last executing test programs: 3.774411414s ago: executing program 3 (id=581): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000640)='R', 0x1}], 0x1}}], 0x1, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000240)='n', 0x1}], 0x1}, 0x0) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 3.767752125s ago: executing program 3 (id=582): fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x7}) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) 2.867091398s ago: executing program 3 (id=589): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000030020f003176c4000000000010902247251000000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 2.852593339s ago: executing program 0 (id=590): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7f) read$dsp(r0, &(0x7f0000000100)=""/104, 0x68) 2.824708881s ago: executing program 0 (id=591): sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, 0x0, 0x24000800) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x4b1, &(0x7f0000000580)="$eJzs3c1vG9UWAPBju2mTNO/1473FaxevFa1UoGrcJmoSoW66QkIqoHbBsgqJG5U4cRQ7pYmySCUWsEdQiRVi0T8AwZauWHYLXcEaqYKQEiFRychjO82XgwVpLGV+P2nqO3OnPvfGOlfjOzOeAFLrdO2fTERfRDyKiCP11Y07nK6/rC4vjtWWTFSrN37OJPutLC+ONXdt/r/DEbEUEd0Rcf31iHczW+OW5xcmR4vFwmxjPV+ZmsmX5xcu3J4anShMFKYHhweGR4aGhkcu71pfP7h79a1Pfrv64RffPfjhvcxXZ2vN6mvUre/Hbqp3vSuOrdt2ICKuvIhgHZBr9Ken0w3hb6l9fv+JiDNJ/h+JXPJpAmlQrVarz6qHWlUvVYF9K5scA2ey/RFRL2ez/f31Y/j/Rm+2WCpXzt8qzU2P14+Vj0ZX9tbtYuFi47vC0ejK1NYvJeXn6wOb1gcjkmPgj3M9yXr/WKk4vrdDHbDJ4U35/zRXz38gJXzlh/SS/5Be8h/SS/5Desl/SC/5D+kl/yG95D+kl/yH9JL/kF7yH1Lp7WvXakt1tXH/+/id+bnJ0p0L44XyZP/U3Fj/WGl2pn+iVJpI7tmZ+qv3K5ZKM4MxPXc3XymUK/ny/MLNqdLcdOVmcl//zULXnvQKaMexUw8fZyJi6bWeZKk52KiTq7C/VauZ6PQ9yEBn5Do9AAEdY+oP0st3fGCbn+jdoLtVxczutwXYG9lONwDomHMnnP+DtDL/D+ll/h/SyzE+YP4f0sf8P6RXX4vnf/1r3bO7LkbEvyPi+1zXoeazvoD9IPtTpnH8f+7I2b7NtQczvyenCA5GxPuf3fj07milMnuptv2Xte2V+43tA51oP9CuZp428xgASK+V5cWx5rKXcZ9crV+EUIu72ljqNQcac5PdyTnK3pXMhmsVMrt07cLSvYj4X8TT5cWx5tKMUH/eef3MR+9Kbkv8443XTP0tkvYeSJ6bvjfxT6yL//918U/+478KpMPD2vhzcbvxL5vkdKzl38bxp2+Xrp1ojn+rW8a/7Nr4l2sx/p1qM8aV/DsrLePfizi5bfxmvO4k1ub4tbadazP+tx/9+qhVXfXz+vtsF7+pVspXpmby5fmFC8nvyE0UpgeHB4ZHhoaGRy7nkznqfHOmeqvHLz37Zqf+97aIv1P/a9teabP/f9z/+vzpHeK/fGb7z//4DvF7IuLVNuO/8eWP11vV1eKPt+h/dof4tW2Dbca/8eDJm23uCgDsgfL8wuRosViYVVBQUFgrdHpkAl6050nf6ZYAAAAAAAAAAAAA7dqLy4k73UcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgP3gzwAAAP//TX/YDQ==") bpf$MAP_CREATE(0x0, 0x0, 0x48) close(0xffffffffffffffff) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) r0 = open(&(0x7f00000000c0)='./file1\x00', 0x14927e, 0x6) fallocate(r0, 0x0, 0x0, 0x1001f0) fallocate(r0, 0x8, 0x0, 0x10000) 2.766313966s ago: executing program 0 (id=593): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) r2 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x0, {0x8000, 0x1000, 0x4, 0x1}}) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000100)={0x2, @vbi={0x9, 0x7, 0x80000000, 0x34524742, [0x1000, 0x7], [0x9, 0xfff], 0x108}}) 2.071239622s ago: executing program 2 (id=599): fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x7}) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) 1.889094417s ago: executing program 0 (id=600): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r1, 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)) ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) 1.73318545s ago: executing program 1 (id=604): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001800010025bd7000fbcbdf250a101400ff02fe01aa3ca15408001e0006"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x20008010) 1.706798151s ago: executing program 1 (id=605): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000004b80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000640)='R', 0x1}], 0x1}}], 0x2, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000240)='n', 0x1}], 0x1}, 0x0) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1.674582724s ago: executing program 3 (id=606): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff000060005400000000008000640"], 0x6c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x4c814}, 0x40814) 1.673509414s ago: executing program 1 (id=607): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x32, 0x0, &(0x7f0000000400)=[@increfs], 0xfffffcb0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000540)={@fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x0, &(0x7f0000000440)=""/210, 0xd2, 0x1, 0x29}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x1, 0x39}}, &(0x7f0000000600)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 1.632335727s ago: executing program 3 (id=608): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058d67c8002a000009050502000000000009058b6e", @ANYRESOCT], 0x0) syz_usb_ep_write(r0, 0x8d, 0x49, &(0x7f00000001c0)="d0be166e5e8b26a5e6b39aa93e00d43ec7e813e40b8fcad530f5176b71ef3ac478184911afdd2a979d4c5b7fccca3f0c6871b5032e4727642967374587861ca6bd95847cd7fa48e161") 1.617337259s ago: executing program 1 (id=609): bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) fcntl$getflags(r1, 0x3) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r2, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) shutdown(r2, 0x1) syz_io_uring_setup(0x39, &(0x7f0000000580)={0x0, 0xe7b7, 0x13500}, 0x0, &(0x7f0000001880)) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRESDEC=r3], 0x10) 1.129030808s ago: executing program 0 (id=611): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) r2 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x0, {0x8000, 0x1000, 0x4, 0x1}}) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000100)={0x2, @vbi={0x9, 0x7, 0x80000000, 0x34524742, [0x1000, 0x7], [0x9, 0xfff], 0x108}}) 1.121910629s ago: executing program 2 (id=612): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.047857665s ago: executing program 2 (id=613): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x9, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1}, 0x48) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x14, 0x18, 0x1, 0x70bd29, 0x25dfdbfe, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) memfd_create(&(0x7f00000000c0)='\x00', 0x2) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000340)={0xa, 0xfffe, 0x8000000, @loopback}, 0x1c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100, 0x12345}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x0, 0x0}, 0x10) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, &(0x7f0000000040)='sched_switch\x00') 582.177192ms ago: executing program 4 (id=614): truncate(&(0x7f0000000140)='./file1/file0\x00', 0x3) 580.568582ms ago: executing program 1 (id=615): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000000c0)) read$dsp(r0, &(0x7f0000000100)=""/104, 0x68) 580.374202ms ago: executing program 3 (id=616): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000030020f003176c4000000000010902247251000000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 539.321726ms ago: executing program 4 (id=617): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f00000000c0)='contention_end\x00', r0}, 0x18) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x7, 0x100) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0x5, 0x88000) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001280)={r1, 0x0, {0x2a12, 0x80010000, 0x0, 0x78, 0x100000004, 0x0, 0x0, 0x3, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9603dda1af1ea80000000000000000000000deff00000000000000000000000014a2648f00", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c55f96400", [0x7, 0x6]}}) 488.56137ms ago: executing program 4 (id=618): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000004b80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000640)='R', 0x1}], 0x1}}], 0x2, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000240)='n', 0x1}], 0x1}, 0x0) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 487.31551ms ago: executing program 4 (id=619): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x32, 0x0, &(0x7f0000000400)=[@increfs], 0xfffffcb0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000540)={@fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x0, &(0x7f0000000440)=""/210, 0xd2, 0x1, 0x29}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x1, 0x39}}, &(0x7f0000000600)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 444.788523ms ago: executing program 1 (id=620): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x75}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x6) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair(0x1d, 0x2, 0x2, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeb1, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) 443.929373ms ago: executing program 4 (id=621): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r1, 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)) ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) 423.566965ms ago: executing program 4 (id=622): fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x7}) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) 252.271829ms ago: executing program 0 (id=623): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file3\x00', 0xcc0, &(0x7f00000001c0)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6865617274626561743d6e6f6e652c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c636f686572656e63793d62756666657265642c6572726f72733d636f6e74696e75652c757365725f78617474722c626172726965723d30303030303030303030303030303032363131352c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030362c696e74722c6a6f75726e616c5f6173796e635f636f6d6d69742c00535d4e036013ec9e6e7ecdee3849b40884b95e94f35cec9600cd19beb0"], 0x1, 0x442a, &(0x7f0000004480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) write(r0, &(0x7f0000000540)="95", 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x28042, 0x119) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f00000000c0)={{r1}, 0x0, 0x0, 0x100000}) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000340)=ANY=[]) 184.333774ms ago: executing program 2 (id=624): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4000, &(0x7f0000000080)={[{@noload}, {@test_dummy_encryption}, {@min_batch_time={'min_batch_time', 0x3d, 0x8}}]}, 0x8d, 0x5f6, &(0x7f0000001f80)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x144800, 0x0, 0x0, 0x0, &(0x7f0000000080)) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 6.469459ms ago: executing program 2 (id=625): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) ptrace(0x10, 0x0) 0s ago: executing program 2 (id=626): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(0x0, r0) sendmsg$GTP_CMD_DELPDP(r0, 0x0, 0x840) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x8001) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$media(0x0, 0x1ff, 0x52300) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) io_uring_setup(0x1694, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r4, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) kernel console output (not intermixed with test programs): y 'hsr0' with parent 'hsr' already present! [ 26.552597][ T4329] Cannot create hsr debugfs directory [ 26.560607][ T4330] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.562046][ T4330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.566118][ T4330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.568348][ T4330] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.569423][ T4330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.574043][ T4330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.585913][ T4320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.589352][ T4319] team0: Port device team_slave_0 added [ 26.595685][ T4320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.598338][ T4319] team0: Port device team_slave_1 added [ 26.624557][ T4320] team0: Port device team_slave_0 added [ 26.628040][ T4319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.629112][ T4319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.633488][ T4319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.638475][ T4320] team0: Port device team_slave_1 added [ 26.674513][ T4330] device hsr_slave_0 entered promiscuous mode [ 26.711479][ T4330] device hsr_slave_1 entered promiscuous mode [ 26.751292][ T4330] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 26.752462][ T4330] Cannot create hsr debugfs directory [ 26.753771][ T4319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.754879][ T4319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.759181][ T4319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.772920][ T4320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.774067][ T4320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.778265][ T4320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.788960][ T4320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.790092][ T4320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.794166][ T4320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.842226][ T4319] device hsr_slave_0 entered promiscuous mode [ 26.881409][ T4319] device hsr_slave_1 entered promiscuous mode [ 26.921315][ T4319] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 26.922677][ T4319] Cannot create hsr debugfs directory [ 26.982256][ T4320] device hsr_slave_0 entered promiscuous mode [ 27.031441][ T4320] device hsr_slave_1 entered promiscuous mode [ 27.071303][ T4320] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 27.072464][ T4320] Cannot create hsr debugfs directory [ 27.147260][ T4324] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 27.182494][ T4324] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 27.224037][ T4324] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 27.272390][ T4324] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 27.335196][ T4329] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 27.392399][ T4329] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 27.435731][ T4329] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 27.473956][ T4329] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 27.543609][ T4330] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 27.573802][ T4330] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 27.612968][ T4330] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 27.652355][ T4330] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 27.693464][ T4320] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 27.736867][ T4320] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 27.775902][ T4320] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 27.845092][ T4320] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 27.851842][ T4326] Bluetooth: hci1: command 0x0409 tx timeout [ 27.852916][ T4326] Bluetooth: hci3: command 0x0409 tx timeout [ 27.861333][ T4337] Bluetooth: hci2: command 0x0409 tx timeout [ 27.861601][ T4326] Bluetooth: hci0: command 0x0409 tx timeout [ 27.882381][ T4319] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 27.922547][ T4319] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 27.931410][ T4326] Bluetooth: hci4: command 0x0409 tx timeout [ 27.962310][ T4319] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 28.004837][ T4319] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 28.072358][ T4324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.079570][ T4329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.082784][ T4330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.087669][ T4320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.095764][ T4330] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.100170][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 28.102414][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.103807][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 28.105386][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.106862][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.108167][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.118335][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 28.120202][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 28.122156][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.123712][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 28.125098][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.128683][ T4329] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.134288][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 28.135723][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.137421][ T4367] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.138517][ T4367] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.142909][ T4324] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.144628][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 28.146058][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.147634][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 28.149030][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.150441][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.151696][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.153951][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 28.161089][ T4320] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.162889][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 28.164665][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 28.166273][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 28.167756][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.169165][ T4367] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.170266][ T4367] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.180960][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 28.182888][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 28.184884][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 28.186487][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 28.187968][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.189487][ T4367] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.190766][ T4367] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.194743][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 28.196394][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 28.198092][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 28.199669][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.201130][ T4367] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.202288][ T4367] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.208998][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 28.210527][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 28.214680][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.216140][ T4367] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.217300][ T4367] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.219009][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 28.220631][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 28.222941][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 28.228293][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 28.229839][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.234076][ T278] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.235103][ T278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.236739][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 28.238095][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.239822][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 28.245493][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 28.249847][ T4319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.252642][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 28.254202][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.255613][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 28.257248][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 28.264204][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 28.266118][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 28.267751][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 28.269310][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 28.270994][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 28.273062][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 28.274703][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 28.276261][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 28.277746][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 28.279358][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 28.280848][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 28.282864][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 28.289449][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 28.291176][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 28.293277][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 28.294992][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 28.301584][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 28.303041][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.304599][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 28.306046][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.307354][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 28.308802][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.319481][ T4329] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.321656][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 28.324350][ T4319] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.327110][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 28.328750][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.330198][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 28.335140][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.336650][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 28.338204][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.342346][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 28.347883][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 28.349481][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.352480][ T251] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.353573][ T251] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.355415][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 28.366181][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 28.367892][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.369257][ T251] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.370457][ T251] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.373586][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 28.377447][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 28.379477][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 28.381053][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.395566][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 28.397461][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 28.399018][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 28.400944][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 28.403051][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 28.413025][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 28.420846][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 28.422718][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.435691][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 28.436967][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 28.448618][ T4319] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.450719][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 28.454096][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 28.455752][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.459771][ T4330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.468809][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 28.470193][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 28.476709][ T4329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.479736][ T4320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.482292][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 28.483620][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 28.506031][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 28.507709][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.513923][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 28.515562][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.535018][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 28.536489][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.538165][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 28.539666][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.541186][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.546462][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.547893][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.551710][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.554691][ T4329] device veth0_vlan entered promiscuous mode [ 28.557640][ T4329] device veth1_vlan entered promiscuous mode [ 28.569151][ T4330] device veth0_vlan entered promiscuous mode [ 28.572450][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 28.573943][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 28.575342][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 28.576542][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 28.585640][ T4324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.587852][ T4330] device veth1_vlan entered promiscuous mode [ 28.600520][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 28.602162][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 28.603659][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 28.605229][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.619425][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 28.620990][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.624156][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 28.625757][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.627657][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 28.628802][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 28.630122][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 28.632682][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.636583][ T4329] device veth0_macvtap entered promiscuous mode [ 28.638260][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 28.639698][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 28.642516][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.644094][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.645424][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.647249][ T4330] device veth0_macvtap entered promiscuous mode [ 28.649852][ T4319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.657048][ T4320] device veth0_vlan entered promiscuous mode [ 28.659109][ T4330] device veth1_macvtap entered promiscuous mode [ 28.662739][ T4329] device veth1_macvtap entered promiscuous mode [ 28.670792][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 28.672510][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 28.673999][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 28.675430][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 28.676897][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.678423][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.679814][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.685517][ T4324] device veth0_vlan entered promiscuous mode [ 28.691734][ T4320] device veth1_vlan entered promiscuous mode [ 28.694626][ T4330] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.696789][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 28.698356][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.699915][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.707196][ T4324] device veth1_vlan entered promiscuous mode [ 28.708658][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.710502][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.714044][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.716511][ T4330] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.719898][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 28.721523][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 28.723977][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.725485][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.727055][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.728611][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.730187][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 28.732438][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.735360][ T4330] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.736680][ T4330] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.738080][ T4330] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.739496][ T4330] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.746813][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.748438][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.750556][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.755611][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 28.757025][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.758537][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.769114][ T4319] device veth0_vlan entered promiscuous mode [ 28.773992][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 28.775954][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.777575][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.778985][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.780854][ T4319] device veth1_vlan entered promiscuous mode [ 28.786854][ T4329] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.788321][ T4329] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.789778][ T4329] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.791988][ T4329] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.807954][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 28.809540][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 28.811109][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.813623][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 28.815201][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.817037][ T4320] device veth0_macvtap entered promiscuous mode [ 28.826242][ T4320] device veth1_macvtap entered promiscuous mode [ 28.834789][ T4324] device veth0_macvtap entered promiscuous mode [ 28.840587][ T4324] device veth1_macvtap entered promiscuous mode [ 28.856934][ T251] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 28.858254][ T251] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 28.863857][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 28.865253][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 28.866739][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 