last executing test programs: 4.99653362s ago: executing program 0 (id=1213): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x8007}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}}, 0x20000804) syz_emit_ethernet(0x3e, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffff63e200000000000008"], 0x0) 4.805350366s ago: executing program 0 (id=1225): r0 = semget$private(0x0, 0x3, 0x260) semtimedop(r0, &(0x7f0000001840)=[{0x0, 0xfffa}], 0x1, &(0x7f0000001880)={0x0, 0x3938700}) 4.675257227s ago: executing program 0 (id=1215): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x0, 0x9}}]}, {0x4}, {0xc, 0x8}, {0xc, 0x9}}}]}]}, 0x68}}, 0x0) 4.658049359s ago: executing program 0 (id=1217): r0 = syz_mount_image$btrfs(&(0x7f00000051c0), &(0x7f0000005200)='./file0\x00', 0x1204408, &(0x7f00000000c0)={[{@compress_force}, {@clear_cache}, {@nodatasum}, {@compress}, {}, {@space_cache_v1}]}, 0x0, 0x51ab, &(0x7f000000a440)="$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") ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000840)={0xa, 0x0, {0x8, @struct={0x80000001, 0x3}, 0x0, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0xe8, @usage=0x50, 0x0, 0x0, [0x0, 0x8]}, {0x0, @struct={0x3, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x44, @usage, 0x4, 0x0, [0x0, 0x2, 0x4]}, {0x0, @usage=0xffffffffffffffff, 0x0, 0x8, 0x0, 0x7, 0x0, 0xfffffffffffffffc, 0xa42, @usage=0x2000000000000, 0x727, 0x0, [0x760d, 0x2, 0x7]}, {0x100000000}}) 4.441499467s ago: executing program 1 (id=1219): syz_usb_connect(0x0, 0xaa3, &(0x7f0000008f00)=ANY=[@ANYBLOB="120110014b193508e20400141365010203010902910a020706c00509047a050a027a450909240600"], 0x0) 3.828186068s ago: executing program 1 (id=1224): socket$inet6(0xa, 0x5, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket(0x10, 0x2, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000140)={0x0, "687555763e288867da3ed4e2877749a1f2ae33ce87447bacb3dc40c88422f0aa"}) socket$nl_netfilter(0x10, 0x3, 0xc) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) socket$inet(0x2, 0x3, 0x2) socket$inet_dccp(0x2, 0x6, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="120100001517ee40f00a057a0000010203010902"], 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) dup(r1) socket$inet6(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3) 2.776216237s ago: executing program 4 (id=1234): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"/468], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, r0, 0x26, 0x0, 0x0, @void, @value}, 0x10) 2.709593362s ago: executing program 4 (id=1235): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x3a) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="050000000091c700", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000140)="308f6fdcd8ef95ac180e28e3", 0xc, 0x0, 0x0, 0x0) 2.652580677s ago: executing program 4 (id=1237): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'wp512\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f00000001c0)={{}, "2e8f1a7a398dc25544018a636026599e6bbfc135ade5872a9daa32367351a4759d438bbedf9fac1c19c91059d7768c4037d83cc78f349c457c8a3fe610cb6de7f04db4824c19cf948b73887ec28570eea399e8ec87b845cb35ed4343739987"}, 0x7f) 2.512050609s ago: executing program 4 (id=1238): ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x7) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0xff) ioctl$TIOCSTI(r0, 0x5412, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x3a) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000003c0)=0x7e) 2.089420694s ago: executing program 2 (id=1242): r0 = syz_open_dev$ndb(&(0x7f0000003700), 0x0, 0x8040) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 2.017263951s ago: executing program 1 (id=1244): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000140)={[{@noinline_xattr}, {@nouser_xattr}, {@discard}, {@fault_injection={'fault_injection', 0x3d, 0xa0c8}}, {@age_extent_cache}, {@discard}, {@noinline_xattr}, {@fastboot}, {@acl}, {@discard_unit_section}]}, 0x21, 0x5547, &(0x7f0000005800)="$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") epoll_create1(0x0) epoll_create1(0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ftruncate(0xffffffffffffffff, 0x876) write$cgroup_int(r1, &(0x7f00000000c0), 0x12) write$FUSE_LK(r0, &(0x7f0000000240)={0x28}, 0x28) 2.017022541s ago: executing program 3 (id=1245): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x1c, 0x2, 0x3, 0x301, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFQA_CFG_CMD={0x8, 0x1, {0x3, 0x0, 0x9}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 1.941710217s ago: executing program 3 (id=1246): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)={0x48, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x1c, 0xc, 0x0, 0x1, [{0x18, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}]}, {0x4}]}]}, 0x48}}, 0x0) 1.747684973s ago: executing program 0 (id=1247): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f000001f8c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000f00)={0x1d, r1, 0x2, {0x0, 0x1, 0x2}, 0xfe}, 0x18) bind$can_j1939(r0, &(0x7f000001f900)={0x1d, r1, 0x0, {0x2, 0xf0, 0x2}, 0x2}, 0x18) 1.747022653s ago: executing program 3 (id=1248): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x801, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xb4}}, 0x0) 1.746717783s ago: executing program 2 (id=1249): syz_mount_image$jfs(&(0x7f0000005d40), &(0x7f0000005d80)='./file0\x00', 0x2000000, &(0x7f0000000640), 0x1, 0x5d66, &(0x7f000000bb40)="$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") fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) 1.680540829s ago: executing program 0 (id=1250): syz_usb_connect(0x0, 0x38, &(0x7f0000000040)=ANY=[@ANYBLOB="120110038121e940e60491553994010203010902260001000000000904"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) 1.656209781s ago: executing program 3 (id=1251): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x3a, &(0x7f00000006c0)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x9, 0x4, 0x0, 0x3, 0x2c, 0x66, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1, {[@cipso={0x86, 0xf, 0x3, [{0x1, 0x9, "35763f87403525"}]}]}}, {0x4e20, 0x4e20, 0x8}}}}}, 0x0) 1.514188193s ago: executing program 3 (id=1252): shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000000)=""/235) 1.379742444s ago: executing program 3 (id=1253): syz_mount_image$reiserfs(&(0x7f0000001100), &(0x7f0000001140)='./file0\x00', 0x0, &(0x7f0000001180), 0x0, 0x10e8, &(0x7f00000011c0)="$eJzs2D2O00AYBuB3JoalM1p6C7F9Gk5AAdI2KeAIERcgoovElbgAHIErBPqkyAmMHONQhB9BCAjpeaTMxKPP/mbKdwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACDJtmW5EFNrofnkrz5Mk+66c/97aym5PnL29XTV4+frZLUw28oLnUYZz9o9fbOOJd02ezXyyx2lzsXAAAAcNSfrU1y7+S7d/9afwAAAOBn/viFAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAZrodh8T6pSUrSdR9uPyXp/vXGAAAAgLOU1Lxuv7U+XgN89TAf23pSV3OTd6fvz77f8Wrq0PzGdgEAAOB/9+Lql8rLGNKnoP4ozTGwl0NcbzKfz3dPxih+k2QzrO/Xy82+PZT0fd9f4BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPCZHTggAQAAABD0/3U7AgUAAAAAAAAAANgoAAD//wAdzvo=") 842.658589ms ago: executing program 2 (id=1254): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000240), 0x80, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, 0x0) 765.086496ms ago: executing program 1 (id=1255): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) setxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=@known='system.posix_acl_default\x00', &(0x7f0000000100)='$[\x00', 0x3, 0x2) 710.344ms ago: executing program 1 (id=1256): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2010480, &(0x7f00000001c0), 0x45, 0x76a, &(0x7f0000000fc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, &(0x7f0000000080)={@desc={0x1, 0x0, @desc4}}) 598.35164ms ago: executing program 1 (id=1257): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r3, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r8, @ANYBLOB="21003300d0800000080211000000080211000001505050505050"], 0x40}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010000000000000000000800000008000300", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) 400.140896ms ago: executing program 2 (id=1258): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000140)={0x0, 0xffff4f54}, &(0x7f0000000180)=0x8) 330.921282ms ago: executing program 2 (id=1259): mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1\x00', 0x81c0, 0x0) 330.504292ms ago: executing program 2 (id=1260): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x896, 0x1, 0x8004, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 72.445324ms ago: executing program 4 (id=1261): openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x8143, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') 0s ago: executing program 4 (id=1262): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000dc0)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x84, &(0x7f0000000580)={0x0, 0xa, 0x5, "c7606577d4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000080)={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): device loop4): unrecognized mount option 'fsmagic=0x0000000000000002' [ 60.695023][ T4600] BTRFS error (device loop4): open_ctree failed [ 60.712807][ T4600] udc-core: couldn't find an available UDC or it's busy [ 60.714324][ T4600] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 60.717959][ T4506] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by udevd (4506) [ 60.737283][ T4200] usb 1-1: config 0 has no interfaces? [ 60.818578][ T4016] Bluetooth: hci6: command 0x0419 tx timeout [ 60.897137][ T4200] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 60.899066][ T4200] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.900852][ T4200] usb 1-1: Product: syz [ 60.901758][ T4200] usb 1-1: Manufacturer: syz [ 60.902648][ T4200] usb 1-1: SerialNumber: syz [ 60.908977][ T4200] usb 1-1: config 0 descriptor?? [ 61.049705][ T4612] loop2: detected capacity change from 0 to 32768 [ 61.155681][ T4200] usb 1-1: USB disconnect, device number 9 [ 61.462745][ T4614] loop4: detected capacity change from 0 to 32768 [ 61.538451][ T4621] loop1: detected capacity change from 0 to 128 [ 61.545896][ T4614] XFS (loop4): Mounting V5 Filesystem [ 61.586250][ T4621] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 61.622432][ T4614] XFS (loop4): Ending clean mount [ 61.626768][ T4614] XFS (loop4): Quotacheck needed: Please wait. [ 61.659546][ T4614] XFS (loop4): Quotacheck: Done. [ 61.743846][ T4033] XFS (loop4): Unmounting Filesystem [ 61.765615][ T4636] loop1: detected capacity change from 0 to 2048 [ 61.870135][ T4644] udc-core: couldn't find an available UDC or it's busy [ 61.872156][ T4644] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 61.886133][ T4636] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 61.918020][ T293] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 61.924296][ T293] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 5 with error 28 [ 61.931805][ T293] EXT4-fs (loop1): This should not happen!! Data will be lost [ 61.931805][ T293] [ 61.933808][ T293] EXT4-fs (loop1): Total free blocks count 0 [ 61.935082][ T293] EXT4-fs (loop1): Free/Dirty block details [ 61.936118][ T293] EXT4-fs (loop1): free_blocks=2415919104 [ 61.938536][ T293] EXT4-fs (loop1): dirty_blocks=16 [ 61.939582][ T293] EXT4-fs (loop1): Block reservation details [ 61.940792][ T293] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 61.968001][ T4200] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 62.145649][ T4655] udc-core: couldn't find an available UDC or it's busy [ 62.154416][ T4655] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 62.207052][ T4200] usb 1-1: Using ep0 maxpacket: 32 [ 62.327112][ T4200] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 62.328837][ T4200] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 62.331001][ T4200] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 62.332541][ T4653] loop1: detected capacity change from 0 to 32768 [ 62.333401][ T4200] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 62.336668][ T4200] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 62.339342][ T4200] usb 1-1: config 0 interface 0 has no altsetting 0 [ 62.379549][ T4653] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop1 scanned by syz.1.173 (4653) [ 62.400550][ T4657] udc-core: couldn't find an available UDC or it's busy [ 62.401898][ T4657] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 62.424317][ T4653] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 62.426290][ T4653] BTRFS info (device loop1): using free space tree [ 62.429373][ T4653] BTRFS info (device loop1): has skinny extents [ 62.455675][ T4653] BTRFS info (device loop1): enabling ssd optimizations [ 62.497322][ T4200] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 62.499270][ T4200] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 62.501418][ T4200] usb 1-1: Product: syz [ 62.502198][ T4200] usb 1-1: Manufacturer: syz [ 62.503166][ T4200] usb 1-1: SerialNumber: syz [ 62.511795][ T4200] usb 1-1: config 0 descriptor?? [ 62.548625][ T4200] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 62.554711][ T4200] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 62.695755][ T4678] udc-core: couldn't find an available UDC or it's busy [ 62.698882][ T4678] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 62.756769][ T4073] usb 1-1: USB disconnect, device number 10 [ 62.761524][ T4073] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 63.175685][ T4680] loop2: detected capacity change from 0 to 32768 [ 63.261038][ T4680] XFS (loop2): Mounting V5 Filesystem [ 63.358427][ T4680] XFS (loop2): Ending clean mount [ 63.360933][ T4680] XFS (loop2): Quotacheck needed: Please wait. [ 63.387514][ T4680] XFS (loop2): Quotacheck: Done. [ 63.444269][ T4369] XFS (loop2): Unmounting Filesystem [ 63.524394][ T4712] udc-core: couldn't find an available UDC or it's busy [ 63.525856][ T4712] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 63.805760][ T4706] loop0: detected capacity change from 0 to 40427 [ 63.920714][ T4708] loop1: detected capacity change from 0 to 40427 [ 63.994289][ T4722] udc-core: couldn't find an available UDC or it's busy [ 63.995865][ T4722] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 64.009244][ T4708] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 64.014024][ T4708] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 64.031641][ T4708] F2FS-fs (loop1): invalid crc value [ 64.053163][ T4708] F2FS-fs (loop1): Found nat_bits in checkpoint [ 64.117349][ T4733] tipc: Started in network mode [ 64.118865][ T4733] tipc: Node identity ac1414bb, cluster identity 4711 [ 64.121494][ T4733] tipc: Enabling of bearer rejected, failed to enable media [ 64.136365][ T4708] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 64.138020][ T4708] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 64.196820][ T4708] attempt to access beyond end of device [ 64.196820][ T4708] loop1: rw=2049, want=45224, limit=40427 [ 64.266569][ T293] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 64.271334][ T293] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 64.649362][ T4739] chnl_net:caif_netlink_parms(): no params data found [ 64.754881][ T4759] netlink: 'syz.0.206': attribute type 4 has an invalid length. [ 64.756415][ T4759] netlink: 17 bytes leftover after parsing attributes in process `syz.0.206'. [ 64.841408][ T4737] loop4: detected capacity change from 0 to 32768 [ 64.877745][ T4739] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.879331][ T4739] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.881503][ T4739] device bridge_slave_0 entered promiscuous mode [ 64.884486][ T4739] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.919658][ T4739] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.921857][ T4739] device bridge_slave_1 entered promiscuous mode [ 64.985794][ T4737] XFS (loop4): Mounting V5 Filesystem [ 65.092864][ T4739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.106261][ T4737] XFS (loop4): Ending clean mount [ 65.109862][ T4737] XFS (loop4): Quotacheck needed: Please wait. [ 65.114409][ T4793] loop2: detected capacity change from 0 to 256 [ 65.127231][ T4739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.160395][ T4793] exFAT-fs (loop2): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 65.178850][ T4737] XFS (loop4): Quotacheck: Done. [ 65.266103][ T4033] XFS (loop4): Unmounting Filesystem [ 65.305103][ T4739] team0: Port device team_slave_0 added [ 65.325042][ T4739] team0: Port device team_slave_1 added [ 65.385240][ T4739] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.386773][ T4739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.407778][ T4739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.411522][ T4739] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.413053][ T4739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.427047][ T4739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.508998][ T4739] device hsr_slave_0 entered promiscuous mode [ 65.547937][ T4739] device hsr_slave_1 entered promiscuous mode [ 65.587668][ T4739] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.589364][ T4739] Cannot create hsr debugfs directory [ 65.875491][ T4796] loop1: detected capacity change from 0 to 40427 [ 65.926216][ T4796] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 65.928179][ T4796] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 65.932306][ T4796] F2FS-fs (loop1): invalid crc value [ 65.959735][ T4796] F2FS-fs (loop1): Found nat_bits in checkpoint [ 66.022806][ T4796] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 66.024390][ T4796] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 66.166692][ T1834] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.303822][ T4820] loop4: detected capacity change from 0 to 32768 [ 66.325223][ T1834] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.337742][ T4570] Bluetooth: hci5: command 0x0409 tx timeout [ 66.416215][ T1834] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.435641][ T4820] XFS (loop4): Mounting V5 Filesystem [ 66.451928][ T4835] loop1: detected capacity change from 0 to 2048 [ 66.471614][ T4826] chnl_net:caif_netlink_parms(): no params data found [ 66.531946][ T4820] XFS (loop4): Ending clean mount [ 66.534435][ T4820] XFS (loop4): Quotacheck needed: Please wait. [ 66.554530][ T1834] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.558440][ T4820] XFS (loop4): Quotacheck: Done. [ 66.683457][ T4033] XFS (loop4): Unmounting Filesystem [ 66.792649][ T4852] udc-core: couldn't find an available UDC or it's busy [ 66.794097][ T4852] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 66.804151][ T4826] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.805973][ T4826] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.809687][ T4826] device bridge_slave_0 entered promiscuous mode [ 66.814323][ T4826] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.816030][ T4826] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.828483][ T4826] device bridge_slave_1 entered promiscuous mode [ 66.862028][ T4826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.866227][ T4826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.926647][ T4826] team0: Port device team_slave_0 added [ 66.934095][ T4826] team0: Port device team_slave_1 added [ 67.004828][ T4739] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.011288][ T4826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.012632][ T4826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.037136][ T4681] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 67.071617][ T4826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.075501][ T4826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.079123][ T4826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.084511][ T4826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.146074][ T4739] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.189630][ T4826] device hsr_slave_0 entered promiscuous mode [ 67.207903][ T4826] device hsr_slave_1 entered promiscuous mode [ 67.237357][ T4826] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.239089][ T4826] Cannot create hsr debugfs directory [ 67.243182][ T4866] Zero length message leads to an empty skb [ 67.262885][ T4739] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.277287][ T4681] usb 1-1: Using ep0 maxpacket: 8 [ 67.370821][ T4739] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.378496][ T4572] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 67.381165][ T4572] Bluetooth: hci2: Injecting HCI hardware error event [ 67.383567][ T4029] Bluetooth: hci2: hardware error 0x00 [ 67.397188][ T4681] usb 1-1: config 7 has an invalid interface number: 122 but max is 1 [ 67.398791][ T4681] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 67.400745][ T4681] usb 1-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 67.402535][ T4681] usb 1-1: config 7 has no interface number 0 [ 67.403772][ T4681] usb 1-1: config 7 interface 122 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 67.408470][ T4876] udc-core: couldn't find an available UDC or it's busy [ 67.410259][ T4876] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 67.417338][ T4681] usb 1-1: config 7 interface 122 has no altsetting 0 [ 67.502836][ T4879] loop1: detected capacity change from 0 to 512 [ 67.537488][ T4566] Bluetooth: hci2: command 0x0409 tx timeout [ 67.577266][ T4681] usb 1-1: New USB device found, idVendor=04e2, idProduct=1400, bcdDevice=65.13 [ 67.579015][ T4681] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.580619][ T4681] usb 1-1: Product: syz [ 67.581424][ T4681] usb 1-1: Manufacturer: syz [ 67.582455][ T4681] usb 1-1: SerialNumber: syz [ 67.593267][ T4879] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 67.594965][ T4879] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c01c, mo2=0002] [ 67.603605][ T4879] EXT4-fs (loop1): orphan cleanup on readonly fs [ 67.605502][ T4879] EXT4-fs warning (device loop1): ext4_block_to_path:107: block 3279949761 > max in inode 13 [ 67.608286][ T4879] EXT4-fs warning (device loop1): ext4_block_to_path:107: block 3279949762 > max in inode 13 [ 67.618795][ T4879] EXT4-fs (loop1): 1 truncate cleaned up [ 67.623343][ T4879] EXT4-fs (loop1): mounted filesystem without journal. Opts: commit=0x0000000000000000,noblock_validity,user_xattr,,errors=continue. Quota mode: none. [ 67.641504][ T4879] EXT4-fs warning (device loop1): dx_probe:893: inode #2: comm syz.1.244: dx entry: limit 65535 != root limit 120 [ 67.644341][ T4879] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.244: Corrupt directory, running e2fsck is recommended [ 67.902207][ T4681] usb 1-1: USB disconnect, device number 11 [ 68.026327][ T4901] loop4: detected capacity change from 0 to 128 [ 68.056735][ T4901] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 68.137788][ T4739] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 68.194166][ T4739] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 68.199312][ T4896] loop1: detected capacity change from 0 to 32768 [ 68.251693][ T4911] udc-core: couldn't find an available UDC or it's busy [ 68.257309][ T4200] Bluetooth: hci1: command 0x0409 tx timeout [ 68.259940][ T4911] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 68.298798][ T4739] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 68.319991][ T4896] XFS (loop1): Mounting V5 Filesystem [ 68.349381][ T4739] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 68.359299][ T4896] XFS (loop1): Ending clean mount [ 68.362853][ T4896] XFS (loop1): Quotacheck needed: Please wait. [ 68.406730][ T4896] XFS (loop1): Quotacheck: Done. [ 68.417551][ T4073] Bluetooth: hci5: command 0x041b tx timeout [ 68.464415][ T4026] XFS (loop1): Unmounting Filesystem [ 68.497395][ T4826] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 68.539041][ T4826] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 68.579671][ T4826] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 68.609085][ T4826] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 68.657256][ T4202] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 68.729404][ T1834] device hsr_slave_0 left promiscuous mode [ 68.757616][ T1834] device hsr_slave_1 left promiscuous mode [ 68.837796][ T1834] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.839384][ T1834] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 68.843360][ T1834] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.844928][ T1834] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 68.846845][ T1834] device bridge_slave_1 left promiscuous mode [ 68.852195][ T1834] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.888599][ T1834] device bridge_slave_0 left promiscuous mode [ 68.889971][ T1834] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.997354][ T1834] device veth1_macvtap left promiscuous mode [ 68.998673][ T1834] device veth0_macvtap left promiscuous mode [ 69.000016][ T1834] device veth1_vlan left promiscuous mode [ 69.002066][ T1834] device veth0_vlan left promiscuous mode [ 69.260073][ T4202] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 69.261918][ T4202] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.263570][ T4202] usb 1-1: Product: syz [ 69.266073][ T4202] usb 1-1: Manufacturer: syz [ 69.266923][ T4202] usb 1-1: SerialNumber: syz [ 69.278768][ T4202] usb 1-1: config 0 descriptor?? [ 69.283473][ T1834] team0 (unregistering): Port device team_slave_1 removed [ 69.292668][ T1834] team0 (unregistering): Port device team_slave_0 removed [ 69.303187][ T1834] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 69.338350][ T4202] ch341 1-1:0.0: ch341-uart converter detected [ 69.350032][ T1834] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 69.508178][ T1834] bond0 (unregistering): Released all slaves [ 69.622010][ T3324] cfg80211: failed to load regulatory.db [ 69.630614][ T2058] ieee802154 phy0 wpan0: encryption failed: -22 [ 69.632052][ T2058] ieee802154 phy1 wpan1: encryption failed: -22 [ 69.685229][ T4739] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.714882][ T4964] udc-core: couldn't find an available UDC or it's busy [ 69.716348][ T4964] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 69.752195][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.754412][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.762344][ T4739] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.790490][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.792533][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.794596][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.796139][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.815754][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.839251][ T4968] udc-core: couldn't find an available UDC or it's busy [ 69.840749][ T4968] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 69.851779][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.853923][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.856096][ T379] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.857621][ T379] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.869324][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.871676][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.874063][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.876610][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.879650][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.896557][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.900597][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.906504][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.920617][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.927742][ T4826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.936094][ T4739] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.939376][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.941565][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.943649][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.951076][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.953283][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.960494][ T4826] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.965114][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.972895][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.975101][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.976610][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.988133][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.990657][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.992987][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.994999][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.996509][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.998621][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.001091][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.012955][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.015502][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.019446][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.021798][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.031541][ T4826] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 70.033703][ T4826] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.039436][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.041821][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.043911][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.046247][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.049885][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.052189][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.083707][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.085479][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.091379][ T4739] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.109955][ T555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.116251][ T555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.131197][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.135435][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.138999][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.141352][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.145199][ T4739] device veth0_vlan entered promiscuous mode [ 70.161249][ T4739] device veth1_vlan entered promiscuous mode [ 70.184363][ T4739] device veth0_macvtap entered promiscuous mode [ 70.189331][ T4739] device veth1_macvtap entered promiscuous mode [ 70.195032][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.199500][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.201628][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.203809][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.206193][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.208528][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.210151][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.216435][ T4739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.220687][ T4739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.224351][ T4739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.226708][ T4739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.228841][ T4739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.231013][ T4739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.232991][ T4739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.235216][ T4739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.241458][ T4739] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.245625][ T4826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.260559][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.262811][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.265025][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.317610][ T4739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.324565][ T4739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.326801][ T4739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.337084][ T1535] Bluetooth: hci1: command 0x041b tx timeout [ 70.338620][ T4739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.340580][ T4739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.342671][ T4739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.344719][ T4739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.346739][ T4739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.351164][ T4739] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.356343][ T4739] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.365087][ T4739] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.371173][ T4739] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.373174][ T4739] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.389357][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.391849][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.436736][ T4980] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 70.459649][ T4202] ch341-uart ttyUSB0: failed to read break control: -71 [ 70.461252][ T4202] ch341-uart: probe of ttyUSB0 failed with error -71 [ 70.467491][ T4202] usb 1-1: USB disconnect, device number 12 [ 70.471642][ T4202] ch341 1-1:0.0: device disconnected [ 70.498076][ T4390] Bluetooth: hci5: command 0x040f tx timeout [ 70.519886][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.522204][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.600718][ T4826] device veth0_vlan entered promiscuous mode [ 70.609192][ T293] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.611034][ T293] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.651774][ T555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.654119][ T555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.656305][ T555] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.670251][ T4826] device veth1_vlan entered promiscuous mode [ 70.684502][ T555] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.686717][ T555] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.695076][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.696875][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.718533][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.782416][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.784860][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.801402][ T4826] device veth0_macvtap entered promiscuous mode [ 70.835131][ T4826] device veth1_macvtap entered promiscuous mode [ 70.842954][ T4988] netlink: 'syz.3.196': attribute type 1 has an invalid length. [ 70.883695][ T4826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.885856][ T4826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.894841][ T4978] loop4: detected capacity change from 0 to 32768 [ 70.897208][ T4826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.899337][ T4826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.901185][ T4826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.923783][ T4826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.925711][ T4826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.929237][ T4826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.931195][ T4826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.933150][ T4826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.949044][ T4826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.952449][ T555] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.955371][ T555] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.970553][ T555] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.973707][ T555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.986240][ T4826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.988807][ T4826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.991091][ T4826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.997305][ T4826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.002544][ T4826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.004867][ T4826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.016562][ T4826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.021456][ T4826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.023449][ T4826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.025416][ T4826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.038187][ T4826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.043894][ T4826] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.045678][ T4826] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.069771][ T4826] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.076063][ T4826] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.079233][ T5001] udc-core: couldn't find an available UDC or it's busy [ 71.080817][ T5001] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 71.096065][ T555] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.100400][ T555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.164644][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.166346][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.171507][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.179088][ T4978] XFS (loop4): Mounting V5 Filesystem [ 71.257163][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.259071][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.262429][ T555] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.285912][ T4978] XFS (loop4): Ending clean mount [ 71.289205][ T4978] XFS (loop4): Quotacheck needed: Please wait. [ 71.345541][ T4978] XFS (loop4): Quotacheck: Done. [ 71.409176][ T4033] XFS (loop4): Unmounting Filesystem [ 71.554541][ T5020] udc-core: couldn't find an available UDC or it's busy [ 71.556828][ T5020] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 71.696179][ T5026] loop3: detected capacity change from 0 to 128 [ 71.776632][ T5026] FAT-fs (loop3): Directory bread(block 3236) failed [ 71.787206][ T5026] FAT-fs (loop3): Directory bread(block 3237) failed [ 71.788735][ T5026] FAT-fs (loop3): Directory bread(block 3238) failed [ 71.790069][ T5026] FAT-fs (loop3): Directory bread(block 3239) failed [ 71.791634][ T5026] FAT-fs (loop3): Directory bread(block 3240) failed [ 71.793029][ T5026] FAT-fs (loop3): Directory bread(block 3241) failed [ 71.794306][ T5026] FAT-fs (loop3): Directory bread(block 3242) failed [ 71.838596][ T5026] FAT-fs (loop3): Directory bread(block 3243) failed [ 72.242809][ T5050] udc-core: couldn't find an available UDC or it's busy [ 72.244207][ T5050] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 72.427102][ T7] Bluetooth: hci1: command 0x040f tx timeout [ 72.587400][ T7] Bluetooth: hci5: command 0x0419 tx timeout [ 72.711835][ T5039] loop4: detected capacity change from 0 to 32768 [ 72.789762][ T5034] loop1: detected capacity change from 0 to 40427 [ 72.849112][ T5039] XFS (loop4): Mounting V5 Filesystem [ 72.851115][ T5034] F2FS-fs (loop1): invalid crc value [ 72.864760][ T5034] F2FS-fs (loop1): Found nat_bits in checkpoint [ 72.976778][ T5034] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 73.070556][ T5039] XFS (loop4): Ending clean mount [ 73.106283][ T5039] XFS (loop4): Quotacheck needed: Please wait. [ 73.108658][ T4026] attempt to access beyond end of device [ 73.108658][ T4026] loop1: rw=2049, want=45104, limit=40427 [ 73.204542][ T5039] XFS (loop4): Quotacheck: Done. [ 73.267959][ T4033] XFS (loop4): Unmounting Filesystem [ 73.515586][ T5111] udc-core: couldn't find an available UDC or it's busy [ 73.517251][ T5111] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 73.531602][ T5073] loop2: detected capacity change from 0 to 40427 [ 73.560089][ T5073] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 73.561666][ T5073] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 73.565049][ T5073] F2FS-fs (loop2): invalid crc value [ 73.613547][ T5073] F2FS-fs (loop2): Found nat_bits in checkpoint [ 73.686534][ T5073] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 73.688501][ T5073] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 74.206918][ T5151] loop1: detected capacity change from 0 to 1024 [ 74.250867][ T5151] EXT4-fs (loop1): Ignoring removed orlov option [ 74.306920][ T5151] EXT4-fs (loop1): mounted filesystem without journal. Opts: orlov,noquota,barrier=0x0000000000000002,nombcache,block_validity,resgid=0x0000000000000000,noquota,min_batch_time=0x0000000000000008,delalloc,user_xattr,sysvgroups,,errors=continue. Quota mode: none. [ 74.351763][ T5164] udc-core: couldn't find an available UDC or it's busy [ 74.353235][ T5164] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 74.507213][ T4202] Bluetooth: hci1: command 0x0419 tx timeout [ 74.516121][ T5153] loop2: detected capacity change from 0 to 32768 [ 74.549853][ T5171] device bond1 entered promiscuous mode [ 74.551284][ T5171] 8021q: adding VLAN 0 to HW filter on device bond1 [ 74.684597][ T5153] XFS (loop2): Mounting V5 Filesystem [ 74.716367][ T5190] udc-core: couldn't find an available UDC or it's busy [ 74.721414][ T5190] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 74.777173][ T4073] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 74.795443][ T5153] XFS (loop2): Ending clean mount [ 74.798278][ T5153] XFS (loop2): Quotacheck needed: Please wait. [ 74.858784][ T5153] XFS (loop2): Quotacheck: Done. [ 74.890447][ T4826] XFS (loop2): Unmounting Filesystem [ 75.025936][ T5202] netlink: 44 bytes leftover after parsing attributes in process `syz.3.349'. [ 75.046098][ T5202] netlink: 43 bytes leftover after parsing attributes in process `syz.3.349'. [ 75.054778][ T5202] netlink: 'syz.3.349': attribute type 5 has an invalid length. [ 75.056543][ T5202] netlink: 43 bytes leftover after parsing attributes in process `syz.3.349'. [ 75.167165][ T4073] usb 1-1: config 0 has no interfaces? [ 75.357231][ T4073] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 75.359066][ T4073] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.360667][ T4073] usb 1-1: Product: syz [ 75.361517][ T4073] usb 1-1: Manufacturer: syz [ 75.362496][ T4073] usb 1-1: SerialNumber: syz [ 75.394787][ T4073] usb 1-1: config 0 descriptor?? [ 75.638387][ T4073] usb 1-1: USB disconnect, device number 13 [ 75.770163][ T5228] netlink: 3072 bytes leftover after parsing attributes in process `syz.2.360'. [ 76.104637][ T5220] loop3: detected capacity change from 0 to 32768 [ 76.196639][ T5253] loop2: detected capacity change from 0 to 8 [ 76.211765][ T5253] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 76.250442][ T5220] XFS (loop3): Mounting V5 Filesystem [ 76.364636][ T5220] XFS (loop3): Ending clean mount [ 76.369445][ T5220] XFS (loop3): Quotacheck needed: Please wait. [ 76.390894][ T5220] XFS (loop3): Quotacheck: Done. [ 76.482637][ T4739] XFS (loop3): Unmounting Filesystem [ 76.503659][ T5262] loop2: detected capacity change from 0 to 1024 [ 76.640634][ T5262] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,max_dir_size_kb=0x0000000000000001,dioread_lock,norecovery,discard,lazytime,noload,usrquota,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 76.657928][ T3324] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 76.758952][ T5246] loop4: detected capacity change from 0 to 40427 [ 76.809892][ T5246] F2FS-fs (loop4): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 76.811476][ T5246] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 76.814694][ T5267] ERROR: device name not specified. [ 76.818063][ T5246] F2FS-fs (loop4): invalid crc value [ 76.836351][ T5246] F2FS-fs (loop4): Found nat_bits in checkpoint [ 76.864483][ T5246] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 76.866122][ T5246] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 76.897843][ T3324] usb 1-1: Using ep0 maxpacket: 32 [ 76.983311][ T5277] rtc-efi rtc-efi.0: write status is 3 [ 76.986782][ T5277] rtc-efi rtc-efi.0: write status is 3 [ 77.017081][ T3324] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.019485][ T3324] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.021500][ T3324] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 77.025398][ T3324] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.045158][ T3324] usb 1-1: config 0 descriptor?? [ 77.088377][ T3324] hub 1-1:0.0: USB hub found [ 77.090058][ T5283] loop3: detected capacity change from 0 to 128 [ 77.144392][ T5285] loop4: detected capacity change from 0 to 2048 [ 77.225840][ T5283] devpts: called with bogus options [ 77.244189][ T5285] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 77.276542][ T5287] udc-core: couldn't find an available UDC or it's busy [ 77.281778][ T5287] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 77.324906][ T5289] udc-core: couldn't find an available UDC or it's busy [ 77.326332][ T5289] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 77.352752][ T3324] hub 1-1:0.0: 4 ports detected [ 77.457120][ T4681] Bluetooth: hci4: command 0x1003 tx timeout [ 77.458588][ T4036] Bluetooth: hci4: sending frame failed (-49) [ 77.567136][ T3324] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 77.568769][ T3324] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 77.667111][ T3324] usbhid 1-1:0.0: can't add hid device: -71 [ 77.668423][ T3324] usbhid: probe of 1-1:0.0 failed with error -71 [ 77.698152][ T3324] usb 1-1: USB disconnect, device number 14 [ 77.709248][ T5291] loop2: detected capacity change from 0 to 32768 [ 77.764768][ T5291] XFS (loop2): Mounting V5 Filesystem [ 77.819042][ T5291] XFS (loop2): Ending clean mount [ 77.821494][ T5291] XFS (loop2): Quotacheck needed: Please wait. [ 77.864724][ T5291] XFS (loop2): Quotacheck: Done. [ 77.906328][ T4826] XFS (loop2): Unmounting Filesystem [ 77.909301][ T5303] loop3: detected capacity change from 0 to 4096 [ 77.947084][ T5303] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 77.992372][ T5303] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 78.014761][ T5303] ntfs3: loop3: mft corrupted [ 78.016005][ T5303] ntfs3: loop3: Failed to load $Extend. [ 78.095801][ T5311] tipc: Started in network mode [ 78.096777][ T5311] tipc: Node identity 1, cluster identity 4711 [ 78.108715][ T5311] tipc: Node number set to 1 [ 78.136616][ T5315] loop0: detected capacity change from 0 to 64 [ 78.451271][ T5332] loop4: detected capacity change from 0 to 8 [ 78.518861][ T5332] SQUASHFS error: xz decompression failed, data probably corrupt [ 78.520758][ T5332] SQUASHFS error: Failed to read block 0x108: -5 [ 78.521984][ T5332] SQUASHFS error: Unable to read metadata cache entry [106] [ 78.523400][ T5332] SQUASHFS error: Unable to read inode 0x11f [ 78.647139][ T7] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 78.865925][ T5354] udc-core: couldn't find an available UDC or it's busy [ 78.874006][ T5354] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 78.956497][ T5338] loop2: detected capacity change from 0 to 32768 [ 79.037204][ T7] usb 1-1: config 0 has no interfaces? [ 79.049434][ T5338] XFS (loop2): Mounting V5 Filesystem [ 