last executing test programs: 6.238913013s ago: executing program 2 (id=557): write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x490420, 0x2}}, 0x50) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.356546859s ago: executing program 3 (id=561): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x18000000000002a0, 0x4f, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f088a8", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.840359718s ago: executing program 3 (id=565): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000bc7a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 4.616176077s ago: executing program 3 (id=566): syz_mount_image$xfs(&(0x7f00000000c0), &(0x7f0000009780)='./file0\x00', 0x0, &(0x7f0000000080)={[{@sysvgroups}, {}, {@swalloc}, {@ikeep}, {@lazytime}]}, 0x1, 0x9730, &(0x7f0000012f40)="$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") setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f0000000180)=ANY=[], 0xe00f, 0x0) open(&(0x7f0000000040)='./file1\x00', 0x100002, 0x0) 3.715237103s ago: executing program 2 (id=572): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x6000003, 0x42031, 0xffffffffffffffff, 0x0) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/clear_refs\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000180)='4\x00', 0x2) 3.341386712s ago: executing program 2 (id=573): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000045000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.243268662s ago: executing program 3 (id=575): r0 = msgget$private(0x0, 0x20) msgrcv(r0, 0x0, 0x0, 0x0, 0x2000) msgsnd(r0, &(0x7f0000001800)={0x2}, 0x8, 0x0) 2.174524978s ago: executing program 2 (id=580): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) 1.906061087s ago: executing program 2 (id=584): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000080000000000000a38000000090a000000000000000000000000000008000a40000000000900020073797a310000000008000540000000000800084000000001"], 0x60}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c00028018000280080001"], 0xec}}, 0x0) 1.659635446s ago: executing program 1 (id=587): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0xf7, 0x55}}}}, [@NL80211_ATTR_TX_RATES={0x4, 0x10d}]}, 0x24}}, 0x0) 1.644675776s ago: executing program 4 (id=588): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xa) ioctl$FIONREAD(r0, 0x541b, 0x0) 1.584930936s ago: executing program 2 (id=590): syz_mount_image$btrfs(&(0x7f00000051c0), &(0x7f0000005200)='./file0\x00', 0x1204408, &(0x7f0000000080)={[{@compress_force}, {@clear_cache}, {@nodatasum}, {@ref_verify}, {}, {@space_cache_v1}]}, 0x0, 0x51ab, &(0x7f000000a440)="$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") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020) 1.407428936s ago: executing program 4 (id=591): r0 = syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0) ioctl$I2C_PEC(r0, 0x708, 0x6) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000000)={0x0, 0x4, 0x5, &(0x7f0000000100)={0x0, "fd5a44512b7e1b0020ed2abb4301002700"}}) 1.379757245s ago: executing program 1 (id=592): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) 1.282996525s ago: executing program 0 (id=593): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001040100"/20, @ANYRES32=0x0, @ANYBLOB="7b130000000000003800128008000100677470"], 0x60}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.252393085s ago: executing program 3 (id=594): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000002bc0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000002c40)={&(0x7f0000002c00)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbff}, 0x1c}, 0x1, 0x0, 0x0, 0x20004000}, 0x14) 1.176955434s ago: executing program 4 (id=595): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0xfffffffc}) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') setns(r0, 0x0) 1.107459154s ago: executing program 1 (id=596): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "17"}]}], {0x14}}, 0x70}}, 0x0) 1.080786294s ago: executing program 3 (id=597): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x4810, &(0x7f0000000580)={[{@nossd_spread}, {@metadata_ratio={'metadata_ratio', 0x3d, 0x4}}, {@compress_force_algo={'compress-force', 0x3d, 'lzo'}}, {@usebackuproot}, {@ref_verify}, {@thread_pool={'thread_pool', 0x3d, 0x1}}, {@enospc_debug}, {@notreelog}]}, 0x3, 0x5145, &(0x7f0000005140)="$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") syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./bus\x00', 0x4000, &(0x7f00000001c0)={[{@norecovery}, {@test_dummy_encryption}, {@nombcache}, {@user_xattr}, {@nomblk_io_submit}]}, 0x1, 0xbbc, &(0x7f00000017c0)="$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") syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000000)='.\x00', 0x80061, &(0x7f00000001c0)=ANY=[], 0x1, 0x0, &(0x7f0000000000)) 984.580794ms ago: executing program 0 (id=598): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@caif=@rfm={0x25, 0x4, "d596843dd71ece92155a2c10c57bd523"}, 0x80, &(0x7f0000000080)=[{&(0x7f00000006c0)="d00327003c0f00000000", 0xa}], 0x1}, 0x0) 917.218174ms ago: executing program 4 (id=599): r0 = eventfd2(0x0, 0x0) readv(r0, &(0x7f0000000500)=[{&(0x7f0000000380)=""/95, 0x5f}], 0x1) write$eventfd(r0, &(0x7f0000000280)=0x9, 0x8) 908.162243ms ago: executing program 1 (id=600): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000c, 0x31, 0xffffffffffffffff, 0x0) futex(&(0x7f00000002c0), 0x8c, 0x1, 0x0, &(0x7f00000000c0), 0x0) socket(0x0, 0x0, 0x0) 770.008403ms ago: executing program 0 (id=601): r0 = socket$unix(0x1, 0x1, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x1fb, 0x5) 669.127393ms ago: executing program 4 (id=602): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x400, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0x1, 0xc}, {0xfff3, 0xf}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8}, @TCA_CAKE_NAT={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20044041}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 584.401872ms ago: executing program 1 (id=603): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$sequencer(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="9401a3e18f5176e29401"], 0x24) 535.234472ms ago: executing program 0 (id=604): r0 = socket(0x25, 0x1, 0x0) io_setup(0x3, &(0x7f0000001cc0)=0x0) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x2, 0x0, 0x0, r0, &(0x7f0000000000)='}', 0x1}]) 334.966762ms ago: executing program 4 (id=605): r0 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x54e, &(0x7f00000014c0)="$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") lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=r0, @ANYBLOB="040000000000800008000000", @ANYRES32=r0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) open(&(0x7f0000000040)='.\x00', 0x418601, 0x8) 299.451701ms ago: executing program 1 (id=606): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000040)={0x4, 0xffffffffffffffff, 0x1}) 145.654131ms ago: executing program 0 (id=607): unshare(0x22020600) r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, 0xffffffffffffffff, &(0x7f0000000280)={0x3000000e}) 0s ago: executing program 0 (id=608): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000000)='wg1\x00', 0x4) bind$inet6(r0, &(0x7f0000002500)={0xa, 0x4e21, 0xebc, @mcast1, 0x2}, 0x18) kernel console output (not intermixed with test programs): k becomes ready [ 64.739801][ T32] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.747271][ T32] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.759833][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.772535][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.822728][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.835473][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.869272][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.881590][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.892080][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.906707][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.918439][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.936082][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.945344][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.955467][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.965320][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.976286][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.991965][ T4257] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.010111][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.022508][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.036910][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.060479][ T4257] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.086151][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.095850][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.113524][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.123834][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.166259][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.184325][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.202714][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.210385][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.220313][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.229892][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.240316][ T32] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.249766][ T32] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.275252][ T4249] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.295788][ T4259] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.316209][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.326793][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.342994][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.354234][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.371698][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.386941][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.422666][ T4252] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.455097][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.473887][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.486101][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.523559][ T4249] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.538368][ T4252] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.561894][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.586543][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.598455][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.612093][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.628094][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.636865][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.656693][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.668095][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.713748][ T4263] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.725365][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.736515][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.768776][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.776877][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.786797][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.810287][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.828449][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.836655][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.872390][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.887152][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.897578][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.907002][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.917072][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.927181][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.939702][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.949198][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.961067][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.972761][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.982163][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.013695][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.049338][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.077392][ T32] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.086160][ T32] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.101735][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.124552][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.195858][ T4259] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.211109][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.224160][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.235990][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.249217][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.261710][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.275317][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.320381][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.339214][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.353458][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.364670][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.387377][ T4252] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 66.410719][ T4252] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.443281][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.468738][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.494006][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.511379][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.521528][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.531776][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.540322][ T4256] Bluetooth: hci4: command 0x040f tx timeout [ 66.548043][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.557453][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.568241][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.579290][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.615373][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.626126][ T4254] Bluetooth: hci2: command 0x040f tx timeout [ 66.633685][ T4256] Bluetooth: hci3: command 0x040f tx timeout [ 66.633699][ T4253] Bluetooth: hci1: command 0x040f tx timeout [ 66.651080][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.662526][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.671801][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.698030][ T4254] Bluetooth: hci0: command 0x040f tx timeout [ 66.713963][ T4257] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.735119][ T4259] device veth0_vlan entered promiscuous mode [ 66.755892][ T4249] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.769111][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.777536][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.788862][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.800660][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.812065][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.835530][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.845732][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.857191][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.869345][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.888932][ T4259] device veth1_vlan entered promiscuous mode [ 66.956636][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.975127][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.011173][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.022459][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.073245][ T4263] device veth0_vlan entered promiscuous mode [ 67.092319][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.109215][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.123440][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.141625][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.171398][ T4263] device veth1_vlan entered promiscuous mode [ 67.194219][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.213495][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.238977][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.256425][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.274825][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.289547][ T4257] device veth0_vlan entered promiscuous mode [ 67.302159][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.319976][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.335890][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.346657][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.372333][ T4259] device veth0_macvtap entered promiscuous mode [ 67.396394][ T4252] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.423740][ T4259] device veth1_macvtap entered promiscuous mode [ 67.441317][ T4257] device veth1_vlan entered promiscuous mode [ 67.453560][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.465731][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.479482][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.498355][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.512192][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.521180][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.539273][ T4249] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.563427][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.575029][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.585567][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.598764][ T4263] device veth0_macvtap entered promiscuous mode [ 67.636343][ T4259] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.655571][ T4259] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.668542][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.677425][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.689293][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.700247][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.709168][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.719348][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.730716][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.743710][ T4263] device veth1_macvtap entered promiscuous mode [ 67.767237][ T4259] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.778357][ T4259] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.790267][ T4259] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.800215][ T4259] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.822654][ T4257] device veth0_macvtap entered promiscuous mode [ 67.830949][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.842630][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.855115][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.865207][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.902855][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.920066][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.944136][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.965329][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.005582][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.016063][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.028801][ T4257] device veth1_macvtap entered promiscuous mode [ 68.043611][ T4252] device veth0_vlan entered promiscuous mode [ 68.077235][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.098587][ T4263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.117891][ T4263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.133680][ T4263] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.174183][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.195748][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.214201][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.235001][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.246731][ T4249] device veth0_vlan entered promiscuous mode [ 68.262017][ T4252] device veth1_vlan entered promiscuous mode [ 68.280844][ T4257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.299558][ T4257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.316324][ T4257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.334879][ T4257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.353341][ T4257] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.376050][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.391360][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.413457][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.435858][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.457263][ T4263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.479018][ T4263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.505177][ T4263] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.533913][ T4257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.556744][ T4257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.579700][ T4257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.598872][ T4257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.615308][ T4257] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.623587][ T4254] Bluetooth: hci4: command 0x0419 tx timeout [ 68.638044][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.658658][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.669797][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.681674][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.697429][ T4263] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.698406][ T4256] Bluetooth: hci3: command 0x0419 tx timeout [ 68.708583][ T4254] Bluetooth: hci2: command 0x0419 tx timeout [ 68.716260][ T4256] Bluetooth: hci1: command 0x0419 tx timeout [ 68.736502][ T4263] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.764836][ T4263] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.780507][ T4253] Bluetooth: hci0: command 0x0419 tx timeout [ 68.793184][ T4263] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.831839][ T4257] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.846365][ T4257] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.869202][ T4257] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.880774][ T4257] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.899481][ T4249] device veth1_vlan entered promiscuous mode [ 68.944394][ T4252] device veth0_macvtap entered promiscuous mode [ 68.960450][ T4252] device veth1_macvtap entered promiscuous mode [ 68.976378][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.990288][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.002253][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.013993][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.069216][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.079604][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.105878][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.106855][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.126697][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.175749][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.199883][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.233441][ T4249] device veth0_macvtap entered promiscuous mode [ 69.284423][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.302363][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.322130][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.338313][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.353405][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.367895][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.382392][ T4252] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.407331][ T4249] device veth1_macvtap entered promiscuous mode [ 69.429807][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.441134][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.459439][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.476189][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.537307][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.551797][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.575255][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.575393][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.606214][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.623633][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.644763][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.671316][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.691746][ T4252] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.723765][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.737973][ T4312] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.749821][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.761017][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.761536][ T4312] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.783623][ T4252] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.802455][ T4252] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.817065][ T4252] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.831646][ T4252] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.847977][ T4249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.861303][ T4249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.874940][ T4249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.889511][ T4249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.901159][ T4249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.916271][ T4249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.929770][ T4249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.941459][ T4249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.958021][ T4249] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.981989][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.000689][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.013114][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.057371][ T4249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.077517][ T4249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.091803][ T4249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.108054][ T4249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.126945][ T4249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.151175][ T4249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.167999][ T4249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.179895][ T4249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.199069][ T4249] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.248607][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.263716][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.280375][ T4249] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.321295][ T4249] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.335368][ T4249] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.345541][ T4249] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.359605][ T4335] loop3: detected capacity change from 0 to 64 [ 70.380768][ T4312] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.394520][ T4312] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.460974][ T4301] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.478883][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.510786][ T4301] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.595294][ T4335] hfs: bad catalog entry type 0 [ 70.615867][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.635422][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.647384][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.704572][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.731608][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.743565][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.829474][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.860851][ T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.870318][ T4312] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.915380][ T4312] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.915525][ T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.936397][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.083853][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.150945][ T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.221763][ T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.299904][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.432465][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.440126][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.576976][ T4343] loop4: detected capacity change from 0 to 4096 [ 71.705815][ T4352] loop1: detected capacity change from 0 to 256 [ 71.775705][ T4352] ======================================================= [ 71.775705][ T4352] WARNING: The mand mount option has been deprecated and [ 71.775705][ T4352] and is ignored by this kernel. Remove the mand [ 71.775705][ T4352] option from the mount to silence this warning. [ 71.775705][ T4352] ======================================================= [ 71.799265][ T4343] ntfs3: loop4: failed to convert "0080" to cp864 [ 71.992274][ T4300] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 72.198792][ T4300] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.257903][ T4300] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 72.337011][ T4300] usb 1-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 72.389559][ T4300] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.463374][ T4300] usb 1-1: config 0 descriptor?? [ 72.541454][ T4364] loop1: detected capacity change from 0 to 1024 [ 72.749222][ T4361] loop2: detected capacity change from 0 to 4096 [ 72.758147][ T4364] hfsplus: bad catalog entry type [ 72.955836][ T4300] waltop 0003:172F:0037.0001: item fetching failed at offset 5/7 [ 73.005011][ T4300] waltop: probe of 0003:172F:0037.0001 failed with error -22 [ 73.036352][ T26] audit: type=1800 audit(1736916966.577:2): pid=4361 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.14" name="bus" dev="loop2" ino=33 res=0 errno=0 [ 73.081897][ T4312] hfsplus: b-tree write err: -5, ino 4 [ 73.117531][ T4356] loop3: detected capacity change from 0 to 32768 [ 73.235275][ T4356] XFS (loop3): Mounting V5 Filesystem [ 73.250161][ T4333] usb 1-1: USB disconnect, device number 2 [ 73.525564][ T4356] XFS (loop3): Ending clean mount [ 73.586904][ T4356] XFS (loop3): Quotacheck needed: Please wait. [ 73.676239][ T4387] loop2: detected capacity change from 0 to 2048 [ 73.694350][ T4389] loop4: detected capacity change from 0 to 256 [ 73.737475][ T4356] XFS (loop3): Quotacheck: Done. [ 73.835828][ T4387] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 73.913558][ T4389] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 73.928791][ T4389] FAT-fs (loop4): Filesystem has been set read-only [ 73.954367][ T4389] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 74.038689][ T4389] FAT-fs (loop4): Filesystem has been set read-only [ 74.092902][ T4389] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 74.104327][ T4259] XFS (loop3): Unmounting Filesystem [ 74.195093][ T4389] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 74.253732][ T4389] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 74.299721][ T4389] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 74.325841][ T4389] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 74.337179][ T4389] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 74.359175][ T4389] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 74.391622][ T4389] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 74.431843][ T26] audit: type=1800 audit(1736916967.967:3): pid=4389 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.22" name="file1" dev="loop4" ino=1048597 res=0 errno=0 [ 74.778265][ T4389] syz.4.22 (4389) used greatest stack depth: 18592 bytes left [ 74.996768][ T26] audit: type=1800 audit(1736916968.537:4): pid=4387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.21" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 75.441463][ T4414] loop4: detected capacity change from 0 to 512 [ 75.456948][ T4257] EXT4-fs (loop2): unmounting filesystem. [ 75.569966][ T4414] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.33: casefold flag without casefold feature [ 75.669998][ T4414] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.33: couldn't read orphan inode 15 (err -117) [ 75.738978][ T4414] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 75.754716][ T4403] loop0: detected capacity change from 0 to 32768 [ 75.957274][ T4263] EXT4-fs (loop4): unmounting filesystem. [ 75.964339][ T4403] XFS (loop0): Mounting V5 Filesystem [ 76.095073][ T4403] XFS (loop0): Ending clean mount [ 76.130315][ T4403] XFS (loop0): Quotacheck needed: Please wait. [ 76.160199][ T4299] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 76.327384][ T4403] XFS (loop0): Quotacheck: Done. [ 76.389879][ T4299] usb 4-1: Using ep0 maxpacket: 32 [ 76.459523][ T4299] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 76.531942][ T4299] usb 4-1: config 0 has no interface number 0 [ 76.542578][ T126] cfg80211: failed to load regulatory.db [ 76.583204][ T4299] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 76.622616][ T4299] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.643800][ T4299] usb 4-1: Product: syz [ 76.660657][ T4299] usb 4-1: Manufacturer: syz [ 76.661421][ T951] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 76.687855][ T4299] usb 4-1: SerialNumber: syz [ 76.710562][ T4252] XFS (loop0): Unmounting Filesystem [ 76.714659][ T4299] usb 4-1: config 0 descriptor?? [ 76.880579][ T4453] loop4: detected capacity change from 0 to 2048 [ 76.902955][ T951] usb 2-1: Using ep0 maxpacket: 16 [ 76.928300][ T4453] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 76.955579][ T951] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.981185][ T4299] radio-si470x 4-1:0.35: this is not a si470x device. [ 76.992207][ T951] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.029986][ T951] usb 2-1: New USB device found, idVendor=056e, idProduct=00fd, bcdDevice= 0.00 [ 77.059949][ T4299] radio-raremono 4-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 77.070556][ T951] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.093354][ T4456] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 77.112914][ T4455] loop2: detected capacity change from 0 to 764 [ 77.136557][ T951] usb 2-1: config 0 descriptor?? [ 77.285705][ T4299] radio-raremono 4-1:0.35: raremono_cmd_main failed (-71) [ 77.344676][ T4299] radio-raremono 4-1:0.35: V4L2 device registered as radio48 [ 77.479727][ T4299] usb 4-1: USB disconnect, device number 2 [ 77.518374][ T4299] radio-raremono 4-1:0.35: Thanko's Raremono disconnected [ 77.617362][ T951] elecom 0003:056E:00FD.0002: item fetching failed at offset 5/9 [ 77.669402][ T951] elecom: probe of 0003:056E:00FD.0002 failed with error -22 [ 77.956415][ T4459] loop2: detected capacity change from 0 to 2048 [ 77.999052][ T126] usb 2-1: USB disconnect, device number 2 [ 78.137567][ T4459] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 78.180656][ T4464] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 78.292002][ T4467] loop3: detected capacity change from 0 to 16 [ 78.365964][ T4467] erofs: (device loop3): mounted with root inode @ nid 36. [ 78.678513][ T4469] netlink: 'syz.0.45': attribute type 10 has an invalid length. [ 78.803361][ T26] audit: type=1800 audit(1736916972.347:5): pid=4459 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.49" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 78.856501][ T4469] batman_adv: batadv0: Adding interface: team0 [ 78.910802][ T4469] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.086834][ T4257] EXT4-fs (loop2): unmounting filesystem. [ 79.090442][ T4474] loop3: detected capacity change from 0 to 2048 [ 79.138070][ T4469] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 79.164693][ T4470] netlink: 'syz.0.45': attribute type 10 has an invalid length. [ 79.202626][ T4470] netlink: 2 bytes leftover after parsing attributes in process `syz.0.45'. [ 79.258811][ T4475] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 79.295006][ T4470] device team0 entered promiscuous mode [ 79.370122][ T4470] device team_slave_0 entered promiscuous mode [ 79.408038][ T4470] device team_slave_1 entered promiscuous mode [ 79.451504][ T4470] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.518742][ T4470] batman_adv: batadv0: Interface activated: team0 [ 79.549836][ T4470] batman_adv: batadv0: Interface deactivated: team0 [ 79.573969][ T4470] batman_adv: batadv0: Removing interface: team0 [ 79.599808][ T4470] bridge0: port 3(team0) entered blocking state [ 79.620911][ T4470] bridge0: port 3(team0) entered disabled state [ 79.640106][ T4470] bridge0: port 3(team0) entered blocking state [ 79.647748][ T4470] bridge0: port 3(team0) entered forwarding state [ 79.683778][ T4477] netlink: 4 bytes leftover after parsing attributes in process `syz.1.54'. [ 79.937565][ T26] audit: type=1326 audit(1736916973.477:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4483 comm="syz.0.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26b3d85d29 code=0x7ffc0000 [ 80.035477][ T26] audit: type=1326 audit(1736916973.477:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4483 comm="syz.0.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f26b3d85d29 code=0x7ffc0000 [ 80.059457][ T4488] loop3: detected capacity change from 0 to 256 [ 80.121669][ T4461] loop4: detected capacity change from 0 to 32768 [ 80.193973][ T26] audit: type=1326 audit(1736916973.477:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4483 comm="syz.0.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26b3d85d29 code=0x7ffc0000 [ 80.237990][ T4461] gfs2: fsid=mounts: Trying to join cluster "lock_nolock", "mounts" [ 80.287829][ T4461] gfs2: fsid=mounts: Now mounting FS (format 1801)... [ 80.332325][ T26] audit: type=1326 audit(1736916973.547:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4483 comm="syz.0.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=93 compat=0 ip=0x7f26b3d85d29 code=0x7ffc0000 [ 80.444042][ T26] audit: type=1326 audit(1736916973.547:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4483 comm="syz.0.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26b3d85d29 code=0x7ffc0000 [ 80.539243][ T4461] gfs2: fsid=mounts.0: journal 0 mapped with 16 extents in 1ms [ 80.579427][ T26] audit: type=1326 audit(1736916973.567:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4483 comm="syz.0.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26b3d85d29 code=0x7ffc0000 [ 80.622771][ T4333] gfs2: fsid=mounts.0: jid=0, already locked for use [ 80.657085][ T4333] gfs2: fsid=mounts.0: jid=0: Looking at journal... [ 80.805298][ T4333] gfs2: fsid=mounts.0: jid=0: Journal head lookup took 148ms [ 80.816767][ T4333] gfs2: fsid=mounts.0: jid=0: Done [ 80.837603][ T4461] gfs2: fsid=mounts.0: first mount done, others may mount [ 81.129897][ T4333] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 81.162598][ T4479] loop2: detected capacity change from 0 to 32768 [ 81.305125][ T4479] XFS (loop2): Mounting V5 Filesystem [ 81.399659][ T4333] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.428614][ T4333] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.457771][ T4333] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.00 [ 81.498086][ T4333] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.539863][ T4333] usb 2-1: config 0 descriptor?? [ 81.577400][ T4479] XFS (loop2): Ending clean mount [ 81.604723][ T4479] XFS (loop2): Quotacheck needed: Please wait. [ 81.710486][ T4479] XFS (loop2): Quotacheck: Done. [ 81.854875][ T4515] loop4: detected capacity change from 0 to 64 [ 81.970782][ T4496] loop0: detected capacity change from 0 to 32768 [ 81.996935][ T4333] cmedia_hs100b 0003:0D8C:0014.0003: item fetching failed at offset 2/5 [ 82.029357][ T4496] XFS: ikeep mount option is deprecated. [ 82.036222][ T4333] cmedia_hs100b: probe of 0003:0D8C:0014.0003 failed with error -22 [ 82.036331][ T4496] XFS: noikeep mount option is deprecated. [ 82.149844][ T4257] XFS (loop2): Unmounting Filesystem [ 82.213441][ T4496] XFS (loop0): Mounting V5 Filesystem [ 82.241836][ T4333] usb 2-1: USB disconnect, device number 3 [ 82.409091][ T951] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 82.509310][ T4496] XFS (loop0): Ending clean mount [ 82.521563][ T4531] netlink: 8 bytes leftover after parsing attributes in process `syz.4.72'. [ 82.541033][ T4496] XFS (loop0): Quotacheck needed: Please wait. [ 82.612476][ T4496] XFS (loop0): Quotacheck: Done. [ 82.640207][ T951] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.694684][ T951] usb 4-1: New USB device found, idVendor=048d, idProduct=ce50, bcdDevice= 0.00 [ 82.747072][ T951] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.803225][ T951] usb 4-1: config 0 descriptor?? [ 82.852495][ T4535] loop4: detected capacity change from 0 to 1024 [ 82.915266][ T26] audit: type=1800 audit(1736916976.457:12): pid=4496 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.62" name="file1" dev="loop0" ino=1062 res=0 errno=0 [ 83.006341][ T4541] loop1: detected capacity change from 0 to 256 [ 83.010690][ T4535] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 83.038329][ T4252] XFS (loop0): Unmounting Filesystem [ 83.096328][ T4535] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 83.175496][ T4541] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 83.340585][ T951] asus 0003:048D:CE50.0004: item fetching failed at offset 2/5 [ 83.354396][ T4263] EXT4-fs (loop4): unmounting filesystem. [ 83.374485][ T951] asus 0003:048D:CE50.0004: Asus hid parse failed: -22 [ 83.417700][ T951] asus: probe of 0003:048D:CE50.0004 failed with error -22 [ 83.595732][ T7] usb 4-1: USB disconnect, device number 3 [ 84.434317][ T4568] netlink: 4 bytes leftover after parsing attributes in process `syz.2.88'. [ 84.476018][ T4568] device vlan0 entered promiscuous mode [ 84.503590][ T4568] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 84.582333][ T4563] loop1: detected capacity change from 0 to 4096 [ 84.583238][ T4570] capability: warning: `syz.3.87' uses deprecated v2 capabilities in a way that may be insecure [ 84.591931][ T4563] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 84.743398][ T4572] loop4: detected capacity change from 0 to 1024 [ 85.134849][ T11] hfsplus: b-tree write err: -5, ino 4 [ 85.543482][ T4584] loop4: detected capacity change from 0 to 2048 [ 85.604433][ T4584] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 85.899517][ T4595] loop1: detected capacity change from 0 to 2048 [ 85.978844][ T4263] EXT4-fs (loop4): unmounting filesystem. [ 86.010188][ T4596] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 86.215387][ T4595] NILFS (loop1): error -2 truncating bmap (ino=16) [ 86.354286][ T4596] NILFS (loop1): vblocknr = 15 has abnormal lifetime: start cno (= 4128770) > current cno (= 3) [ 86.404553][ T26] audit: type=1326 audit(1736916979.937:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4587 comm="syz.3.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe395b85d29 code=0x7fc00000 [ 86.429457][ T4596] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=16) [ 86.497702][ T4596] Remounting filesystem read-only [ 86.512696][ T26] audit: type=1326 audit(1736916979.937:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4587 comm="syz.3.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fe395b85d29 code=0x7fc00000 [ 86.540601][ T4593] loop0: detected capacity change from 0 to 32768 [ 86.546340][ T4301] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 86.592511][ T4301] NILFS (loop1): discard dirty block: blocknr=39, size=1024 [ 86.622916][ T4593] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.98 (4593) [ 86.643979][ T4301] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 86.670569][ T26] audit: type=1326 audit(1736916979.937:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4587 comm="syz.3.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe395b85d29 code=0x7fc00000 [ 86.697938][ T4301] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 86.739109][ T4301] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 86.765051][ T4593] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 86.801199][ T26] audit: type=1326 audit(1736916979.937:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4587 comm="syz.3.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe395b85d29 code=0x7fc00000 [ 86.850241][ T4301] NILFS (loop1): discard dirty page: offset=0, ino=3 [ 86.896495][ T4301] NILFS (loop1): discard dirty block: blocknr=42, size=1024 [ 86.917948][ T4593] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 86.927510][ T4301] NILFS (loop1): discard dirty block: blocknr=43, size=1024 [ 86.944213][ T4593] BTRFS info (device loop0): using free space tree [ 86.977982][ T4301] NILFS (loop1): discard dirty block: blocknr=44, size=1024 [ 87.014318][ T26] audit: type=1326 audit(1736916979.937:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4587 comm="syz.3.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe395b85d29 code=0x7fc00000 [ 87.139527][ T4301] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 87.212415][ T951] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 87.246232][ T4249] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer [ 87.262348][ T26] audit: type=1326 audit(1736916979.977:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4587 comm="syz.3.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe395b85d29 code=0x7fc00000 [ 87.297515][ T26] audit: type=1326 audit(1736916979.977:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4587 comm="syz.3.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe395b85d29 code=0x7fc00000 [ 87.309385][ T4249] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 87.324055][ T26] audit: type=1326 audit(1736916979.977:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4587 comm="syz.3.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe395b85d29 code=0x7fc00000 [ 87.366639][ T26] audit: type=1326 audit(1736916979.977:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4587 comm="syz.3.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe395b85d29 code=0x7fc00000 [ 87.427537][ T4249] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 87.454792][ T951] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 87.472283][ T951] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.490778][ T26] audit: type=1326 audit(1736916979.977:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4587 comm="syz.3.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe395b85d29 code=0x7fc00000 [ 87.536885][ T951] usb 3-1: config 0 descriptor?? [ 87.570977][ T4249] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 87.599152][ T4593] BTRFS info (device loop0): enabling ssd optimizations [ 87.633978][ T4249] NILFS (loop1): discard dirty block: blocknr=37, size=1024 [ 87.643759][ T4249] NILFS (loop1): discard dirty block: blocknr=38, size=1024 [ 87.696605][ T4249] NILFS (loop1): discard dirty page: offset=0, ino=5 [ 87.752769][ T4249] NILFS (loop1): discard dirty block: blocknr=41, size=1024 [ 87.775559][ T4249] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 87.815591][ T4249] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 87.857826][ T4249] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 88.251430][ T4648] loop1: detected capacity change from 0 to 256 [ 88.318475][ T951] usb 3-1: Cannot set autoneg [ 88.336307][ T951] MOSCHIP usb-ethernet driver: probe of 3-1:0.0 failed with error -71 [ 88.363911][ T4648] FAT-fs (loop1): Directory bread(block 64) failed [ 88.385665][ T951] usb 3-1: USB disconnect, device number 2 [ 88.406384][ T4648] FAT-fs (loop1): Directory bread(block 65) failed [ 88.424776][ T4252] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 88.437856][ T4648] FAT-fs (loop1): Directory bread(block 66) failed [ 88.498603][ T4648] FAT-fs (loop1): Directory bread(block 67) failed [ 88.527870][ T4648] FAT-fs (loop1): Directory bread(block 68) failed [ 88.537374][ T4648] FAT-fs (loop1): Directory bread(block 69) failed [ 88.548175][ T4648] FAT-fs (loop1): Directory bread(block 70) failed [ 88.555147][ T4648] FAT-fs (loop1): Directory bread(block 71) failed [ 88.566049][ T4648] FAT-fs (loop1): Directory bread(block 72) failed [ 88.590128][ T4648] FAT-fs (loop1): Directory bread(block 73) failed [ 88.737897][ T4333] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 88.951064][ T4660] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 88.992188][ T4333] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.064313][ T4333] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.114110][ T4333] usb 4-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 89.123929][ T4333] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.214668][ T4333] usb 4-1: config 0 descriptor?? [ 89.272421][ T4664] sp0: Synchronizing with TNC [ 89.705320][ T4333] logitech-hidpp-device 0003:046D:C086.0005: hidraw0: USB HID v0.00 Device [HID 046d:c086] on usb-dummy_hcd.3-1/input0 [ 89.741252][ T4675] loop0: detected capacity change from 0 to 128 [ 89.921057][ T4675] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 89.997928][ T4675] FAT-fs (loop0): Filesystem has been set read-only [ 89.998501][ T41] usb 4-1: USB disconnect, device number 4 [ 90.803475][ T4666] loop4: detected capacity change from 0 to 40427 [ 90.921606][ T4670] loop1: detected capacity change from 0 to 40427 [ 90.978778][ T4666] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 91.043948][ T4670] F2FS-fs (loop1): invalid crc value [ 91.053826][ T4666] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 91.097816][ T4670] F2FS-fs (loop1): Found nat_bits in checkpoint [ 91.160372][ T4666] F2FS-fs (loop4): Found nat_bits in checkpoint [ 91.336875][ T4666] F2FS-fs (loop4): recover fsync data on readonly fs [ 91.393267][ T4670] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 91.413513][ T4666] F2FS-fs (loop4): Try to recover 1th superblock, ret: -30 [ 91.444740][ T4666] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 91.939928][ T4249] syz-executor: attempt to access beyond end of device [ 91.939928][ T4249] loop1: rw=2051, sector=36912, nr_sectors = 8152 limit=40427 [ 92.078303][ T4249] syz-executor: attempt to access beyond end of device [ 92.078303][ T4249] loop1: rw=2051, sector=45096, nr_sectors = 85976 limit=40427 [ 92.140990][ T4249] F2FS-fs (loop1): Issue discard(4614, 4614, 1019) failed, ret: -5 [ 92.141049][ T4249] F2FS-fs (loop1): Issue discard(5637, 5637, 10747) failed, ret: -5 [ 92.695885][ T4713] loop4: detected capacity change from 0 to 764 [ 92.710231][ T126] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 92.934829][ T4715] netlink: 112 bytes leftover after parsing attributes in process `syz.1.136'. [ 92.958025][ T126] usb 3-1: Using ep0 maxpacket: 16 [ 92.988308][ T126] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 93.010333][ T126] usb 3-1: config 0 has no interface number 0 [ 93.040695][ T126] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 93.112632][ T126] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 93.152564][ T126] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 93.227898][ T126] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 93.252080][ T126] usb 3-1: Product: syz [ 93.262229][ T126] usb 3-1: SerialNumber: syz [ 93.283635][ T126] usb 3-1: config 0 descriptor?? [ 93.315866][ T126] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 93.374607][ T126] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input5 [ 93.554939][ T4700] loop0: detected capacity change from 0 to 65536 [ 93.662231][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 93.678199][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 93.690399][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 93.707811][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 93.716117][ T4333] usb 3-1: USB disconnect, device number 3 [ 93.721681][ T4700] XFS (loop0): Mounting V5 Filesystem [ 93.742814][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -2 [ 93.751709][ T126] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 93.766024][ T4333] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 93.838259][ T4700] XFS (loop0): Ending clean mount [ 93.860893][ T4700] XFS (loop0): Quotacheck needed: Please wait. [ 93.983030][ T126] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.022664][ T126] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.077926][ T126] usb 2-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 94.093478][ T126] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.118728][ T126] usb 2-1: config 0 descriptor?? [ 94.133025][ T4719] loop4: detected capacity change from 0 to 32768 [ 94.140650][ T4700] XFS (loop0): Quotacheck: Done. [ 94.170087][ T4719] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz.4.141 (4719) [ 94.282658][ T4719] BTRFS info (device loop4): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 94.328094][ T4719] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 94.387885][ T4719] BTRFS info (device loop4): turning off barriers [ 94.395460][ T4719] BTRFS info (device loop4): max_inline at 0 [ 94.417782][ T4719] BTRFS info (device loop4): enabling all of the rescue options [ 94.470927][ T4719] BTRFS info (device loop4): ignoring data csums [ 94.523389][ T4719] BTRFS info (device loop4): ignoring bad roots [ 94.573174][ T4719] BTRFS info (device loop4): disabling log replay at mount time [ 94.582549][ T4700] overlayfs: conflicting lowerdir path [ 94.616216][ T126] cypress 0003:04B4:DE61.0006: unknown main item tag 0x7 [ 94.625966][ T4719] BTRFS info (device loop4): force zlib compression, level 3 [ 94.646428][ T4719] BTRFS info (device loop4): allowing degraded mounts [ 94.669295][ T126] cypress 0003:04B4:DE61.0006: hidraw0: USB HID v0.00 Device [HID 04b4:de61] on usb-dummy_hcd.1-1/input0 [ 94.674116][ T4719] BTRFS info (device loop4): using free space tree [ 94.725482][ T4719] workqueue: max_active 2097158 requested for btrfs-worker is out of range, clamping between 1 and 512 [ 94.809768][ T4719] workqueue: max_active 2097158 requested for btrfs-worker-high is out of range, clamping between 1 and 512 [ 94.859816][ T4658] usb 2-1: USB disconnect, device number 4 [ 94.868145][ T4719] workqueue: max_active 2097158 requested for btrfs-delalloc is out of range, clamping between 1 and 512 [ 95.028502][ T4719] workqueue: max_active 2097158 requested for btrfs-endio is out of range, clamping between 1 and 512 [ 95.070431][ T4252] XFS (loop0): Unmounting Filesystem [ 95.086434][ T4719] workqueue: max_active 2097158 requested for btrfs-endio-meta is out of range, clamping between 1 and 512 [ 95.187831][ T4719] workqueue: max_active 2097158 requested for btrfs-endio-raid56 is out of range, clamping between 1 and 512 [ 95.248130][ T4719] workqueue: max_active 2097158 requested for btrfs-rmw is out of range, clamping between 1 and 512 [ 95.304594][ T4742] loop3: detected capacity change from 0 to 32768 [ 95.323239][ T4742] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.148 (4742) [ 95.349637][ T4719] workqueue: max_active 2097158 requested for btrfs-endio-write is out of range, clamping between 1 and 512 [ 95.377376][ T4719] workqueue: max_active 2097158 requested for btrfs-compressed-write is out of range, clamping between 1 and 512 [ 95.378801][ T4742] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 95.408873][ T4742] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 95.423073][ T4742] BTRFS info (device loop3): force zlib compression, level 3 [ 95.436484][ T4742] BTRFS info (device loop3): force clearing of disk cache [ 95.443824][ T4742] BTRFS info (device loop3): setting nodatasum [ 95.454088][ T4742] BTRFS info (device loop3): allowing degraded mounts [ 95.468340][ T4742] BTRFS info (device loop3): enabling disk space caching [ 95.479714][ T4742] BTRFS info (device loop3): disk space caching is enabled [ 95.562911][ T4312] BTRFS warning (device loop4: state C): checksum verify failed on logical 5328896 mirror 1 wanted 0xe27e479340067083b74b333c1de55c530774f48d9bb4dbb5f2229db663324412 found 0x95f62be744ba79d2c7edda0b7f35c3ed250500c283e6cfbf6ba5d84a2ae65a3d level 1 [ 95.852456][ T4719] BTRFS info (device loop4: state C): enabling ssd optimizations [ 95.918933][ T4742] BTRFS info (device loop3): rebuilding free space tree [ 96.059831][ T41] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 96.073077][ T4742] BTRFS info (device loop3): disabling free space tree [ 96.117904][ T4742] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 96.147725][ T4742] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 96.230365][ T4263] BTRFS info (device loop4: state C): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 96.267716][ T41] usb 3-1: Using ep0 maxpacket: 16 [ 96.345943][ T41] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.396342][ T41] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.431083][ T41] usb 3-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 96.483137][ T41] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.526891][ T4742] BTRFS info (device loop3): balance: start -susage=0..0,drange=0..7,limit=0..0 [ 96.549982][ T41] usb 3-1: config 0 descriptor?? [ 96.596681][ T4742] BTRFS info (device loop3): balance: ended with status: 0 [ 97.011324][ T4259] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 97.022427][ T41] chicony 0003:04F2:1421.0007: hidraw0: USB HID v0.00 Device [HID 04f2:1421] on usb-dummy_hcd.2-1/input0 [ 97.104481][ T4804] loop1: detected capacity change from 0 to 64 [ 97.118100][ T4658] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 97.353931][ T26] kauditd_printk_skb: 52 callbacks suppressed [ 97.353953][ T26] audit: type=1800 audit(1736916990.897:75): pid=4804 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.158" name="file2" dev="loop1" ino=1 res=0 errno=0 [ 97.400552][ T4658] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 97.420730][ T4658] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.452600][ T4658] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.477366][ T4658] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 97.503346][ T4658] usb 1-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 97.534344][ T4658] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.559023][ T4658] usb 1-1: config 0 descriptor?? [ 97.579998][ T4811] usb 3-1: USB disconnect, device number 4 [ 98.049642][ T4658] hid-picolcd 0003:04D8:C002.0008: item fetching failed at offset 3/7 [ 98.061356][ T4658] hid-picolcd 0003:04D8:C002.0008: device report parse failed [ 98.073073][ T4658] hid-picolcd: probe of 0003:04D8:C002.0008 failed with error -22 [ 98.092542][ T41] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 98.285987][ T4333] usb 1-1: USB disconnect, device number 3 [ 98.294297][ T41] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 98.329539][ T41] usb 2-1: config 0 has no interface number 0 [ 98.346795][ T41] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.391268][ T41] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.428436][ T41] usb 2-1: New USB device found, idVendor=048d, idProduct=ce50, bcdDevice= 0.00 [ 98.469754][ T41] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.489063][ T4810] loop4: detected capacity change from 0 to 32768 [ 98.499978][ T41] usb 2-1: config 0 descriptor?? [ 98.522147][ T4810] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.160 (4810) [ 98.571610][ T4810] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 98.602304][ T4810] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 98.615567][ T4810] BTRFS info (device loop4): setting nodatacow, compression disabled [ 98.641147][ T4831] loop3: detected capacity change from 0 to 2048 [ 98.661994][ T4810] BTRFS info (device loop4): setting datacow [ 98.673068][ T4831] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 98.709595][ T4810] BTRFS info (device loop4): doing ref verification [ 98.729148][ T4810] BTRFS info (device loop4): force clearing of disk cache [ 98.736907][ T4810] BTRFS info (device loop4): turning off barriers [ 98.758751][ T4835] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 98.796091][ T4810] BTRFS info (device loop4): enabling ssd optimizations [ 98.814479][ T4810] BTRFS info (device loop4): using spread ssd allocation scheme [ 98.834754][ T4810] BTRFS info (device loop4): not using ssd optimizations [ 98.877046][ T4810] BTRFS info (device loop4): not using spread ssd allocation scheme [ 98.915574][ T4810] BTRFS info (device loop4): using free space tree [ 98.936152][ T41] asus 0003:048D:CE50.0009: unknown main item tag 0xd [ 98.966221][ T41] asus 0003:048D:CE50.0009: hidraw0: USB HID v0.00 Device [HID 048d:ce50] on usb-dummy_hcd.1-1/input1 [ 99.057759][ T41] asus 0003:048D:CE50.0009: Asus input not registered [ 99.085822][ T41] asus: probe of 0003:048D:CE50.0009 failed with error -12 [ 99.186665][ T4658] usb 2-1: USB disconnect, device number 5 [ 99.263531][ T4810] BTRFS info (device loop4): rebuilding free space tree [ 99.286331][ T4859] loop2: detected capacity change from 0 to 2048 [ 99.369246][ T4859] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 99.609948][ T26] audit: type=1800 audit(1736916993.157:76): pid=4810 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.160" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 99.695964][ T4263] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 100.187780][ T4811] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 100.408821][ T4811] usb 4-1: Using ep0 maxpacket: 16 [ 100.416212][ T4811] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.484368][ T4811] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.543197][ T4811] usb 4-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 100.582852][ T4811] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.659398][ T4811] usb 4-1: config 0 descriptor?? [ 100.798689][ T4869] loop0: detected capacity change from 0 to 32768 [ 101.031286][ T4893] loop4: detected capacity change from 0 to 4096 [ 101.056491][ T4883] loop2: detected capacity change from 0 to 32768 [ 101.079439][ T4893] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 101.126999][ T4811] gt683r_led 0003:1770:FF00.000A: unbalanced collection at end of report description [ 101.163636][ T4811] gt683r_led 0003:1770:FF00.000A: hid parsing failed [ 101.192202][ T4893] ntfs: (device loop4): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 101.215694][ T4811] gt683r_led: probe of 0003:1770:FF00.000A failed with error -22 [ 101.226065][ T4893] ntfs: (device loop4): ntfs_read_locked_inode(): $DATA attribute is missing. [ 101.246551][ T4893] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 101.309722][ T4893] ntfs: (device loop4): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 101.384461][ T4813] usb 4-1: USB disconnect, device number 5 [ 101.478732][ T4893] ntfs: volume version 3.1. [ 101.496577][ T4893] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Index buffer (VCN 0x0) of directory inode 0x5 has a size (24) differing from the directory specified size (4096). Directory inode is corrupt or driver bug. [ 101.555252][ T4893] ntfs: (device loop4): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 101.607965][ T4893] ntfs: (device loop4): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 101.654335][ T4891] loop1: detected capacity change from 0 to 32768 [ 101.821149][ T4895] overlayfs: unrecognized mount option "\']*=GPL" or missing value [ 102.400806][ T4908] loop4: detected capacity change from 0 to 256 [ 102.496236][ T4902] loop0: detected capacity change from 0 to 4096 [ 102.516722][ T4908] FAT-fs (loop4): Directory bread(block 64) failed [ 102.543790][ T4902] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 102.559684][ T4908] FAT-fs (loop4): Directory bread(block 65) failed [ 102.566429][ T4908] FAT-fs (loop4): Directory bread(block 66) failed [ 102.599873][ T4908] FAT-fs (loop4): Directory bread(block 67) failed [ 102.618028][ T4908] FAT-fs (loop4): Directory bread(block 68) failed [ 102.647558][ T4908] FAT-fs (loop4): Directory bread(block 69) failed [ 102.674739][ T4902] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 102.719702][ T4908] FAT-fs (loop4): Directory bread(block 70) failed [ 102.776265][ T4908] FAT-fs (loop4): Directory bread(block 71) failed [ 102.830064][ T4908] FAT-fs (loop4): Directory bread(block 72) failed [ 102.858736][ T4908] FAT-fs (loop4): Directory bread(block 73) failed [ 103.107296][ T4920] tipc: Enabling of bearer rejected, failed to enable media [ 103.484012][ T4928] usb usb6: usbfs: process 4928 (syz.2.200) did not claim interface 0 before use [ 103.937754][ T4300] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 103.982029][ T4912] loop3: detected capacity change from 0 to 40427 [ 104.011876][ T4912] F2FS-fs (loop3): Invalid log blocks per segment (83886089) [ 104.057172][ T4912] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 104.096536][ T4912] F2FS-fs (loop3): invalid crc value [ 104.127730][ T4300] usb 2-1: Using ep0 maxpacket: 8 [ 104.142103][ T4912] F2FS-fs (loop3): Found nat_bits in checkpoint [ 104.167362][ T4300] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.205165][ T4300] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.229985][ T4300] usb 