28.868092][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 28.869598][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 28.871051][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 28.873507][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.875086][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 28.878166][ T4319] device veth0_macvtap entered promiscuous mode [ 28.879924][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.882945][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.884559][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.886297][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.888622][ T4320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.895070][ T4429] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 28.896305][ T4429] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 28.902860][ T4324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.904472][ T4324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.906071][ T4324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.907899][ T4324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.909526][ T4324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.911689][ T4324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.914275][ T4324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.918181][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 28.919729][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.921846][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.923418][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 28.924985][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.926505][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.930947][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.932913][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.934563][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.936185][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.938360][ T4320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.940530][ T4319] device veth1_macvtap entered promiscuous mode [ 28.943901][ T4324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.945549][ T4324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.947253][ T4324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.949034][ T4324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.950656][ T4324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.952930][ T4324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.955035][ T4324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.960542][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 28.962287][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.963958][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.965424][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.966959][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.971413][ T4367] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 28.972724][ T4367] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 28.972827][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.975420][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.976908][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.978510][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.980026][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.982034][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 28.982437][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.983287][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 28.986194][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.987892][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.990384][ T4319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.995928][ T4324] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.997274][ T4324] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.998793][ T4324] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.000278][ T4324] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.004161][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 29.005713][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 29.007228][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 29.008872][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 29.011085][ T4320] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.013363][ T4320] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.014620][ T4320] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.015939][ T4320] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.036427][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.038032][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.039561][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.042420][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.044002][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.045620][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.047050][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.048760][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.054937][ T4319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.059727][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 29.061444][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 29.076909][ T4319] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.078347][ T4319] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.079845][ T4319] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.081635][ T4319] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.086276][ T251] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.087561][ T251] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.089229][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 29.099165][ T251] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.100554][ T251] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.102709][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 29.127325][ T251] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.128542][ T251] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.130305][ T251] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 29.256005][ T4429] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.257424][ T4429] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.259173][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 29.268166][ T4434] loop3: detected capacity change from 0 to 32768 [ 29.275655][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.276815][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.278502][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 29.552591][ T4429] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.553853][ T4429] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.555476][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 29.594820][ T4434] XFS (loop3): Mounting V5 Filesystem [ 29.619345][ T4450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 29.619960][ T4447] binder: 4446:4447 unknown command 0 [ 29.621648][ T4447] binder: 4446:4447 ioctl c0306201 20000080 returned -22 [ 29.633284][ T4450] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 29.640551][ T4447] binder: 4446:4447 tried to acquire reference to desc 0, got 1 instead [ 29.642553][ T4447] binder: 4446:4447 got transaction with invalid offsets ptr [ 29.643760][ T4447] binder: 4446:4447 transaction call to 4446:0 failed 5/29201/-22, size 104-24 line 3585 [ 29.646512][ T4397] binder: undelivered TRANSACTION_ERROR: 29201 [ 29.647794][ T4434] XFS (loop3): Ending clean mount [ 29.689639][ T4455] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6'. [ 29.931658][ T4326] Bluetooth: hci0: command 0x041b tx timeout [ 29.941913][ T4326] Bluetooth: hci2: command 0x041b tx timeout [ 29.943375][ T4326] Bluetooth: hci3: command 0x041b tx timeout [ 29.944777][ T4326] Bluetooth: hci1: command 0x041b tx timeout [ 30.013119][ T4336] Bluetooth: hci4: command 0x041b tx timeout [ 30.069049][ T4330] XFS (loop3): Unmounting Filesystem [ 30.337633][ T4475] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13'. [ 30.452737][ T4477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 30.455943][ T4477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 30.608493][ T4487] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17'. [ 30.939600][ T4483] loop3: detected capacity change from 0 to 40427 [ 30.943375][ T4483] F2FS-fs (loop3): Unrecognized mount option "age_extent_cache" or missing value [ 30.996862][ T4311] I/O error, dev loop3, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 32.011848][ T4326] Bluetooth: hci1: command 0x040f tx timeout [ 32.012757][ T4326] Bluetooth: hci3: command 0x040f tx timeout [ 32.014845][ T4326] Bluetooth: hci2: command 0x040f tx timeout [ 32.015852][ T4326] Bluetooth: hci0: command 0x040f tx timeout [ 32.094607][ T4336] Bluetooth: hci4: command 0x040f tx timeout [ 32.986783][ T4522] netlink: 4 bytes leftover after parsing attributes in process `syz.4.26'. [ 33.041899][ T4523] gfs2: not a GFS2 filesystem [ 33.182482][ T4528] netlink: 'syz.4.28': attribute type 10 has an invalid length. [ 33.353624][ T4368] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 33.571165][ T4368] usb 1-1: Using ep0 maxpacket: 32 [ 33.572163][ T4532] netlink: 8 bytes leftover after parsing attributes in process `syz.3.30'. [ 33.576180][ T4368] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 33.577534][ T4368] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 33.579932][ T4368] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 33.582214][ T4368] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 33.583930][ T4368] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 33.585653][ T4368] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 33.587661][ T4368] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 33.589047][ T4368] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.593160][ T4368] usb 1-1: config 0 descriptor?? [ 33.922508][ T4368] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 34.091743][ T4326] Bluetooth: hci0: command 0x0419 tx timeout [ 34.094508][ T4326] Bluetooth: hci2: command 0x0419 tx timeout [ 34.096779][ T4326] Bluetooth: hci3: command 0x0419 tx timeout [ 34.098231][ T4326] Bluetooth: hci1: command 0x0419 tx timeout [ 34.171591][ T4326] Bluetooth: hci4: command 0x0419 tx timeout [ 34.328089][ T4404] usb 1-1: USB disconnect, device number 2 [ 34.331039][ T4404] usblp0: removed [ 34.960642][ T4549] syz.2.34 (4549): drop_caches: 2 [ 36.603620][ T4576] process 'syz.2.41' launched '/dev/fd/6' with NULL argv: empty string added [ 36.865234][ T4582] netlink: 8 bytes leftover after parsing attributes in process `syz.3.43'. [ 37.137112][ T4592] netlink: 40 bytes leftover after parsing attributes in process `syz.0.47'. [ 38.346988][ T4616] loop2: detected capacity change from 0 to 32768 [ 38.644581][ T4616] XFS (loop2): Mounting V5 Filesystem [ 38.669800][ T4616] XFS (loop2): Ending clean mount [ 38.704860][ T4329] XFS (loop2): Unmounting Filesystem [ 38.765820][ T4626] loop1: detected capacity change from 0 to 32768 [ 38.767418][ T4626] gfs2: Bad value for 'quota' [ 38.812478][ T4311] I/O error, dev loop1, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 38.882522][ T4638] loop1: detected capacity change from 0 to 256 [ 40.263804][ T27] audit: type=1326 audit(40.250:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4653 comm="syz.2.59" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9e55af28 code=0x7fc00000 [ 40.830546][ T27] audit: type=1326 audit(40.760:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4653 comm="syz.2.59" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff9e55af28 code=0x7fc00000 [ 41.156898][ T4678] netlink: 4 bytes leftover after parsing attributes in process `syz.1.72'. [ 41.891412][ T4376] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 42.142751][ T1515] cfg80211: failed to load regulatory.db [ 42.146859][ T4376] usb 1-1: Using ep0 maxpacket: 32 [ 42.149767][ T4376] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 42.150961][ T4376] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 42.152702][ T4376] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 42.153994][ T4376] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 42.155609][ T4376] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 42.157122][ T4376] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 42.167678][ T4376] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 42.169146][ T4376] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.173901][ T4376] usb 1-1: config 0 descriptor?? [ 42.598777][ T4376] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 42.602988][ T4376] usb 1-1: USB disconnect, device number 3 [ 42.605736][ T4376] usblp0: removed [ 43.087837][ T4710] netlink: 4 bytes leftover after parsing attributes in process `syz.2.85'. [ 43.159932][ T4719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.163763][ T4719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.614688][ T4732] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 44.317640][ T4753] netlink: 4 bytes leftover after parsing attributes in process `syz.4.99'. [ 44.351309][ T1515] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 44.389778][ T4758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.393716][ T4758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.782314][ T4763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.813347][ T4763] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.847889][ T4765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.854224][ T4765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.856600][ T4758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.859143][ T4758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.268719][ T4770] loop1: detected capacity change from 0 to 764 [ 45.271437][ T1515] usb 1-1: Using ep0 maxpacket: 32 [ 45.274328][ T1515] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 45.275711][ T1515] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 45.277162][ T1515] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 45.278694][ T1515] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 45.280704][ T1515] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 45.282917][ T1515] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 45.284734][ T1515] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 45.285968][ T1515] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.288980][ T4770] rock: directory entry would overflow storage [ 45.289945][ T4770] rock: sig=0x4654, size=5, remaining=4 [ 45.293992][ T1515] usb 1-1: config 0 descriptor?? [ 45.326439][ T4774] binder: 4773:4774 unknown command 0 [ 45.327336][ T4774] binder: 4773:4774 ioctl c0306201 20000080 returned -22 [ 45.335324][ T4774] binder: 4773:4774 tried to acquire reference to desc 0, got 1 instead [ 45.336856][ T4774] binder_alloc: 4773: binder_alloc_buf, no vma [ 45.337855][ T4774] binder: cannot allocate buffer: vma cleared, target dead or dying [ 45.337883][ T4774] binder: 4773:4774 transaction call to 4773:0 failed 10/29189/-3, size 104-24 line 3239 [ 45.341045][ T112] binder: undelivered TRANSACTION_ERROR: 29189 [ 45.395255][ T4772] loop2: detected capacity change from 0 to 128 [ 45.458233][ T27] audit: type=1326 audit(45.440:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4781 comm="syz.2.109" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9e55af28 code=0x7ffc0000 [ 45.463718][ T27] audit: type=1326 audit(45.440:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4781 comm="syz.2.109" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9e55af28 code=0x7ffc0000 [ 45.468009][ T27] audit: type=1326 audit(45.450:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4781 comm="syz.2.109" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=34 compat=0 ip=0xffff9e55af28 code=0x7ffc0000 [ 45.471091][ T27] audit: type=1326 audit(45.450:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4781 comm="syz.2.109" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9e55af28 code=0x7ffc0000 [ 45.733127][ T1515] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 45.733989][ T27] audit: type=1326 audit(45.450:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4781 comm="syz.2.109" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9e55af28 code=0x7ffc0000 [ 45.738151][ T1515] usb 1-1: USB disconnect, device number 4 [ 45.739204][ T27] audit: type=1326 audit(45.720:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4781 comm="syz.2.109" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9e55af28 code=0x7ffc0000 [ 45.741181][ T1515] usblp0: removed [ 45.743624][ T27] audit: type=1326 audit(45.720:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4781 comm="syz.2.109" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9e55af28 code=0x7ffc0000 [ 45.743657][ T27] audit: type=1326 audit(45.720:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4781 comm="syz.2.109" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9e55af28 code=0x7ffc0000 [ 45.750389][ T27] audit: type=1326 audit(45.720:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4781 comm="syz.2.109" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9e55af28 code=0x7ffc0000 [ 45.754747][ T27] audit: type=1326 audit(45.720:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4781 comm="syz.2.109" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9e55af28 code=0x7ffc0000 [ 45.778174][ T4790] netlink: 4 bytes leftover after parsing attributes in process `syz.4.112'. [ 46.254087][ T4803] loop1: detected capacity change from 0 to 764 [ 46.265326][ T4803] rock: directory entry would overflow storage [ 46.268699][ T4803] rock: sig=0x4654, size=5, remaining=4 [ 46.285563][ T4805] binder: 4804:4805 unknown command 0 [ 46.286483][ T4805] binder: 4804:4805 ioctl c0306201 20000080 returned -22 [ 46.288497][ T4805] binder: 4804:4805 tried to acquire reference to desc 0, got 1 instead [ 46.290147][ T4805] binder_alloc: 4804: binder_alloc_buf, no vma [ 46.291542][ T4805] binder: cannot allocate buffer: vma cleared, target dead or dying [ 46.291577][ T4805] binder: 4804:4805 transaction call to 4804:0 failed 15/29189/-3, size 104-24 line 3239 [ 46.295046][ T1515] binder: undelivered TRANSACTION_ERROR: 29189 [ 46.523467][ T4812] netlink: 32 bytes leftover after parsing attributes in process `syz.2.119'. [ 46.834526][ T4814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.836118][ T4814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.282299][ T4828] netlink: 4 bytes leftover after parsing attributes in process `syz.2.126'. [ 47.984720][ T4839] binder: 4838:4839 unknown command 0 [ 47.985725][ T4839] binder: 4838:4839 ioctl c0306201 20000080 returned -22 [ 47.987646][ T4839] binder: 4838:4839 tried to acquire reference to desc 0, got 1 instead [ 47.991453][ T4839] binder_alloc: 4838: binder_alloc_buf, no vma [ 47.992401][ T4839] binder: cannot allocate buffer: vma cleared, target dead or dying [ 47.992429][ T4839] binder: 4838:4839 transaction call to 4838:0 failed 20/29189/-3, size 104-24 line 3239 [ 47.995496][ T4404] binder: undelivered TRANSACTION_ERROR: 29189 [ 48.418681][ T4852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.425136][ T4852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.537283][ T4856] loop2: detected capacity change from 0 to 32768 [ 48.542509][ T4856] ======================================================= [ 48.542509][ T4856] WARNING: The mand mount option has been deprecated and [ 48.542509][ T4856] and is ignored by this kernel. Remove the mand [ 48.542509][ T4856] option from the mount to silence this warning. [ 48.542509][ T4856] ======================================================= [ 48.594187][ T4861] netlink: 4 bytes leftover after parsing attributes in process `syz.2.137'. [ 48.679723][ T4862] netlink: 32 bytes leftover after parsing attributes in process `syz.1.136'. [ 48.944644][ T4866] netlink: 8 bytes leftover after parsing attributes in process `syz.3.138'. [ 48.980290][ T4870] binder: 4869:4870 unknown command 0 [ 48.984082][ T4870] binder: 4869:4870 ioctl c0306201 20000080 returned -22 [ 48.988299][ T4870] binder: tried to use weak ref as strong ref [ 48.989551][ T4870] binder: 4869:4870 Acquire 1 refcount change on invalid ref 0 ret -22 [ 49.010364][ T4870] binder: 4869:4870 got transaction to invalid handle, 1 [ 49.011904][ T4870] binder: 4870:4869 cannot find target node [ 49.153099][ T4876] netlink: 'syz.3.142': attribute type 1 has an invalid length. [ 49.154377][ T4876] netlink: 'syz.3.142': attribute type 2 has an invalid length. [ 49.273471][ T24] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 49.553236][ T4874] loop2: detected capacity change from 0 to 32768 [ 49.921522][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 49.926018][ T24] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 49.927307][ T24] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 49.928847][ T24] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 49.930303][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 49.945578][ T24] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 49.947049][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 49.948998][ T24] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 49.950319][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.967000][ T24] usb 1-1: config 0 descriptor?? [ 50.038385][ T4900] binder: 4899:4900 unknown command 0 [ 50.039478][ T4900] binder: 4899:4900 ioctl c0306201 20000080 returned -22 [ 50.046086][ T4900] binder: tried to use weak ref as strong ref [ 50.047239][ T4900] binder: 4899:4900 Acquire 1 refcount change on invalid ref 0 ret -22 [ 50.051980][ T4900] binder: 4899:4900 got transaction to invalid handle, 1 [ 50.152143][ T4898] loop2: detected capacity change from 0 to 32768 [ 50.536276][ T4903] netlink: 32 bytes leftover after parsing attributes in process `syz.4.155'. [ 50.596254][ T4898] XFS (loop2): Mounting V5 Filesystem [ 50.609062][ T4898] XFS (loop2): Ending clean mount [ 51.290260][ T24] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 51.296618][ T24] usb 1-1: USB disconnect, device number 5 [ 51.298381][ T24] usblp0: removed [ 51.308328][ T4329] XFS (loop2): Unmounting Filesystem [ 52.159549][ T4940] fuse: Bad value for 'fd' [ 52.163195][ T4942] binder: 4941:4942 unknown command 0 [ 52.164064][ T4942] binder: 4941:4942 ioctl c0306201 20000080 returned -22 [ 52.165604][ T4942] binder: tried to use weak ref as strong ref [ 52.166498][ T4942] binder: 4941:4942 Acquire 1 refcount change on invalid ref 0 ret -22 [ 52.167954][ T4942] binder: 4941:4942 got transaction to invalid handle, 1 [ 52.173129][ T4942] binder_debug: 5 callbacks suppressed [ 52.173144][ T4942] binder: 4942:4941 cannot find target node [ 52.180496][ T4942] binder: 4941:4942 transaction call to 0:0 failed 29/29201/-22, size 104-24 line 3054 [ 52.182498][ T1515] binder: undelivered TRANSACTION_ERROR: 29201 [ 52.969374][ T4970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.971067][ T4970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.378158][ T27] kauditd_printk_skb: 35 callbacks suppressed [ 53.378178][ T27] audit: type=1326 audit(53.360:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4964 comm="syz.2.173" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9e55af28 code=0x7fc00000 [ 53.431138][ T4981] fuse: Bad value for 'fd' [ 53.451271][ T4952] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 53.575385][ T4991] loop4: detected capacity change from 0 to 128 [ 53.575952][ T4977] loop1: detected capacity change from 0 to 40427 [ 53.597360][ T4977] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 53.598569][ T4977] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 53.609342][ T4977] F2FS-fs (loop1): invalid crc value [ 53.615311][ T4991] syz.4.183: attempt to access beyond end of device [ 53.615311][ T4991] loop4: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 53.626466][ T4977] F2FS-fs (loop1): Found nat_bits in checkpoint [ 53.631277][ T4952] usb 1-1: Using ep0 maxpacket: 32 [ 53.633282][ T4952] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 53.634632][ T4952] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 53.636050][ T4952] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 53.637449][ T4952] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 53.638941][ T4952] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 53.640355][ T4952] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 53.651633][ T4952] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 53.656434][ T4952] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.658914][ T4977] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 53.660055][ T4977] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 53.671264][ T4952] usb 1-1: config 0 descriptor?? [ 53.703381][ T4319] syz-executor: attempt to access beyond end of device [ 53.703381][ T4319] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 53.767477][ T27] audit: type=1326 audit(53.750:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4964 comm="syz.2.173" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff9e55af28 code=0x7fc00000 [ 53.770355][ T27] audit: type=1326 audit(53.750:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4964 comm="syz.2.173" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9e55af28 code=0x7fc00000 [ 53.777320][ T27] audit: type=1326 audit(53.750:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4964 comm="syz.2.173" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9e55af28 code=0x7fc00000 [ 53.780807][ T27] audit: type=1326 audit(53.750:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4964 comm="syz.2.173" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9e55af28 code=0x7fc00000 [ 53.787868][ T27] audit: type=1326 audit(53.750:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4964 comm="syz.2.173" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9e55af28 code=0x7fc00000 [ 53.791276][ T27] audit: type=1326 audit(53.750:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4964 comm="syz.2.173" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9e55af28 code=0x7fc00000 [ 53.794302][ T27] audit: type=1326 audit(53.750:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4964 comm="syz.2.173" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9e55af28 code=0x7fc00000 [ 53.798336][ T27] audit: type=1326 audit(53.750:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4964 comm="syz.2.173" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9e55af28 code=0x7fc00000 [ 53.808406][ T27] audit: type=1326 audit(53.750:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4964 comm="syz.2.173" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9e55af28 code=0x7fc00000 [ 54.873759][ T5010] block device autoloading is deprecated and will be removed. [ 54.903247][ T4952] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 54.905793][ T4952] usb 1-1: USB disconnect, device number 6 [ 54.911627][ T4952] usblp0: removed [ 54.932051][ T5014] fuse: Bad value for 'fd' [ 55.115553][ T5025] loop1: detected capacity change from 0 to 40427 [ 55.122577][ T5025] F2FS-fs (loop1): invalid crc value [ 55.148236][ T5025] F2FS-fs (loop1): Found nat_bits in checkpoint [ 55.740414][ T5025] F2FS-fs (loop1): Start checkpoint disabled! [ 55.749041][ T5025] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 55.794736][ T5039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.800861][ T5039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.963920][ T5045] netlink: 4 bytes leftover after parsing attributes in process `syz.0.200'. [ 56.434111][ T5051] loop1: detected capacity change from 0 to 65536 [ 56.444277][ T5051] XFS (loop1): Mounting V5 Filesystem [ 56.455197][ T5051] XFS (loop1): Ending clean mount [ 56.486315][ T4952] XFS (loop1): Metadata CRC error detected at xfs_agf_read_verify+0x14c/0x224, xfs_agf block 0x1 [ 56.488157][ T4952] XFS (loop1): Unmount and run xfs_repair [ 56.489083][ T4952] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 56.490465][ T4952] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 56.495497][ T4952] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 56.497054][ T4952] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 56.498774][ T4952] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 56.500421][ T4952] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 56.502849][ T4952] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 ................ [ 56.504422][ T4952] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 56.505929][ T4952] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 56.507609][ T4506] XFS (loop1): metadata I/O error in "xfs_read_agf+0x24c/0x5f4" at daddr 0x1 len 1 error 74 [ 56.509725][ T4506] XFS (loop1): page discard on page 00000000cb7bf752, inode 0x29, pos 0. [ 56.513744][ T4952] XFS (loop1): Metadata CRC error detected at xfs_agf_read_verify+0x14c/0x224, xfs_agf block 0x1 [ 56.515579][ T4952] XFS (loop1): Unmount and run xfs_repair [ 56.516484][ T4952] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 56.517770][ T4952] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 56.519239][ T4952] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 56.520618][ T4952] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 56.523010][ T4952] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 56.524592][ T4952] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 56.526069][ T4952] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 ................ [ 56.527529][ T4952] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 56.529073][ T4952] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 56.531118][ T4506] XFS (loop1): metadata I/O error in "xfs_read_agf+0x24c/0x5f4" at daddr 0x1 len 1 error 74 [ 56.535467][ T4506] XFS (loop1): page discard on page 0000000016638cbc, inode 0x26, pos 1024. [ 56.539139][ T4952] loop1: writeback error on inode 38, offset 0, sector 22 [ 56.540345][ T4387] XFS (loop1): Metadata CRC error detected at xfs_agf_read_verify+0x14c/0x224, xfs_agf block 0x1 [ 56.543992][ T4387] XFS (loop1): Unmount and run xfs_repair [ 56.544977][ T4387] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 56.546243][ T4387] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 56.547786][ T4387] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 56.549218][ T4387] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 56.550553][ T4387] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 56.552139][ T4387] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 56.553630][ T4387] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 ................ [ 56.554975][ T4387] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 56.556449][ T4387] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 56.558053][ T4429] XFS (loop1): metadata I/O error in "xfs_read_agf+0x24c/0x5f4" at daddr 0x1 len 1 error 74 [ 56.559770][ T4429] XFS (loop1): page discard on page 00000000cca42fb2, inode 0x29, pos 4096. [ 56.562293][ T4952] XFS (loop1): Metadata CRC error detected at xfs_agf_read_verify+0x14c/0x224, xfs_agf block 0x1 [ 56.564252][ T4952] XFS (loop1): Unmount and run xfs_repair [ 56.565094][ T4952] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 56.566362][ T4952] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 56.567857][ T4952] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 56.569342][ T4952] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 56.570734][ T4952] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 56.574293][ T4952] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 56.575698][ T4952] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 ................ [ 56.577188][ T4952] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 56.578557][ T4952] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 56.580085][ T4429] XFS (loop1): metadata I/O error in "xfs_read_agf+0x24c/0x5f4" at daddr 0x1 len 1 error 74 [ 56.581812][ T4429] XFS (loop1): page discard on page 00000000b6a006b8, inode 0x29, pos 8192. [ 56.583461][ T4952] XFS (loop1): Metadata CRC error detected at xfs_agf_read_verify+0x14c/0x224, xfs_agf block 0x1 [ 56.585164][ T4952] XFS (loop1): Unmount and run xfs_repair [ 56.586056][ T4952] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 56.587234][ T4952] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 56.588622][ T4952] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 56.589968][ T4952] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 56.593125][ T4952] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 56.594584][ T4952] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 56.596130][ T4952] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 ................ [ 56.597622][ T4952] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 56.599069][ T4952] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 56.600567][ T4429] XFS (loop1): metadata I/O error in "xfs_read_agf+0x24c/0x5f4" at daddr 0x1 len 1 error 74 [ 56.602474][ T4429] XFS (loop1): page discard on page 000000004d22762d, inode 0x29, pos 12288. [ 56.604148][ T4952] XFS (loop1): Metadata CRC error detected at xfs_agf_read_verify+0x14c/0x224, xfs_agf block 0x1 [ 56.605924][ T4952] XFS (loop1): Unmount and run xfs_repair [ 56.606801][ T4952] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 56.607966][ T4952] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 56.609300][ T4952] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 56.610623][ T4952] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 56.613770][ T4952] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 56.615183][ T4952] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 56.616527][ T4952] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 ................ [ 56.617907][ T4952] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 56.619237][ T4952] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 56.620649][ T4429] XFS (loop1): metadata I/O error in "xfs_read_agf+0x24c/0x5f4" at daddr 0x1 len 1 error 74 [ 56.622425][ T4429] XFS (loop1): page discard on page 00000000cec1b0bd, inode 0x29, pos 16384. [ 56.624225][ T4952] XFS (loop1): Metadata CRC error detected at xfs_agf_read_verify+0x14c/0x224, xfs_agf block 0x1 [ 56.626059][ T4952] XFS (loop1): Unmount and run xfs_repair [ 56.626982][ T4952] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 56.628300][ T4952] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 56.629708][ T4952] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 56.631203][ T4952] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 56.634503][ T4952] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 56.635848][ T4952] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 56.637215][ T4952] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 ................ [ 56.639005][ T4952] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 56.640432][ T4952] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 56.642411][ T4429] XFS (loop1): metadata I/O error in "xfs_read_agf+0x24c/0x5f4" at daddr 0x1 len 1 error 74 [ 56.644232][ T4429] XFS (loop1): page discard on page 00000000f49ae56e, inode 0x29, pos 20480. [ 56.645958][ T4952] XFS (loop1): Metadata CRC error detected at xfs_agf_read_verify+0x14c/0x224, xfs_agf block 0x1 [ 56.647713][ T4952] XFS (loop1): Unmount and run xfs_repair [ 56.648574][ T4952] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 56.649723][ T4952] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 56.651058][ T4952] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 56.654230][ T4952] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 56.655731][ T4952] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 56.657123][ T4952] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 56.658629][ T4952] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 ................ [ 56.660160][ T4952] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 56.662072][ T4952] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 56.663498][ T4429] XFS (loop1): metadata I/O error in "xfs_read_agf+0x24c/0x5f4" at daddr 0x1 len 1 error 74 [ 56.665163][ T4429] XFS (loop1): page discard on page 00000000bdcfc585, inode 0x29, pos 24576. [ 56.666733][ T4952] XFS (loop1): Metadata CRC error detected at xfs_agf_read_verify+0x14c/0x224, xfs_agf block 0x1 [ 56.668438][ T4952] XFS (loop1): Unmount and run xfs_repair [ 56.669318][ T4952] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 56.670554][ T4952] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 56.672058][ T4952] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 56.673576][ T4952] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 56.674991][ T4952] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 56.676470][ T4952] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 56.677897][ T4952] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 ................ [ 56.679271][ T4952] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 56.680705][ T4952] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 56.717258][ T4429] XFS (loop1): metadata I/O error in "xfs_read_agf+0x24c/0x5f4" at daddr 0x1 len 1 error 74 [ 56.719009][ T4429] XFS (loop1): page discard on page 0000000048f06a51, inode 0x29, pos 28672. [ 56.721060][ T4952] XFS (loop1): Metadata CRC error detected at xfs_agf_read_verify+0x14c/0x224, xfs_agf block 0x1 [ 56.722805][ T4952] XFS (loop1): Unmount and run xfs_repair [ 56.723655][ T4952] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 56.724851][ T4952] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 56.726327][ T4952] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 56.727994][ T4952] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 56.729433][ T4952] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 56.730794][ T4952] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 56.732326][ T4952] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 ................ [ 56.733706][ T4952] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 56.735155][ T4952] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 56.736621][ T4429] XFS (loop1): metadata I/O error in "xfs_read_agf+0x24c/0x5f4" at daddr 0x1 len 1 error 74 [ 56.738265][ T4429] XFS (loop1): page discard on page 00000000a1d85c93, inode 0x29, pos 32768. [ 56.739937][ T4387] XFS (loop1): Metadata CRC error detected at xfs_agf_read_verify+0x14c/0x224, xfs_agf block 0x1 [ 56.742999][ T4387] XFS (loop1): Unmount and run xfs_repair [ 56.743959][ T4387] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 56.745240][ T4387] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 56.746683][ T4387] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 56.748199][ T4387] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 56.756419][ T4387] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 56.759551][ T4387] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 56.769577][ T4387] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 ................ [ 56.772116][ T4387] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 56.775644][ T4387] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 56.778819][ T4387] XFS (loop1): Metadata CRC error detected at xfs_agf_read_verify+0x14c/0x224, xfs_agf block 0x1 [ 56.784041][ T4387] XFS (loop1): Unmount and run xfs_repair [ 56.785037][ T4387] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 56.786491][ T4387] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 56.787965][ T4387] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 56.789368][ T4387] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 56.790691][ T4387] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 56.793291][ T4387] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 56.794852][ T4387] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 ................ [ 56.796251][ T4387] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 56.797627][ T4387] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 56.799343][ T4952] XFS (loop1): Metadata CRC error detected at xfs_agf_read_verify+0x14c/0x224, xfs_agf block 0x1 [ 56.801492][ T4952] XFS (loop1): Unmount and run xfs_repair [ 56.802443][ T4952] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 56.803514][ T4952] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 56.804946][ T4952] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 56.806320][ T4952] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 56.807840][ T4952] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 56.809100][ T4952] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 56.810400][ T4952] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 ................ [ 56.814568][ T4952] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 56.815877][ T4952] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 56.817706][ T4952] XFS (loop1): Metadata CRC error detected at xfs_agf_read_verify+0x14c/0x224, xfs_agf block 0x1 [ 56.819467][ T4952] XFS (loop1): Unmount and run xfs_repair [ 56.820366][ T4952] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 56.828508][ T4952] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 56.840164][ T4952] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 56.841653][ T4952] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 56.843001][ T4952] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 56.848573][ T4952] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 56.850057][ T4952] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 ................ [ 56.851740][ T4952] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 56.853168][ T4952] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 56.855570][ T4952] XFS (loop1): Metadata CRC error detected at xfs_agf_read_verify+0x14c/0x224, xfs_agf block 0x1 [ 56.857495][ T4952] XFS (loop1): Unmount and run xfs_repair [ 56.858367][ T4952] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 56.859698][ T4952] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 56.864601][ T4952] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 56.866120][ T4952] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 56.867696][ T4952] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 56.869345][ T4952] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 56.870884][ T4952] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 ................ [ 56.873794][ T4952] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 56.875405][ T4952] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 56.877187][ T4952] XFS (loop1): Metadata CRC error detected at xfs_agf_read_verify+0x14c/0x224, xfs_agf block 0x1 [ 56.879037][ T4952] XFS (loop1): Unmount and run xfs_repair [ 56.879970][ T4952] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 56.884535][ T4952] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 56.886062][ T4952] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 56.887679][ T4952] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 56.889231][ T4952] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 56.890732][ T4952] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 56.894944][ T4952] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 ................ [ 56.896429][ T4952] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 56.898027][ T4952] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 56.899859][ T4952] XFS (loop1): Metadata CRC error detected at xfs_agf_read_verify+0x14c/0x224, xfs_agf block 0x1 [ 56.904659][ T4952] XFS (loop1): Unmount and run xfs_repair [ 56.913977][ T4952] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 56.916515][ T4952] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 56.920139][ T4952] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 56.925530][ T4952] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 56.929071][ T4952] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 56.934726][ T4952] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 56.937111][ T4952] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 ................ [ 56.940879][ T4952] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 56.947339][ T4952] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 56.951986][ T4952] XFS (loop1): Metadata CRC error detected at xfs_agf_read_verify+0x14c/0x224, xfs_agf block 0x1 [ 56.954709][ T4952] XFS (loop1): Unmount and run xfs_repair [ 56.956950][ T4952] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 56.960308][ T4952] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 56.966094][ T4952] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 56.969262][ T4952] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 56.973914][ T4952] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 56.978131][ T4952] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 56.986595][ T4952] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 ................ [ 56.989876][ T4952] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 56.993383][ T4952] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 56.997481][ T4397] XFS (loop1): Metadata CRC error detected at xfs_agf_read_verify+0x14c/0x224, xfs_agf block 0x1 [ 56.999282][ T4397] XFS (loop1): Unmount and run xfs_repair [ 57.000414][ T4397] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 57.004829][ T4397] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 57.006205][ T4397] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 57.007769][ T4397] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 57.014306][ T4397] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 57.016016][ T5070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.018660][ T4397] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 57.020274][ T5070] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.024910][ T4397] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 ................ [ 57.028369][ T4397] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 57.031057][ T4397] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 57.035201][ T4397] XFS (loop1): Metadata CRC error detected at xfs_agf_read_verify+0x14c/0x224, xfs_agf block 0x1 [ 57.038984][ T4397] XFS (loop1): Unmount and run xfs_repair [ 57.045802][ T4397] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 57.048598][ T4397] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 57.052271][ T4397] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 57.055911][ T4397] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 57.059522][ T4397] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 57.065203][ T4397] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 57.068685][ T4397] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 ................ [ 57.071633][ T4397] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 57.075228][ T4397] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 57.079270][ T4397] XFS (loop1): Metadata CRC error detected at xfs_agf_read_verify+0x14c/0x224, xfs_agf block 0x1 [ 57.086454][ T4397] XFS (loop1): Unmount and run xfs_repair [ 57.088543][ T4397] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 57.090823][ T4397] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 57.094403][ T4397] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 57.097651][ T4397] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 57.104134][ T4397] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 57.115573][ T4397] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 57.120340][ T4397] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 ................ [ 57.128214][ T4397] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 57.136121][ T4397] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 57.141133][ T4397] XFS (loop1): Metadata CRC error detected at xfs_agf_read_verify+0x14c/0x224, xfs_agf block 0x1 [ 57.152659][ T4397] XFS (loop1): Unmount and run xfs_repair [ 57.155817][ T4397] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 57.159193][ T4397] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 57.167003][ T4397] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 57.170818][ T4397] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 57.175910][ T4397] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 57.183983][ T4397] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 57.188706][ T4397] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 ................ [ 57.193378][ T4397] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 57.197928][ T4397] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 57.209753][ T4397] XFS (loop1): Metadata CRC error detected at xfs_agf_read_verify+0x14c/0x224, xfs_agf block 0x1 [ 57.216240][ T4397] XFS (loop1): Unmount and run xfs_repair [ 57.219347][ T4397] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 57.233572][ T4397] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 57.239361][ T4397] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 57.246653][ T4397] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 57.252366][ T4397] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 57.258190][ T4397] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 57.266985][ T4397] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 ................ [ 57.271835][ T4397] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 57.277524][ T4397] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 57.284729][ T4397] XFS (loop1): Metadata CRC error detected at xfs_agf_read_verify+0x14c/0x224, xfs_agf block 0x1 [ 57.290753][ T4397] XFS (loop1): Unmount and run xfs_repair [ 57.298548][ T4397] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 57.304277][ T4397] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 57.308066][ T4397] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 57.310709][ T4397] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 57.325190][ T4397] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 57.328683][ T4397] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 57.332405][ T4397] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 ................ [ 57.335980][ T4397] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 57.340306][ T4397] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 57.346742][ T4397] XFS (loop1): Metadata CRC error detected at xfs_agf_read_verify+0x14c/0x224, xfs_agf block 0x1 [ 57.350709][ T4397] XFS (loop1): Unmount and run xfs_repair [ 57.353013][ T4397] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 57.354449][ T4397] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 57.356508][ T4397] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 57.358080][ T4397] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 57.359780][ T4397] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 57.365243][ T4397] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 57.366747][ T4397] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 ................ [ 57.368241][ T4397] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 57.369760][ T4397] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 57.374388][ T4397] XFS (loop1): Metadata CRC error detected at xfs_agf_read_verify+0x14c/0x224, xfs_agf block 0x1 [ 57.376287][ T4397] XFS (loop1): Unmount and run xfs_repair [ 57.377432][ T4397] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 57.378725][ T4397] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 57.380439][ T4397] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 57.385465][ T4397] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 57.386854][ T4397] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 57.388422][ T4397] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 57.389945][ T4397] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 ................ [ 57.391950][ T4397] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 57.393482][ T4397] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 57.395491][ T4397] XFS (loop1): Metadata CRC error detected at xfs_agf_read_verify+0x14c/0x224, xfs_agf block 0x1 [ 57.397424][ T4397] XFS (loop1): Unmount and run xfs_repair [ 57.398423][ T4397] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 57.399940][ T4397] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 57.406450][ T4397] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 57.408032][ T4397] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 57.409573][ T4397] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 57.411082][ T4397] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 57.413077][ T4397] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 ................ [ 57.414718][ T4397] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 57.416498][ T4397] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 57.418359][ T4397] XFS (loop1): Metadata CRC error detected at xfs_agf_read_verify+0x14c/0x224, xfs_agf block 0x1 [ 57.420409][ T4397] XFS (loop1): Unmount and run xfs_repair [ 57.424953][ T4397] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 57.426308][ T4397] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 57.428053][ T4397] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 57.429667][ T4397] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 57.431686][ T4397] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 57.433355][ T4397] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 57.435027][ T4397] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 ................ [ 57.436714][ T4397] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 57.438477][ T4397] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 57.440368][ T4397] XFS (loop1): Metadata CRC error detected at xfs_agf_read_verify+0x14c/0x224, xfs_agf block 0x1 [ 57.445588][ T4397] XFS (loop1): Unmount and run xfs_repair [ 57.446758][ T4397] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 57.448104][ T4397] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 57.449881][ T4397] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 57.453461][ T4397] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 57.455352][ T4397] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 57.457052][ T4397] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 57.459016][ T4397] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 ................ [ 57.460792][ T4397] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 57.472047][ T4397] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 57.475494][ T4397] XFS (loop1): Metadata CRC error detected at xfs_agf_read_verify+0x14c/0x224, xfs_agf block 0x1 [ 57.477647][ T4397] XFS (loop1): Unmount and run xfs_repair [ 57.478774][ T4397] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 57.480166][ T4397] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 57.484498][ T4397] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 57.486128][ T4397] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 57.487871][ T4397] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 57.489523][ T4397] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 57.494609][ T4397] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 ................ [ 57.496199][ T4397] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 57.497794][ T4397] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 57.499824][ T4397] XFS (loop1): Metadata CRC error detected at xfs_agf_read_verify+0x14c/0x224, xfs_agf block 0x1 [ 57.502486][ T4397] XFS (loop1): Unmount and run xfs_repair [ 57.503771][ T4397] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 57.505163][ T4397] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 57.506845][ T4397] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 57.508508][ T4397] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 57.510295][ T4397] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 57.514714][ T4397] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 57.516229][ T4397] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 ................ [ 57.517824][ T4397] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 57.519460][ T4397] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 57.522637][ T4397] XFS (loop1): Metadata CRC error detected at xfs_agf_read_verify+0x14c/0x224, xfs_agf block 0x1 [ 57.524743][ T4397] XFS (loop1): Unmount and run xfs_repair [ 57.525955][ T4397] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 57.527354][ T4397] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 57.528984][ T4397] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 57.530646][ T4397] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 57.535098][ T4397] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 57.536815][ T4397] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 57.538498][ T4397] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 ................ [ 57.540175][ T4397] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 57.542863][ T4397] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 57.547381][ T4319] XFS (loop1): Unmounting Filesystem [ 57.884540][ T5083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.887551][ T5083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.191011][ T5085] netlink: 4 bytes leftover after parsing attributes in process `syz.4.212'. [ 58.801341][ T4397] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 58.981315][ T4397] usb 1-1: Using ep0 maxpacket: 8 [ 58.983623][ T4397] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 58.984903][ T4397] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 58.986738][ T4397] usb 1-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 58.989558][ T4397] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 58.995955][ T4397] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 58.998870][ T4397] usb 1-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 59.003165][ T4397] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 59.004432][ T4397] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 59.006247][ T4397] usb 1-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 59.010687][ T4397] usb 1-1: string descriptor 0 read error: -22 [ 59.015523][ T4397] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 59.017119][ T4397] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.021913][ T4397] adutux 1-1:168.0: interrupt endpoints not found [ 59.406112][ T4397] usb 1-1: USB disconnect, device number 7 [ 59.429966][ T5113] loop4: detected capacity change from 0 to 764 [ 59.434588][ T5113] rock: directory entry would overflow storage [ 59.435652][ T5113] rock: sig=0x4654, size=5, remaining=4 [ 59.803971][ T5119] netlink: 4 bytes leftover after parsing attributes in process `syz.2.224'. [ 60.062402][ T5125] loop2: detected capacity change from 0 to 32768 [ 60.063804][ T5125] XFS: ikeep mount option is deprecated. [ 60.155350][ T5125] XFS (loop2): Mounting V5 Filesystem [ 60.178413][ T5125] XFS (loop2): Ending clean mount [ 60.180487][ T5125] XFS (loop2): Unmounting Filesystem [ 61.214685][ T5159] loop3: detected capacity change from 0 to 8 [ 61.219329][ T5159] SQUASHFS error: zlib decompression failed, data probably corrupt [ 61.220616][ T5159] SQUASHFS error: Failed to read block 0x9b: -5 [ 61.225894][ T5159] SQUASHFS error: Unable to read metadata cache entry [99] [ 61.227043][ T5159] SQUASHFS error: Unable to read inode 0x127 [ 61.285715][ T4311] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 61.461694][ T5165] netlink: 4 bytes leftover after parsing attributes in process `syz.2.238'. [ 61.486584][ T5163] loop3: detected capacity change from 0 to 40427 [ 61.496539][ T5163] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x3ffff [ 61.504794][ T5163] F2FS-fs (loop3): invalid crc value [ 61.507227][ T5163] F2FS-fs (loop3): Found nat_bits in checkpoint [ 61.519395][ T5163] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 61.587828][ T4330] syz-executor: attempt to access beyond end of device [ 61.587828][ T4330] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 61.714641][ T5179] loop4: detected capacity change from 0 to 512 [ 61.778890][ T5179] EXT4-fs (loop4): Test dummy encryption mode enabled [ 61.780053][ T5179] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 61.782102][ T5179] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 61.787345][ T5179] EXT4-fs error (device loop4): ext4_orphan_get:1426: comm syz.4.243: bad orphan inode 131083 [ 61.789588][ T5179] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 61.794032][ T5179] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-ce" [ 62.123147][ T5195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.135450][ T5195] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.224105][ T5198] netlink: 8 bytes leftover after parsing attributes in process `syz.3.247'. [ 62.225699][ T5198] netlink: 24 bytes leftover after parsing attributes in process `syz.3.247'. [ 62.329811][ T5201] netlink: 4 bytes leftover after parsing attributes in process `syz.3.249'. [ 63.042642][ T5205] loop1: detected capacity change from 0 to 8192 [ 63.116245][ T5205] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 63.365869][ T5205] IPv6: NLM_F_REPLACE set, but no existing node found! [ 63.760622][ T5230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.762892][ T5230] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.802118][ T5232] netlink: 4 bytes leftover after parsing attributes in process `syz.1.259'. [ 63.951789][ T5236] Zero length message leads to an empty skb [ 64.492505][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.493678][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.862941][ T5264] netlink: 4 bytes leftover after parsing attributes in process `syz.1.272'. [ 65.216635][ T4320] EXT4-fs (loop4): unmounting filesystem. [ 65.944078][ T5291] 8021q: adding VLAN 0 to HW filter on device bond1 [ 65.954549][ T5291] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 66.017878][ T5298] netlink: 4 bytes leftover after parsing attributes in process `syz.4.283'. [ 66.052412][ T11] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 66.054682][ T4850] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 66.166867][ T4850] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 67.695151][ T5318] loop3: detected capacity change from 0 to 128 [ 67.705375][ T5318] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 67.831902][ T5318] FAT-fs (loop3): FAT read failed (blocknr 128) [ 67.899557][ T5323] loop4: detected capacity change from 0 to 512 [ 67.910839][ T5323] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 67.928918][ T5323] EXT4-fs (loop4): 1 orphan inode deleted [ 67.930057][ T5323] EXT4-fs (loop4): 1 truncate cleaned up [ 67.931164][ T5323] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 67.938917][ T27] kauditd_printk_skb: 1 callbacks suppressed [ 67.938935][ T27] audit: type=1326 audit(67.920:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5322 comm="syz.4.291" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa135af28 code=0x7ffc0000 [ 67.946876][ T27] audit: type=1326 audit(67.930:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5322 comm="syz.4.291" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa135af28 code=0x7ffc0000 [ 67.957704][ T27] audit: type=1326 audit(67.930:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5322 comm="syz.4.291" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa135af28 code=0x7ffc0000 [ 67.967699][ T27] audit: type=1326 audit(67.930:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5322 comm="syz.4.291" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffffa135af28 code=0x7ffc0000 [ 67.978524][ T27] audit: type=1326 audit(67.930:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5322 comm="syz.4.291" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa135af28 code=0x7ffc0000 [ 68.020806][ T4320] EXT4-fs (loop4): unmounting filesystem. [ 68.115739][ T5330] loop0: detected capacity change from 0 to 8192 [ 68.126056][ T5330] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 68.448386][ T5351] loop4: detected capacity change from 0 to 512 [ 68.495694][ T5351] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 68.866671][ T5365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.962878][ T5365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.388553][ T4320] EXT4-fs (loop4): unmounting filesystem. [ 69.410339][ T5370] loop2: detected capacity change from 0 to 8192 [ 69.415907][ T5370] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 69.470702][ T5374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.478854][ T5376] loop4: detected capacity change from 0 to 764 [ 69.480746][ T5374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.492710][ T5376] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 70.517213][ T5404] loop4: detected capacity change from 0 to 8192 [ 70.532348][ T5404] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 71.433749][ T5422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.435385][ T5422] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.456885][ T5424] netlink: 48 bytes leftover after parsing attributes in process `syz.2.326'. [ 71.678704][ T5436] loop1: detected capacity change from 0 to 8192 [ 71.688253][ T5436] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 72.146298][ T5451] loop4: detected capacity change from 0 to 128 [ 72.157681][ T5451] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 72.166631][ T5451] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 72.187024][ T5451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.196875][ T5456] loop0: detected capacity change from 0 to 512 [ 72.200173][ T5451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.205651][ T5456] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002] [ 72.207054][ T5456] System zones: 1-12 [ 72.211112][ T5456] EXT4-fs error (device loop0): dx_probe:823: inode #2: comm syz.0.337: Directory hole found for htree index block 0 [ 72.214748][ T5456] EXT4-fs (loop0): Remounting filesystem read-only [ 72.215935][ T5456] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -117 [ 72.218416][ T5456] EXT4-fs error (device loop0): dx_probe:823: inode #2: comm syz.0.337: Directory hole found for htree index block 0 [ 72.224019][ T5456] EXT4-fs (loop0): Remounting filesystem read-only [ 72.225118][ T5456] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 72.226521][ T5456] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 72.339070][ T5456] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 72.378419][ T4324] EXT4-fs (loop0): unmounting filesystem. [ 73.119646][ T5480] loop1: detected capacity change from 0 to 256 [ 73.130064][ T5480] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 73.137924][ T5480] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 73.144860][ T5480] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 73.809032][ T5492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.812499][ T5492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.881041][ T5499] binder: 5498:5499 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 73.884583][ T5499] binder: 5498:5499 unknown command 0 [ 73.885572][ T5499] binder: 5498:5499 ioctl c0306201 20000080 returned -22 [ 74.773926][ T5517] loop4: detected capacity change from 0 to 1024 [ 74.794352][ T5517] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 74.881746][ T4320] EXT4-fs (loop4): unmounting filesystem. [ 74.935085][ T5523] loop0: detected capacity change from 0 to 32768 [ 74.936514][ T5523] XFS: ikeep mount option is deprecated. [ 75.034272][ T5535] binder: 5534:5535 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 75.035676][ T5535] binder: 5534:5535 unknown command 0 [ 75.038543][ T5535] binder: 5534:5535 ioctl c0306201 20000080 returned -22 [ 75.041940][ T5523] XFS (loop0): Mounting V5 Filesystem [ 75.158542][ T5523] XFS (loop0): Ending clean mount [ 75.161766][ T5523] XFS (loop0): Quotacheck needed: Please wait. [ 75.176753][ T5523] XFS (loop0): Quotacheck: Done. [ 75.730388][ T5556] netlink: 8 bytes leftover after parsing attributes in process `syz.2.369'. [ 75.731584][ T4324] XFS (loop0): Unmounting Filesystem [ 76.108580][ T5565] netlink: 4 bytes leftover after parsing attributes in process `syz.1.373'. [ 76.590572][ T5578] loop3: detected capacity change from 0 to 4096 [ 76.593925][ T5578] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 77.291001][ T5589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.296889][ T5589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.768368][ T5603] netlink: 4 bytes leftover after parsing attributes in process `syz.1.384'. [ 78.663941][ T5621] netlink: 16 bytes leftover after parsing attributes in process `syz.4.390'. [ 79.344814][ T5634] vxfs: WRONG superblock magic 00000000 at 1 [ 79.344994][ T5634] vxfs: WRONG superblock magic 00000000 at 8 [ 79.345000][ T5634] vxfs: can't find superblock. [ 79.893840][ T5644] loop4: detected capacity change from 0 to 8 [ 79.912048][ T5644] SQUASHFS error: zlib decompression failed, data probably corrupt [ 79.913545][ T5644] SQUASHFS error: Failed to read block 0x9b: -5 [ 79.914486][ T5644] SQUASHFS error: Unable to read metadata cache entry [99] [ 79.915695][ T5644] SQUASHFS error: Unable to read inode 0x127 [ 79.957985][ T5642] netlink: 16 bytes leftover after parsing attributes in process `syz.4.395'. [ 79.962116][ T4311] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 80.047424][ T5649] netlink: 4 bytes leftover after parsing attributes in process `syz.1.397'. [ 80.623949][ T5657] loop4: detected capacity change from 0 to 32768 [ 80.653900][ T5657] JBD2: Ignoring recovery information on journal [ 80.672392][ T5657] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 80.693147][ T5657] OCFS2: ERROR (device loop4): int ocfs2_reserve_local_alloc_bits(struct ocfs2_super *, u32, struct ocfs2_alloc_context *): local alloc inode 76 says it has 9 used bits, but a count shows 8 [ 80.696443][ T5657] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 80.698078][ T5657] OCFS2: File system is now read-only. [ 80.699000][ T5657] (syz.4.401,5657,0):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -30 [ 80.700360][ T5657] (syz.4.401,5657,0):ocfs2_reserve_clusters_with_limit:1166 ERROR: status = -30 [ 80.701788][ T5657] (syz.4.401,5657,0):ocfs2_reserve_clusters_with_limit:1215 ERROR: status = -30 [ 80.703228][ T5657] (syz.4.401,5657,0):ocfs2_lock_allocators:2672 ERROR: status = -30 [ 80.704396][ T5657] (syz.4.401,5657,0):ocfs2_write_begin_nolock:1744 ERROR: status = -30 [ 80.705556][ T5657] (syz.4.401,5657,0):ocfs2_write_begin:1907 ERROR: status = -30 [ 80.793992][ T4320] ocfs2: Unmounting device (7,4) on (node local) [ 81.308934][ T5669] loop3: detected capacity change from 0 to 32768 [ 81.310395][ T5669] XFS: ikeep mount option is deprecated. [ 81.324994][ T5669] XFS (loop3): Mounting V5 Filesystem [ 81.366557][ T5669] XFS (loop3): Ending clean mount [ 81.369163][ T5669] XFS (loop3): Quotacheck needed: Please wait. [ 81.434953][ T5669] XFS (loop3): Quotacheck: Done. [ 81.438619][ T5682] netlink: 16 bytes leftover after parsing attributes in process `syz.1.405'. [ 81.567581][ T5684] binder: 5683:5684 ioctl 4018620d 0 returned -22 [ 81.571146][ T5684] binder: 5683:5684 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 81.575929][ T5684] binder: 5683:5684 unknown command 0 [ 81.578264][ T5684] binder: 5683:5684 ioctl c0306201 20000080 returned -22 [ 81.586439][ T5684] binder: 5683:5684 got transaction to invalid handle, 1 [ 81.587784][ T5684] binder: 5684:5683 cannot find target node [ 81.612309][ T5684] binder: 5683:5684 transaction call to 0:0 failed 34/29201/-22, size 104-24 line 3054 [ 81.620647][ T4957] binder: undelivered TRANSACTION_ERROR: 29201 [ 81.727660][ T5688] netlink: 4 bytes leftover after parsing attributes in process `syz.1.408'. [ 82.375870][ T4330] XFS (loop3): Unmounting Filesystem [ 82.594077][ T5704] netlink: 20 bytes leftover after parsing attributes in process `syz.0.412'. [ 82.969434][ T5708] netlink: 16 bytes leftover after parsing attributes in process `syz.2.416'. [ 83.066078][ T5706] loop1: detected capacity change from 0 to 40427 [ 83.072513][ T5706] F2FS-fs (loop1): invalid crc value [ 83.078253][ T5706] F2FS-fs (loop1): Found nat_bits in checkpoint [ 83.089923][ T5706] F2FS-fs (loop1): Start checkpoint disabled! [ 83.097060][ T5706] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 83.268853][ T5716] binder: 5715:5716 ioctl 4018620d 0 returned -22 [ 83.287387][ T5716] binder: 5715:5716 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 83.299387][ T5716] binder: 5715:5716 unknown command 0 [ 83.300316][ T5716] binder: 5715:5716 ioctl c0306201 20000080 returned -22 [ 83.319965][ T5716] binder: 5715:5716 got transaction to invalid handle, 1 [ 83.329102][ T5716] binder: 5716:5715 cannot find target node [ 83.330028][ T5716] binder: 5715:5716 transaction call to 0:0 failed 37/29201/-22, size 104-24 line 3054 [ 83.350615][ T4375] binder: undelivered TRANSACTION_ERROR: 29201 [ 83.685811][ T5725] netlink: 4 bytes leftover after parsing attributes in process `syz.3.420'. [ 83.856514][ T5728] syz.3.421 uses obsolete (PF_INET,SOCK_PACKET) [ 84.614397][ T5745] netlink: 8 bytes leftover after parsing attributes in process `syz.2.427'. [ 84.896886][ T5752] netlink: 20 bytes leftover after parsing attributes in process `syz.2.428'. [ 85.655492][ T5758] binder: 5753:5758 ioctl 4018620d 0 returned -22 [ 85.659422][ T5757] netlink: 4 bytes leftover after parsing attributes in process `syz.2.431'. [ 85.662013][ T5758] binder: 5753:5758 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 85.663415][ T5758] binder: 5753:5758 unknown command 0 [ 85.670755][ T5758] binder: 5753:5758 ioctl c0306201 20000080 returned -22 [ 85.674671][ T5758] binder: 5753:5758 got transaction to invalid handle, 1 [ 85.675842][ T5758] binder: 5758:5753 cannot find target node [ 85.683221][ T5758] binder: 5753:5758 transaction call to 0:0 failed 40/29201/-22, size 104-24 line 3054 [ 85.685302][ T4397] binder: undelivered TRANSACTION_ERROR: 29201 [ 86.580095][ T5785] netlink: 8 bytes leftover after parsing attributes in process `syz.1.438'. [ 87.395698][ T5796] netlink: 20 bytes leftover after parsing attributes in process `syz.4.441'. [ 87.914737][ T5814] binder: BINDER_SET_CONTEXT_MGR already set [ 87.917063][ T5814] binder: 5809:5814 ioctl 4018620d 20000040 returned -16 [ 87.970181][ T5817] loop4: detected capacity change from 0 to 2048 [ 87.980875][ T5817] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 88.012279][ T5821] netlink: 8 bytes leftover after parsing attributes in process `syz.0.450'. [ 88.018019][ T5819] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 88.475247][ T4336] Bluetooth: hci4: unexpected cc 0x203e length: 2 > 1 [ 88.848965][ T5845] binder: BINDER_SET_CONTEXT_MGR already set [ 88.850294][ T5845] binder: 5844:5845 ioctl 4018620d 20000040 returned -16 [ 89.173574][ T27] audit: type=1326 audit(89.160:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5855 comm="syz.3.464" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff95d5af28 code=0x7ffc0000 [ 89.177021][ T27] audit: type=1326 audit(89.160:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5855 comm="syz.3.464" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff95d5af28 code=0x7ffc0000 [ 89.181765][ T27] audit: type=1326 audit(89.160:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5855 comm="syz.3.464" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=178 compat=0 ip=0xffff95d5af28 code=0x7ffc0000 [ 89.194602][ T27] audit: type=1326 audit(89.160:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5855 comm="syz.3.464" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff95d5af28 code=0x7ffc0000 [ 89.206198][ T27] audit: type=1326 audit(89.160:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5855 comm="syz.3.464" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff95d5af28 code=0x7ffc0000 [ 89.216973][ T27] audit: type=1326 audit(89.160:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5855 comm="syz.3.464" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=107 compat=0 ip=0xffff95d5af28 code=0x7ffc0000 [ 89.227870][ T27] audit: type=1326 audit(89.170:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5855 comm="syz.3.464" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff95d5af28 code=0x7ffc0000 [ 89.271888][ T27] audit: type=1326 audit(89.170:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5855 comm="syz.3.464" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff95d5af28 code=0x7ffc0000 [ 90.262557][ T5881] binder: BINDER_SET_CONTEXT_MGR already set [ 90.263597][ T5881] binder: 5880:5881 ioctl 4018620d 20000040 returned -16 [ 90.622905][ T5900] netlink: 4 bytes leftover after parsing attributes in process `syz.2.479'. [ 90.679375][ T5901] netlink: 4 bytes leftover after parsing attributes in process `syz.0.480'. [ 90.803600][ T5905] loop4: detected capacity change from 0 to 512 [ 90.829450][ T5905] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 91.045448][ T5913] binder: 5912:5913 ioctl c0306201 0 returned -14 [ 91.048106][ T5913] binder: 5912:5913 got transaction to invalid handle, 1 [ 91.049262][ T5913] binder: 5913:5912 cannot find target node [ 91.050147][ T5913] binder: 5912:5913 transaction call to 0:0 failed 47/29201/-22, size 104-24 line 3054 [ 91.054732][ T4952] binder: undelivered TRANSACTION_ERROR: 29201 [ 91.666355][ T4320] EXT4-fs (loop4): unmounting filesystem. [ 91.759893][ T5935] netlink: 4 bytes leftover after parsing attributes in process `syz.2.491'. [ 92.208306][ T5953] binder: 5952:5953 ioctl c0306201 0 returned -14 [ 92.214298][ T5953] binder: 5952:5953 got transaction to invalid handle, 1 [ 92.219792][ T5953] binder: 5953:5952 cannot find target node [ 92.222224][ T5953] binder: 5952:5953 transaction call to 0:0 failed 51/29201/-22, size 104-24 line 3054 [ 92.225839][ T1515] binder: undelivered TRANSACTION_ERROR: 29201 [ 93.435509][ T6041] netlink: 4 bytes leftover after parsing attributes in process `syz.0.502'. [ 94.587928][ T6054] binder: 6053:6054 ioctl c0306201 0 returned -14 [ 94.590296][ T6054] binder: 6053:6054 got transaction to invalid handle, 1 [ 94.591780][ T6054] binder: 6054:6053 cannot find target node [ 94.592677][ T6054] binder: 6053:6054 transaction call to 0:0 failed 55/29201/-22, size 104-24 line 3054 [ 94.600749][ T14] binder: undelivered TRANSACTION_ERROR: 29201 [ 94.798661][ T6067] netlink: 4 bytes leftover after parsing attributes in process `syz.3.514'. [ 95.364574][ T6081] loop0: detected capacity change from 0 to 512 [ 95.664771][ T6081] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 95.690607][ T6088] binder: 6087:6088 got transaction to invalid handle, 1 [ 95.694214][ T6088] binder: 6088:6087 cannot find target node [ 95.726765][ T6081] EXT4-fs (loop0): 1 truncate cleaned up [ 95.727679][ T6081] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 95.818928][ T6093] netlink: 12 bytes leftover after parsing attributes in process `syz.3.521'. [ 95.851935][ T6097] loop2: detected capacity change from 0 to 512 [ 95.888506][ T6097] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 95.916655][ T6097] EXT4-fs error (device loop2): ext4_do_update_inode:5254: inode #2: comm syz.2.523: corrupted inode contents [ 95.924345][ T6097] EXT4-fs error (device loop2): ext4_dirty_inode:6119: inode #2: comm syz.2.523: mark_inode_dirty error [ 95.928045][ T6097] EXT4-fs error (device loop2): ext4_do_update_inode:5254: inode #2: comm syz.2.523: corrupted inode contents [ 95.933451][ T6097] EXT4-fs error (device loop2): ext4_do_update_inode:5254: inode #2: comm syz.2.523: corrupted inode contents [ 95.972211][ T6097] EXT4-fs error (device loop2): ext4_dirty_inode:6119: inode #2: comm syz.2.523: mark_inode_dirty error [ 95.974453][ T6097] EXT4-fs error (device loop2): ext4_do_update_inode:5254: inode #2: comm syz.2.523: corrupted inode contents [ 95.978825][ T6097] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #2: comm syz.2.523: mark_inode_dirty error [ 95.990625][ T6097] EXT4-fs error (device loop2): ext4_do_update_inode:5254: inode #2: comm syz.2.523: corrupted inode contents [ 96.020191][ T4324] EXT4-fs (loop0): unmounting filesystem. [ 96.039024][ T6097] EXT4-fs error (device loop2): ext4_dirty_inode:6119: inode #2: comm syz.2.523: mark_inode_dirty error [ 96.050512][ T6106] netlink: 4 bytes leftover after parsing attributes in process `syz.3.526'. [ 96.115960][ T4329] EXT4-fs (loop2): unmounting filesystem. [ 96.123103][ T6112] loop3: detected capacity change from 0 to 64 [ 96.231186][ T6128] netlink: 12 bytes leftover after parsing attributes in process `syz.3.534'. [ 96.533384][ T6129] binder: 6124:6129 got transaction to invalid handle, 1 [ 96.535318][ T6129] binder_debug: 2 callbacks suppressed [ 96.535332][ T6129] binder: 6129:6124 cannot find target node [ 96.539333][ T6129] binder: 6124:6129 transaction call to 0:0 failed 63/29201/-22, size 104-24 line 3054 [ 96.543692][ T4375] binder: undelivered TRANSACTION_ERROR: 29201 [ 97.184096][ T6142] netlink: 4 bytes leftover after parsing attributes in process `syz.3.538'. [ 97.356900][ T6168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.361005][ T6168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.382751][ T6170] binder: 6169:6170 got transaction to invalid handle, 1 [ 97.384030][ T6170] binder: 6170:6169 cannot find target node [ 97.384875][ T6170] binder: 6169:6170 transaction call to 0:0 failed 67/29201/-22, size 104-24 line 3054 [ 97.386680][ T14] binder: undelivered TRANSACTION_ERROR: 29201 [ 97.436388][ T6175] netlink: 12 bytes leftover after parsing attributes in process `syz.4.548'. [ 97.576992][ T6168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.578399][ T6168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.682662][ T6168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.881757][ T6168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.358442][ T6199] binder: BINDER_SET_CONTEXT_MGR already set [ 98.359430][ T6199] binder: 6198:6199 ioctl 4018620d 20000040 returned -16 [ 98.361139][ T6199] binder: 6198:6199 Acquire 1 refcount change on invalid ref 0 ret -22 [ 98.373421][ T6199] binder: 6198:6199 got transaction to invalid handle, 1 [ 98.378023][ T6199] binder: 6199:6198 cannot find target node [ 98.378924][ T6199] binder: 6198:6199 transaction call to 0:0 failed 69/29201/-22, size 104-24 line 3054 [ 98.387340][ T14] binder: undelivered TRANSACTION_ERROR: 29201 [ 98.446163][ T6204] netlink: 12 bytes leftover after parsing attributes in process `syz.2.561'. [ 98.461164][ T6208] netlink: 4 bytes leftover after parsing attributes in process `syz.3.563'. [ 98.479306][ T6210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.480824][ T6210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.149954][ T6222] loop0: detected capacity change from 0 to 16 [ 99.154777][ T6222] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 99.373702][ T6233] binder: 6232:6233 got transaction to invalid handle, 1 [ 99.374948][ T6233] binder: 6233:6232 cannot find target node [ 99.677028][ T6237] netlink: 4 bytes leftover after parsing attributes in process `syz.4.574'. [ 99.695505][ T6224] loop0: detected capacity change from 0 to 40427 [ 99.704652][ T6239] netlink: 8 bytes leftover after parsing attributes in process `syz.4.575'. [ 99.709217][ T6224] F2FS-fs (loop0): Unrecognized mount option "age_extent_cache" or missing value [ 99.796187][ T6245] netlink: 8 bytes leftover after parsing attributes in process `syz.3.579'. [ 99.916182][ T6259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.917943][ T6259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.936264][ T6261] binder: 6260:6261 got transaction to invalid handle, 1 [ 100.764003][ T6273] batman_adv: batadv0: Adding interface: vxlan0 [ 100.765057][ T6273] batman_adv: batadv0: The MTU of interface vxlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.769367][ T6273] batman_adv: batadv0: Not using interface vxlan0 (retrying later): interface not active [ 100.773177][ T6275] netlink: 8 bytes leftover after parsing attributes in process `syz.4.588'. [ 100.781846][ T6277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.787054][ T6277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.819096][ T6281] loop0: detected capacity change from 0 to 512 [ 100.837544][ T6281] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 100.852406][ T4324] EXT4-fs (loop0): unmounting filesystem. [ 100.893321][ T6292] binder: 6291:6292 unknown command 0 [ 100.894224][ T6292] binder: 6291:6292 ioctl c0306201 20000080 returned -22 [ 100.896377][ T6292] binder: tried to use weak ref as strong ref [ 100.902856][ T6292] binder: 6291:6292 Acquire 1 refcount change on invalid ref 0 ret -22 [ 100.904270][ T6292] binder: 6291:6292 got transaction to invalid handle, 1 [ 101.803211][ T6316] netlink: 8 bytes leftover after parsing attributes in process `syz.1.602'. [ 101.910828][ T6321] netlink: 12 bytes leftover after parsing attributes in process `syz.1.604'. [ 101.974170][ T6327] binder: 6326:6327 unknown command 0 [ 101.975149][ T6327] binder: 6326:6327 ioctl c0306201 20000080 returned -22 [ 101.978252][ T6327] binder: tried to use weak ref as strong ref [ 101.979175][ T6327] binder: 6326:6327 Acquire 1 refcount change on invalid ref 0 ret -22 [ 101.988007][ T6327] binder: 6326:6327 got transaction to invalid handle, 1 [ 101.989136][ T6327] binder_debug: 8 callbacks suppressed [ 101.989148][ T6327] binder: 6327:6326 cannot find target node [ 101.990848][ T6327] binder: 6326:6327 transaction call to 0:0 failed 83/29201/-22, size 104-24 line 3054 [ 102.001056][ T14] binder: undelivered TRANSACTION_ERROR: 29201 [ 102.016610][ T6329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.027763][ T6329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.144031][ T4336] Bluetooth: hci4: link tx timeout [ 102.145143][ T4336] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 102.146766][ T4336] Bluetooth: hci4: link tx timeout [ 102.147671][ T4336] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 102.149055][ T4336] Bluetooth: hci4: link tx timeout [ 102.150028][ T4336] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 103.084486][ T6354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.086159][ T6354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.155873][ T6360] binder: 6359:6360 unknown command 0 [ 103.156896][ T6360] binder: 6359:6360 ioctl c0306201 20000080 returned -22 [ 103.158903][ T6360] binder: tried to use weak ref as strong ref [ 103.160093][ T6360] binder: 6359:6360 Acquire 1 refcount change on invalid ref 0 ret -22 [ 103.163543][ T6360] binder: 6359:6360 got transaction to invalid handle, 1 [ 103.164996][ T6360] binder: 6360:6359 cannot find target node [ 103.166099][ T6360] binder: 6359:6360 transaction call to 0:0 failed 86/29201/-22, size 104-24 line 3054 [ 103.168137][ T14] binder: undelivered TRANSACTION_ERROR: 29201 [ 103.492194][ T6376] loop2: detected capacity change from 0 to 1024 [ 103.506099][ T6376] EXT4-fs (loop2): Test dummy encryption mode enabled [ 103.525681][ T6376] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 103.547551][ T6374] loop0: detected capacity change from 0 to 32768 [ 103.586931][ T4329] EXT4-fs (loop2): unmounting filesystem. [ 103.600420][ T6374] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 103.638876][ T6374] [ 103.639338][ T6374] ====================================================== [ 103.640486][ T6374] WARNING: possible circular locking dependency detected [ 103.641676][ T6374] 6.1.147-syzkaller #0 Not tainted [ 103.642534][ T6374] ------------------------------------------------------ [ 103.643733][ T6374] syz.0.623/6374 is trying to acquire lock: [ 103.644728][ T6374] ffff0000cb9bab48 (&mm->mmap_lock){++++}-{3:3}, at: __might_fault+0x9c/0x124 [ 103.646217][ T6374] [ 103.646217][ T6374] but task is already holding lock: [ 103.647343][ T6374] ffff0000ddda3f60 (&oi->ip_alloc_sem){++++}-{3:3}, at: ocfs2_fiemap+0x258/0x9b0 [ 103.648772][ T6374] [ 103.648772][ T6374] which lock already depends on the new lock. [ 103.648772][ T6374] [ 103.650396][ T6374] [ 103.650396][ T6374] the existing dependency chain (in reverse order) is: [ 103.651766][ T6374] [ 103.651766][ T6374] -> #2 (&oi->ip_alloc_sem){++++}-{3:3}: [ 103.653028][ T6374] down_write+0x5c/0x88 [ 103.653796][ T6374] ocfs2_page_mkwrite+0x328/0xbf4 [ 103.654773][ T6374] do_page_mkwrite+0x13c/0x358 [ 103.655720][ T6374] wp_page_shared+0x148/0x550 [ 103.656555][ T6374] do_wp_page+0xca0/0xef0 [ 103.657300][ T6374] handle_mm_fault+0x133c/0x2fd4 [ 103.658177][ T6374] do_page_fault+0x310/0x99c [ 103.658930][ T6374] do_mem_abort+0x70/0x194 [ 103.659648][ T6374] el0_da+0x70/0x154 [ 103.660326][ T6374] el0t_64_sync_handler+0x90/0xf0 [ 103.661248][ T6374] el0t_64_sync+0x18c/0x190 [ 103.662037][ T6374] [ 103.662037][ T6374] -> #1 (sb_pagefaults#4){.+.+}-{0:0}: [ 103.663235][ T6374] ocfs2_page_mkwrite+0x194/0xbf4 [ 103.664140][ T6374] do_page_mkwrite+0x13c/0x358 [ 103.665046][ T6374] wp_page_shared+0x148/0x550 [ 103.665886][ T6374] do_wp_page+0xca0/0xef0 [ 103.666661][ T6374] handle_mm_fault+0x133c/0x2fd4 [ 103.667610][ T6374] do_page_fault+0x310/0x99c [ 103.668481][ T6374] do_mem_abort+0x70/0x194 [ 103.669325][ T6374] el0_da+0x70/0x154 [ 103.669993][ T6374] el0t_64_sync_handler+0x90/0xf0 [ 103.670865][ T6374] el0t_64_sync+0x18c/0x190 [ 103.671639][ T6374] [ 103.671639][ T6374] -> #0 (&mm->mmap_lock){++++}-{3:3}: [ 103.672723][ T6374] __lock_acquire+0x293c/0x6544 [ 103.673561][ T6374] lock_acquire+0x20c/0x644 [ 103.674332][ T6374] __might_fault+0xc4/0x124 [ 103.675086][ T6374] fiemap_fill_next_extent+0x15c/0x3b4 [ 103.676074][ T6374] ocfs2_fiemap+0x634/0x9b0 [ 103.676872][ T6374] do_vfs_ioctl+0x1694/0x206c [ 103.677701][ T6374] __arm64_sys_ioctl+0xe4/0x1c8 [ 103.678517][ T6374] invoke_syscall+0x98/0x2bc [ 103.679313][ T6374] el0_svc_common+0x138/0x258 [ 103.680098][ T6374] do_el0_svc+0x58/0x13c [ 103.680866][ T6374] el0_svc+0x58/0x138 [ 103.681598][ T6374] el0t_64_sync_handler+0x84/0xf0 [ 103.682560][ T6374] el0t_64_sync+0x18c/0x190 [ 103.683407][ T6374] [ 103.683407][ T6374] other info that might help us debug this: [ 103.683407][ T6374] [ 103.685017][ T6374] Chain exists of: [ 103.685017][ T6374] &mm->mmap_lock --> sb_pagefaults#4 --> &oi->ip_alloc_sem [ 103.685017][ T6374] [ 103.687142][ T6374] Possible unsafe locking scenario: [ 103.687142][ T6374] [ 103.688382][ T6374] CPU0 CPU1 [ 103.689282][ T6374] ---- ---- [ 103.690168][ T6374] lock(&oi->ip_alloc_sem); [ 103.690953][ T6374] lock(sb_pagefaults#4); [ 103.692133][ T6374] lock(&oi->ip_alloc_sem); [ 103.693365][ T6374] lock(&mm->mmap_lock); [ 103.694084][ T6374] [ 103.694084][ T6374] *** DEADLOCK *** [ 103.694084][ T6374] [ 103.695340][ T6374] 1 lock held by syz.0.623/6374: [ 103.696086][ T6374] #0: ffff0000ddda3f60 (&oi->ip_alloc_sem){++++}-{3:3}, at: ocfs2_fiemap+0x258/0x9b0 [ 103.697686][ T6374] [ 103.697686][ T6374] stack backtrace: [ 103.698689][ T6374] CPU: 1 PID: 6374 Comm: syz.0.623 Not tainted 6.1.147-syzkaller #0 [ 103.700001][ T6374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/18/2025 [ 103.701622][ T6374] Call trace: [ 103.702162][ T6374] dump_backtrace+0x1c8/0x1f4 [ 103.702915][ T6374] show_stack+0x2c/0x3c [ 103.703592][ T6374] __dump_stack+0x30/0x40 [ 103.704354][ T6374] dump_stack_lvl+0xf8/0x160 [ 103.705160][ T6374] dump_stack+0x1c/0x5c [ 103.705885][ T6374] print_circular_bug+0x148/0x1b0 [ 103.706760][ T6374] check_noncircular+0x240/0x2d4 [ 103.707596][ T6374] __lock_acquire+0x293c/0x6544 [ 103.708379][ T6374] lock_acquire+0x20c/0x644 [ 103.709095][ T6374] __might_fault+0xc4/0x124 [ 103.709836][ T6374] fiemap_fill_next_extent+0x15c/0x3b4 [ 103.710644][ T6374] ocfs2_fiemap+0x634/0x9b0 [ 103.711316][ T6374] do_vfs_ioctl+0x1694/0x206c [ 103.712049][ T6374] __arm64_sys_ioctl+0xe4/0x1c8 [ 103.712839][ T6374] invoke_syscall+0x98/0x2bc [ 103.713572][ T6374] el0_svc_common+0x138/0x258 [ 103.714277][ T6374] do_el0_svc+0x58/0x13c [ 103.714987][ T6374] el0_svc+0x58/0x138 [ 103.715632][ T6374] el0t_64_sync_handler+0x84/0xf0 [ 103.716415][ T6374] el0t_64_sync+0x18c/0x190 [ 104.171269][ T4336] Bluetooth: hci4: command 0x0406 tx timeout [ 104.478515][ T4324] ocfs2: Unmounting device (7,0) on (node local)