79.084071][ T5338] XFS (loop2): Ending clean mount [ 79.086477][ T5338] XFS (loop2): Quotacheck needed: Please wait. [ 79.107025][ T5338] XFS (loop2): Quotacheck: Done. [ 79.133186][ T4826] XFS (loop2): Unmounting Filesystem [ 79.197324][ T7] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 79.199326][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.200935][ T7] usb 1-1: Product: syz [ 79.201842][ T7] usb 1-1: Manufacturer: syz [ 79.202682][ T7] usb 1-1: SerialNumber: syz [ 79.218937][ T7] usb 1-1: config 0 descriptor?? [ 79.229528][ T5372] netlink: 20 bytes leftover after parsing attributes in process `syz.4.412'. [ 79.483572][ T4569] usb 1-1: USB disconnect, device number 15 [ 79.552060][ T7] Bluetooth: hci4: command 0x1001 tx timeout [ 79.553474][ T4029] Bluetooth: hci4: sending frame failed (-49) [ 79.654165][ T5390] udc-core: couldn't find an available UDC or it's busy [ 79.655931][ T5390] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 79.843483][ T5402] netlink: 32 bytes leftover after parsing attributes in process `syz.3.423'. [ 79.964514][ T5408] loop3: detected capacity change from 0 to 128 [ 79.986103][ T5408] sctp: [Deprecated]: syz.3.426 (pid 5408) Use of struct sctp_assoc_value in delayed_ack socket option. [ 79.986103][ T5408] Use struct sctp_sack_info instead [ 80.005513][ T5394] loop4: detected capacity change from 0 to 32768 [ 80.046212][ T5394] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz.4.419 (5394) [ 80.095564][ T5394] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 80.105636][ T5394] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 80.107996][ T5394] BTRFS info (device loop4): trying to use backup root at mount time [ 80.109692][ T5394] BTRFS info (device loop4): turning on flush-on-commit [ 80.117131][ T5394] BTRFS info (device loop4): using free space tree [ 80.118545][ T5394] BTRFS info (device loop4): has skinny extents [ 80.268303][ T5426] loop2: detected capacity change from 0 to 1024 [ 80.311932][ T5426] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 80.334164][ T5426] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,journal_ioprio=0x0000000000000003,resuid=0x0000000000000000,i_version,data=ordered,jqfmt=vfsold,barrier=0x0000000000000648,barrier=0x0000000000000007,,errors=continue. Quota mode: writeback. [ 80.413680][ T5394] BTRFS info (device loop4): enabling ssd optimizations [ 80.530914][ T5412] loop0: detected capacity change from 0 to 32768 [ 80.595819][ T5412] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.429 (5412) [ 80.688902][ T5412] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 80.688956][ T5412] BTRFS info (device loop0): using free space tree [ 80.688972][ T5412] BTRFS info (device loop0): has skinny extents [ 80.699471][ T5460] udc-core: couldn't find an available UDC or it's busy [ 80.699493][ T5460] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 80.859851][ T5412] BTRFS info (device loop0): enabling ssd optimizations [ 80.915598][ T5485] device pim6reg1 entered promiscuous mode [ 81.203204][ T26] audit: type=1326 audit(81.170:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5489 comm="syz.0.442" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8f9869a8 code=0x0 [ 81.374200][ T5512] loop4: detected capacity change from 0 to 512 [ 81.397646][ T5516] udc-core: couldn't find an available UDC or it's busy [ 81.399100][ T5516] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 81.462060][ T5512] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 81.617097][ T7] Bluetooth: hci4: command 0x1009 tx timeout [ 81.645449][ T5505] loop2: detected capacity change from 0 to 32768 [ 81.697561][ T5505] XFS: ikeep mount option is deprecated. [ 81.723434][ T5525] udc-core: couldn't find an available UDC or it's busy [ 81.725166][ T5525] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 81.796157][ T5505] XFS (loop2): Mounting V5 Filesystem [ 81.857664][ T5505] XFS (loop2): Ending clean mount [ 81.865939][ T5505] XFS (loop2): Quotacheck needed: Please wait. [ 81.891196][ T1838] XFS (loop2): Metadata corruption detected at xfs_dinode_verify+0x2c8/0xb58, inode 0x1806 dinode [ 81.898974][ T1838] XFS (loop2): Unmount and run xfs_repair [ 81.901337][ T1838] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 81.903373][ T1838] 00000000: 49 4e 81 ed 03 02 00 00 00 00 00 00 00 00 00 00 IN.............. [ 81.905128][ T1838] 00000010: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 81.913577][ T1838] 00000020: 34 f7 58 68 a5 e2 bf 3d 34 f7 58 68 a5 e2 bf 3d 4.Xh...=4.Xh...= [ 81.923451][ T1838] 00000030: 34 f7 58 68 a5 e2 bf 3d 00 00 00 00 00 00 00 0a 4.Xh...=........ [ 81.929317][ T1838] 00000040: 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 01 ................ [ 81.935271][ T1838] 00000050: 00 00 65 01 00 00 00 00 00 00 00 00 2c 50 36 f0 ..e.........,P6. [ 81.940345][ T1838] 00000060: ff ff ff ff cb 1f f2 eb 00 00 00 00 00 00 00 08 ................ [ 81.946040][ T1838] 00000070: 00 00 00 01 00 00 00 10 00 00 00 00 00 00 00 08 ................ [ 81.975587][ T5505] XFS (loop2): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 81.992551][ T5505] XFS (loop2): Metadata corruption detected at xfs_dinode_verify+0x2c8/0xb58, inode 0x1806 dinode [ 81.994886][ T5505] XFS (loop2): Unmount and run xfs_repair [ 81.996134][ T5505] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 81.998771][ T5505] 00000000: 49 4e 81 ed 03 02 00 00 00 00 00 00 00 00 00 00 IN.............. [ 82.000602][ T5505] 00000010: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 82.002713][ T5505] 00000020: 34 f7 58 68 a5 e2 bf 3d 34 f7 58 68 a5 e2 bf 3d 4.Xh...=4.Xh...= [ 82.004368][ T5505] 00000030: 34 f7 58 68 a5 e2 bf 3d 00 00 00 00 00 00 00 0a 4.Xh...=........ [ 82.006212][ T5505] 00000040: 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 01 ................ [ 82.009757][ T5505] 00000050: 00 00 65 01 00 00 00 00 00 00 00 00 2c 50 36 f0 ..e.........,P6. [ 82.011518][ T5505] 00000060: ff ff ff ff cb 1f f2 eb 00 00 00 00 00 00 00 08 ................ [ 82.015953][ T5505] 00000070: 00 00 00 01 00 00 00 10 00 00 00 00 00 00 00 08 ................ [ 82.029507][ T4826] XFS (loop2): Unmounting Filesystem [ 82.287627][ T5546] netlink: 140 bytes leftover after parsing attributes in process `syz.4.463'. [ 82.641841][ T5568] udc-core: couldn't find an available UDC or it's busy [ 82.643319][ T5568] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 82.910973][ T5587] netlink: 8 bytes leftover after parsing attributes in process `syz.4.481'. [ 82.978114][ T4029] Bluetooth: hci3: link tx timeout [ 82.979545][ T4029] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 83.038620][ T5596] loop3: detected capacity change from 0 to 47 [ 83.095292][ T5596] MINIX-fs: deleted inode referenced: 9 [ 83.116182][ T5596] MINIX-fs: deleted inode referenced: 9 [ 83.123009][ T5596] MINIX-fs: deleted inode referenced: 9 [ 83.124310][ T5596] MINIX-fs: deleted inode referenced: 9 [ 83.167133][ T7] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 83.280627][ T5605] loop3: detected capacity change from 0 to 1024 [ 83.342231][ T5605] EXT4-fs (loop3): mounted filesystem without journal. Opts: discard,bsdgroups,resuid=0x0000000000000000,noblock_validity,minixdf,errors=remount-ro,journal_ioprio=0x0000000000000006,data_err=abort,. Quota mode: writeback. [ 83.427258][ T7] usb 1-1: Using ep0 maxpacket: 8 [ 83.506911][ T5619] udc-core: couldn't find an available UDC or it's busy [ 83.524948][ T5619] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 83.630879][ T5628] udc-core: couldn't find an available UDC or it's busy [ 83.632521][ T5628] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 83.769766][ T7] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 83.771663][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.773585][ T7] usb 1-1: Product: syz [ 83.774390][ T7] usb 1-1: Manufacturer: syz [ 83.775476][ T7] usb 1-1: SerialNumber: syz [ 83.785898][ T7] usb 1-1: config 0 descriptor?? [ 84.057152][ T7] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 84.158528][ T5649] loop2: detected capacity change from 0 to 128 [ 84.162878][ T5649] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 84.183664][ T5649] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 84.202264][ T5651] udc-core: couldn't find an available UDC or it's busy [ 84.207333][ T5651] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 84.417163][ T4073] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 84.418997][ T4073] Bluetooth: hci5: Injecting HCI hardware error event [ 84.420687][ T4036] Bluetooth: hci5: hardware error 0x00 [ 84.580285][ T5655] loop2: detected capacity change from 0 to 32768 [ 84.708743][ T26] audit: type=1326 audit(84.680:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5639 comm="syz.4.506" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a1d19a8 code=0x7fc00000 [ 84.897814][ T5664] udc-core: couldn't find an available UDC or it's busy [ 84.899207][ T5664] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 84.947739][ T5665] udc-core: couldn't find an available UDC or it's busy [ 84.949387][ T5665] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 85.009038][ T5669] process 'syz.4.519' launched '/dev/fd/4' with NULL argv: empty string added [ 85.284367][ T5675] udc-core: couldn't find an available UDC or it's busy [ 85.285989][ T5675] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 85.623597][ T5679] chnl_net:caif_netlink_parms(): no params data found [ 85.692933][ T5688] netlink: 8 bytes leftover after parsing attributes in process `syz.2.526'. [ 85.766172][ T5679] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.767884][ T5679] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.770418][ T5679] device bridge_slave_0 entered promiscuous mode [ 85.788070][ T5679] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.795954][ T5679] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.799072][ T5679] device bridge_slave_1 entered promiscuous mode [ 85.846643][ T5695] loop4: detected capacity change from 0 to 1024 [ 85.851111][ T5679] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.864663][ T5679] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.885380][ T5697] netlink: 4 bytes leftover after parsing attributes in process `syz.2.529'. [ 85.886865][ T5679] team0: Port device team_slave_0 added [ 85.893506][ T5679] team0: Port device team_slave_1 added [ 85.903642][ T5695] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 85.919208][ T5695] EXT4-fs (loop4): barriers disabled [ 85.920409][ T5695] JBD2: no valid journal superblock found [ 85.921641][ T5695] EXT4-fs (loop4): error loading journal [ 85.926253][ T5679] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.928946][ T5679] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.934543][ T5679] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.939188][ T5679] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.940649][ T5679] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.946517][ T5679] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.059502][ T5679] device hsr_slave_0 entered promiscuous mode [ 86.123851][ T5679] device hsr_slave_1 entered promiscuous mode [ 86.169453][ T5679] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.171199][ T5679] Cannot create hsr debugfs directory [ 86.227259][ T7] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 86.234793][ T7] usb 1-1: USB disconnect, device number 16 [ 86.331309][ T5679] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.369160][ T5699] loop2: detected capacity change from 0 to 32768 [ 86.404238][ T5679] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.422746][ T5701] loop4: detected capacity change from 0 to 32768 [ 86.449698][ T5679] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.454186][ T5701] XFS (loop4): Invalid device [./file0], error=-15 [ 86.459649][ T5699] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop2 scanned by syz.2.530 (5699) [ 86.514271][ T5699] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 86.518194][ T5699] BTRFS info (device loop2): using free space tree [ 86.522458][ T5699] BTRFS info (device loop2): has skinny extents [ 86.530429][ T5679] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.685092][ T5699] BTRFS info (device loop2): enabling ssd optimizations [ 86.908318][ T5725] loop0: detected capacity change from 0 to 8192 [ 86.920242][ T5679] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 86.969501][ T5679] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.002020][ T5731] loop4: detected capacity change from 0 to 512 [ 87.029109][ T5679] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.050325][ T5679] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.086568][ T5731] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 87.186593][ T5679] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.220225][ T5679] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.231243][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 87.233405][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 87.235393][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 87.248613][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 87.255230][ T379] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.256815][ T379] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.259943][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 87.269844][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 87.279954][ T379] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.281584][ T379] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.287938][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 87.303001][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 87.320879][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 87.331021][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 87.333986][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 87.356015][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 87.390938][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 87.393524][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 87.402266][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 87.404551][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 87.413313][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 87.415870][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 87.423863][ T5679] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 87.435482][ T5726] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 87.495764][ T5751] udc-core: couldn't find an available UDC or it's busy [ 87.502144][ T5751] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 87.546614][ T4073] Bluetooth: hci6: command 0x0409 tx timeout [ 87.613929][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 87.615851][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 87.635533][ T5679] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.674765][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 87.684997][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 87.721805][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 87.724125][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 87.726567][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 87.732548][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 87.747928][ T5679] device veth0_vlan entered promiscuous mode [ 87.762802][ T5679] device veth1_vlan entered promiscuous mode [ 87.817769][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 87.820223][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 