2-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 104.275180][ T4300] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.322081][ T4300] usb 2-1: config 0 descriptor?? [ 104.349706][ T4912] F2FS-fs (loop3): Start checkpoint disabled! [ 104.431504][ T4912] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 104.443841][ T4912] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 104.774871][ T4300] logitech 0003:046D:C24F.000B: unbalanced collection at end of report description [ 104.817394][ T4300] logitech 0003:046D:C24F.000B: parse failed [ 104.839453][ T4300] logitech: probe of 0003:046D:C24F.000B failed with error -22 [ 104.960385][ T4301] kworker/u4:5: attempt to access beyond end of device [ 104.960385][ T4301] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 105.034147][ T4300] usb 2-1: USB disconnect, device number 6 [ 105.296716][ T4955] loop2: detected capacity change from 0 to 32768 [ 105.320891][ T4963] loop0: detected capacity change from 0 to 1024 [ 105.438700][ T4963] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 105.483212][ T4955] JBD2: Ignoring recovery information on journal [ 105.600388][ T4963] EXT4-fs error (device loop0): ext4_lookup:1858: inode #14: comm syz.0.216: iget: immutable or append flags not allowed on symlinks [ 105.699939][ T4955] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 105.739912][ T4963] EXT4-fs (loop0): Remounting filesystem read-only [ 106.078500][ T4252] EXT4-fs (loop0): unmounting filesystem. [ 106.433728][ T4993] loop3: detected capacity change from 0 to 164 [ 106.464319][ T4257] ocfs2: Unmounting device (7,2) on (node local) [ 106.537298][ T4993] rock: directory entry would overflow storage [ 106.601926][ T4993] rock: sig=0x66, size=4, remaining=3 [ 106.683667][ T4993] rock: directory entry would overflow storage [ 106.719246][ T4993] rock: sig=0x66, size=4, remaining=3 [ 106.776642][ T4993] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 107.229657][ T4299] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 107.429950][ T4299] usb 2-1: Using ep0 maxpacket: 8 [ 107.456417][ T4299] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.523709][ T4299] usb 2-1: New USB device found, idVendor=172f, idProduct=0502, bcdDevice= 0.00 [ 107.580316][ T4299] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.634282][ T5021] Bluetooth: MGMT ver 1.22 [ 107.689214][ T4299] usb 2-1: config 0 descriptor?? [ 108.122565][ T4299] waltop 0003:172F:0502.000C: item fetching failed at offset 2/5 [ 108.154468][ T5035] loop4: detected capacity change from 0 to 64 [ 108.189189][ T4299] waltop: probe of 0003:172F:0502.000C failed with error -22 [ 108.458863][ T4299] usb 2-1: USB disconnect, device number 7 [ 108.696359][ T5046] loop4: detected capacity change from 0 to 512 [ 108.765511][ T5046] EXT4-fs (loop4): orphan cleanup on readonly fs [ 108.882085][ T5046] __quota_error: 1 callbacks suppressed [ 108.882104][ T5046] Quota error (device loop4): dq_insert_tree: Quota tree root isn't allocated! [ 109.036051][ T5046] Quota error (device loop4): qtree_write_dquot: Error -5 occurred while creating quota [ 109.040669][ T5022] loop0: detected capacity change from 0 to 32768 [ 109.081001][ T5046] EXT4-fs error (device loop4): ext4_acquire_dquot:6794: comm syz.4.243: Failed to acquire dquot type 0 [ 109.147395][ T5046] Quota error (device loop4): dq_insert_tree: Quota tree root isn't allocated! [ 109.185726][ T5046] Quota error (device loop4): qtree_write_dquot: Error -5 occurred while creating quota [ 109.281650][ T5046] EXT4-fs error (device loop4): ext4_acquire_dquot:6794: comm syz.4.243: Failed to acquire dquot type 0 [ 109.343860][ T5022] overlayfs: upper fs needs to support d_type. [ 109.374301][ T5022] overlayfs: upper fs does not support tmpfile. [ 109.382383][ T5046] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.243: bg 0: block 64: padding at end of block bitmap is not set [ 109.437861][ T5046] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 109.454918][ T5022] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 109.474234][ T5046] Quota error (device loop4): dq_insert_tree: Quota tree root isn't allocated! [ 109.494934][ T5022] ERROR: (device loop0): dbAlloc: the hint is outside the map [ 109.494934][ T5022] [ 109.518064][ T5046] Quota error (device loop4): qtree_write_dquot: Error -5 occurred while creating quota [ 109.547267][ T5022] ERROR: (device loop0): remounting filesystem as read-only [ 109.555842][ T5046] EXT4-fs error (device loop4): ext4_acquire_dquot:6794: comm syz.4.243: Failed to acquire dquot type 0 [ 109.582949][ T5022] overlayfs: failed to verify origin (/, ino=2, err=-5) [ 109.619344][ T5046] EXT4-fs (loop4): 1 orphan inode deleted [ 109.636570][ T5022] overlayfs: failed to verify upper root origin [ 109.648431][ T5046] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 109.841846][ T4263] EXT4-fs (loop4): unmounting filesystem. [ 110.045094][ T5076] loop4: detected capacity change from 0 to 256 [ 110.118214][ T5076] FAT-fs (loop4): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 110.439904][ T4300] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 110.483092][ T5083] loop0: detected capacity change from 0 to 1024 [ 110.637692][ T4300] usb 3-1: Using ep0 maxpacket: 8 [ 110.685502][ T4300] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 110.722205][ T4300] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.748955][ T4300] usb 3-1: Product: syz [ 110.759168][ T4300] usb 3-1: Manufacturer: syz [ 110.776209][ T4300] usb 3-1: SerialNumber: syz [ 110.809107][ T4300] usb 3-1: config 0 descriptor?? [ 110.955643][ T5089] loop0: detected capacity change from 0 to 1764 [ 111.051441][ T4300] usb 3-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 111.056068][ T5074] loop3: detected capacity change from 0 to 40427 [ 111.291191][ T5074] F2FS-fs (loop3): Found nat_bits in checkpoint [ 111.404199][ T5086] loop4: detected capacity change from 0 to 32768 [ 111.440109][ T5086] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.257 (5086) [ 111.489350][ T5074] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 111.492630][ T4300] usb write operation failed. (-71) [ 111.583801][ T4300] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 111.618886][ T4300] dvbdev: DVB: registering new adapter (Terratec H7) [ 111.649591][ T4300] usb 3-1: media controller created [ 111.712961][ T4300] usb read operation failed. (-71) [ 111.717806][ T5086] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 111.748312][ T5086] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 111.748444][ T4300] usb write operation failed. (-71) [ 111.771055][ T5086] BTRFS info (device loop4): setting nodatacow, compression disabled [ 111.800270][ T5086] BTRFS info (device loop4): max_inline at 0 [ 111.840674][ T5086] BTRFS info (device loop4): enabling disk space caching [ 111.841045][ T4259] syz-executor: attempt to access beyond end of device [ 111.841045][ T4259] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 111.853466][ T4300] dvb_usb_az6007: probe of 3-1:0.0 failed with error -5 [ 111.892483][ T5086] BTRFS info (device loop4): setting datasum, datacow enabled [ 111.903499][ T5086] BTRFS info (device loop4): turning on flush-on-commit [ 111.944258][ T4300] usb 3-1: USB disconnect, device number 5 [ 111.989202][ T5086] BTRFS info (device loop4): doing ref verification [ 112.077891][ T5086] BTRFS info (device loop4): force clearing of disk cache [ 112.098208][ T5086] BTRFS info (device loop4): enabling ssd optimizations [ 112.119383][ T5086] BTRFS info (device loop4): turning off barriers [ 112.134822][ T5086] BTRFS info (device loop4): max_inline at 4096 [ 112.145095][ T5086] BTRFS info (device loop4): disk space caching is enabled [ 112.601206][ T5086] BTRFS info (device loop4): rebuilding free space tree [ 112.710014][ T5086] BTRFS info (device loop4): disabling free space tree [ 112.742136][ T5086] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 112.835836][ T5086] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 112.881404][ T5129] loop0: detected capacity change from 0 to 4096 [ 112.911814][ T5129] ntfs: (device loop0): ntfs_read_locked_inode(): $DATA attribute is missing. [ 112.981663][ T5129] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 113.087228][ T5129] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 113.156039][ T5129] ntfs: volume version 3.1. [ 113.208428][ T5129] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 113.783666][ T4263] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 114.457284][ T5135] loop2: detected capacity change from 0 to 32768 [ 114.510273][ T5135] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.269 (5135) [ 114.633007][ T5135] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 114.717811][ T5135] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 114.798508][ T5135] BTRFS info (device loop2): using free space tree [ 115.237687][ T5135] BTRFS info (device loop2): enabling ssd optimizations [ 115.439472][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 115.439489][ T26] audit: type=1326 audit(1736917008.987:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5184 comm="syz.1.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dde585d29 code=0x7ffc0000 [ 115.496599][ T26] audit: type=1326 audit(1736917008.987:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5184 comm="syz.1.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7f3dde585d29 code=0x7ffc0000 [ 115.614776][ T26] audit: type=1326 audit(1736917008.987:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5184 comm="syz.1.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dde585d29 code=0x7ffc0000 [ 115.757786][ T26] audit: type=1326 audit(1736917008.987:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5184 comm="syz.1.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dde585d29 code=0x7ffc0000 [ 115.857222][ T4312] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared) [ 116.037326][ T5193] netlink: 64 bytes leftover after parsing attributes in process `syz.3.286'. [ 116.089852][ T5193] netlink: 40 bytes leftover after parsing attributes in process `syz.3.286'. [ 116.112021][ T4257] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 116.336927][ T5162] loop0: detected capacity change from 0 to 32768 [ 116.457496][ T5196] loop3: detected capacity change from 0 to 256 [ 116.570586][ T5162] XFS (loop0): Mounting V5 Filesystem [ 116.590908][ T5196] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 116.631322][ T5157] loop4: detected capacity change from 0 to 40427 [ 116.700677][ T5157] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x1ab [ 116.742824][ T5191] loop1: detected capacity change from 0 to 32768 [ 116.752689][ T5191] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.285 (5191) [ 116.763683][ T26] audit: type=1800 audit(1736917010.307:81): pid=5196 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.288" name="file1" dev="loop3" ino=1048667 res=0 errno=0 [ 116.799889][ T5157] F2FS-fs (loop4): invalid crc value [ 116.809015][ T5162] XFS (loop0): Ending clean mount [ 116.822446][ T5157] F2FS-fs (loop4): Found nat_bits in checkpoint [ 116.860107][ T5191] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 116.869810][ T5162] XFS (loop0): Quotacheck needed: Please wait. [ 116.887892][ T5191] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 116.927885][ T5191] BTRFS info (device loop1): force clearing of disk cache [ 117.006784][ T5191] BTRFS info (device loop1): force zlib compression, level 3 [ 117.026743][ T5191] BTRFS info (device loop1): enabling auto defrag [ 117.056612][ T5162] XFS (loop0): Quotacheck: Done. [ 117.069186][ T5191] BTRFS info (device loop1): max_inline at 0 [ 117.075779][ T5157] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 117.110282][ T5191] BTRFS info (device loop1): setting nodatacow [ 117.117559][ T5191] BTRFS info (device loop1): using free space tree [ 117.528303][ T4252] XFS (loop0): Unmounting Filesystem [ 117.539372][ T5231] loop2: detected capacity change from 0 to 8 [ 117.755163][ T5191] BTRFS info (device loop1): enabling ssd optimizations [ 117.788254][ T5191] BTRFS info (device loop1): rebuilding free space tree [ 118.143334][ T4301] BTRFS info (device loop1): qgroup scan completed (inconsistency flag cleared) [ 118.259601][ T4249] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 118.439359][ T5243] loop4: detected capacity change from 0 to 4096 [ 118.480600][ T5247] loop2: detected capacity change from 0 to 8 [ 118.778905][ T5247] SQUASHFS error: xz decompression failed, data probably corrupt [ 118.829993][ T5247] SQUASHFS error: Failed to read block 0xa8: -5 [ 118.898863][ T5247] SQUASHFS error: xz decompression failed, data probably corrupt [ 118.962342][ T5247] SQUASHFS error: Failed to read block 0xa8: -5 [ 119.003322][ T26] audit: type=1800 audit(1736917012.547:82): pid=5247 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.299" name="file0" dev="loop2" ino=3 res=0 errno=0 [ 119.305954][ T5251] netlink: 96 bytes leftover after parsing attributes in process `syz.1.300'. [ 119.357431][ T5236] loop3: detected capacity change from 0 to 40427 [ 119.397264][ T5236] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x3ffff [ 119.458659][ T5236] F2FS-fs (loop3): invalid crc value [ 119.494141][ T5236] F2FS-fs (loop3): Found nat_bits in checkpoint [ 119.524196][ T5246] loop0: detected capacity change from 0 to 32768 [ 119.617084][ T5246] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 119.636808][ T5236] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 119.661690][ T4876] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 119.701260][ T5246] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 119.879576][ T4876] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.921562][ T4876] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.947436][ T4876] usb 3-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 119.965054][ T4876] usb 3-1: config 0 interface 0 has no altsetting 0 [ 119.972470][ T4876] usb 3-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 119.984335][ T4876] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.994629][ T4252] ocfs2: Unmounting device (7,0) on (node local) [ 120.007184][ T4876] usb 3-1: config 0 descriptor?? [ 120.028606][ T4259] syz-executor: attempt to access beyond end of device [ 120.028606][ T4259] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 120.441536][ T4876] kye 0003:0458:4018.000D: unknown main item tag 0x0 [ 120.472020][ T4876] kye 0003:0458:4018.000D: unknown main item tag 0x0 [ 120.517320][ T4876] kye 0003:0458:4018.000D: unknown main item tag 0x0 [ 120.538797][ T4876] kye 0003:0458:4018.000D: unknown main item tag 0x0 [ 120.576802][ T4876] kye 0003:0458:4018.000D: unknown main item tag 0x0 [ 120.617883][ T4876] kye 0003:0458:4018.000D: unknown main item tag 0x0 [ 120.637817][ T4876] kye 0003:0458:4018.000D: unknown main item tag 0x0 [ 120.680271][ T4876] kye 0003:0458:4018.000D: hidraw0: USB HID v0.00 Device [HID 0458:4018] on usb-dummy_hcd.2-1/input0 [ 120.757750][ T4876] usb 3-1: USB disconnect, device number 6 [ 121.116853][ T5292] loop4: detected capacity change from 0 to 256 [ 121.706556][ T5288] loop3: detected capacity change from 0 to 40427 [ 121.723163][ T5288] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x3ffff [ 121.753189][ T5288] F2FS-fs (loop3): invalid crc value [ 121.786928][ T5288] F2FS-fs (loop3): Found nat_bits in checkpoint [ 121.855455][ T5294] loop1: detected capacity change from 0 to 32768 [ 121.903644][ T5288] F2FS-fs (loop3): Start checkpoint disabled! [ 121.932612][ T5288] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 122.007402][ T5294] XFS (loop1): Mounting V5 Filesystem [ 122.112758][ T5298] loop4: detected capacity change from 0 to 40427 [ 122.129125][ T5298] F2FS-fs (loop4): invalid crc value [ 122.176641][ T5294] XFS (loop1): Ending clean mount [ 122.206083][ T5294] XFS (loop1): Quotacheck needed: Please wait. [ 122.221674][ T5298] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 122.368874][ T5294] XFS (loop1): Quotacheck: Done. [ 122.555458][ T4249] XFS (loop1): Unmounting Filesystem [ 122.618358][ T5298] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 122.643822][ T5321] netlink: 4 bytes leftover after parsing attributes in process `syz.2.325'. [ 122.672441][ C1] vkms_vblank_simulate: vblank timer overrun [ 122.690857][ T5323] loop3: detected capacity change from 0 to 64 [ 122.841762][ T5298] F2FS-fs (loop4): Inconsistent segment (8) type [1, 0] in SSA and SIT [ 123.073494][ T26] audit: type=1326 audit(1736917016.617:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5328 comm="syz.3.