T8028] __x64_sys_setxattr+0xbb/0xd0 [ 147.070283][ T8028] do_syscall_64+0x55/0xb0 [ 147.075207][ T8028] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 147.081616][ T8028] [ 147.081616][ T8028] other info that might help us debug this: [ 147.081616][ T8028] [ 147.091873][ T8028] Chain exists of: [ 147.091873][ T8028] &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5 --> jbd2_handle --> &oi->ip_xattr_sem [ 147.091873][ T8028] [ 147.107689][ T8028] Possible unsafe locking scenario: [ 147.107689][ T8028] [ 147.115124][ T8028] CPU0 CPU1 [ 147.120483][ T8028] ---- ---- [ 147.125828][ T8028] lock(&oi->ip_xattr_sem); [ 147.130406][ T8028] lock(jbd2_handle); [ 147.137084][ T8028] lock(&oi->ip_xattr_sem); [ 147.144732][ T8028] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5); [ 147.152114][ T8028] [ 147.152114][ T8028] *** DEADLOCK *** [ 147.152114][ T8028] [ 147.160255][ T8028] 3 locks held by syz.3.979/8028: [ 147.165292][ T8028] #0: ffff888056630418 (sb_writers#22){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 147.174699][ T8028] #1: ffff888058946d98 (&type->i_mutex_dir_key#18){+.+.}-{3:3}, at: vfs_set_acl+0x37a/0xa60 [ 147.184977][ T8028] #2: ffff888058946ab8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x410/0x11f0 [ 147.194977][ T8028] [ 147.194977][ T8028] stack backtrace: [ 147.200866][ T8028] CPU: 1 PID: 8028 Comm: syz.3.979 Not tainted 6.6.102-syzkaller #0 [ 147.209011][ T8028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 147.219074][ T8028] Call Trace: [ 147.222352][ T8028] [ 147.225282][ T8028] dump_stack_lvl+0x16c/0x230 [ 147.230134][ T8028] ? load_image+0x3b0/0x3b0 [ 147.234633][ T8028] ? show_regs_print_info+0x20/0x20 [ 147.239826][ T8028] ? print_circular_bug+0x12b/0x1a0 [ 147.245014][ T8028] check_noncircular+0x2bd/0x3c0 [ 147.250026][ T8028] ? look_up_lock_class+0x75/0x140 [ 147.255128][ T8028] ? print_deadlock_bug+0x5d0/0x5d0 [ 147.260353][ T8028] ? lockdep_lock+0xe0/0x220 [ 147.264937][ T8028] ? _find_first_zero_bit+0xd3/0x100 [ 147.270306][ T8028] __lock_acquire+0x2ddb/0x7c80 [ 147.275164][ T8028] ? ocfs2_get_system_file_inode+0x1e3/0x7b0 [ 147.281250][ T8028] ? __lock_acquire+0x7c80/0x7c80 [ 147.286259][ T8028] ? verify_lock_unused+0x140/0x140 [ 147.291535][ T8028] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 147.297161][ T8028] ? do_raw_spin_lock+0x121/0x2c0 [ 147.302271][ T8028] ? mutex_unlock+0x10/0x10 [ 147.306779][ T8028] lock_acquire+0x197/0x410 [ 147.311271][ T8028] ? ocfs2_reserve_suballoc_bits+0x165/0x4360 [ 147.317430][ T8028] ? ocfs2_get_system_file_inode+0x1f1/0x7b0 [ 147.323402][ T8028] ? __might_sleep+0xe0/0xe0 [ 147.327983][ T8028] ? read_lock_is_recursive+0x20/0x20 [ 147.333350][ T8028] ? ocfs2_fast_symlink_read_folio+0x530/0x530 [ 147.339528][ T8028] ? verify_lock_unused+0x140/0x140 [ 147.344734][ T8028] ? check_noncircular+0x175/0x3c0 [ 147.349842][ T8028] down_write+0x97/0x1f0 [ 147.354081][ T8028] ? ocfs2_reserve_suballoc_bits+0x165/0x4360 [ 147.360164][ T8028] ? down_read_killable+0x340/0x340 [ 147.365380][ T8028] ocfs2_reserve_suballoc_bits+0x165/0x4360 [ 147.371296][ T8028] ? mark_lock+0x94/0x320 [ 147.375618][ T8028] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 147.381597][ T8028] ? lock_chain_count+0x20/0x20 [ 147.386521][ T8028] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 147.392409][ T8028] ? ocfs2_block_group_search+0x470/0x470 [ 147.398126][ T8028] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 147.404039][ T8028] ? _raw_spin_unlock+0x40/0x40 [ 147.408931][ T8028] ? stack_trace_save+0x9c/0xe0 [ 147.413819][ T8028] ? stack_trace_snprint+0xf0/0xf0 [ 147.418939][ T8028] ? __stack_depot_save+0x560/0x630 [ 147.424130][ T8028] ? kasan_set_track+0x5f/0x70 [ 147.428885][ T8028] ? kasan_set_track+0x4e/0x70 [ 147.433638][ T8028] ? __kasan_kmalloc+0x8f/0xa0 [ 147.438475][ T8028] ? ocfs2_reserve_new_metadata_blocks+0x114/0x940 [ 147.444978][ T8028] ? ocfs2_init_xattr_set_ctxt+0x2f8/0x6e0 [ 147.450775][ T8028] ? ocfs2_xattr_set+0xb6d/0x11f0 [ 147.455803][ T8028] ? ocfs2_set_acl+0x4e1/0x590 [ 147.460643][ T8028] ? ocfs2_iop_set_acl+0x1ab/0x2a0 [ 147.465809][ T8028] ? vfs_set_acl+0x803/0xa60 [ 147.470393][ T8028] ? do_set_acl+0xf5/0x180 [ 147.474799][ T8028] ? path_setxattr+0x39f/0x550 [ 147.479555][ T8028] ? __x64_sys_setxattr+0xbb/0xd0 [ 147.484650][ T8028] ? do_syscall_64+0x55/0xb0 [ 147.489225][ T8028] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 147.495304][ T8028] ocfs2_reserve_new_metadata_blocks+0x404/0x940 [ 147.501895][ T8028] ? ocfs2_init_steal_slots+0x160/0x160 [ 147.507615][ T8028] ? ocfs2_xattr_block_set+0x2b40/0x2b40 [ 147.513250][ T8028] ocfs2_init_xattr_set_ctxt+0x2f8/0x6e0 [ 147.518878][ T8028] ? ocfs2_xattr_set+0xb33/0x11f0 [ 147.523904][ T8028] ? ocfs2_prepare_refcount_xattr+0xf20/0xf20 [ 147.530004][ T8028] ? ocfs2_truncate_log_needs_flush+0x135/0x2e0 [ 147.536316][ T8028] ? ocfs2_remove_btree_range+0x1480/0x1480 [ 147.542239][ T8028] ? down_write+0x162/0x1f0 [ 147.546906][ T8028] ? down_read_killable+0x340/0x340 [ 147.552159][ T8028] ? up_write+0x1c3/0x410 [ 147.556494][ T8028] ocfs2_xattr_set+0xb6d/0x11f0 [ 147.561351][ T8028] ? __ocfs2_xattr_set_handle+0xf10/0xf10 [ 147.567062][ T8028] ? __kasan_kmalloc+0x8f/0xa0 [ 147.571902][ T8028] ? ocfs2_set_acl+0x11e/0x590 [ 147.576744][ T8028] ? ocfs2_iop_set_acl+0x1ab/0x2a0 [ 147.581954][ T8028] ? vfs_set_acl+0x803/0xa60 [ 147.586534][ T8028] ? path_setxattr+0x39f/0x550 [ 147.591304][ T8028] ? do_syscall_64+0x55/0xb0 [ 147.595929][ T8028] ? ocfs2_set_acl+0x11e/0x590 [ 147.600780][ T8028] ? rcu_is_watching+0x15/0xb0 [ 147.605724][ T8028] ? ocfs2_set_acl+0x11e/0x590 [ 147.610666][ T8028] ? __kmalloc+0xe2/0x240 [ 147.615001][ T8028] ? ocfs2_inode_lock_atime+0x4e0/0x4e0 [ 147.620545][ T8028] ocfs2_set_acl+0x4e1/0x590 [ 147.625345][ T8028] ocfs2_iop_set_acl+0x1ab/0x2a0 [ 147.630285][ T8028] ? ocfs2_xattr_get+0x220/0x220 [ 147.635219][ T8028] ? evm_inode_set_acl+0xbb/0x410 [ 147.640245][ T8028] ? down_read_killable+0x340/0x340 [ 147.645694][ T8028] ? evm_revalidate_status+0x4f/0xb0 [ 147.651096][ T8028] ? posix_acl_valid+0x352/0x3d0 [ 147.656115][ T8028] vfs_set_acl+0x803/0xa60 [ 147.660541][ T8028] do_set_acl+0xf5/0x180 [ 147.664781][ T8028] path_setxattr+0x39f/0x550 [ 147.669372][ T8028] ? simple_xattrs_free+0x150/0x150 [ 147.674569][ T8028] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 147.680538][ T8028] ? lock_chain_count+0x20/0x20 [ 147.685376][ T8028] __x64_sys_setxattr+0xbb/0xd0 [ 147.690222][ T8028] do_syscall_64+0x55/0xb0 [ 147.694807][ T8028] ? clear_bhb_loop+0x40/0x90 [ 147.699469][ T8028] ? clear_bhb_loop+0x40/0x90 [ 147.704217][ T8028] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 147.710196][ T8028] RIP: 0033:0x7fe59f98ebe9 [ 147.714608][ T8028] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.734225][ T8028] RSP: 002b:00007fe5a07c5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 147.742640][ T8028] RAX: ffffffffffffffda RBX: 00007fe59fbb5fa0 RCX: 00007fe59f98ebe9 [ 147.750623][ T8028] RDX: 0000200000000480 RSI: 0000200000002a40 RDI: 0000200000002a00 [ 147.758621][ T8028] RBP: 00007fe59fa11e19 R08: 0000000000000003 R09: 0000000000000000 [ 147.766579][ T8028] R10: 0000000000000024 R11: 0000000000000246 R12: 0000000000000000 [ 147.774620][ T8028] R13: 00007fe59fbb6038 R14: 00007fe59fbb5fa0 R15: 00007fffb5cd2c28 [ 147.782617][ T8028] [ 147.802732][ T7978] EXT4-fs error (device loop2): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 147.849832][ T8051] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 147.886964][ T5826] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 147.933431][ T5784] ocfs2: Unmounting device (7,3) on (node local) [ 148.118813][ T5826] usb 3-1: config 27 interface 0 altsetting 0 has an invalid endpoint with address 0x98, skipping [ 148.130989][ T5826] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 47025, setting to 1024 [ 148.143522][ T5826] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 148.153955][ T5826] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 148.164277][ T5826] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.174273][ T8047] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 148.185692][ T5826] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 148.193567][ T5826] usb 3-1: invalid MIDI in EP 0 [ 148.236895][ T5826] snd-usb-audio: probe of 3-1:27.0 failed with error -22 [ 148.426279][ T5788] usb 3-1: USB disconnect, device number 8 [ 148.941489][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.