87.822378][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 87.828534][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 87.833218][ T5679] device veth0_macvtap entered promiscuous mode [ 87.851180][ T5679] device veth1_macvtap entered promiscuous mode [ 87.902525][ T5679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.905485][ T5726] usb 1-1: config 0 has no interfaces? [ 87.911346][ T5679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.917627][ T5679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.925508][ T5679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.933447][ T5679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.940233][ T5679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.947562][ T5679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.954351][ T5679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.960065][ T5679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.967214][ T5679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.974980][ T5679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.982836][ T5679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.992571][ T5679] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.003081][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 88.005403][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 88.011784][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 88.018233][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 88.043392][ T5679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.045470][ T5679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.048257][ T5679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.059196][ T5679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.070309][ T5679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.081803][ T5679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.103150][ T5679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.105456][ T5679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.116773][ T5679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.127889][ T5679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.129970][ T5679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.130685][ T5726] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 88.134200][ T5726] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.135834][ T5726] usb 1-1: Product: syz [ 88.136881][ T5726] usb 1-1: Manufacturer: syz [ 88.137666][ T5679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.138847][ T5726] usb 1-1: SerialNumber: syz [ 88.148246][ T5679] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.153538][ T5726] usb 1-1: config 0 descriptor?? [ 88.184003][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 88.186533][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 88.194841][ T5679] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.196668][ T5679] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.214378][ T5679] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.216204][ T5679] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.345755][ T5768] loop3: detected capacity change from 0 to 256 [ 88.382248][ T379] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.384344][ T379] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.390462][ T555] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 88.415487][ T5774] udc-core: couldn't find an available UDC or it's busy [ 88.417039][ T5774] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 88.438712][ T5768] UDF-fs: bad mount option "=" or missing value [ 88.455257][ T5726] usb 1-1: USB disconnect, device number 17 [ 88.475215][ T293] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.486377][ T293] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.504556][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 89.411652][ T5816] udc-core: couldn't find an available UDC or it's busy [ 89.413355][ T5816] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 89.494580][ T5780] loop1: detected capacity change from 0 to 32768 [ 89.544065][ T5780] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.522 (5780) [ 89.604250][ T5826] udc-core: couldn't find an available UDC or it's busy [ 89.606005][ T5826] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 89.624639][ T1535] Bluetooth: hci6: command 0x041b tx timeout [ 89.626669][ T5780] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 89.630846][ T5780] BTRFS info (device loop1): using free space tree [ 89.635608][ T5780] BTRFS info (device loop1): has skinny extents [ 89.681518][ T5831] capability: warning: `syz.2.576' uses deprecated v2 capabilities in a way that may be insecure [ 89.823008][ T379] BTRFS warning (device loop1): checksum verify failed on 5332992 wanted 0x229468c04b6036d81c5b233d3b277cb9824f2afa61a3e8eb0a4163c5aaced5a3 found 0x4ca9f583fa59f2f9c7626ad50a2c371a149003f2af46c3169cef122a107e17eb level 0 [ 89.830955][ T5780] BTRFS warning (device loop1): couldn't read tree root [ 89.948300][ T5780] BTRFS error (device loop1): open_ctree failed [ 90.035540][ T5780] affs: No valid root block on device loop1 [ 90.173961][ T4020] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by udevd (4020) [ 90.391546][ T5874] loop3: detected capacity change from 0 to 256 [ 90.592299][ T5882] udc-core: couldn't find an available UDC or it's busy [ 90.593680][ T5882] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 90.798277][ T1535] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 90.882486][ T5894] netlink: 8 bytes leftover after parsing attributes in process `syz.1.598'. [ 91.244075][ T1535] usb 1-1: config 0 has no interfaces? [ 91.323663][ T5888] loop4: detected capacity change from 0 to 32768 [ 91.395645][ T5888] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.595 (5888) [ 91.399670][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.401183][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.402823][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 91.447247][ T5912] udc-core: couldn't find an available UDC or it's busy [ 91.448669][ T5912] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 91.501206][ T1535] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 91.503205][ T1535] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.504787][ T1535] usb 1-1: Product: syz [ 91.505689][ T1535] usb 1-1: Manufacturer: syz [ 91.506456][ T1535] usb 1-1: SerialNumber: syz [ 91.507925][ T5888] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 91.509796][ T5888] BTRFS info (device loop4): using free space tree [ 91.511258][ T5888] BTRFS info (device loop4): has skinny extents [ 91.515523][ T1535] usb 1-1: config 0 descriptor?? [ 91.727193][ T1535] Bluetooth: hci6: command 0x040f tx timeout [ 91.883483][ T1535] usb 1-1: USB disconnect, device number 18 [ 91.885967][ T5888] BTRFS info (device loop4): enabling ssd optimizations [ 91.999717][ T5945] loop2: detected capacity change from 0 to 512 [ 92.005627][ T5945] EXT4-fs (loop2): Mount option "dioread_lock" incompatible with ext3 [ 92.387535][ T5966] udc-core: couldn't find an available UDC or it's busy [ 92.388944][ T5966] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 92.399265][ T5964] team0: Device macvlan2 is up. Set it down before adding it as a team port [ 92.584238][ T5974] binder: 5972:5974 tried to acquire reference to desc 0, got 1 instead [ 92.609252][ T5974] binder: 5972:5974 got transaction with invalid data ptr [ 92.611005][ T5974] binder: 5972:5974 transaction failed 29201/-14, size 0-24 line 3186 [ 92.619332][ T4681] binder: undelivered TRANSACTION_COMPLETE [ 92.621081][ T4681] binder: undelivered TRANSACTION_ERROR: 29201 [ 92.647901][ T5449] binder: undelivered transaction 5, process died. [ 92.735431][ T5982] loop1: detected capacity change from 0 to 64 [ 92.931119][ T5949] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 93.240567][ T5949] usb 1-1: Using ep0 maxpacket: 32 [ 93.400041][ T6017] udc-core: couldn't find an available UDC or it's busy [ 93.401534][ T6017] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 93.403587][ T6015] udc-core: couldn't find an available UDC or it's busy [ 93.409206][ T5949] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 93.410998][ T5949] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 93.412828][ T5949] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 93.414721][ T5949] usb 1-1: config 1 has no interface number 0 [ 93.415904][ T5949] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 93.418689][ T5949] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 93.421446][ T5949] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 93.423166][ T5949] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.425343][ T6015] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 93.445780][ T6019] loop4: detected capacity change from 0 to 256 [ 93.490421][ T6021] loop2: detected capacity change from 0 to 128 [ 93.505665][ T5949] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 93.739619][ T5949] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 93.793489][ T5949] Bluetooth: hci6: command 0x0419 tx timeout [ 93.812662][ T6027] udc-core: couldn't find an available UDC or it's busy [ 93.813991][ T6027] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 93.853254][ T6029] loop4: detected capacity change from 0 to 512 [ 94.373433][ T6041] loop4: detected capacity change from 0 to 64 [ 94.591943][ T6052] udc-core: couldn't find an available UDC or it's busy [ 94.595838][ T6052] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 94.719662][ T6041] BFS-fs: bfs_fill_super(): Inode 0x00000002 corrupted on loop4 [ 94.828764][ T5949] snd_usb_pod 1-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 94.889814][ T6054] udc-core: couldn't find an available UDC or it's busy [ 94.891403][ T6054] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 95.388799][ T6069] udc-core: couldn't find an available UDC or it's busy [ 95.390227][ T6069] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 95.576244][ T4681] usb 1-1: USB disconnect, device number 19 [ 95.593556][ T4681] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 95.643336][ T6076] udc-core: couldn't find an available UDC or it's busy [ 95.662805][ T6076] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 96.056323][ T6050] loop1: detected capacity change from 0 to 32768 [ 96.104069][ T6090] netlink: 40 bytes leftover after parsing attributes in process `syz.2.678'. [ 96.119147][ T6050] XFS (loop1): stripe width (5) must be a multiple of the stripe unit (6) [ 96.243157][ T6096] udc-core: couldn't find an available UDC or it's busy [ 96.245205][ T6096] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 96.288684][ T6101] syz.4.684 uses obsolete (PF_INET,SOCK_PACKET) [ 97.202628][ T6162] udc-core: couldn't find an available UDC or it's busy [ 97.204190][ T6162] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 97.207905][ T6164] loop0: detected capacity change from 0 to 512 [ 97.374896][ T6168] udc-core: couldn't find an available UDC or it's busy [ 97.376463][ T6168] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 97.603874][ T6153] loop4: detected capacity change from 0 to 40427 [ 97.647960][ T6153] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 97.649826][ T6153] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 97.653405][ T6153] F2FS-fs (loop4): invalid crc value [ 97.661053][ T6153] F2FS-fs (loop4): Found nat_bits in checkpoint [ 97.706386][ T6153] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 97.708106][ T6153] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 97.718043][ T6153] udc-core: couldn't find an available UDC or it's busy [ 97.719562][ T6153] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 97.787812][ T6176] attempt to access beyond end of device [ 97.787812][ T6176] loop4: rw=10241, want=45104, limit=40427 [ 97.847328][ T6164] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 97.850767][ T6164] EXT4-fs (loop0): 1 truncate cleaned up [ 97.851992][ T6164] EXT4-fs (loop0): mounted filesystem without journal. Opts: resuid=0x0000000000000000,noblock_validity,usrquota,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000008,jqfmt=vfsold,usrjquota=min_batch_time=0x0000000000000a9b,nodiscard,,errors=continue. Quota mode: writeback. [ 97.995103][ T6184] loop2: detected capacity change from 0 to 512 [ 98.424314][ T6207] loop2: detected capacity change from 0 to 8 [ 98.577301][ T4566] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 98.585808][ T6207] unable to read xattr id index table [ 98.910547][ T6222] loop1: detected capacity change from 0 to 760 [ 98.937430][ T4566] usb 1-1: config 0 has no interfaces? [ 99.097410][ T4566] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 99.099395][ T4566] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.101046][ T4566] usb 1-1: Product: syz [ 99.101839][ T4566] usb 1-1: Manufacturer: syz [ 99.102774][ T4566] usb 1-1: SerialNumber: syz [ 99.121256][ T4566] usb 1-1: config 0 descriptor?? [ 99.234286][ T6242] loop1: detected capacity change from 0 to 16 [ 99.307728][ T6242] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 99.318347][ T6245] loop2: detected capacity change from 0 to 2048 [ 99.319915][ T6242] cramfs: empty filesystem [ 99.365669][ T5449] usb 1-1: USB disconnect, device number 20 [ 99.382990][ T6248] udc-core: couldn't find an available UDC or it's busy [ 99.388303][ T6248] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 99.394157][ T7] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 99.395954][ T7] Bluetooth: hci1: Injecting HCI hardware error event [ 99.397767][ T4036] Bluetooth: hci1: hardware error 0x00 [ 99.876280][ T6250] device bond0 entered promiscuous mode [ 99.882145][ T6250] device bond_slave_0 entered promiscuous mode [ 99.883760][ T6250] device bond_slave_1 entered promiscuous mode [ 99.892632][ T6250] netlink: 'syz.4.752': attribute type 10 has an invalid length. [ 99.900908][ T6250] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.904240][ T6250] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.932235][ T6250] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.933750][ T6250] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.935824][ T6250] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.937384][ T6250] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.029515][ T6250] device bridge0 entered promiscuous mode [ 100.031441][ T6250] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 100.050390][ T6258] loop3: detected capacity change from 0 to 256 [ 100.173990][ T6245] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 100.187838][ T6245] Process accounting resumed [ 100.235544][ T6269] loop1: detected capacity change from 0 to 256 [ 100.287048][ T5449] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 100.356650][ T6274] device pim6reg1 entered promiscuous mode [ 100.460230][ T6278] udc-core: couldn't find an available UDC or it's busy [ 100.461734][ T6278] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 100.610665][ T6282] udc-core: couldn't find an available UDC or it's busy [ 100.612222][ T6282] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 100.827321][ T5449] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.829524][ T5449] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.831570][ T5449] usb 1-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 100.833325][ T5449] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.842510][ T5449] usb 1-1: config 0 descriptor?? [ 100.864100][ T6294] netlink: 4 bytes leftover after parsing attributes in process `syz.2.771'. [ 100.947253][ T6294] team0 (unregistering): Port device team_slave_0 removed [ 100.966286][ T6294] team0 (unregistering): Port device team_slave_1 removed [ 101.068099][ T6300] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 101.462268][ T6311] loop3: detected capacity change from 0 to 512 [ 101.646899][ T6311] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 101.649521][ T6311] ext4 filesystem being mounted at /136/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.664509][ T6304] loop4: detected capacity change from 0 to 40427 [ 101.679528][ T6311] cgroup2: Unknown parameter 'favordynmods' [ 101.756914][ T6304] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 101.758555][ T6304] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 101.764532][ T6304] F2FS-fs (loop4): invalid crc value [ 101.826775][ T6304] F2FS-fs (loop4): invalid journal entries nats 0 sits 262 [ 101.839766][ T6304] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-22) [ 101.982091][ T6329] udc-core: couldn't find an available UDC or it's busy [ 101.987063][ T6329] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 102.091269][ T4681] usb 1-1: USB disconnect, device number 21 [ 102.747460][ T5949] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 102.749244][ T5949] Bluetooth: hci6: Injecting HCI hardware error event [ 102.751233][ T4027] Bluetooth: hci6: hardware error 0x00 [ 102.781503][ T6331] loop1: detected capacity change from 0 to 40427 [ 102.938662][ T6361] loop4: detected capacity change from 0 to 128 [ 103.025186][ T6361] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 103.027780][ T6361] ext4 filesystem being mounted at /197/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 103.076652][ T6350] loop2: detected capacity change from 0 to 40427 [ 103.086309][ T6361] fscrypt (loop4, inode 12): Direct key flag not allowed with different contents and filenames modes [ 103.145617][ T6350] F2FS-fs (loop2): invalid crc value [ 103.173588][ T6350] F2FS-fs (loop2): Mismatch valid blocks 0 vs. 2 [ 103.175236][ T6350] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-117) [ 103.247330][ T5949] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 103.368196][ T6373] udc-core: couldn't find an available UDC or it's busy [ 103.369599][ T6373] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 103.657293][ T5949] usb 1-1: config 0 has no interfaces? [ 103.844516][ T5949] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 103.846349][ T5949] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.848311][ T5949] usb 1-1: Product: syz [ 103.849197][ T5949] usb 1-1: Manufacturer: syz [ 103.850232][ T5949] usb 1-1: SerialNumber: syz [ 103.855839][ T5949] usb 1-1: config 0 descriptor?? [ 103.921475][ T6387] udc-core: couldn't find an available UDC or it's busy [ 103.922984][ T6387] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 103.926306][ T6386] loop4: detected capacity change from 0 to 128 [ 103.981313][ T6386] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 103.984632][ T6386] ext4 filesystem being mounted at /201/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 104.069604][ T6331] F2FS-fs (loop1): invalid crc value [ 104.093875][ T7] usb 1-1: USB disconnect, device number 22 [ 104.226662][ T6331] F2FS-fs (loop1): Found nat_bits in checkpoint [ 104.261240][ T6331] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0 [ 104.307414][ T6331] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 104.343446][ T5679] attempt to access beyond end of device [ 104.343446][ T5679] loop1: rw=2049, want=45104, limit=40427 [ 105.570889][ T6407] loop0: detected capacity change from 0 to 40427 [ 106.082315][ T6407] F2FS-fs (loop0): Fix alignment : internally, start(4096) end(16896) block(12288) [ 106.086213][ T6407] F2FS-fs (loop0): invalid crc value [ 106.117247][ T6407] F2FS-fs (loop0): Found nat_bits in checkpoint [ 106.195074][ T6407] F2FS-fs (loop0): recover fsync data on readonly fs [ 106.218793][ T6407] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 106.585427][ T6423] udc-core: couldn't find an available UDC or it's busy [ 106.592678][ T6423] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 107.189649][ T6425] loop3: detected capacity change from 0 to 32768 [ 107.442415][ T6432] binder: 6431:6432 BC_INCREFS_DONE node 7 has no pending increfs request [ 108.238660][ T6442] loop3: detected capacity change from 0 to 32768 [ 108.261225][ T6442] XFS: ikeep mount option is deprecated. [ 108.344749][ T6442] XFS (loop3): Mounting V5 Filesystem [ 108.413459][ T6442] XFS (loop3): Ending clean mount [ 108.418283][ T6442] XFS (loop3): Quotacheck needed: Please wait. [ 108.502937][ T6442] XFS (loop3): Quotacheck: Done. [ 108.577194][ T4739] XFS (loop3): Unmounting Filesystem [ 111.864313][ T6456] udc-core: couldn't find an available UDC or it's busy [ 111.868224][ T6456] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 112.435907][ T6458] udc-core: couldn't find an available UDC or it's busy [ 112.447516][ T6458] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 113.039916][ T6460] loop2: detected capacity change from 0 to 256 [ 113.151637][ T6460] FAT-fs (loop2): Directory bread(block 64) failed [ 113.152979][ T6460] FAT-fs (loop2): Directory bread(block 65) failed [ 113.154323][ T6460] FAT-fs (loop2): Directory bread(block 66) failed [ 113.155668][ T6460] FAT-fs (loop2): Directory bread(block 67) failed [ 113.166090][ T6460] FAT-fs (loop2): Directory bread(block 68) failed [ 113.167880][ T6460] FAT-fs (loop2): Directory bread(block 69) failed [ 113.169254][ T6460] FAT-fs (loop2): Directory bread(block 70) failed [ 113.170529][ T6460] FAT-fs (loop2): Directory bread(block 71) failed [ 113.171824][ T6460] FAT-fs (loop2): Directory bread(block 72) failed [ 113.173385][ T6460] FAT-fs (loop2): Directory bread(block 73) failed [ 113.668127][ T6482] udc-core: couldn't find an available UDC or it's busy [ 113.681607][ T6482] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 113.764976][ T4681] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 114.098783][ T4681] usb 1-1: Using ep0 maxpacket: 8 [ 114.155355][ T6473] loop2: detected capacity change from 0 to 32768 [ 114.314424][ T6473] XFS (loop2): Mounting V5 Filesystem [ 114.385496][ T4681] usb 1-1: unable to get BOS descriptor or descriptor too short [ 114.533194][ T4681] usb 1-1: config 16 has an invalid interface number: 103 but max is 0 [ 114.534983][ T4681] usb 1-1: config 16 has no interface number 0 [ 114.536091][ T4681] usb 1-1: config 16 interface 103 has no altsetting 0 [ 114.665466][ T6521] loop4: detected capacity change from 0 to 512 [ 114.711949][ T6523] loop1: detected capacity change from 0 to 4096 [ 114.745522][ T4681] usb 1-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=53.36 [ 114.747459][ T4681] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.749262][ T4681] usb 1-1: Product: syz [ 114.751462][ T4681] usb 1-1: Manufacturer: syz [ 114.752374][ T4681] usb 1-1: SerialNumber: syz [ 114.806107][ T6521] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2802e02c, mo2=0002] [ 114.808903][ T6521] System zones: 1-12 [ 114.819044][ T6521] EXT4-fs error (device loop4): __ext4_iget:4872: inode #11: block 393240: comm syz.4.863: invalid block [ 114.827984][ T6521] EXT4-fs (loop4): Remounting filesystem read-only [ 114.829390][ T6521] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.863: couldn't read orphan inode 11 (err -117) [ 114.852912][ T6521] EXT4-fs (loop4): Remounting filesystem read-only [ 114.854262][ T6521] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,bsdgroups,noinit_itable,errors=remount-ro,max_batch_time=0x0000000000000001. Quota mode: none. [ 114.871044][ T6523] ntfs3: loop1: MFT: r=30, expect seq=3dac instead of 0! [ 114.889545][ T6473] XFS (loop2): Ending clean mount [ 114.896645][ T6473] XFS (loop2): Quotacheck needed: Please wait. [ 114.916723][ T6521] EXT4-fs error (device loop4): ext4_map_blocks:628: inode #2: block 5: comm syz.4.863: lblock 0 mapped to illegal pblock 5 (length 1) [ 114.943264][ T6521] EXT4-fs (loop4): Remounting filesystem read-only [ 114.944674][ T6521] EXT4-fs warning (device loop4): dx_probe:823: inode #2: lblock 0: comm syz.4.863: error -117 reading directory block [ 115.003167][ T6473] XFS (loop2): Quotacheck: Done. [ 115.130878][ T4681] hub 1-1:16.103: bad descriptor, ignoring hub [ 115.132302][ T4681] hub: probe of 1-1:16.103 failed with error -5 [ 115.150653][ T4681] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:16.103/input/input4 [ 115.170852][ T4826] XFS (loop2): Unmounting Filesystem [ 115.229956][ T6530] udc-core: couldn't find an available UDC or it's busy [ 115.232808][ T6530] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 115.262394][ T4681] usb 1-1: USB disconnect, device number 23 [ 115.841600][ T6536] loop0: detected capacity change from 0 to 4096 [ 116.003297][ T6542] loop1: detected capacity change from 0 to 2048 [ 116.192652][ T6550] netlink: 16 bytes leftover after parsing attributes in process `syz.3.878'. [ 116.216145][ T6552] loop4: detected capacity change from 0 to 512 [ 116.287790][ T6552] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 116.329976][ T6559] udc-core: couldn't find an available UDC or it's busy [ 116.331524][ T6559] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 116.333664][ T6552] EXT4-fs (loop4): orphan cleanup on readonly fs [ 116.335082][ T6552] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 116.352449][ T6552] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 116.367979][ T6552] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.877: attempt to clear invalid blocks 2 len 1 [ 116.376401][ T6552] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.877: invalid indirect mapped block 1819239214 (level 0) [ 116.384918][ T6552] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.877: invalid indirect mapped block 1819239214 (level 1) [ 116.406189][ T6552] EXT4-fs (loop4): 1 truncate cleaned up [ 116.407375][ T6552] EXT4-fs (loop4): mounted filesystem without journal. Opts: mblk_io_submit,jqfmt=vfsv0,jqfmt=vfsv1,resgid=0x0000000000000000,delalloc,usrjquota=..,errors=continue. Quota mode: writeback. [ 116.423584][ T6552] EXT4-fs error (device loop4): ext4_lookup:1855: inode #2: comm syz.4.877: 'file1' linked to parent dir [ 116.624922][ T6563] udc-core: couldn't find an available UDC or it's busy [ 116.626629][ T6563] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 117.055678][ T6567] udc-core: couldn't find an available UDC or it's busy [ 117.061994][ T6567] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 117.073853][ T6536] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 117.203038][ T6569] loop4: detected capacity change from 0 to 128 [ 117.224487][ T6542] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 117.226709][ T6542] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 117.232253][ T6542] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 117.234453][ T6542] UDF-fs: Scanning with blocksize 512 failed [ 117.428686][ T6542] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 117.435222][ T6542] UDF-fs: Scanning with blocksize 1024 failed [ 117.536044][ T6542] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 117.568735][ T6542] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 117.570354][ T6542] UDF-fs: Scanning with blocksize 2048 failed [ 117.573083][ T6542] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 117.601126][ T6542] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 117.646169][ T6542] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 117.648176][ T6542] UDF-fs: Scanning with blocksize 4096 failed [ 117.649346][ T6542] UDF-fs: warning (device loop1): udf_fill_super: No partition found (1) [ 117.705608][ T6577] loop3: detected capacity change from 0 to 512 [ 117.963502][ T6571] loop0: detected capacity change from 0 to 32768 [ 118.008969][ T6571] XFS (loop0): Mounting V5 Filesystem [ 118.050198][ T6571] XFS (loop0): Ending clean mount [ 118.055542][ T6571] XFS (loop0): Quotacheck needed: Please wait. [ 118.089979][ T6571] XFS (loop0): Quotacheck: Done. [ 118.125471][ T4032] XFS (loop0): Unmounting Filesystem [ 118.216177][ T6591] udc-core: couldn't find an available UDC or it's busy [ 118.218041][ T6591] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 118.746047][ T6603] udc-core: couldn't find an available UDC or it's busy [ 118.749052][ T6603] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 118.937964][ T6577] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 118.940575][ T6577] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 118.953107][ T6577] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 118.955093][ T6577] System zones: 1-12 [ 118.962166][ T5726] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 118.974786][ T6577] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2816: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 119.002083][ T6577] EXT4-fs (loop3): 1 truncate cleaned up [ 119.003347][ T6577] EXT4-fs (loop3): mounted filesystem without journal. Opts: nogrpid,jqfmt=vfsv0,debug_want_extra_isize=0x0000000000000068,debug,nombcache,quota,nolazytime,,errors=continue. Quota mode: writeback. [ 119.322571][ T6615] loop4: detected capacity change from 0 to 256 [ 119.347411][ T5726] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 119.349874][ T5726] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 119.352130][ T5726] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.358832][ T5726] usb 1-1: config 0 descriptor?? [ 119.413479][ T5726] pwc: Askey VC010 type 2 USB webcam detected. [ 119.441182][ T6624] binder: 6623:6624 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 119.443990][ T6624] binder: 6624 RLIMIT_NICE not set [ 119.464270][ T6628] udc-core: couldn't find an available UDC or it's busy [ 119.465641][ T6628] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 119.552592][ T6635] loop1: detected capacity change from 0 to 128 [ 119.627286][ T5726] pwc: send_video_command error -71 [ 119.628489][ T5726] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 119.630172][ T5726] Philips webcam: probe of 1-1:0.0 failed with error -71 [ 119.637575][ T5726] usb 1-1: USB disconnect, device number 24 [ 119.898550][ T7] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 119.905793][ T7] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 120.071247][ T6658] udc-core: couldn't find an available UDC or it's busy [ 120.072633][ T6658] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 120.257585][ T5726] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 120.299048][ T6672] netlink: 8 bytes leftover after parsing attributes in process `syz.2.930'. [ 120.637276][ T5726] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 120.639604][ T5726] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 120.641452][ T5726] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.652039][ T5726] usb 1-1: config 0 descriptor?? [ 120.705187][ T6678] udc-core: couldn't find an available UDC or it's busy [ 120.706618][ T6678] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 120.708935][ T5726] pwc: Askey VC010 type 2 USB webcam detected. [ 121.119751][ T5726] pwc: recv_control_msg error -32 req 02 val 2b00 [ 121.167053][ T5726] pwc: recv_control_msg error -32 req 02 val 2700 [ 121.217321][ T5726] pwc: recv_control_msg error -32 req 02 val 2c00 [ 121.267885][ T5726] pwc: recv_control_msg error -32 req 04 val 1000 [ 121.308866][ T5726] pwc: recv_control_msg error -32 req 04 val 1300 [ 121.347112][ T5726] pwc: recv_control_msg error -32 req 04 val 1400 [ 121.397176][ T5726] pwc: recv_control_msg error -32 req 02 val 2000 [ 121.427982][ T6716] loop0: detected capacity change from 0 to 7 [ 121.437984][ T5726] pwc: recv_control_msg error -32 req 02 val 2100 [ 121.445495][ T6718] loop1: detected capacity change from 0 to 512 [ 121.447675][ T6716] Dev loop0: unable to read RDB block 7 [ 121.449211][ T6716] loop0: unable to read partition table [ 121.451570][ T6716] loop0: partition table beyond EOD, truncated [ 121.455275][ T6716] loop_reread_partitions: partition scan of loop0 (被xڬdƤݡ [ 121.455275][ T6716] ) failed (rc=-5) [ 121.470086][ T6718] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 121.477438][ T5726] pwc: recv_control_msg error -32 req 04 val 1500 [ 121.517142][ T5726] pwc: recv_control_msg error -32 req 02 val 2500 [ 121.550733][ T6718] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.951: invalid indirect mapped block 4294967295 (level 1) [ 121.558273][ T5726] pwc: recv_control_msg error -32 req 02 val 2400 [ 121.575283][ T6718] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.951: invalid indirect mapped block 4294967295 (level 1) [ 121.596591][ T6724] udc-core: couldn't find an available UDC or it's busy [ 121.598505][ T5726] pwc: recv_control_msg error -32 req 02 val 2600 [ 121.600580][ T6724] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 121.638012][ T5726] pwc: recv_control_msg error -32 req 02 val 2900 [ 121.656896][ T6718] EXT4-fs (loop1): 2 truncates cleaned up [ 121.658250][ T6718] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,init_itable=0x0000000000000002,dioread_nolock,,errors=continue. Quota mode: writeback. [ 121.678821][ T5726] pwc: recv_control_msg error -32 req 02 val 2800 [ 121.809952][ T6734] udc-core: couldn't find an available UDC or it's busy [ 121.814814][ T6734] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 121.937425][ T5726] pwc: recv_control_msg error -71 req 04 val 1200 [ 121.946350][ T5726] pwc: Registered as video11. [ 121.953390][ T5726] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input5 [ 121.966547][ T5726] usb 1-1: USB disconnect, device number 25 [ 122.051830][ T6738] udc-core: couldn't find an available UDC or it's busy [ 122.053264][ T6738] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 122.741946][ T6752] loop2: detected capacity change from 0 to 2048 [ 122.752519][ T6752] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 122.937252][ T5726] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 123.063086][ T6758] udc-core: couldn't find an available UDC or it's busy [ 123.064746][ T6758] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 123.197096][ T5726] usb 1-1: Using ep0 maxpacket: 16 [ 123.317938][ T5726] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 123.320183][ T5726] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 123.477283][ T5726] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 123.479417][ T5726] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.481067][ T5726] usb 1-1: Product: syz [ 123.482088][ T5726] usb 1-1: Manufacturer: syz [ 123.482947][ T5726] usb 1-1: SerialNumber: syz [ 123.772940][ T5950] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 123.775773][ T5950] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 123.790590][ T5950] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz1 [ 123.874695][ T6769] udc-core: couldn't find an available UDC or it's busy [ 123.879460][ T6769] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 123.997234][ T5726] usb 1-1: cannot find UAC_HEADER [ 124.047548][ T5726] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 124.071008][ T5726] usb 1-1: USB disconnect, device number 26 [ 124.089392][ T4506] udevd[4506]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 124.373353][ T6775] loop4: detected capacity change from 0 to 32768 [ 124.485652][ T6775] XFS (loop4): Mounting V5 Filesystem [ 124.536692][ T6787] loop0: detected capacity change from 0 to 512 [ 124.583181][ T6787] EXT4-fs (loop0): Ignoring removed orlov option [ 124.728492][ T6775] XFS (loop4): Ending clean mount [ 124.731323][ T6775] XFS (loop4): Quotacheck needed: Please wait. [ 124.744073][ T6787] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,orlov,minixdf,,errors=continue. Quota mode: writeback. [ 124.746714][ T6787] ext4 filesystem being mounted at /136/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 124.916994][ T6812] udc-core: couldn't find an available UDC or it's busy [ 124.918489][ T6812] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 124.941879][ T6775] XFS (loop4): Quotacheck: Done. [ 125.036309][ T4033] XFS (loop4): Unmounting Filesystem [ 125.059808][ T6818] sctp: [Deprecated]: syz.2.992 (pid 6818) Use of int in max_burst socket option. [ 125.059808][ T6818] Use struct sctp_assoc_value instead [ 125.905300][ T6830] loop3: detected capacity change from 0 to 32768 [ 126.060363][ T6830] XFS (loop3): Mounting V5 Filesystem [ 126.221888][ T6830] XFS (loop3): Ending clean mount [ 126.263520][ T4739] XFS (loop3): Unmounting Filesystem [ 126.366818][ T6858] udc-core: couldn't find an available UDC or it's busy [ 126.368278][ T6858] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 126.712206][ T6847] loop0: detected capacity change from 0 to 40427 [ 126.808027][ T6847] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 126.809654][ T6847] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 126.813153][ T6847] F2FS-fs (loop0): invalid crc value [ 126.858051][ T6847] F2FS-fs (loop0): Found nat_bits in checkpoint [ 126.896482][ T6847] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 126.907040][ T6847] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 126.909335][ T6864] udc-core: couldn't find an available UDC or it's busy [ 126.911072][ T6864] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 126.943150][ T6866] udc-core: couldn't find an available UDC or it's busy [ 126.944598][ T6866] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 127.547034][ T7] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 127.797549][ T7] usb 1-1: Using ep0 maxpacket: 16 [ 127.927328][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 127.967002][ T6889] udc-core: couldn't find an available UDC or it's busy [ 127.968479][ T6889] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 128.108836][ T7] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 128.110797][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.112334][ T7] usb 1-1: Product: syz [ 128.113155][ T7] usb 1-1: Manufacturer: syz [ 128.114108][ T7] usb 1-1: SerialNumber: syz [ 128.131611][ T7] usb 1-1: config 0 descriptor?? [ 128.171229][ T7] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 128.173264][ T7] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 128.804807][ T7] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 129.013734][ T6930] udc-core: couldn't find an available UDC or it's busy [ 129.015222][ T6930] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 129.094081][ T6935] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1036'. [ 129.193159][ T6937] udc-core: couldn't find an available UDC or it's busy [ 129.203600][ T6937] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 129.807375][ T6945] udc-core: couldn't find an available UDC or it's busy [ 129.808776][ T6945] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 129.810550][ T7] em28xx 1-1:0.0: writing to i2c device at 0xa0 failed (error=-5) [ 129.812502][ T7] em28xx 1-1:0.0: failed to read eeprom (err=-5) [ 129.813892][ T7] em28xx 1-1:0.0: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 129.880952][ T6941] loop3: detected capacity change from 0 to 32768 [ 129.957793][ T6941] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.1039 (6941) [ 129.958087][ T7] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 129.962075][ T7] em28xx 1-1:0.0: dvb set to bulk mode. [ 129.972031][ T6953] xt_l2tp: v2 tid > 0xffff: 4294901760 [ 129.974963][ T5947] em28xx 1-1:0.0: Binding DVB extension [ 130.002699][ T7] usb 1-1: USB disconnect, device number 27 [ 130.010003][ T6955] udc-core: couldn't find an available UDC or it's busy [ 130.018649][ T6941] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 130.019523][ T7] em28xx 1-1:0.0: Disconnecting em28xx [ 130.020520][ T6941] BTRFS info (device loop3): using free space tree [ 130.023253][ T6941] BTRFS info (device loop3): has skinny extents [ 130.029290][ T6955] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 130.085996][ T5947] em28xx 1-1:0.0: Registering input extension [ 130.110454][ T7] em28xx 1-1:0.0: Closing input extension [ 130.136064][ T7] em28xx 1-1:0.0: Freeing device [ 130.302301][ T1838] BTRFS warning (device loop3): checksum verify failed on 1052672 wanted 0x11f3e929624b680852cd2754314153a53c00b22ae8936d589814e00d5ed09030 found 0x16d2c5d203687aa34b83383d9a2e0d1d59c4b5f6ce8020ca7b3d9618ece8383b level 0 [ 130.308312][ T6981] udc-core: couldn't find an available UDC or it's busy [ 130.309684][ T6981] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 130.317536][ T6941] BTRFS error (device loop3): failed to read chunk root [ 130.439347][ T6941] BTRFS error (device loop3): open_ctree failed [ 130.458965][ T6984] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1051'. [ 130.625184][ T6993] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1053'. [ 130.726741][ T5448] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 130.732703][ T5448] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 130.735565][ T7000] UHID_CREATE from different security context by process 218 (syz.1.1057), this is not allowed. [ 130.941088][ T7008] udc-core: couldn't find an available UDC or it's busy [ 130.961497][ T7008] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 131.086252][ T2058] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.087872][ T2058] ieee802154 phy1 wpan1: encryption failed: -22 [ 131.332194][ T7020] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1067'. [ 131.439847][ T7024] udc-core: couldn't find an available UDC or it's busy [ 131.441383][ T7024] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 131.913598][ T7010] loop1: detected capacity change from 0 to 32768 [ 131.931283][ T7010] XFS: ikeep mount option is deprecated. [ 132.075089][ T7010] XFS (loop1): Mounting V5 Filesystem [ 132.105664][ T7045] udc-core: couldn't find an available UDC or it's busy [ 132.120381][ T7045] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 132.323025][ T7057] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1081'. [ 132.447619][ T7010] XFS (loop1): Ending clean mount [ 132.451352][ T7010] XFS (loop1): Quotacheck needed: Please wait. [ 132.492280][ T7010] XFS (loop1): Quotacheck: Done. [ 132.549612][ T7062] udc-core: couldn't find an available UDC or it's busy [ 132.551125][ T7062] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 132.559034][ T5679] XFS (loop1): Unmounting Filesystem [ 132.938138][ T7070] udc-core: couldn't find an available UDC or it's busy [ 132.940755][ T7070] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 133.330463][ T7082] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1093'. [ 133.432597][ T7085] udc-core: couldn't find an available UDC or it's busy [ 133.437946][ T7085] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 133.513549][ T7093] udc-core: couldn't find an available UDC or it's busy [ 133.515187][ T7093] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 133.636319][ T7099] udc-core: couldn't find an available UDC or it's busy [ 133.643373][ T7099] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 134.214687][ T7109] udc-core: couldn't find an available UDC or it's busy [ 134.216499][ T7109] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 134.349120][ T7115] loop1: detected capacity change from 0 to 4096 [ 134.421621][ T7120] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 134.508733][ T7124] xt_l2tp: wrong L2TP version: 0 [ 134.690261][ T7131] udc-core: couldn't find an available UDC or it's busy [ 134.693826][ T7132] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1116'. [ 134.695296][ T7131] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 134.776822][ T7129] loop0: detected capacity change from 0 to 4096 [ 134.850667][ T7129] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 134.852610][ T7129] ntfs3: loop0: RAW NTFS volume: Filesystem size 0.11 Gb > volume size 0.00 Gb. Mount in read-only [ 135.006662][ T7144] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1122'. [ 135.215506][ T7154] loop3: detected capacity change from 0 to 512 [ 135.336896][ T7159] udc-core: couldn't find an available UDC or it's busy [ 135.341929][ T7159] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 135.386279][ T7161] netlink: 'syz.2.1129': attribute type 10 has an invalid length. [ 135.425354][ T7161] netlink: 'syz.2.1129': attribute type 10 has an invalid length. [ 135.434792][ T7161] bond0: (slave netdevsim0): no link monitoring support [ 135.438364][ T7161] bond0: (slave netdevsim0): MII and ETHTOOL support not available for slave, and arp_interval/arp_ip_target module parameters not specified, thus bonding will not detect link failures! see bonding.txt for details [ 135.445406][ T7161] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 135.498813][ T7163] netlink: 'syz.2.1130': attribute type 29 has an invalid length. [ 135.500863][ T7163] netlink: 'syz.2.1130': attribute type 29 has an invalid length. [ 135.515625][ T7163] netlink: 'syz.2.1130': attribute type 29 has an invalid length. [ 135.521653][ T7163] netlink: 'syz.2.1130': attribute type 29 has an invalid length. [ 135.578763][ T7165] udc-core: couldn't find an available UDC or it's busy [ 135.580103][ T7165] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 136.033990][ T7169] loop1: detected capacity change from 0 to 4096 [ 136.061463][ T7169] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 136.063534][ T7169] ntfs3: loop1: RAW NTFS volume: Filesystem size 0.11 Gb > volume size 0.00 Gb. Mount in read-only [ 136.135039][ T7175] loop2: detected capacity change from 0 to 164 [ 136.270195][ T7154] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 136.333359][ T7179] loop1: detected capacity change from 0 to 1024 [ 136.367271][ T7179] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 136.369375][ T7179] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 136.384754][ T7179] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e841c01c, mo2=0003] [ 136.386557][ T7179] System zones: 0-1, 3-36 [ 136.486404][ T7179] EXT4-fs (loop1): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000000,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,jqfmt=vfsold,data=ordered,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 136.604068][ T7179] EXT4-fs (loop1): re-mounted. Opts: (null). Quota mode: writeback. [ 136.636762][ T7184] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e841c01c, mo2=0003] [ 136.663948][ T7184] EXT4-fs (loop1): re-mounted. Opts: (null). Quota mode: writeback. [ 136.724603][ T7181] loop4: detected capacity change from 0 to 32768 [ 136.791312][ T7181] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.1139 (7181) [ 136.829652][ T7181] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm [ 136.831756][ T7181] BTRFS info (device loop4): force clearing of disk cache [ 136.833240][ T7181] BTRFS info (device loop4): enabling disk space caching [ 136.836498][ T7181] BTRFS info (device loop4): disabling tree log [ 136.859243][ T7181] BTRFS info (device loop4): metadata ratio 5 [ 136.860649][ T7181] BTRFS info (device loop4): disk space caching is enabled [ 136.862193][ T7181] BTRFS info (device loop4): has skinny extents [ 137.163283][ T7181] BTRFS info (device loop4): enabling ssd optimizations [ 137.165736][ T7181] BTRFS info (device loop4): clearing free space tree [ 137.169210][ T7181] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 137.172575][ T7181] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 137.548899][ T7203] BTRFS info (device loop4): balance: start -d -m [ 137.554005][ T7203] BTRFS info (device loop4): relocating block group 6881280 flags data|metadata [ 137.692949][ T7203] BTRFS info (device loop4): relocating block group 5242880 flags data|metadata [ 137.727349][ T7203] BTRFS info (device loop4): balance: canceled [ 138.130950][ T7205] netlink: 'syz.1.1140': attribute type 10 has an invalid length. [ 138.208923][ T7205] team0: Port device netdevsim0 added [ 138.243371][ T7210] netlink: 'syz.1.1140': attribute type 10 has an invalid length. [ 138.248147][ T7212] udc-core: couldn't find an available UDC or it's busy [ 138.252061][ T7212] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 138.304236][ T7210] team0: Port device netdevsim0 removed [ 138.324045][ T7210] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 138.444976][ T7218] udc-core: couldn't find an available UDC or it's busy [ 138.446534][ T7218] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 138.908028][ T7225] loop4: detected capacity change from 0 to 4096 [ 138.961497][ T7225] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 138.963563][ T7225] ntfs3: loop4: RAW NTFS volume: Filesystem size 0.11 Gb > volume size 0.00 Gb. Mount in read-only [ 139.063667][ T7229] loop3: detected capacity change from 0 to 1024 [ 139.085916][ T7229] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 139.090424][ T7229] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 139.108689][ T7233] binder: 7232:7233 ERROR: BC_REGISTER_LOOPER called without request [ 139.111198][ T7233] binder: 7232:7233 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 139.238837][ T7229] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e841c01c, mo2=0003] [ 139.240544][ T7229] System zones: 0-1, 3-36 [ 139.343732][ T7246] loop1: detected capacity change from 0 to 2048 [ 139.362005][ T7229] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000000,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,jqfmt=vfsold,data=ordered,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 139.447989][ T7229] EXT4-fs (loop3): re-mounted. Opts: (null). Quota mode: writeback. [ 139.469390][ T7229] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e841c01c, mo2=0003] [ 139.499539][ T7229] EXT4-fs (loop3): re-mounted. Opts: (null). Quota mode: writeback. [ 139.780621][ T7252] udc-core: couldn't find an available UDC or it's busy [ 139.782057][ T7252] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 139.902076][ T7248] loop2: detected capacity change from 0 to 32768 [ 139.992635][ T7248] XFS (loop2): Mounting V5 Filesystem [ 140.060328][ T7253] loop3: detected capacity change from 0 to 512 [ 140.123402][ T7248] XFS (loop2): Ending clean mount [ 140.159280][ T7253] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 140.172720][ T7253] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 140.178281][ T7253] EXT4-fs error (device loop3): ext4_acquire_dquot:6197: comm syz.3.1162: Failed to acquire dquot type 1 [ 140.197321][ T7253] EXT4-fs (loop3): 1 truncate cleaned up [ 140.198487][ T7253] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 140.208175][ T7253] ext4 filesystem being mounted at /225/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.214360][ T4826] XFS (loop2): Unmounting Filesystem [ 140.587033][ T7246] EXT4-fs (loop1): Ignoring removed nobh option [ 140.635552][ T7243] loop4: detected capacity change from 0 to 32768 [ 140.655081][ T7246] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_lock,usrjquota=,errors=remount-ro,norecovery,auto_da_alloc,noquota,nobh,barrier=0x0000000000000000,grpjquota=,jqfmt=vfsold,noblock_validity,. Quota mode: none. [ 140.684457][ T7264] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 248: padding at end of block bitmap is not set [ 140.735458][ T7243] XFS (loop4): Mounting V5 Filesystem [ 140.876736][ T7280] netlink: 'syz.2.1166': attribute type 9 has an invalid length. [ 140.891010][ T7280] netlink: 'syz.2.1166': attribute type 6 has an invalid length. [ 140.892794][ T7280] netlink: 'syz.2.1166': attribute type 7 has an invalid length. [ 140.894467][ T7280] netlink: 'syz.2.1166': attribute type 8 has an invalid length. [ 140.960983][ T7243] XFS (loop4): Ending clean mount [ 140.963726][ T7243] XFS (loop4): Quotacheck needed: Please wait. [ 141.047913][ T7243] XFS (loop4): Quotacheck: Done. [ 141.109534][ T4033] XFS (loop4): Unmounting Filesystem [ 141.415655][ T7291] udc-core: couldn't find an available UDC or it's busy [ 141.418471][ T7291] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 142.085407][ T7309] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1180'. [ 142.126323][ T7313] udc-core: couldn't find an available UDC or it's busy [ 142.137226][ T7313] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 142.355505][ T7313] udc-core: couldn't find an available UDC or it's busy [ 142.358211][ T7313] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 142.365697][ T7323] udc-core: couldn't find an available UDC or it's busy [ 142.377172][ T7323] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 142.578422][ T7331] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 142.702520][ T7333] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1191'. [ 142.953020][ T7335] udc-core: couldn't find an available UDC or it's busy [ 142.954559][ T7335] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 143.721886][ T7347] udc-core: couldn't find an available UDC or it's busy [ 143.723468][ T7347] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 144.738923][ T7363] udc-core: couldn't find an available UDC or it's busy [ 144.740553][ T7363] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 144.941963][ T7367] udc-core: couldn't find an available UDC or it's busy [ 144.943490][ T7367] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 145.004066][ T7361] loop1: detected capacity change from 0 to 32768 [ 145.043773][ T7361] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.1204 (7361) [ 145.082695][ T7361] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm [ 145.084572][ T7361] BTRFS info (device loop1): setting nodatacow, compression disabled [ 145.086360][ T7361] BTRFS info (device loop1): max_inline at 0 [ 145.094588][ T7361] BTRFS info (device loop1): enabling disk space caching [ 145.096094][ T7361] BTRFS info (device loop1): turning off barriers [ 145.131874][ T7361] BTRFS info (device loop1): turning on flush-on-commit [ 145.133560][ T7361] BTRFS info (device loop1): doing ref verification [ 145.134974][ T7361] BTRFS info (device loop1): force clearing of disk cache [ 145.153340][ T7361] BTRFS info (device loop1): enabling ssd optimizations [ 145.154958][ T7361] BTRFS info (device loop1): max_inline at 4096 [ 145.156235][ T7361] BTRFS info (device loop1): disk space caching is enabled [ 145.176194][ T7361] BTRFS info (device loop1): has skinny extents [ 145.323572][ T7391] udc-core: couldn't find an available UDC or it's busy [ 145.325412][ T7391] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 145.480787][ T7361] BTRFS info (device loop1): clearing free space tree [ 145.482619][ T7361] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 145.484620][ T7361] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 145.590702][ T7404] loop2: detected capacity change from 0 to 4096 [ 145.618780][ T7404] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 145.620596][ T7404] ntfs3: loop2: RAW NTFS volume: Filesystem size 0.11 Gb > volume size 0.00 Gb. Mount in read-only [ 145.955325][ T7415] udc-core: couldn't find an available UDC or it's busy [ 145.956900][ T7415] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 146.472236][ T7409] loop0: detected capacity change from 0 to 32768 [ 146.589808][ T7417] loop4: detected capacity change from 0 to 32768 [ 146.718783][ T7423] udc-core: couldn't find an available UDC or it's busy [ 146.720212][ T7423] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 147.505292][ T7437] udc-core: couldn't find an available UDC or it's busy [ 147.506664][ T7437] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 147.717533][ T7409] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.1217 (7409) [ 147.723151][ T7446] udc-core: couldn't find an available UDC or it's busy [ 147.724660][ T7446] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 147.741901][ T7409] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 147.743811][ T7409] BTRFS info (device loop0): force zlib compression, level 3 [ 147.745509][ T7409] BTRFS info (device loop0): force clearing of disk cache [ 147.753847][ T7409] BTRFS info (device loop0): setting nodatasum [ 147.755006][ T7409] BTRFS info (device loop0): use zlib compression, level 3 [ 147.756515][ T7409] BTRFS info (device loop0): allowing degraded mounts [ 147.783161][ T7409] BTRFS info (device loop0): enabling disk space caching [ 147.784693][ T7409] BTRFS info (device loop0): disk space caching is enabled [ 147.786124][ T7409] BTRFS info (device loop0): has skinny extents [ 147.839313][ T7449] sp0: Synchronizing with TNC [ 148.035538][ T7467] loop2: detected capacity change from 0 to 256 [ 148.110265][ T7409] BTRFS info (device loop0): enabling ssd optimizations [ 148.112608][ T7409] BTRFS info (device loop0): clearing free space tree [ 148.114107][ T7409] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 148.116420][ T7409] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 148.255221][ T7409] BTRFS info (device loop0): balance: start -f -ssoft,usage=18446744073709551615,limit=0..131072 [ 148.260309][ T7409] BTRFS info (device loop0): relocating block group 1048576 flags system [ 148.374480][ T7409] BTRFS info (device loop0): balance: ended with status: 0 [ 149.082572][ T7500] loop3: detected capacity change from 0 to 8192 [ 149.313526][ T7478] loop1: detected capacity change from 0 to 40427 [ 149.340581][ T7478] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 149.342017][ T7478] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 149.344260][ T7478] F2FS-fs (loop1): Unrecognized mount option "age_extent_cache" or missing value [ 149.366872][ T7489] loop2: detected capacity change from 0 to 32768 [ 149.602689][ T7504] loop1: detected capacity change from 0 to 2048 [ 149.684226][ T7504] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 149.702264][ T7504] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 150.287246][ T7500] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 150.289633][ T7500] REISERFS (device loop3): using ordered data mode [ 150.291038][ T7500] reiserfs: using flush barriers [ 150.293531][ T7500] REISERFS (device loop3): journal params: device ram0, size 127, journal first block 18, max trans len 1024, max batch 900, max commit age 30, max trans age 30 [ 150.317012][ T7500] REISERFS (device loop3): checking transaction log (ram0) [ 150.333538][ T7524] udc-core: couldn't find an available UDC or it's busy [ 150.335603][ T7524] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 150.367694][ T7500] ================================================================== [ 150.369668][ T7500] BUG: KASAN: use-after-free in reiserfs_read_locked_inode+0x17e8/0x1f54 [ 150.371411][ T7500] Read of size 4 at addr ffff0001186bb000 by task syz.3.1253/7500 [ 150.373105][ T7500] [ 150.373571][ T7500] CPU: 1 PID: 7500 Comm: syz.3.1253 Not tainted 5.15.168-syzkaller #0 [ 150.375243][ T7500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 150.377403][ T7500] Call trace: [ 150.378194][ T7500] dump_backtrace+0x0/0x530 [ 150.379101][ T7500] show_stack+0x2c/0x3c [ 150.380041][ T7500] dump_stack_lvl+0x108/0x170 [ 150.381065][ T7500] print_address_description+0x7c/0x3f0 [ 150.382169][ T7500] kasan_report+0x174/0x1e4 [ 150.383229][ T7500] __asan_report_load_n_noabort+0x40/0x4c [ 150.384431][ T7500] reiserfs_read_locked_inode+0x17e8/0x1f54 [ 150.385658][ T7500] reiserfs_fill_super+0x108c/0x1e8c [ 150.386734][ T7500] mount_bdev+0x274/0x370 [ 150.387676][ T7500] get_super_block+0x44/0x58 [ 150.388556][ T7500] legacy_get_tree+0xd4/0x16c [ 150.389626][ T7500] vfs_get_tree+0x90/0x274 [ 150.390489][ T7500] do_new_mount+0x278/0x8fc [ 150.391532][ T7500] path_mount+0x594/0x101c [ 150.392501][ T7500] __arm64_sys_mount+0x510/0x5e0 [ 150.393496][ T7500] invoke_syscall+0x98/0x2b8 [ 150.394468][ T7500] el0_svc_common+0x138/0x258 [ 150.395538][ T7500] do_el0_svc+0x58/0x14c [ 150.396395][ T7500] el0_svc+0x7c/0x1f0 [ 150.397359][ T7500] el0t_64_sync_handler+0x84/0xe4 [ 150.398368][ T7500] el0t_64_sync+0x1a0/0x1a4 [ 150.399377][ T7500] [ 150.399828][ T7500] The buggy address belongs to the page: [ 150.401067][ T7500] page:000000009d8e46c3 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x1586bb [ 150.403140][ T7500] flags: 0x5ffc00000000000(node=0|zone=2|lastcpupid=0x7ff) [ 150.404570][ T7500] raw: 05ffc00000000000 fffffc000461af08 fffffc0004618a88 0000000000000000 [ 150.406309][ T7500] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000 [ 150.408160][ T7500] page dumped because: kasan: bad access detected [ 150.409592][ T7500] [ 150.410208][ T7500] Memory state around the buggy address: [ 150.411443][ T7500] ffff0001186baf00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 150.413055][ T7500] ffff0001186baf80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 150.414735][ T7500] >ffff0001186bb000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 150.416440][ T7500] ^ [ 150.417237][ T7500] ffff0001186bb080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 150.418842][ T7500] ffff0001186bb100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 150.420494][ T7500] ================================================================== [ 150.421926][ T7500] Disabling lock debugging due to kernel taint [ 150.423198][ C1] vkms_vblank_simulate: vblank timer overrun [ 150.427104][ T7500] REISERFS warning (device loop3): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore [ 150.430408][ T7500] REISERFS warning (device loop3): reiserfs_fill_super: corrupt root inode, run fsck [ 152.151608][ T293] device hsr_slave_0 left promiscuous mode [ 152.181828][ T293] device hsr_slave_1 left promiscuous mode [ 152.227137][ T293] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.228781][ T293] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.236503][ T293] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.238702][ T293] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.242402][ T293] device bridge_slave_1 left promiscuous mode [ 152.243931][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.270372][ T293] device bridge_slave_0 left promiscuous mode [ 152.271860][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.367116][ T293] device veth1_macvtap left promiscuous mode [ 152.368415][ T293] device veth0_macvtap left promiscuous mode [ 152.369656][ T293] device veth1_vlan left promiscuous mode [ 152.370897][ T293] device veth0_vlan left promiscuous mode [ 152.685345][ T293] team0 (unregistering): Port device team_slave_1 removed [ 152.702801][ T293] team0 (unregistering): Port device team_slave_0 removed [ 152.715781][ T293] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 152.791648][ T293] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 152.944746][ T293] bond0 (unregistering): Released all slaves