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe395b85d29 code=0x7ffc0000 [ 123.124379][ C1] vkms_vblank_simulate: vblank timer overrun [ 123.265463][ T26] audit: type=1326 audit(1736917016.617:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5328 comm="syz.3.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe395b85d29 code=0x7ffc0000 [ 123.347787][ T26] audit: type=1326 audit(1736917016.717:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5328 comm="syz.3.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe395b85d29 code=0x7ffc0000 [ 123.475318][ T26] audit: type=1326 audit(1736917016.717:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5328 comm="syz.3.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe395b85d29 code=0x7ffc0000 [ 123.530472][ T26] audit: type=1326 audit(1736917016.717:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5328 comm="syz.3.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe395b85d29 code=0x7ffc0000 [ 123.644324][ T26] audit: type=1326 audit(1736917016.727:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5328 comm="syz.3.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=93 compat=0 ip=0x7fe395b85d29 code=0x7ffc0000 [ 123.671455][ C1] vkms_vblank_simulate: vblank timer overrun [ 123.750857][ T26] audit: type=1326 audit(1736917016.727:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5328 comm="syz.3.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe395b85d29 code=0x7ffc0000 [ 123.776561][ C1] vkms_vblank_simulate: vblank timer overrun [ 123.847695][ T26] audit: type=1326 audit(1736917016.727:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5328 comm="syz.3.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe395b85d29 code=0x7ffc0000 [ 123.883183][ C1] vkms_vblank_simulate: vblank timer overrun [ 124.117505][ T5349] netlink: 20 bytes leftover after parsing attributes in process `syz.2.336'. [ 124.413588][ T5339] loop3: detected capacity change from 0 to 32768 [ 124.477043][ T5339] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.332 (5339) [ 124.548787][ T5339] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 124.609879][ T5339] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 124.650835][ T5339] BTRFS info (device loop3): use zlib compression, level 3 [ 124.690698][ T5339] BTRFS info (device loop3): using free space tree [ 124.882236][ T5348] loop1: detected capacity change from 0 to 32768 [ 124.894221][ T5348] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.335 (5348) [ 124.919963][ T5348] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 124.937083][ T5379] netlink: 4 bytes leftover after parsing attributes in process `syz.4.344'. [ 124.954414][ T5348] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 124.969297][ T5379] device vlan0 entered promiscuous mode [ 125.042835][ T5339] BTRFS info (device loop3): enabling ssd optimizations [ 125.063925][ T5348] BTRFS info (device loop1): force zlib compression, level 3 [ 125.087399][ T5379] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 125.097967][ T5348] BTRFS info (device loop1): force clearing of disk cache [ 125.164048][ T5348] BTRFS info (device loop1): setting nodatasum [ 125.164683][ T26] audit: type=1800 audit(1736917018.707:91): pid=5339 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.332" name="file2" dev="loop3" ino=261 res=0 errno=0 [ 125.197451][ T5348] BTRFS info (device loop1): allowing degraded mounts [ 125.235136][ T5348] BTRFS info (device loop1): enabling disk space caching [ 125.273474][ T5348] BTRFS info (device loop1): disk space caching is enabled [ 125.456874][ T5355] loop2: detected capacity change from 0 to 32768 [ 125.482852][ T4259] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 125.690570][ T5348] BTRFS info (device loop1): rebuilding free space tree [ 125.715923][ T5414] loop0: detected capacity change from 0 to 16 [ 125.753154][ T5414] erofs: (device loop0): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 125300) [ 125.782724][ T5348] BTRFS info (device loop1): disabling free space tree [ 125.796689][ T5348] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 125.836507][ T5348] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 125.861262][ T5355] XFS (loop2): Mounting V5 Filesystem [ 126.020053][ T5355] XFS (loop2): Ending clean mount [ 126.072870][ T5355] XFS (loop2): Quotacheck needed: Please wait. [ 126.217231][ T5355] XFS (loop2): Quotacheck: Done. [ 126.223729][ T4249] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 126.759504][ T4257] XFS (loop2): Unmounting Filesystem [ 126.792974][ T5431] loop3: detected capacity change from 0 to 4096 [ 127.049882][ T5431] ntfs3: loop3: failed to convert "0000" to iso8859-3 [ 127.177957][ T5431] ntfs3: loop3: failed to convert name for inode 1e. [ 127.265024][ T5436] loop0: detected capacity change from 0 to 2048 [ 127.291326][ T5439] loop4: detected capacity change from 0 to 512 [ 127.414464][ T5439] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.360: casefold flag without casefold feature [ 127.487822][ T5436] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 127.518181][ T5439] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.360: couldn't read orphan inode 15 (err -117) [ 127.668318][ T5439] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 127.723955][ T5454] loop2: detected capacity change from 0 to 256 [ 127.731491][ T5439] EXT4-fs error (device loop4): ext4_empty_dir:3136: inode #2: comm syz.4.360: invalid size [ 127.852804][ T4252] EXT4-fs (loop0): unmounting filesystem. [ 127.870732][ T4263] EXT4-fs (loop4): unmounting filesystem. [ 127.963492][ T5458] loop1: detected capacity change from 0 to 16 [ 128.012890][ T5458] erofs: (device loop1): mounted with root inode @ nid 36. [ 128.101638][ T5464] netlink: 'syz.0.366': attribute type 1 has an invalid length. [ 128.259333][ T5466] loop2: detected capacity change from 0 to 4096 [ 128.363179][ T5471] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 128.521072][ T5469] loop3: detected capacity change from 0 to 4096 [ 128.548832][ T5469] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 128.712075][ T5469] ntfs: volume version 3.1. [ 128.952661][ T5484] loop1: detected capacity change from 0 to 1024 [ 128.978793][ T5484] hfsplus: unable to parse mount options [ 129.047456][ T5484] autofs4:pid:5484:autofs_fill_super: called with bogus options [ 129.265683][ T5490] loop3: detected capacity change from 0 to 1024 [ 129.386913][ T5490] ext4: Bad value for 'max_batch_time' [ 129.436859][ T4336] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 129.510331][ T5500] loop4: detected capacity change from 0 to 8 [ 129.559498][ T5502] loop1: detected capacity change from 0 to 64 [ 129.677285][ T5500] SQUASHFS error: xz decompression failed, data probably corrupt [ 129.733472][ T5500] SQUASHFS error: Failed to read block 0xa8: -5 [ 129.794337][ T5500] SQUASHFS error: xz decompression failed, data probably corrupt [ 129.826311][ T5500] SQUASHFS error: Failed to read block 0xa8: -5 [ 129.858088][ T26] audit: type=1800 audit(1736917023.407:92): pid=5500 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.384" name="file0" dev="loop4" ino=3 res=0 errno=0 [ 130.203271][ T5516] loop4: detected capacity change from 0 to 1024 [ 130.375826][ T5498] loop0: detected capacity change from 0 to 32768 [ 130.424206][ T5524] netlink: 'syz.2.393': attribute type 2 has an invalid length. [ 130.458233][ T11] hfsplus: b-tree write err: -5, ino 4 [ 130.987778][ T5543] loop1: detected capacity change from 0 to 8 [ 131.058778][ T5545] ptrace attach of "./syz-executor exec"[4259] was attempted by " b\x0aøÿ\x0c !¿¡ \x07 øÿÿÿ·  ½ … Ð · • ?ºj}6Ù±ŽØ¢âÄž€ ¦ôàä©Dl¢µñÌ\x0ašö˜9: óˆœ$ªVñQ™úÐ\x09dÂ'ÉZ · [ 131.083403][ T5543] SQUASHFS error: xz decompression failed, data probably corrupt [ 131.126348][ T5547] netlink: 52 bytes leftover after parsing attributes in process `syz.0.405'. [ 131.181475][ C1] vkms_vblank_simulate: vblank timer overrun [ 131.207074][ T4294] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 131.207101][ T5543] SQUASHFS error: Failed to read block 0xa8: -5 [ 131.284847][ T5543] SQUASHFS error: xz decompression failed, data probably corrupt [ 131.343607][ T5543] SQUASHFS error: Failed to read block 0xa8: -5 [ 131.362249][ T26] audit: type=1800 audit(1736917024.907:93): pid=5543 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.402" name="file0" dev="loop1" ino=3 res=0 errno=0 [ 131.384604][ C1] vkms_vblank_simulate: vblank timer overrun [ 131.438183][ T5551] loop3: detected capacity change from 0 to 1024 [ 131.449511][ T4294] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.518983][ T4294] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.548155][ T4294] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 131.579825][ T4294] usb 3-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 131.606068][ T5555] loop4: detected capacity change from 0 to 1764 [ 131.610063][ T4294] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.658548][ T4294] usb 3-1: config 0 descriptor?? [ 131.666654][ T4301] hfsplus: b-tree write err: -5, ino 4 [ 131.767763][ T5555] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 132.110186][ T4294] kye 0003:0458:0153.000E: hidraw0: USB HID v0.00 Device [HID 0458:0153] on usb-dummy_hcd.2-1/input0 [ 132.221204][ T5566] loop3: detected capacity change from 0 to 4096 [ 132.406184][ T4294] usb 3-1: USB disconnect, device number 7 [ 132.637102][ T5582] netlink: 'syz.3.421': attribute type 1 has an invalid length. [ 132.862054][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.933268][ T5593] loop0: detected capacity change from 0 to 512 [ 133.014240][ T5593] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 133.028091][ T4653] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 133.039631][ T5593] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it [ 133.051017][ T5593] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.426: Corrupt directory, running e2fsck is recommended [ 133.103304][ T5593] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 133.134861][ T5593] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2186: inode #15: comm syz.0.426: corrupted in-inode xattr [ 133.149017][ T5593] EXT4-fs (loop0): Remounting filesystem read-only [ 133.156251][ T5593] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.426: couldn't read orphan inode 15 (err -117) [ 133.170952][ T5593] EXT4-fs (loop0): Remounting filesystem read-only [ 133.178341][ T5593] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 133.217820][ T4653] usb 2-1: Using ep0 maxpacket: 16 [ 133.225194][ T4653] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.279710][ T4653] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.306619][ T5593] EXT4-fs: group quota file already specified [ 133.327673][ T4653] usb 2-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 133.367661][ T4653] usb 2-1: config 0 interface 0 has no altsetting 0 [ 133.373798][ T5607] loop2: detected capacity change from 0 to 64 [ 133.384413][ T4653] usb 2-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 133.443893][ T4653] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.454745][ T26] audit: type=1800 audit(1736917026.997:94): pid=5607 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.433" name="file1" dev="loop2" ino=18 res=0 errno=0 [ 133.473789][ T4653] usb 2-1: config 0 descriptor?? [ 133.509477][ T4252] EXT4-fs (loop0): unmounting filesystem. [ 133.922385][ T4653] hid-generic 0003:045E:05DA.000F: ignoring exceeding usage max [ 133.962401][ T4653] hid-generic 0003:045E:05DA.000F: unbalanced collection at end of report description [ 133.981237][ T4653] hid-generic: probe of 0003:045E:05DA.000F failed with error -22 [ 134.236928][ T4813] usb 2-1: USB disconnect, device number 8 [ 134.423211][ T5639] loop3: detected capacity change from 0 to 1024 [ 134.487894][ T5641] Bluetooth: MGMT ver 1.22 [ 134.650394][ T4301] hfsplus: b-tree write err: -5, ino 4 [ 135.065640][ T5656] loop3: detected capacity change from 0 to 256 [ 135.141107][ T5656] FAT-fs (loop3): Directory bread(block 64) failed [ 135.154672][ T5656] FAT-fs (loop3): Directory bread(block 65) failed [ 135.169782][ T5656] FAT-fs (loop3): Directory bread(block 66) failed [ 135.185209][ T5656] FAT-fs (loop3): Directory bread(block 67) failed [ 135.200184][ T5656] FAT-fs (loop3): Directory bread(block 68) failed [ 135.216397][ T5656] FAT-fs (loop3): Directory bread(block 69) failed [ 135.234897][ T5656] FAT-fs (loop3): Directory bread(block 70) failed [ 135.261132][ T5656] FAT-fs (loop3): Directory bread(block 71) failed [ 135.283679][ T5656] FAT-fs (loop3): Directory bread(block 72) failed [ 135.300453][ T5656] FAT-fs (loop3): Directory bread(block 73) failed [ 135.512061][ T5645] loop0: detected capacity change from 0 to 32768 [ 135.529558][ T5645] XFS: ikeep mount option is deprecated. [ 135.544121][ T5647] loop2: detected capacity change from 0 to 32768 [ 135.615946][ T5647] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 135.663271][ T5645] XFS (loop0): Mounting V5 Filesystem [ 135.800671][ T5676] loop1: detected capacity change from 0 to 256 [ 135.852849][ T5645] XFS (loop0): Ending clean mount [ 135.863434][ T4257] ocfs2: Unmounting device (7,2) on (node local) [ 135.882832][ T5676] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 135.883395][ T5645] XFS (loop0): Quotacheck needed: Please wait. [ 135.900668][ T5678] loop4: detected capacity change from 0 to 256 [ 135.977195][ T26] audit: type=1326 audit(1736917029.517:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5679 comm="syz.3.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe395b85d29 code=0x7ffc0000 [ 136.004688][ C1] vkms_vblank_simulate: vblank timer overrun [ 136.042141][ T5678] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1aabf3fb, utbl_chksum : 0xe619d30d) [ 136.094431][ T5645] XFS (loop0): Quotacheck: Done. [ 136.135074][ T26] audit: type=1326 audit(1736917029.517:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5679 comm="syz.3.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fe395b85d29 code=0x7ffc0000 [ 136.287801][ T26] audit: type=1326 audit(1736917029.517:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5679 comm="syz.3.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe395b85d29 code=0x7ffc0000 [ 136.380866][ T26] audit: type=1326 audit(1736917029.517:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5679 comm="syz.3.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe395b85d29 code=0x7ffc0000 [ 136.437830][ T5682] loop3: detected capacity change from 0 to 8192 [ 136.475237][ T26] audit: type=1326 audit(1736917029.517:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5679 comm="syz.3.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7fe395b85d29 code=0x7ffc0000 [ 136.508001][ T5682] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 136.522170][ T5682] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 136.539048][ T5682] REISERFS (device loop3): using ordered data mode [ 136.546929][ T5682] reiserfs: using flush barriers [ 136.577931][ T5682] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 136.637959][ T26] audit: type=1326 audit(1736917029.517:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5679 comm="syz.3.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe395b85d29 code=0x7ffc0000 [ 136.642420][ T4252] XFS (loop0): Unmounting Filesystem [ 136.670022][ T26] audit: type=1326 audit(1736917029.517:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5679 comm="syz.3.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe395b85d29 code=0x7ffc0000 [ 136.679637][ T5682] REISERFS (device loop3): checking transaction log (loop3) [ 136.864199][ T5682] REISERFS (device loop3): Using r5 hash to sort names [ 136.870465][ T5693] loop1: detected capacity change from 0 to 128 [ 136.912171][ T5682] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 136.988917][ T5693] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 137.079275][ T5693] ext4 filesystem being mounted at /93/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 137.097216][ T5682] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 137.289377][ T5693] EXT4-fs (loop1): unmounting filesystem. [ 137.445676][ T5708] netlink: 8 bytes leftover after parsing attributes in process `syz.0.474'. [ 137.468212][ T22] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 137.670048][ T22] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.718456][ T22] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.759714][ T22] usb 5-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 137.804362][ T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.841901][ T22] usb 5-1: config 0 descriptor?? [ 138.114236][ T5731] loop3: detected capacity change from 0 to 64 [ 138.121650][ T5727] loop1: detected capacity change from 0 to 4096 [ 138.186480][ T26] audit: type=1800 audit(1736917031.727:102): pid=5731 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.485" name="file1" dev="loop3" ino=18 res=0 errno=0 [ 138.212685][ T5727] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 138.268349][ T22] hid_mf 0003:0079:1846.0010: unexpected long global item [ 138.286812][ T22] hid_mf 0003:0079:1846.0010: HID parse failed. [ 138.358732][ T22] hid_mf: probe of 0003:0079:1846.0010 failed with error -22 [ 138.396321][ T5735] loop2: detected capacity change from 0 to 1024 [ 138.505995][ T4658] usb 5-1: USB disconnect, device number 2 [ 138.523144][ T5735] hfsplus: invalid xattr key length: 0 [ 138.599755][ T4249] EXT4-fs (loop1): unmounting filesystem. [ 138.710873][ T32] hfsplus: b-tree write err: -5, ino 8 [ 138.824472][ T5741] mkiss: ax0: crc mode is auto. [ 139.060807][ T5746] RDS: rds_bind could not find a transport for 800:0:100:0:8000:0:100:0, load rds_tcp or rds_rdma? [ 139.073648][ T5747] capability: warning: `syz.0.492' uses 32-bit capabilities (legacy support in use) [ 139.119624][ T5751] program syz.0.492 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 139.179509][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.243640][ T5752] netlink: 'syz.1.494': attribute type 2 has an invalid length. [ 139.269125][ T5755] netlink: 'syz.2.493': attribute type 10 has an invalid length. [ 139.332445][ T5755] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.415814][ T5761] loop0: detected capacity change from 0 to 64 [ 139.420998][ T5755] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.430344][ T5755] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.498993][ T5763] loop1: detected capacity change from 0 to 1024 [ 139.533705][ T5755] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 139.536245][ T5761] hfs: small file entry [ 139.692783][ T5768] netlink: 'syz.4.501': attribute type 11 has an invalid length. [ 139.865945][ T5773] kernel profiling enabled (shift: 9) [ 139.897110][ T5763] EXT4-fs: Ignoring removed orlov option [ 139.920846][ T5763] EXT4-fs (loop1): Test dummy encryption mode enabled [ 140.039734][ T5763] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 140.081045][ T5782] loop3: detected capacity change from 0 to 8 [ 140.144010][ T5782] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 140.211280][ T5782] cramfs: Error -3 while decompressing! [ 140.238537][ T5782] cramfs: ffffffff974e2568(26)->ffff888053d2d000(4096) [ 140.249360][ T4294] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 140.283723][ T5782] cramfs: Error -5 while decompressing! [ 140.309418][ T5782] cramfs: ffffffff974e2582(26)->ffff888055458000(4096) [ 140.337704][ T5782] cramfs: Error -3 while decompressing! [ 140.366232][ T5782] cramfs: ffffffff974e259c(16)->ffff888052a65000(4096) [ 140.390924][ T5782] cramfs: Error -3 while decompressing! [ 140.401249][ T5763] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 140.417722][ T5782] cramfs: ffffffff974e2568(26)->ffff888053d2d000(4096) [ 140.454293][ T26] audit: type=1800 audit(1736917033.997:103): pid=5782 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.506" name="file3" dev="loop3" ino=348 res=0 errno=0 [ 140.477932][ T4294] usb 5-1: Using ep0 maxpacket: 32 [ 140.500054][ T4294] usb 5-1: unable to get BOS descriptor or descriptor too short [ 140.533220][ T4294] usb 5-1: New USB device found, idVendor=1110, idProduct=9000, bcdDevice=f4.11 [ 140.578721][ T4294] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.628116][ T4294] usb 5-1: Product: syz [ 140.634354][ T4294] usb 5-1: Manufacturer: syz [ 140.649797][ T4294] usb 5-1: SerialNumber: syz [ 140.671163][ T5763] fscrypt (loop1): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 140.724780][ T5802] loop0: detected capacity change from 0 to 1024 [ 140.733323][ T5763] overlayfs: upper fs does not support tmpfile. [ 140.763230][ T5802] EXT4-fs: Ignoring removed orlov option [ 140.773852][ T5803] netlink: 'syz.2.511': attribute type 3 has an invalid length. [ 140.790507][ T5763] fscrypt (loop1): Error allocating 'xts(aes)' transform: -4 [ 140.812135][ T5802] EXT4-fs: Ignoring removed nomblk_io_submit option [ 140.931130][ T4294] usb 5-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9000) Rev (0XF411): ADI930 [ 140.959688][ T5802] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 140.976042][ T5809] loop3: detected capacity change from 0 to 1024 [ 141.030540][ T4249] EXT4-fs (loop1): unmounting filesystem. [ 141.279399][ T4252] EXT4-fs (loop0): unmounting filesystem. [ 141.429484][ T5825] autofs4:pid:5825:autofs_fill_super: called with bogus options [ 141.442426][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.620185][ T5830] loop0: detected capacity change from 0 to 64 [ 141.653151][ T4294] usb 5-1: reset high-speed USB device number 3 using dummy_hcd [ 141.862086][ T4294] usb 5-1: unable to get BOS descriptor or descriptor too short [ 141.929574][ T4294] usb 5-1: device firmware changed [ 141.960348][ T5836] netlink: 16 bytes leftover after parsing attributes in process `syz.3.522'. [ 141.963254][ T4294] usb 5-1: [UEAGLE-ATM] interface 1 not found [ 141.987508][ T5838] loop0: detected capacity change from 0 to 256 [ 141.995988][ T4294] ueagle-atm 5-1:127.0: usbatm_usb_probe: bind failed: -19! [ 142.040613][ T4294] usb 5-1: USB disconnect, device number 3 [ 142.107480][ T5838] FAT-fs (loop0): Directory bread(block 64) failed [ 142.121989][ T5838] FAT-fs (loop0): Directory bread(block 65) failed [ 142.146493][ T5838] FAT-fs (loop0): Directory bread(block 66) failed [ 142.206524][ T5838] FAT-fs (loop0): Directory bread(block 67) failed [ 142.249002][ T5838] FAT-fs (loop0): Directory bread(block 68) failed [ 142.258117][ T5838] FAT-fs (loop0): Directory bread(block 69) failed [ 142.283090][ T5838] FAT-fs (loop0): Directory bread(block 70) failed [ 142.304082][ T5838] FAT-fs (loop0): Directory bread(block 71) failed [ 142.331179][ T5838] FAT-fs (loop0): Directory bread(block 72) failed [ 142.357761][ T5838] FAT-fs (loop0): Directory bread(block 73) failed [ 142.466693][ T5815] loop2: detected capacity change from 0 to 32768 [ 142.538090][ T5815] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 142.555633][ T5851] loop3: detected capacity change from 0 to 1024 [ 142.579036][ T5815] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 142.677914][ T5851] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 142.699453][ T5815] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 142.923483][ T5815] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 142.953817][ T4259] EXT4-fs (loop3): unmounting filesystem. [ 143.041438][ T5861] loop0: detected capacity change from 0 to 1024 [ 143.286536][ T26] audit: type=1800 audit(1736917036.827:104): pid=5861 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.529" name="file2" dev="loop0" ino=22 res=0 errno=0 [ 143.513431][ T4332] hfsplus: b-tree write err: -5, ino 4 [ 143.937335][ T5856] loop4: detected capacity change from 0 to 32768 [ 144.104706][ T5856] XFS (loop4): Mounting V5 Filesystem [ 144.135313][ T5895] syz.0.537 uses obsolete (PF_INET,SOCK_PACKET) [ 144.273768][ T5856] XFS (loop4): Ending clean mount [ 144.512568][ T4263] XFS (loop4): Unmounting Filesystem [ 144.660868][ T5889] loop3: detected capacity change from 0 to 32768 [ 144.708962][ T5889] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.536 (5889) [ 144.818112][ T5889] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 144.869317][ T5889] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 144.897902][ T5889] BTRFS info (device loop3): using free space tree [ 144.912485][ T5910] loop0: detected capacity change from 0 to 512 [ 144.983870][ T5918] loop2: detected capacity change from 0 to 128 [ 144.995043][ T5918] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 145.021390][ T5910] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 145.034692][ T5918] ext4 filesystem being mounted at /121/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.112398][ T5910] ext4 filesystem being mounted at /99/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 145.123423][ T5858] loop1: detected capacity change from 0 to 65536 [ 145.269125][ T5889] BTRFS info (device loop3): enabling ssd optimizations [ 145.280183][ T4252] EXT4-fs (loop0): unmounting filesystem. [ 145.314085][ T4257] EXT4-fs (loop2): unmounting filesystem. [ 145.400111][ T5858] XFS (loop1): Mounting V5 Filesystem [ 145.579916][ T5858] XFS (loop1): Ending clean mount [ 145.644330][ T5957] loop2: detected capacity change from 0 to 64 [ 145.788130][ T4259] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 146.200847][ T4249] XFS (loop1): Unmounting Filesystem [ 146.458718][ T4298] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 146.492927][ T5973] process 'syz.4.552' launched '/dev/fd/3' with NULL argv: empty string added [ 146.639752][ T5967] loop2: detected capacity change from 0 to 32768 [ 146.660389][ T4298] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 146.724722][ T4298] usb 1-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 146.738865][ T4298] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.761968][ T5967] XFS (loop2): Mounting V5 Filesystem [ 146.774164][ T4298] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 146.823064][ T5980] loop3: detected capacity change from 0 to 4096 [ 146.879063][ T5980] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 146.950261][ T5967] XFS (loop2): Ending clean mount [ 146.995623][ T5987] loop4: detected capacity change from 0 to 1024 [ 147.019110][ T5980] ntfs: (device loop3): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 147.034369][ T5967] XFS (loop2): Quotacheck needed: Please wait. [ 147.036308][ T5980] ntfs: (device loop3): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 147.075224][ T5987] hfsplus: bad catalog entry type [ 147.126418][ T5980] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 147.152864][ T5980] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 147.157778][ T5967] XFS (loop2): Quotacheck: Done. [ 147.200477][ T4332] hfsplus: b-tree write err: -5, ino 4 [ 147.237918][ T5980] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 147.271455][ T5980] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 147.291829][ T5989] loop1: detected capacity change from 0 to 4096 [ 147.335423][ T5980] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 147.355561][ T5980] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 147.392914][ T5980] ntfs: volume version 3.1. [ 147.461500][ T4257] XFS (loop2): Unmounting Filesystem [ 147.609872][ T4813] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 147.820231][ T4298] stv0680 1-1:4.0: STV(e): camera ping failed!! [ 147.830964][ T4813] usb 5-1: Using ep0 maxpacket: 32 [ 147.852291][ T4813] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 147.915176][ T4813] usb 5-1: config 0 has no interface number 0 [ 147.936702][ T4813] usb 5-1: config 0 interface 12 has no altsetting 0 [ 147.955463][ T5997] loop3: detected capacity change from 0 to 64 [ 147.969134][ T4813] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 147.982942][ T4813] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.994243][ T4813] usb 5-1: Product: syz [ 148.001851][ T4813] usb 5-1: Manufacturer: syz [ 148.007475][ T4813] usb 5-1: SerialNumber: syz [ 148.029971][ T4298] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 148.049013][ T4813] usb 5-1: config 0 descriptor?? [ 148.054321][ T4298] stv0680 1-1:4.0: last error: 0, command = 0x0 [ 148.062303][ T5997] Trying to free block not in datazone [ 148.078504][ T4298] usb 1-1: USB disconnect, device number 4 [ 148.115591][ T5997] Trying to free block not in datazone [ 148.173809][ T5997] Trying to free block not in datazone [ 148.203915][ T5997] Trying to free block not in datazone [ 148.213574][ T5997] minix_free_block (loop3:6): bit already cleared [ 148.250180][ T5997] Trying to free block not in datazone [ 148.262854][ T5997] Trying to free block not in datazone [ 148.557831][ T4654] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 148.640888][ T6010] lo speed is unknown, defaulting to 1000 [ 148.655525][ T6010] lo speed is unknown, defaulting to 1000 [ 148.697833][ T4813] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 148.713159][ T4813] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 148.725853][ T6010] lo speed is unknown, defaulting to 1000 [ 148.734868][ T4813] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 148.744221][ T4813] f81534: probe of 5-1:0.12 failed with error -71 [ 148.778096][ T4813] usb 5-1: USB disconnect, device number 4 [ 148.807002][ T4654] usb 3-1: config 0 has an invalid interface number: 4 but max is 0 [ 148.833486][ T4654] usb 3-1: config 0 has no interface number 0 [ 148.857108][ T6010] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 148.874224][ T4654] usb 3-1: config 0 interface 4 has no altsetting 0 [ 148.886525][ T4654] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 148.900703][ T4654] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.939574][ T6010] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 148.956245][ T4654] usb 3-1: config 0 descriptor?? [ 148.977348][ T4654] cp210x 3-1:0.4: cp210x converter detected [ 149.066899][ T6010] lo speed is unknown, defaulting to 1000 [ 149.077332][ T6010] lo speed is unknown, defaulting to 1000 [ 149.109260][ T6010] lo speed is unknown, defaulting to 1000 [ 149.118895][ T6010] lo speed is unknown, defaulting to 1000 [ 149.126387][ T6010] lo speed is unknown, defaulting to 1000 [ 149.382525][ T4654] cp210x 3-1:0.4: failed to get vendor val 0x000e size 3: -71 [ 149.403412][ T4654] usb 3-1: cp210x converter now attached to ttyUSB0 [ 149.442540][ T4654] usb 3-1: USB disconnect, device number 8 [ 149.501774][ T4654] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 149.529156][ T4654] cp210x 3-1:0.4: device disconnected [ 149.631863][ T6013] loop0: detected capacity change from 0 to 32768 [ 149.935839][ T6017] loop3: detected capacity change from 0 to 32768 [ 149.963829][ T6017] XFS: ikeep mount option is deprecated. [ 150.077394][ T6017] XFS (loop3): Mounting V5 Filesystem [ 150.170809][ T6017] XFS (loop3): Ending clean mount [ 150.239381][ T6038] loop0: detected capacity change from 0 to 1024 [ 150.287873][ T6038] EXT4-fs: Ignoring removed i_version option [ 150.294155][ T6038] EXT4-fs: Ignoring removed bh option [ 150.336260][ T6038] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 150.433834][ T6026] loop4: detected capacity change from 0 to 32768 [ 150.434575][ T6038] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 150.496448][ T6026] gfs2: fsid=statfs_quantum: Trying to join cluster "lock_nolock", "statfs_quantum" [ 150.521139][ T4259] XFS (loop3): Unmounting Filesystem [ 150.525281][ T6026] gfs2: fsid=statfs_quantum: Now mounting FS (format 1801)... [ 150.558012][ T6026] gfs2: fsid=statfs_quantum.s: journal 0 mapped with 16 extents in 0ms [ 150.709304][ T6026] gfs2: fsid=statfs_quantum.s: first mount done, others may mount [ 151.182254][ T4252] EXT4-fs (loop0): unmounting filesystem. [ 151.974392][ T6067] netlink: 12 bytes leftover after parsing attributes in process `syz.2.584'. [ 152.560647][ T6089] netlink: 8 bytes leftover after parsing attributes in process `syz.0.593'. [ 152.595579][ T6089] netlink: 44 bytes leftover after parsing attributes in process `syz.0.593'. [ 153.133273][ T6107] netlink: 8 bytes leftover after parsing attributes in process `syz.4.602'. [ 153.159909][ T6107] netlink: 4 bytes leftover after parsing attributes in process `syz.4.602'. [ 153.184035][ T6078] loop2: detected capacity change from 0 to 32768 [ 153.207504][ T6107] netlink: 'syz.4.602': attribute type 13 has an invalid length. [ 153.223279][ T6078] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.590 (6078) [ 153.243521][ T6107] netlink: 'syz.4.602': attribute type 11 has an invalid length. [ 153.265969][ T6078] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 153.305522][ T6078] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 153.335439][ T6078] BTRFS info (device loop2): force zlib compression, level 3 [ 153.395375][ T6078] BTRFS info (device loop2): force clearing of disk cache [ 153.425157][ T6078] BTRFS info (device loop2): setting nodatasum [ 153.466202][ T6078] BTRFS info (device loop2): doing ref verification [ 153.496336][ T6078] BTRFS info (device loop2): allowing degraded mounts [ 153.523651][ T6116] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 153.531800][ T6115] loop4: detected capacity change from 0 to 512 [ 153.558570][ T6078] BTRFS info (device loop2): enabling disk space caching [ 153.566311][ T6078] BTRFS info (device loop2): disk space caching is enabled [ 153.590738][ T6115] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 153.674683][ T6115] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 153.685873][ T6095] loop3: detected capacity change from 0 to 32768 [ 153.723455][ T6095] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.597 (6095) [ 153.785269][ T6115] [ 153.787643][ T6115] ====================================================== [ 153.795123][ T6115] WARNING: possible circular locking dependency detected [ 153.802241][ T6115] 6.1.124-syzkaller #0 Not tainted [ 153.807461][ T6115] ------------------------------------------------------ [ 153.814662][ T6115] syz.4.605/6115 is trying to acquire lock: [ 153.820913][ T6115] ffff888071edc8c0 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_map_blocks+0x379/0x1cb0 [ 153.831051][ T6115] [ 153.831051][ T6115] but task is already holding lock: [ 153.839044][ T6115] ffff88807d902208 (&s->s_dquot.dqio_sem){++++}-{3:3}, at: v2_write_dquot+0x9b/0x190 [ 153.849567][ T6115] [ 153.849567][ T6115] which lock already depends on the new lock. [ 153.849567][ T6115] [ 153.860501][ T6115] [ 153.860501][ T6115] the existing dependency chain (in reverse order) is: [ 153.869880][ T6115] [ 153.869880][ T6115] -> #2 (&s->s_dquot.dqio_sem){++++}-{3:3}: [ 153.878597][ T6115] lock_acquire+0x1f8/0x5a0 [ 153.883937][ T6115] down_read+0xad/0xa30 [ 153.889089][ T6115] v2_read_dquot+0x4a/0x100 [ 153.894237][ T6115] dquot_acquire+0x188/0x680 [ 153.899693][ T6115] ext4_acquire_dquot+0x2eb/0x4a0 [ 153.905357][ T6115] dqget+0x762/0xe90 [ 153.910034][ T6115] __dquot_initialize+0x2d9/0xea0 [ 153.916209][ T6115] ext4_process_orphan+0x57/0x2d0 [ 153.922167][ T6115] ext4_orphan_cleanup+0xb70/0x1400 [ 153.928401][ T6115] ext4_fill_super+0x83f6/0x8b50 [ 153.933971][ T6115] get_tree_bdev+0x3fe/0x620 [ 153.939432][ T6115] vfs_get_tree+0x88/0x270 [ 153.945353][ T6115] do_new_mount+0x2ba/0xb40 [ 153.950463][ T6115] __se_sys_mount+0x2d5/0x3c0 [ 153.955864][ T6115] do_syscall_64+0x3b/0xb0 [ 153.961219][ T6115] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 153.967928][ T6115] [ 153.967928][ T6115] -> #1 (&dquot->dq_lock){+.+.}-{3:3}: [ 153.975868][ T6115] lock_acquire+0x1f8/0x5a0 [ 153.981127][ T6115] __mutex_lock+0x132/0xd80 [ 153.986575][ T6115] dquot_commit+0x57/0x510 [ 153.991585][ T6115] ext4_write_dquot+0x1fd/0x360 [ 153.997583][ T6115] mark_all_dquot_dirty+0xf7/0x400 [ 154.003324][ T6115] __dquot_alloc_space+0xb68/0x10e0 [ 154.009322][ T6115] ext4_mb_new_blocks+0x1302/0x4b80 [ 154.015276][ T6115] ext4_ext_map_blocks+0x1c1c/0x7ab0 [ 154.021457][ T6115] ext4_map_blocks+0xa2b/0x1cb0 [ 154.027240][ T6115] ext4_getblk+0x1eb/0x7c0 [ 154.032439][ T6115] ext4_bread+0x2a/0x170 [ 154.037604][ T6115] ext4_append+0x31f/0x5c0 [ 154.042809][ T6115] ext4_init_new_dir+0x33a/0xa20 [ 154.048549][ T6115] ext4_mkdir+0x4f2/0xce0 [ 154.053464][ T6115] vfs_mkdir+0x3b6/0x590 [ 154.058590][ T6115] do_mkdirat+0x225/0x360 [ 154.063794][ T6115] __x64_sys_mkdirat+0x85/0x90 [ 154.070388][ T6115] do_syscall_64+0x3b/0xb0 [ 154.075450][ T6115] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 154.082381][ T6115] [ 154.082381][ T6115] -> #0 (&ei->i_data_sem/2){++++}-{3:3}: [ 154.090734][ T6115] validate_chain+0x1661/0x5950 [ 154.096683][ T6115] __lock_acquire+0x125b/0x1f80 [ 154.102681][ T6115] lock_acquire+0x1f8/0x5a0 [ 154.107719][ T6115] down_read+0xad/0xa30 [ 154.112503][ T6115] ext4_map_blocks+0x379/0x1cb0 [ 154.118062][ T6115] ext4_getblk+0x1eb/0x7c0 [ 154.123612][ T6115] ext4_bread+0x2a/0x170 [ 154.128474][ T6115] ext4_quota_write+0x21e/0x570 [ 154.134024][ T6115] get_free_dqblk+0x340/0x6c0 [ 154.139264][ T6115] do_insert_tree+0x298/0x1440 [ 154.144683][ T6115] do_insert_tree+0xb94/0x1440 [ 154.150325][ T6115] do_insert_tree+0xb51/0x1440 [ 154.155836][ T6115] do_insert_tree+0xb51/0x1440 [ 154.161226][ T6115] qtree_write_dquot+0x483/0x5a0 [ 154.166828][ T6115] v2_write_dquot+0x11c/0x190 [ 154.172055][ T6115] dquot_acquire+0x34d/0x680 [ 154.177583][ T6115] ext4_acquire_dquot+0x2eb/0x4a0 [ 154.183603][ T6115] dqget+0x762/0xe90 [ 154.188024][ T6115] __dquot_initialize+0x2d9/0xea0 [ 154.196336][ T6115] ext4_set_acl+0x1b3/0x730 [ 154.201640][ T6115] posix_acl_xattr_set+0x37b/0x3e0 [ 154.208221][ T6115] __vfs_setxattr+0x3e7/0x420 [ 154.213924][ T6115] __vfs_setxattr_noperm+0x12a/0x5e0 [ 154.220293][ T6115] vfs_setxattr+0x21d/0x420 [ 154.225416][ T6115] setxattr+0x250/0x2b0 [ 154.230599][ T6115] path_setxattr+0x1bc/0x2a0 [ 154.235904][ T6115] __x64_sys_lsetxattr+0xb4/0xd0 [ 154.241630][ T6115] do_syscall_64+0x3b/0xb0 [ 154.246685][ T6115] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 154.253895][ T6115] [ 154.253895][ T6115] other info that might help us debug this: [ 154.253895][ T6115] [ 154.264484][ T6115] Chain exists of: [ 154.264484][ T6115] &ei->i_data_sem/2 --> &dquot->dq_lock --> &s->s_dquot.dqio_sem [ 154.264484][ T6115] [ 154.278815][ T6115] Possible unsafe locking scenario: [ 154.278815][ T6115] [ 154.287494][ T6115] CPU0 CPU1 [ 154.293321][ T6115] ---- ---- [ 154.298872][ T6115] lock(&s->s_dquot.dqio_sem); [ 154.304007][ T6115] lock(&dquot->dq_lock); [ 154.312106][ T6115] lock(&s->s_dquot.dqio_sem); [ 154.319932][ T6115] lock(&ei->i_data_sem/2); [ 154.324716][ T6115] [ 154.324716][ T6115] *** DEADLOCK *** [ 154.324716][ T6115] [ 154.333605][ T6115] 4 locks held by syz.4.605/6115: [ 154.339195][ T6115] #0: ffff88807d902460 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write+0x3b/0x80 [ 154.349903][ T6115] #1: ffff888071edb628 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: vfs_setxattr+0x1dd/0x420 [ 154.360381][ T6115] #2: ffff888071e820a8 (&dquot->dq_lock){+.+.}-{3:3}, at: dquot_acquire+0x64/0x680 [ 154.370107][ T6115] #3: ffff88807d902208 (&s->s_dquot.dqio_sem){++++}-{3:3}, at: v2_write_dquot+0x9b/0x190 [ 154.380308][ T6115] [ 154.380308][ T6115] stack backtrace: [ 154.386602][ T6115] CPU: 0 PID: 6115 Comm: syz.4.605 Not tainted 6.1.124-syzkaller #0 [ 154.395894][ T6115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 154.406915][ T6115] Call Trace: [ 154.412196][ T6115] [ 154.415281][ T6115] dump_stack_lvl+0x1e3/0x2cb [ 154.420106][ T6115] ? nf_tcp_handle_invalid+0x642/0x642 [ 154.425944][ T6115] ? print_circular_bug+0x12b/0x1a0 [ 154.431376][ T6115] check_noncircular+0x2fa/0x3b0 [ 154.436600][ T6115] ? add_chain_block+0x850/0x850 [ 154.441838][ T6115] ? lockdep_lock+0x11f/0x2a0 [ 154.446897][ T6115] ? __lock_acquire+0x1f80/0x1f80 [ 154.452033][ T6115] ? _find_first_zero_bit+0xd0/0x100 [ 154.457606][ T6115] validate_chain+0x1661/0x5950 [ 154.462601][ T6115] ? check_path+0x21/0x40 [ 154.467379][ T6115] ? hlock_conflict+0x55/0x1f0 [ 154.472427][ T6115] ? validate_chain+0x112/0x5950 [ 154.477467][ T6115] ? reacquire_held_locks+0x660/0x660 [ 154.483231][ T6115] ? check_path+0x21/0x40 [ 154.488020][ T6115] ? check_noncircular+0x1e3/0x3b0 [ 154.493515][ T6115] ? add_chain_block+0x850/0x850 [ 154.499221][ T6115] ? reacquire_held_locks+0x660/0x660 [ 154.505279][ T6115] ? lockdep_lock+0x2a0/0x2a0 [ 154.510495][ T6115] ? mark_lock+0x9a/0x340 [ 154.516085][ T6115] __lock_acquire+0x125b/0x1f80 [ 154.521316][ T6115] lock_acquire+0x1f8/0x5a0 [ 154.526452][ T6115] ? ext4_map_blocks+0x379/0x1cb0 [ 154.533051][ T6115] ? read_lock_is_recursive+0x10/0x10 [ 154.538714][ T6115] ? __might_sleep+0xb0/0xb0 [ 154.543325][ T6115] down_read+0xad/0xa30 [ 154.547876][ T6115] ? ext4_map_blocks+0x379/0x1cb0 [ 154.553151][ T6115] ? __lock_acquire+0x1f80/0x1f80 [ 154.558456][ T6115] ? __down_common+0x8b0/0x8b0 [ 154.563618][ T6115] ? percpu_counter_add_batch+0x142/0x160 [ 154.569477][ T6115] ? rcu_is_watching+0x11/0xb0 [ 154.575747][ T6115] ? ext4_es_lookup_extent+0x44a/0xb70 [ 154.581411][ T6115] ext4_map_blocks+0x379/0x1cb0 [ 154.586725][ T6115] ? stack_trace_snprint+0xe0/0xe0 [ 154.591956][ T6115] ? __stack_depot_save+0x3f5/0x470 [ 154.597535][ T6115] ? ext4_issue_zeroout+0x250/0x250 [ 154.603469][ T6115] ? kasan_set_track+0x60/0x70 [ 154.608244][ T6115] ? kasan_set_track+0x4b/0x70 [ 154.614070][ T6115] ? __kasan_kmalloc+0x97/0xb0 [ 154.619148][ T6115] ? __kmalloc+0xb2/0x230 [ 154.623932][ T6115] ? get_free_dqblk+0x45/0x6c0 [ 154.628712][ T6115] ? do_insert_tree+0xb94/0x1440 [ 154.633953][ T6115] ? do_insert_tree+0xb51/0x1440 [ 154.639434][ T6115] ext4_getblk+0x1eb/0x7c0 [ 154.643951][ T6115] ? __vfs_setxattr+0x3e7/0x420 [ 154.649168][ T6115] ? ext4_get_block_unwritten+0x100/0x100 [ 154.655191][ T6115] ext4_bread+0x2a/0x170 [ 154.659619][ T6115] ext4_quota_write+0x21e/0x570 [ 154.665162][ T6115] ? ext4_quota_read+0x2c0/0x2c0 [ 154.670328][ T6115] ? get_free_dqblk+0x45/0x6c0 [ 154.675111][ T6115] ? get_free_dqblk+0x45/0x6c0 [ 154.680590][ T6115] ? __kmalloc+0xe2/0x230 [ 154.685347][ T6115] get_free_dqblk+0x340/0x6c0 [ 154.690362][ T6115] ? ext4_quota_read+0x2c0/0x2c0 [ 154.695679][ T6115] do_insert_tree+0x298/0x1440 [ 154.700722][ T6115] ? from_kuid+0x18d/0x6f0 [ 154.705331][ T6115] ? ext4_quota_read+0x1ed/0x2c0 [ 154.710937][ T6115] ? find_next_id+0x850/0x850 [ 154.715898][ T6115] ? __brelse+0x55/0x90 [ 154.720152][ T6115] ? ext4_quota_read+0x256/0x2c0 [ 154.725361][ T6115] do_insert_tree+0xb94/0x1440 [ 154.730536][ T6115] ? find_next_id+0x850/0x850 [ 154.735499][ T6115] ? ext4_quota_read+0x256/0x2c0 [ 154.740552][ T6115] do_insert_tree+0xb51/0x1440 [ 154.745917][ T6115] ? find_next_id+0x850/0x850 [ 154.750747][ T6115] ? ext4_quota_read+0x256/0x2c0 [ 154.755719][ T6115] do_insert_tree+0xb51/0x1440 [ 154.760687][ T6115] ? find_next_id+0x850/0x850 [ 154.765480][ T6115] ? rcu_is_watching+0x11/0xb0 [ 154.771382][ T6115] ? qtree_write_dquot+0x2c3/0x5a0 [ 154.776524][ T6115] qtree_write_dquot+0x483/0x5a0 [ 154.782004][ T6115] ? qtree_entry_unused+0xe0/0xe0 [ 154.787589][ T6115] v2_write_dquot+0x11c/0x190 [ 154.792955][ T6115] dquot_acquire+0x34d/0x680 [ 154.797734][ T6115] ext4_acquire_dquot+0x2eb/0x4a0 [ 154.803054][ T6115] dqget+0x762/0xe90 [ 154.807250][ T6115] __dquot_initialize+0x2d9/0xea0 [ 154.812547][ T6115] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 154.819171][ T6115] ? dquot_initialize+0x20/0x20 [ 154.824459][ T6115] ? aa_get_newest_label+0xfb/0x6e0 [ 154.829855][ T6115] ext4_set_acl+0x1b3/0x730 [ 154.835107][ T6115] ? ext4_get_acl+0x630/0x630 [ 154.840248][ T6115] ? bpf_lsm_capable+0x5/0x10 [ 154.844946][ T6115] ? posix_acl_valid+0x329/0x3b0 [ 154.850438][ T6115] posix_acl_xattr_set+0x37b/0x3e0 [ 154.855813][ T6115] ? posix_acl_xattr_get+0x560/0x560 [ 154.861340][ T6115] __vfs_setxattr+0x3e7/0x420 [ 154.866183][ T6115] __vfs_setxattr_noperm+0x12a/0x5e0 [ 154.871834][ T6115] vfs_setxattr+0x21d/0x420 [ 154.877134][ T6115] ? __lock_acquire+0x1f80/0x1f80 [ 154.882255][ T6115] ? xattr_permission+0x4f0/0x4f0 [ 154.887380][ T6115] ? __might_fault+0xbd/0x110 [ 154.892392][ T6115] ? _copy_from_user+0x109/0x170 [ 154.897748][ T6115] setxattr+0x250/0x2b0 [ 154.902304][ T6115] ? path_setxattr+0x2a0/0x2a0 [ 154.907645][ T6115] ? __mnt_want_write+0x222/0x2a0 [ 154.912780][ T6115] path_setxattr+0x1bc/0x2a0 [ 154.917608][ T6115] ? simple_xattr_list_add+0xf0/0xf0 [ 154.923177][ T6115] ? syscall_enter_from_user_mode+0x2e/0x230 [ 154.929472][ T6115] __x64_sys_lsetxattr+0xb4/0xd0 [ 154.934824][ T6115] do_syscall_64+0x3b/0xb0 [ 154.939359][ T6115] ? clear_bhb_loop+0x45/0xa0 [ 154.944221][ T6115] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 154.950232][ T6115] RIP: 0033:0x7f2dae185d29 [ 154.955011][ T6115] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.975355][ T6115] RSP: 002b:00007f2daeefd038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 154.984041][ T6115] RAX: ffffffffffffffda RBX: 00007f2dae375fa0 RCX: 00007f2dae185d29 [ 154.992813][ T6115] RDX: 00000000200000c0 RSI: 0000000020000440 RDI: 0000000020000400 [ 155.001637][ T6115] RBP: 00007f2dae201b08 R08: 0000000000000000 R09: 0000000000000000 [ 155.010505][ T6115] R10: 000000000000005c R11: 0000000000000246 R12: 0000000000000000 [ 155.018677][ T6115] R13: 0000000000000000 R14: 00007f2dae375fa0 R15: 00007ffd408cb978 [ 155.027006][ T6115] [ 155.052668][ T6095] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 155.053288][ T6115] EXT4-fs error (device loop4): ext4_do_update_inode:5224: inode #2: comm syz.4.605: corrupted inode contents [ 155.081645][ T6078] BTRFS info (device loop2): enabling ssd optimizations [ 155.109004][ T6115] EXT4-fs error (device loop4): ext4_dirty_inode:6089: inode #2: comm syz.4.605: mark_inode_dirty error [ 155.132491][ T6078] BTRFS info (device loop2): rebuilding free space tree [ 155.149213][ T6095] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 155.158430][ T6095] BTRFS info (device loop3): metadata ratio 4 [ 155.165190][ T6115] EXT4-fs error (device loop4): ext4_do_update_inode:5224: inode #2: comm syz.4.605: corrupted inode contents [ 155.178907][ T6095] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 155.189735][ T6078] BTRFS info (device loop2): disabling free space tree [ 155.193401][ T6095] BTRFS info (device loop3): force lzo compression, level 0 [ 155.213814][ T6095] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 155.234332][ T6078] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 155.247852][ T6095] BTRFS info (device loop3): trying to use backup root at mount time [ 155.256507][ T6095] BTRFS info (device loop3): doing ref verification [ 155.276477][ T6078] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 155.292581][ T4263] EXT4-fs (loop4): unmounting filesystem. [ 155.299216][ T6095] BTRFS info (device loop3): disabling tree log [ 155.308575][ T6095] BTRFS info (device loop3): using free space tree [ 155.328157][ T4257] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 155.366715][ T5810] BTRFS warning (device loop3): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0x26333c6f level 0 [ 155.385391][ T6095] BTRFS warning (device loop3): couldn't read tree root [ 155.407779][ T6095] BTRFS warning (device loop3): try to load backup roots slot 1 [ 155.416248][ T5810] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x78ca8373 level 0 [ 155.436972][ T6095] BTRFS warning (device loop3): couldn't read tree root [ 155.447082][ T6095] BTRFS warning (device loop3): try to load backup roots slot 2 [ 155.455780][ T6095] BTRFS error (device loop3): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7 [ 155.470642][ T6095] BTRFS warning (device loop3): couldn't read tree root [ 155.478561][ T6095] BTRFS warning (device loop3): try to load backup roots slot 3 [ 155.494183][ T6095] BTRFS info (device loop3): enabling ssd optimizations [ 155.502098][ T6095] BTRFS info (device loop3): rebuilding free space tree [ 155.516567][ T6095] BTRFS info (device loop3): checking UUID tree [ 155.633342][ T6095] BTRFS warning (device loop3: state M): 'nologreplay' is deprecated, use 'rescue=nologreplay' instead [ 155.645505][ T6095] BTRFS info (device loop3: state M): disabling log replay at mount time [ 155.656804][ T6095] BTRFS error (device loop3: state M): unrecognized mount option 'test_dummy_encryption' [ 155.680402][ T4259] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf