last executing test programs: 17.599570784s ago: executing program 1 (id=541): personality(0x60000a) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x344000, &(0x7f00000002c0)={[], [{@appraise_type}, {@fowner_gt}, {@smackfsfloor={'smackfsfloor', 0x3d, 'ext3\x00'}}, {@euid_lt}]}, 0x9b, 0x50c, &(0x7f0000000c40)="$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") 17.213001223s ago: executing program 1 (id=544): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = io_uring_setup(0x1, 0x0) io_uring_register$IORING_REGISTER_ZCRX_IFQ(r4, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x2, &(0x7f0000000200)={0x0}, &(0x7f0000000300)={&(0x7f0000000340)="705b20de24280f6fde576aafcfca44ea30de8ba5e78db2c53ddf5988d6dadd855e51b11cb3756cc24fd58c38ce7fc4f224bd75ee4cc5b6dbead2f23f89c3a4e9e1629a43c8e593692e6343aaa245be98bbedcec27248a3b49cab35b999f391d95a96d1f360a6cc17633e", 0x6a, 0x1}}, 0x1) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111, 0x3}}, 0x5c) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000340)={0x15, 0x110, 0xfa00, {r6, 0x73c, 0x30, 0x30, 0x0, @in6={0x1b, 0x4e20, 0x5, @empty, 0xbff}, @ib={0x1b, 0xf, 0x6, {"50916300000000000000000700"}, 0x8000000000000001, 0x8, 0x3ff}}}, 0x118) 14.614743821s ago: executing program 1 (id=551): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000004500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000180)=ANY=[], 0x0, 0x28, 0xfffffffffffffda8, 0x0, 0x1f00, 0x22, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2c605, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) syz_open_procfs(r2, &(0x7f0000000000)='net/ip_tables_names\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000004c0)={@broadcast, @random="170cb45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x1, 0x0, 0xe0, 0x0, 0xe000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast2}}}}}}, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="2e000000040000000000000000000000010000000000000004000000000000000600000000000000000000f07523f458c7aecb"], 0x2e) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000002140)={0x30, 0x5, 0x0, {0x0, 0x1, 0x9, 0x9}}, 0x30) 12.388960821s ago: executing program 1 (id=556): r0 = syz_usb_connect(0x0, 0x202, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902f00101040000030904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000040)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000d0200000056"], 0x0, 0x0, 0x0, 0x0}) 6.116214239s ago: executing program 2 (id=565): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000240)={@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x20) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x28, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @remote, @mcast2={0xe}}}}}}}, 0x0) 5.749524337s ago: executing program 0 (id=566): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) write$tun(r0, &(0x7f00000003c0)={@void, @val={0x0, 0x4, 0x8, 0xe057, 0x15, 0xd}, @ipv6=@icmpv6={0x6, 0x6, '\x00', 0xf98, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x12}, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x6a, '\x00', {0x4, 0x6, 'A\x00', 0x8, 0x3c, 0x0, @mcast1, @mcast1, [@dstopts={0x2c, 0x4, '\x00', [@jumbo={0xc2, 0x4, 0x433}, @calipso={0x7, 0x8, {0x1, 0x0, 0x8, 0x8}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x8, 0x4, [0xfffffffffffffffc]}}]}, @srh={0x2b, 0x0, 0x4, 0x0, 0x10, 0x58, 0x6}], "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"}}}}}, 0xfca) 5.549993257s ago: executing program 2 (id=567): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000000)={0x1, 0x0, 0x800000000c, 0xfffffffffffffffd}) fcntl$lock(r2, 0x6, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x9}) syz_emit_ethernet(0x5e, &(0x7f00000002c0)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00\'$', 0x28, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}}}}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)={0x14, r5, 0x711, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x24044894}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r3, &(0x7f0000000040), 0x0, 0x4}, 0x20) 5.122177128s ago: executing program 2 (id=569): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x101602, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110c230000) ioctl$TUNSETOFFLOAD(r0, 0x40047451, 0xf0ff1f00000000) 4.615408653s ago: executing program 2 (id=570): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x7f, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000c050}, 0x8010) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x44, 0x18, 0x1, 0x70bd25, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x30, 0x1, [{0xc, 0x8c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r1) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000fcdbdf2503000000180001801400020073797a5f74756e0000000000000000000500020000000000050005"], 0x44}, 0x1, 0x0, 0x0, 0x20009085}, 0x40040c4) 4.108887418s ago: executing program 2 (id=571): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x15, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x20, "", [{{0x9, 0x4, 0x0, 0x4, 0x84, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x1005, 0x5, 0x1, {0x22, 0x6}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x2, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000300)={0x40, 0x2, 0x6, {0x6, 0x6e8ff644f8393630, "a8560400"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 3.833496442s ago: executing program 0 (id=572): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000440)={r1, 0x1, 0x6, @link_local}, 0x10) 3.726823927s ago: executing program 0 (id=573): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="adcd1afbff9039fffffff1764402f38698d69dc70e94e3a0bbc7e43c8c2ffb7c00e407c4eade86fc", 0x28) 3.671823229s ago: executing program 1 (id=574): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000040)=ANY=[], 0x0, 0x0}) 3.576071744s ago: executing program 0 (id=575): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000004500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000180)=ANY=[], 0x0, 0x28, 0xfffffffffffffda8, 0x0, 0x1f00, 0x22, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2c605, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_names\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000004c0)={@broadcast, @random="170cb45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x1, 0x0, 0xe0, 0x0, 0xe000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast2}}}}}}, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="2e000000040000000000000000000000010000000000000004000000000000000600000000000000000000f07523f458c7aecb"], 0x2e) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000002140)={0x30, 0x5, 0x0, {0x0, 0x1, 0x9, 0x9}}, 0x30) 2.383744523s ago: executing program 3 (id=576): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x891c, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffc}}) 2.25174666s ago: executing program 0 (id=577): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000000)={0x1, 0x0, 0x800000000c, 0xfffffffffffffffd}) fcntl$lock(r4, 0x6, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x9}) syz_emit_ethernet(0x5e, &(0x7f00000002c0)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00\'$', 0x28, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}}}}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)={0x14, r7, 0x711, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x24044894}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r5, &(0x7f0000000040), 0x0, 0x4}, 0x20) 2.188545292s ago: executing program 3 (id=578): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0xffffffff, 0x2000, &(0x7f0000000000/0x2000)=nil}) 1.864682409s ago: executing program 3 (id=579): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000240)={&(0x7f0000000100)=""/106, 0xfffffdb8}) 1.511330876s ago: executing program 3 (id=580): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x183242) write$evdev(r0, &(0x7f0000000040)=[{{0x0, 0x2710}, 0x11, 0x2cfd, 0x400}], 0x18) 1.351446764s ago: executing program 3 (id=581): setns(0xc9, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r0, &(0x7f0000002180)=""/4105, 0x137, 0x0) 1.236742879s ago: executing program 3 (id=582): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000004500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000180)=ANY=[], 0x0, 0x28, 0xfffffffffffffda8, 0x0, 0x1f00, 0x22, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2c605, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) syz_open_procfs(r1, &(0x7f0000000000)='net/ip_tables_names\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000004c0)={@broadcast, @random="170cb45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x1, 0x0, 0xe0, 0x0, 0xe000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast2}}}}}}, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="2e000000040000000000000000000000010000000000000004000000000000000600000000000000000000f07523f458c7aecb"], 0x2e) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000002140)={0x30, 0x5, 0x0, {0x0, 0x1, 0x9, 0x9}}, 0x30) 1.132792544s ago: executing program 2 (id=583): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000004500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000180)=ANY=[], 0x0, 0x28, 0xfffffffffffffda8, 0x0, 0x1f00, 0x22, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2c605, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) syz_open_procfs(r2, &(0x7f0000000000)='net/ip_tables_names\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000004c0)={@broadcast, @random="170cb45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x1, 0x0, 0xe0, 0x0, 0xe000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast2}}}}}}, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="2e000000040000000000000000000000010000000000000004000000000000000600000000000000000000f07523f458c7aecb"], 0x2e) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000002140)={0x30, 0x5, 0x0, {0x0, 0x1, 0x9, 0x9}}, 0x30) 846.776609ms ago: executing program 0 (id=584): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000100)="520000002300010100020600"/41, 0x29) 0s ago: executing program 1 (id=585): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x800455c9, 0x100000002) kernel console output (not intermixed with test programs): tooth: hci0: command tx timeout [ 81.127063][ T51] Bluetooth: hci2: command tx timeout [ 81.141435][ T5775] veth0_vlan: entered promiscuous mode [ 81.164820][ T5773] veth1_vlan: entered promiscuous mode [ 81.187183][ T5775] veth1_vlan: entered promiscuous mode [ 81.201235][ T51] Bluetooth: hci3: command tx timeout [ 81.202455][ T5786] Bluetooth: hci1: command tx timeout [ 81.232854][ T5772] veth0_vlan: entered promiscuous mode [ 81.268886][ T5774] veth0_vlan: entered promiscuous mode [ 81.293474][ T5773] veth0_macvtap: entered promiscuous mode [ 81.306678][ T5772] veth1_vlan: entered promiscuous mode [ 81.316084][ T5774] veth1_vlan: entered promiscuous mode [ 81.336728][ T5773] veth1_macvtap: entered promiscuous mode [ 81.379081][ T5775] veth0_macvtap: entered promiscuous mode [ 81.398838][ T5775] veth1_macvtap: entered promiscuous mode [ 81.426949][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.439331][ T5774] veth0_macvtap: entered promiscuous mode [ 81.460282][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.484306][ T5774] veth1_macvtap: entered promiscuous mode [ 81.496897][ T5772] veth0_macvtap: entered promiscuous mode [ 81.511932][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.526262][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.538201][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.547857][ T5773] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.558204][ T5773] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.567144][ T5773] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.576207][ T5773] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.589983][ T5772] veth1_macvtap: entered promiscuous mode [ 81.609328][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.620263][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.632481][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.661500][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.672130][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.684054][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.694626][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.705670][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.716217][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.728094][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.739518][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.750692][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.760887][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.771608][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.783620][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.793234][ T5775] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.802258][ T5775] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.811503][ T5775] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.820227][ T5775] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.856114][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.869190][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.879867][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.892723][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.905493][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.916622][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.929388][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.939441][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.950173][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.960641][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.972337][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.983354][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.007215][ T5772] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.016864][ T5772] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.026001][ T5772] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.035211][ T5772] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.066074][ T5774] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.082916][ T5774] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.094630][ T5774] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.104150][ T5774] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.237640][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.251517][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.279397][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.302118][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.320415][ T3534] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.337552][ T3534] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.377935][ T129] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.386757][ T129] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.437637][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.460232][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.546013][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.573495][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.593831][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.604885][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.739820][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.778782][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.293402][ T5853] overlayfs: missing 'lowerdir' [ 83.306932][ T51] Bluetooth: hci2: command tx timeout [ 83.312620][ T51] Bluetooth: hci1: command tx timeout [ 83.318107][ T51] Bluetooth: hci3: command tx timeout [ 83.326236][ T5786] Bluetooth: hci0: command tx timeout [ 83.858378][ T5859] netlink: 84 bytes leftover after parsing attributes in process `syz.0.5'. [ 83.985961][ T5865] process 'syz.3.4' launched '/dev/fd/-1/./cgroup.cpu/cgroup.procs' with NULL argv: empty string added [ 85.621382][ T5085] Bluetooth: hci0: command tx timeout [ 85.626873][ T5085] Bluetooth: hci3: command tx timeout [ 85.630590][ T5786] Bluetooth: hci1: command tx timeout [ 85.632328][ T5085] Bluetooth: hci2: command tx timeout [ 86.011215][ T5870] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/loop3": -EINTR [ 87.125492][ T9] cfg80211: failed to load regulatory.db [ 88.170818][ T5085] Bluetooth: hci1: ACL packet too small [ 88.759427][ T5897] netlink: 10 bytes leftover after parsing attributes in process `syz.3.12'. [ 89.984678][ T5908] syz.1.14[5908]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 90.018118][ T5908] loop1: detected capacity change from 0 to 128 [ 90.032167][ T5908] ======================================================= [ 90.032167][ T5908] WARNING: The mand mount option has been deprecated and [ 90.032167][ T5908] and is ignored by this kernel. Remove the mand [ 90.032167][ T5908] option from the mount to silence this warning. [ 90.032167][ T5908] ======================================================= [ 90.744329][ T5908] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 90.756822][ T5908] hpfs: filesystem error: improperly stopped [ 90.763260][ T5908] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 90.771371][ T5908] hpfs: You really don't want any checks? You are crazy... [ 90.778659][ T5908] hpfs: Code page index out of array [ 90.784502][ T5908] hpfs: code page support is disabled [ 90.832792][ T5908] hpfs: hpfs_map_4sectors(): unaligned read [ 90.840340][ T5908] hpfs: hpfs_map_4sectors(): unaligned read [ 90.846359][ T5908] hpfs: filesystem error: unable to find root dir [ 92.005787][ T5915] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 92.142153][ T5945] netlink: 48 bytes leftover after parsing attributes in process `syz.3.15'. [ 92.254777][ T5915] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 92.741027][ T5841] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 92.929407][ T5985] md: personality for level is not loaded! [ 92.970644][ T790] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 93.013291][ T5841] usb 1-1: unable to get BOS descriptor or descriptor too short [ 93.031187][ T5841] usb 1-1: config 6 has an invalid interface number: 238 but max is 0 [ 93.050654][ T5841] usb 1-1: config 6 has no interface number 0 [ 93.070631][ T5841] usb 1-1: config 6 interface 238 has no altsetting 0 [ 93.090460][ T5841] usb 1-1: New USB device found, idVendor=0502, idProduct=37b0, bcdDevice=1c.67 [ 93.100208][ T5841] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.110321][ T5841] usb 1-1: Product: syz [ 93.117969][ T174] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 93.117992][ T5841] usb 1-1: Manufacturer: syz [ 93.126201][ T5841] usb 1-1: SerialNumber: syz [ 93.169026][ T790] usb 2-1: config 9 has an invalid interface number: 182 but max is 0 [ 93.172869][ T174] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 93.189522][ T790] usb 2-1: config 9 has no interface number 0 [ 93.204702][ T790] usb 2-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.10 [ 93.218552][ T790] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.229921][ T790] usb 2-1: Product: syz [ 93.238724][ T790] usb 2-1: Manufacturer: syz [ 93.245222][ T790] usb 2-1: SerialNumber: syz [ 93.456022][ T5841] usb 1-1: USB disconnect, device number 2 [ 93.471273][ T6001] x_tables: unsorted underflow at hook 2 [ 93.529271][ T790] go7007: probe of 2-1:9.182 failed with error -12 [ 93.546660][ T790] usb 2-1: USB disconnect, device number 2 [ 93.612918][ T6004] Bluetooth: ISO socket layer initialized [ 93.910708][ T6008] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6 [ 93.988974][ T6009] netlink: 4 bytes leftover after parsing attributes in process `syz.3.21'. [ 93.998146][ T6009] bridge_slave_1: left allmulticast mode [ 94.004127][ T6009] bridge_slave_1: left promiscuous mode [ 94.011448][ T6009] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.032306][ T6009] bridge_slave_0: left allmulticast mode [ 94.038064][ T6009] bridge_slave_0: left promiscuous mode [ 94.135960][ T6009] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.247891][ T6012] syz.3.21: attempt to access beyond end of device [ 94.247891][ T6012] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 94.260987][ T6012] efs: cannot read volume header [ 96.920039][ T6024] binder: 6022:6024 ioctl c0286687 200000000140 returned -22 [ 97.001569][ T6025] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 101.423886][ T6049] : renamed from bond_slave_0 (while UP) [ 102.138377][ T6038] process 6039 (syz.0.27) no longer affine to cpu1 [ 103.697050][ T5816] smpboot: CPU 1 is now offline [ 106.802931][ T5818] libceph: connect (1)[c::]:6789 error -101 [ 106.843237][ T5818] libceph: mon0 (1)[c::]:6789 connect error [ 106.887477][ T5818] libceph: connect (1)[c::]:6789 error -101 [ 106.918798][ T5818] libceph: mon0 (1)[c::]:6789 connect error [ 108.130100][ T6066] netlink: 36 bytes leftover after parsing attributes in process `syz.3.33'. [ 108.140950][ T5085] Bluetooth: hci0: unknown advertising packet type: 0x05 [ 109.549629][ T5816] libceph: connect (1)[c::]:6789 error -101 [ 109.698163][ T5816] libceph: mon0 (1)[c::]:6789 connect error [ 109.802706][ T6074] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 109.820685][ T6057] ceph: No mds server is up or the cluster is laggy [ 109.833795][ T6065] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 109.861326][ T6065] CIFS: Attempting to mount //127.0.0.1/share [ 110.022606][ T6076] CIFS: VFS: Invalid response size 0 for command 0 [ 111.110180][ T6065] CIFS: VFS: Could not allocate shash TFM 'cmac(aes)' [ 111.120272][ T6065] CIFS: VFS: cifs_mount failed w/return code = -5 [ 112.465813][ T6093] Bluetooth: MGMT ver 1.22 [ 112.851829][ T5959] rpcbind: server 127.0.0.1 not responding, timed out [ 113.193884][ T6104] netlink: 18 bytes leftover after parsing attributes in process `syz.2.38'. [ 119.790803][ T174] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 119.950860][ T174] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 120.207246][ T6117] hid-generic 0000:0000:0000.0002: pid 6117 passed too large report [ 120.225501][ T6121] loop2: detected capacity change from 0 to 2048 [ 120.530332][ T5782] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 120.565994][ T6122] fido_id[6122]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 123.883974][ T6138] warning: `syz.1.49' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 127.629005][ T6147] Config c/1 of g1 needs at least one function. [ 127.629202][ T6147] udc dummy_udc.0: failed to start g1: -22 [ 127.629215][ T6147] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 127.650832][ T6147] UDC core: g1: couldn't find an available UDC or it's busy [ 130.349378][ T6170] loop0: detected capacity change from 0 to 2048 [ 130.404589][ T6170] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 130.682922][ T5818] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 131.111194][ T5818] usb 2-1: Using ep0 maxpacket: 16 [ 131.139774][ T5818] usb 2-1: unable to get BOS descriptor or descriptor too short [ 131.214846][ T5818] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1935, setting to 1024 [ 131.271903][ T5818] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 131.317206][ T5818] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.384003][ T5818] usb 2-1: Product: syz [ 131.388210][ T5818] usb 2-1: Manufacturer: syz [ 131.427728][ T5818] usb 2-1: SerialNumber: syz [ 131.500273][ T6180] loop0: detected capacity change from 0 to 2048 [ 131.988145][ T5818] usb 2-1: 1:1 : no UAC_FORMAT_TYPE desc [ 132.032434][ T5818] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 133.394557][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.402364][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.462225][ T5818] usb 2-1: USB disconnect, device number 3 [ 137.485390][ T6217] md: personality for level is not loaded! [ 137.662791][ T6218] md0: can't set backlog, no write mostly device available [ 144.875831][ T6256] sched: RT throttling activated [ 149.998597][ T6285] md: personality for level is not loaded! [ 151.079993][ T6287] loop2: detected capacity change from 0 to 512 [ 151.185130][ T6289] md0: can't set backlog, no write mostly device available [ 151.194872][ T6287] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.234410][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.477196][ T6315] loop0: detected capacity change from 0 to 1024 [ 157.550559][ T6315] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 157.618167][ T6315] JBD2: no valid journal superblock found [ 157.753045][ T6315] EXT4-fs (loop0): Could not load journal inode [ 161.020164][ T6331] md: personality for level is not loaded! [ 162.262021][ T6336] md0: can't set backlog, no write mostly device available [ 167.569017][ T6358] loop3: detected capacity change from 0 to 512 [ 167.628674][ T6358] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.940258][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.268876][ T6370] loop3: detected capacity change from 0 to 512 [ 169.341917][ T6370] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.742143][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.075591][ T6390] fuse: Bad value for 'fd' [ 181.061026][ T6419] loop2: detected capacity change from 0 to 512 [ 181.071882][ T6420] loop0: detected capacity change from 0 to 512 [ 181.152090][ T6419] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.171408][ T6420] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.401373][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.519720][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.131732][ T6452] netlink: 10 bytes leftover after parsing attributes in process `syz.0.124'. [ 188.362280][ T6463] overlayfs: missing 'lowerdir' [ 192.269126][ T6478] loop2: detected capacity change from 0 to 32768 [ 192.283493][ T6478] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.130 (6478) [ 192.305390][ T6478] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 192.315874][ T6478] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 192.324974][ T6478] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 192.334619][ T6478] BTRFS info (device loop2): use zstd compression, level 3 [ 192.341955][ T6478] BTRFS info (device loop2): force clearing of disk cache [ 192.349058][ T6478] BTRFS info (device loop2): enabling disk space caching [ 192.356154][ T6478] BTRFS info (device loop2): disk space caching is enabled [ 192.394556][ T6478] BTRFS info (device loop2): enabling ssd optimizations [ 192.401617][ T6478] BTRFS info (device loop2): auto enabling async discard [ 192.412326][ T6478] BTRFS info (device loop2): rebuilding free space tree [ 192.443860][ T6478] BTRFS info (device loop2): disabling free space tree [ 192.450950][ T6478] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 192.460825][ T6478] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 193.123276][ T6500] loop0: detected capacity change from 0 to 32768 [ 193.214320][ T6500] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz.0.136 (6500) [ 193.341978][ T5774] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 193.592968][ T5085] Bluetooth: hci3: link tx timeout [ 193.600695][ T5085] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 193.611284][ T5085] Bluetooth: hci3: link tx timeout [ 193.616399][ T5085] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 193.965434][ T5913] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by udevd (5913) [ 194.881734][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.895119][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.933449][ T5085] Bluetooth: hci3: command 0x0406 tx timeout [ 198.800668][ T5085] Bluetooth: hci3: command 0x0406 tx timeout [ 200.596348][ T6530] null_blk: disk nullb1 created [ 201.769687][ T6531] netlink: 8 bytes leftover after parsing attributes in process `syz.0.140'. [ 201.848396][ T5783] Bluetooth: hci0: command 0x0406 tx timeout [ 201.854582][ T5785] Bluetooth: hci1: command 0x0406 tx timeout [ 201.860673][ T5778] Bluetooth: hci2: command 0x0406 tx timeout [ 201.898544][ T6531] macsec0: entered promiscuous mode [ 202.549254][ T6543] loop0: detected capacity change from 0 to 32768 [ 202.565666][ T6543] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz.0.145 (6543) [ 202.582055][ T6543] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 202.592315][ T6543] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 202.601093][ T6543] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 202.610541][ T6543] BTRFS info (device loop0): use zstd compression, level 3 [ 202.617733][ T6543] BTRFS info (device loop0): force clearing of disk cache [ 202.624899][ T6543] BTRFS info (device loop0): enabling disk space caching [ 202.632436][ T6543] BTRFS info (device loop0): disk space caching is enabled [ 202.707240][ T6543] BTRFS info (device loop0): enabling ssd optimizations [ 202.714514][ T6543] BTRFS info (device loop0): auto enabling async discard [ 202.725159][ T6543] BTRFS info (device loop0): rebuilding free space tree [ 202.831387][ T6543] BTRFS info (device loop0): disabling free space tree [ 202.840304][ T6543] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 202.850524][ T6543] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 203.920778][ T5773] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 206.982256][ T5818] Process accounting resumed [ 208.949895][ T6604] loop0: detected capacity change from 0 to 512 [ 208.998461][ T6604] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.267031][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.597470][ T6614] syz.0.153: attempt to access beyond end of device [ 211.597470][ T6614] loop0: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 211.779766][ T6628] loop2: detected capacity change from 0 to 32768 [ 211.801041][ T6628] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.156 (6628) [ 211.969186][ T6629] loop3: detected capacity change from 0 to 32768 [ 211.987841][ T6629] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz.3.157 (6629) [ 211.999158][ T6628] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 212.009612][ T6628] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 212.018397][ T6628] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 212.027816][ T6628] BTRFS info (device loop2): use zstd compression, level 3 [ 212.035057][ T6628] BTRFS info (device loop2): force clearing of disk cache [ 212.042241][ T6628] BTRFS info (device loop2): enabling disk space caching [ 212.049284][ T6628] BTRFS info (device loop2): disk space caching is enabled [ 212.590592][ T6628] BTRFS info (device loop2): enabling ssd optimizations [ 212.597642][ T6628] BTRFS info (device loop2): auto enabling async discard [ 212.605537][ T6628] BTRFS info (device loop2): rebuilding free space tree [ 212.621550][ T6628] BTRFS info (device loop2): disabling free space tree [ 212.628547][ T6628] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 212.638249][ T6628] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 213.253480][ T5786] Bluetooth: hci0: unexpected event for opcode 0x2041 [ 213.457220][ T6659] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 213.479677][ T5774] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 213.524112][ T5786] Bluetooth: hci3: command 0x0406 tx timeout [ 214.423750][ T27] audit: type=1800 audit(1789193006.180:2): pid=6669 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.159" name="id" dev="configfs" ino=9792 res=0 errno=0 [ 214.863042][ T6674] syz.0.161 uses obsolete (PF_INET,SOCK_PACKET) [ 215.020791][ T174] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 215.124601][ T5818] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 215.250527][ T174] usb 3-1: Using ep0 maxpacket: 32 [ 216.198197][ T174] usb 3-1: unable to get BOS descriptor or descriptor too short [ 216.501138][ T5786] Bluetooth: hci0: unexpected event for opcode 0x0c1b [ 216.746191][ T174] usb 3-1: config 7 has an invalid interface number: 219 but max is 0 [ 216.792980][ T174] usb 3-1: config 7 has no interface number 0 [ 216.844859][ T174] usb 3-1: config 7 interface 219 has no altsetting 0 [ 216.896693][ T174] usb 3-1: New USB device found, idVendor=0979, idProduct=0270, bcdDevice=ed.31 [ 216.926329][ T5818] usb 1-1: Dual-Role OTG device on HNP port [ 216.953474][ T5818] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 6.06 [ 216.978006][ T174] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.011952][ T5818] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.020098][ T174] usb 3-1: Product: syz [ 217.846616][ T174] usb 3-1: Manufacturer: syz [ 217.869053][ T5818] usb 1-1: SerialNumber: 1234567890 [ 217.880948][ T174] usb 3-1: SerialNumber: syz [ 217.935328][ T174] usb 3-1: can't set config #7, error -71 [ 217.989026][ T5818] gspca_main: spca501-2.14.0 probing 0000:0000 [ 218.018811][ T174] usb 3-1: USB disconnect, device number 2 [ 218.058782][ T5818] gspca_spca501: reg write: error -32 [ 218.106069][ T5818] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 218.157701][ T5818] spca501: probe of 1-1:1.0 failed with error -22 [ 218.221997][ T5818] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 219.411334][ T6691] loop2: detected capacity change from 0 to 512 [ 219.465880][ T6691] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.662229][ T6690] loop0: detected capacity change from 0 to 32768 [ 219.681671][ T6690] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz.0.167 (6690) [ 219.700427][ T6690] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 219.710758][ T6690] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 219.719444][ T6690] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 219.728877][ T6690] BTRFS info (device loop0): use zstd compression, level 3 [ 219.736600][ T6690] BTRFS info (device loop0): force clearing of disk cache [ 219.743758][ T6690] BTRFS info (device loop0): enabling disk space caching [ 219.750842][ T6690] BTRFS info (device loop0): disk space caching is enabled [ 219.900611][ T6690] BTRFS info (device loop0): enabling ssd optimizations [ 219.907627][ T6690] BTRFS info (device loop0): auto enabling async discard [ 219.927937][ T6690] BTRFS info (device loop0): rebuilding free space tree [ 219.972945][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.011377][ T6690] BTRFS info (device loop0): disabling free space tree [ 220.018487][ T6690] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 220.029295][ T6690] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 221.330035][ T6717] binder: 6716:6717 ioctl c0306201 0 returned -14 [ 221.493241][ T5773] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 222.201568][ T6728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.250335][ T6728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.671480][ T6738] netlink: 84 bytes leftover after parsing attributes in process `syz.2.170'. [ 224.829324][ T6740] loop3: detected capacity change from 0 to 32768 [ 224.853607][ T6740] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.168 (6740) [ 224.882311][ T6740] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 224.893455][ T6740] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 224.902201][ T6740] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 224.911631][ T6740] BTRFS info (device loop3): use zstd compression, level 3 [ 224.918841][ T6740] BTRFS info (device loop3): force clearing of disk cache [ 224.926040][ T6740] BTRFS info (device loop3): enabling disk space caching [ 224.933117][ T6740] BTRFS info (device loop3): disk space caching is enabled [ 226.874148][ T6740] BTRFS info (device loop3): enabling ssd optimizations [ 226.881303][ T6740] BTRFS info (device loop3): auto enabling async discard [ 226.889321][ T6740] BTRFS info (device loop3): rebuilding free space tree [ 226.923273][ T6740] BTRFS info (device loop3): disabling free space tree [ 226.931228][ T6740] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 226.941019][ T6740] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 227.618248][ T5772] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 230.934030][ T6768] : renamed from bond_slave_0 (while UP) [ 232.420833][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 232.596275][ T6779] loop3: detected capacity change from 0 to 32768 [ 232.613736][ T6779] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.179 (6779) [ 232.631519][ T6779] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 232.642237][ T6779] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 232.650986][ T6779] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 232.660391][ T6779] BTRFS info (device loop3): use zstd compression, level 3 [ 232.667634][ T6779] BTRFS info (device loop3): force clearing of disk cache [ 232.674774][ T6779] BTRFS info (device loop3): enabling disk space caching [ 232.681832][ T6779] BTRFS info (device loop3): disk space caching is enabled [ 232.810726][ T6779] BTRFS info (device loop3): enabling ssd optimizations [ 232.817781][ T6779] BTRFS info (device loop3): auto enabling async discard [ 232.836112][ T6779] BTRFS info (device loop3): rebuilding free space tree [ 232.852677][ T6779] BTRFS info (device loop3): disabling free space tree [ 232.859689][ T6779] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 232.869414][ T6779] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 232.886924][ T9] usb 2-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 233.043389][ T9] usb 2-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 233.074563][ T9] usb 2-1: Product: syz [ 233.311814][ T9] usb 2-1: config 0 descriptor?? [ 233.352386][ T9] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 233.481757][ T5772] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 233.499038][ T9] usb 2-1: Detected FT232H [ 233.561502][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 233.581305][ T9] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 233.589018][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 233.655029][ T9] ftdi_sio ttyUSB0: Unable to write latency timer: -32 [ 233.712426][ T9] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 233.796561][ T9] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 234.633852][ T9] usb 2-1: USB disconnect, device number 4 [ 234.736222][ T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 234.806937][ T9] ftdi_sio 2-1:0.0: device disconnected [ 235.010534][ T174] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 236.770143][ T6813] CIFS: Attempting to mount //127.0.0.1/share [ 236.798943][ T174] usb 4-1: New USB device found, idVendor=046d, idProduct=08b6, bcdDevice=ca.8e [ 236.834109][ T6815] CIFS: VFS: Invalid response size 0 for command 0 [ 236.845243][ T174] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.892684][ T174] pwc: Logitech/Cisco VT Camera webcam detected. [ 236.983503][ T6813] CIFS: VFS: Could not allocate shash TFM 'cmac(aes)' [ 236.991879][ T6813] CIFS: VFS: cifs_mount failed w/return code = -5 [ 237.096822][ T174] pwc: Failed to set LED on/off time (-71) [ 237.140592][ T174] pwc: send_video_command error -71 [ 237.145832][ T174] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 237.231701][ T174] Philips webcam: probe of 4-1:127.0 failed with error -71 [ 237.280355][ T174] usb 4-1: USB disconnect, device number 2 [ 237.777219][ T5786] Bluetooth: hci1: unexpected event for opcode 0x2041 [ 237.822523][ T27] audit: type=1800 audit(1789193029.590:3): pid=6828 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.186" name="id" dev="configfs" ino=10134 res=0 errno=0 [ 237.883425][ T6830] ªªªªªª: renamed from vlan0 (while UP) [ 238.974043][ T6836] loop2: detected capacity change from 0 to 128 [ 239.023955][ T6836] gfs2: gfs2 mount does not exist [ 244.491771][ T5786] Bluetooth: hci3: unexpected event for opcode 0x2041 [ 244.576382][ T27] audit: type=1800 audit(1789193036.340:4): pid=6872 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.197" name="id" dev="configfs" ino=10309 res=0 errno=0 [ 246.644599][ T6876] loop3: detected capacity change from 0 to 1024 [ 246.749359][ T6876] hfsplus: detected inconsistent attributes file, running fsck.hfsplus is recommended. [ 248.022979][ T6888] ªªªªªª: renamed from vlan0 (while UP) [ 248.090135][ T6888] md: could not open device unknown-block(1,0). [ 248.124508][ T6888] md: could not open device unknown-block(1,1). [ 248.220699][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 248.770702][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 248.827878][ T9] usb 2-1: New USB device found, idVendor=2b73, idProduct=001e, bcdDevice= 0.40 [ 248.845065][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.904524][ T9] usb 2-1: Product: syz [ 248.908751][ T9] usb 2-1: Manufacturer: syz [ 248.937371][ T9] usb 2-1: SerialNumber: syz [ 249.917575][ T174] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 249.968330][ T9] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 250.015086][ T9] usb 2-1: USB disconnect, device number 5 [ 250.103672][ T5776] udevd[5776]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 250.163374][ T174] usb 4-1: unable to get BOS descriptor or descriptor too short [ 250.185464][ T174] usb 4-1: config 0 has an invalid interface number: 95 but max is 0 [ 250.214154][ T174] usb 4-1: config 0 has no interface number 0 [ 250.220275][ T174] usb 4-1: config 0 interface 95 has no altsetting 0 [ 250.278132][ T174] usb 4-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.05 [ 250.307663][ T174] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.336988][ T174] usb 4-1: Product: syz [ 250.341772][ T6900] loop0: detected capacity change from 0 to 1024 [ 250.357319][ T174] usb 4-1: Manufacturer: syz [ 250.376998][ T174] usb 4-1: SerialNumber: syz [ 250.386014][ T6900] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 250.431928][ T174] usb 4-1: config 0 descriptor?? [ 250.596055][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.667593][ T174] go7007: probe of 4-1:0.95 failed with error -12 [ 251.539472][ T174] usb 4-1: USB disconnect, device number 3 [ 251.594664][ T6907] loop0: detected capacity change from 0 to 256 [ 251.855167][ T5786] Bluetooth: hci3: Malformed LE Event: 0x02 [ 253.030000][ T6915] loop3: detected capacity change from 0 to 8192 [ 253.163799][ T6915] REISERFS warning (device loop3): jmacd-7 reiserfs_fill_super: resize option for remount only [ 253.472589][ T6920] loop3: detected capacity change from 0 to 128 [ 253.534646][ T6920] FAT-fs (loop3): bogus number of reserved sectors [ 253.590773][ T6920] FAT-fs (loop3): This looks like a DOS 1.x volume, but isn't a recognized floppy size (128 sectors) [ 253.654295][ T6920] FAT-fs (loop3): Can't find a valid FAT filesystem [ 253.966000][ T6922] loop3: detected capacity change from 0 to 2048 [ 253.973377][ T6917] loop2: detected capacity change from 0 to 32768 [ 254.005715][ T6917] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1281 transid 8 /dev/loop2 scanned by syz.2.209 (6917) [ 254.946988][ T5776] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1281 transid 8 /dev/loop2 scanned by udevd (5776) [ 256.093032][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.099350][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.989052][ T6938] loop0: detected capacity change from 0 to 8192 [ 257.142068][ T5782] I/O error, dev loop0, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 257.414626][ T6940] loop0: detected capacity change from 0 to 128 [ 257.507114][ T5776] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 258.612840][ T6932] loop3: detected capacity change from 0 to 32768 [ 258.750627][ T6932] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 258.830673][ T6932] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 258.880841][ T6953] loop0: detected capacity change from 0 to 256 [ 258.946759][ T5776] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 258.999310][ T6932] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 259.089825][ T174] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 259.115129][ T174] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 259.303334][ T174] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 188ms [ 259.330770][ T174] gfs2: fsid=syz:syz.0: jid=0: Done [ 259.351574][ T6932] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 259.421082][ T6932] gfs2: fsid=syz:syz.0: can't create logd thread: -4 [ 259.761394][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 259.861838][ T6955] loop0: detected capacity change from 0 to 32768 [ 259.913560][ T6955] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.228 (6955) [ 260.039123][ T6955] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 260.110669][ T6955] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 260.119406][ T6955] BTRFS info (device loop0): turning on sync discard [ 260.196848][ T6955] BTRFS info (device loop0): enabling auto defrag [ 261.097504][ T6955] BTRFS info (device loop0): disabling tree log [ 261.141895][ T6955] BTRFS info (device loop0): using free space tree [ 261.257182][ T6971] loop2: detected capacity change from 0 to 128 [ 261.348407][ T6955] BTRFS info (device loop0): enabling ssd optimizations [ 261.436329][ T6955] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 261.609230][ T6983] loop2: detected capacity change from 0 to 512 [ 261.730887][ T6983] EXT4-fs (loop2): too many log groups per flexible block group [ 261.791038][ T5776] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop0 scanned by udevd (5776) [ 261.810342][ T6983] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 261.842780][ T6983] EXT4-fs (loop2): mount failed [ 262.925561][ T6996] loop2: detected capacity change from 0 to 8 [ 263.033403][ T6996] unable to read xattr id index table [ 263.170490][ T5782] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 264.249847][ T5786] Bluetooth: hci3: command 0x0406 tx timeout [ 264.920034][ T7007] loop3: detected capacity change from 0 to 8 [ 264.999940][ T7007] SQUASHFS error: zlib decompression failed, data probably corrupt [ 265.060860][ T7007] SQUASHFS error: Failed to read block 0x9b: -5 [ 265.067138][ T7007] SQUASHFS error: Unable to read metadata cache entry [99] [ 265.150925][ T7007] SQUASHFS error: Unable to read inode 0x127 [ 267.159765][ T7015] loop0: detected capacity change from 0 to 2048 [ 267.368333][ T7015] loop0: p1 p4 [ 267.368333][ T7015] p1: [ 267.682278][ T7016] netlink: 4 bytes leftover after parsing attributes in process `syz.1.244'. [ 267.701180][ T7015] loop0: partition table partially beyond EOD, truncated [ 267.719774][ T7016] bridge_slave_1: left allmulticast mode [ 267.739394][ T7015] loop0: p4 start 184549376 is beyond EOD, truncated [ 267.790218][ T7015] loop0: p6 start 184549376 is beyond EOD, truncated [ 267.797723][ T7016] bridge_slave_1: left promiscuous mode [ 267.846001][ T5140] loop0: p1 p4 [ 267.846001][ T5140] p1: [ 267.864000][ T7016] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.897053][ T5140] loop0: partition table partially beyond EOD, truncated [ 267.927513][ T5140] loop0: p4 start 184549376 is beyond EOD, truncated [ 267.939944][ T7027] syz.1.244: attempt to access beyond end of device [ 267.939944][ T7027] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 267.980947][ T5140] loop0: p6 start 184549376 is beyond EOD, truncated [ 268.001067][ T7016] bridge_slave_0: left allmulticast mode [ 268.035390][ T7027] efs: cannot read volume header [ 268.066691][ T7016] bridge_slave_0: left promiscuous mode [ 268.074176][ T5773] __loop_clr_fd: partition scan of loop0 failed (rc=-16) [ 268.086036][ T5782] I/O error, dev loop0, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 268.100647][ T5776] I/O error, dev loop0, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 268.110263][ T5776] I/O error, dev loop0, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 268.173722][ T5782] I/O error, dev loop0, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 268.191108][ T7016] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.217062][ T5776] Buffer I/O error on dev loop0p1, logical block 8, async page read [ 268.243506][ T5782] Buffer I/O error on dev loop0p5, logical block 8, async page read [ 268.261923][ T7029] loop0: detected capacity change from 0 to 8 [ 268.280688][ T5776] I/O error, dev loop0, sector 9 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 268.302373][ T5782] I/O error, dev loop0, sector 9 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 268.324815][ T7029] SQUASHFS error: zlib decompression failed, data probably corrupt [ 268.360590][ T5776] Buffer I/O error on dev loop0p1, logical block 9, async page read [ 268.373903][ T5782] Buffer I/O error on dev loop0p5, logical block 9, async page read [ 268.392800][ T7029] SQUASHFS error: Failed to read block 0x9b: -5 [ 268.422147][ T7029] SQUASHFS error: Unable to read metadata cache entry [99] [ 268.472834][ T7029] SQUASHFS error: Unable to read inode 0x127 [ 269.210691][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 269.328512][ T7025] loop2: detected capacity change from 0 to 32768 [ 269.487433][ T7034] loop0: detected capacity change from 0 to 32768 [ 269.501189][ T7034] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz.0.250 (7034) [ 269.520340][ T7034] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 269.530788][ T7034] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 269.539485][ T7034] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 269.549067][ T7034] BTRFS info (device loop0): use zstd compression, level 3 [ 269.556335][ T7034] BTRFS info (device loop0): force clearing of disk cache [ 269.563493][ T7034] BTRFS info (device loop0): enabling disk space caching [ 269.570569][ T7034] BTRFS info (device loop0): disk space caching is enabled [ 269.773064][ T7034] BTRFS info (device loop0): enabling ssd optimizations [ 269.780087][ T7034] BTRFS info (device loop0): auto enabling async discard [ 269.805486][ T7034] BTRFS info (device loop0): rebuilding free space tree [ 269.822398][ T7034] BTRFS info (device loop0): disabling free space tree [ 269.829353][ T7034] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 269.839078][ T7034] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 270.480914][ T5773] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 271.001928][ T51] Bluetooth: hci1: Malformed LE Event: 0x0b [ 271.268848][ T7069] loop0: detected capacity change from 0 to 4096 [ 271.497185][ T7069] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 272.407700][ T7069] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 272.481058][ T7069] ntfs3: loop0: Failed to load $AttrDef (-2) [ 273.166097][ T5776] I/O error, dev loop0, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 273.176060][ T5913] I/O error, dev loop0, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 273.272785][ T5913] I/O error, dev loop0, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 273.289931][ T5776] I/O error, dev loop0, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 273.489269][ T7088] loop0: detected capacity change from 0 to 32768 [ 273.500953][ T7088] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz.0.265 (7088) [ 273.519871][ T5913] Buffer I/O error on dev loop0p5, logical block 8, async page read [ 273.530046][ T5776] Buffer I/O error on dev loop0p1, logical block 8, async page read [ 273.588297][ T7088] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 273.599066][ T7088] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 273.607906][ T7088] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 273.617357][ T7088] BTRFS info (device loop0): use zstd compression, level 3 [ 273.624592][ T7088] BTRFS info (device loop0): force clearing of disk cache [ 273.631743][ T7088] BTRFS info (device loop0): enabling disk space caching [ 273.638757][ T7088] BTRFS info (device loop0): disk space caching is enabled [ 273.662748][ T7092] loop3: detected capacity change from 0 to 256 [ 273.722534][ T7088] BTRFS info (device loop0): enabling ssd optimizations [ 273.729544][ T7088] BTRFS info (device loop0): auto enabling async discard [ 273.739870][ T7088] BTRFS info (device loop0): rebuilding free space tree [ 273.775053][ T7088] BTRFS info (device loop0): disabling free space tree [ 273.782858][ T7088] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 273.792664][ T7088] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 273.805098][ T7092] FAT-fs (loop3): bogus logical sector size 0 [ 273.866272][ T7092] FAT-fs (loop3): Can't find a valid FAT filesystem [ 274.072326][ T51] Bluetooth: hci1: unexpected event for opcode 0x0c03 [ 274.310582][ T5773] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 276.313642][ T7122] loop3: detected capacity change from 0 to 512 [ 276.389594][ T7122] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 276.761497][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.435482][ T5776] I/O error, dev loop0, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 277.466062][ T7135] loop3: detected capacity change from 0 to 1024 [ 277.482669][ T5782] I/O error, dev loop0, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 277.495267][ T7136] loop2: detected capacity change from 0 to 128 [ 277.520749][ T5776] I/O error, dev loop0, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 277.552732][ T7136] FAT-fs (loop2): bogus number of reserved sectors [ 277.559275][ T7136] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 277.580668][ T5782] I/O error, dev loop0, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 277.590292][ T5782] Buffer I/O error on dev loop0p5, logical block 8, async page read [ 277.605230][ T7135] EXT4-fs: inline encryption not supported [ 277.626910][ T5776] Buffer I/O error on dev loop0p1, logical block 8, async page read [ 277.671969][ T5776] I/O error, dev loop0, sector 9 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 277.686560][ T7136] FAT-fs (loop2): Can't find a valid FAT filesystem [ 277.696652][ T7135] Quota error (device loop3): do_check_range: Getting block 64 out of range 1-5 [ 277.732660][ T5782] I/O error, dev loop0, sector 9 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 277.770578][ T5776] Buffer I/O error on dev loop0p1, logical block 9, async page read [ 277.778899][ T7135] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 277.800502][ T5782] Buffer I/O error on dev loop0p5, logical block 9, async page read [ 277.820549][ T5776] I/O error, dev loop0, sector 10 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 277.850598][ T5782] I/O error, dev loop0, sector 10 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 277.877180][ T7135] EXT4-fs error (device loop3): ext4_acquire_dquot:6953: comm syz.3.275: Failed to acquire dquot type 0 [ 277.904028][ T5776] Buffer I/O error on dev loop0p1, logical block 10, async page read [ 277.943301][ T5782] Buffer I/O error on dev loop0p5, logical block 10, async page read [ 277.970239][ T5776] I/O error, dev loop0, sector 11 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 277.990136][ T7135] EXT4-fs error (device loop3): mb_free_blocks:1970: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 278.038000][ T5782] I/O error, dev loop0, sector 11 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 278.077062][ T5776] Buffer I/O error on dev loop0p1, logical block 11, async page read [ 278.099268][ T5782] Buffer I/O error on dev loop0p5, logical block 11, async page read [ 278.154643][ T7135] EXT4-fs (loop3): 1 truncate cleaned up [ 278.175025][ T7135] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 278.304616][ T7130] loop0: detected capacity change from 0 to 32768 [ 278.334226][ T7130] XFS (loop0): invalid logbufs value: 1 [not 2-8] [ 278.373387][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.390719][ T5818] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 278.554062][ T7141] loop0: detected capacity change from 0 to 128 [ 278.610919][ T5818] usb 3-1: Using ep0 maxpacket: 8 [ 278.634045][ T5818] usb 3-1: config 162 has an invalid interface number: 84 but max is 2 [ 278.677705][ T5818] usb 3-1: config 162 has an invalid descriptor of length 0, skipping remainder of the config [ 279.538024][ T5818] usb 3-1: config 162 has 2 interfaces, different from the descriptor's value: 3 [ 279.608118][ T5818] usb 3-1: config 162 has no interface number 0 [ 279.648212][ T5818] usb 3-1: config 162 has no interface number 1 [ 279.697070][ T5818] usb 3-1: config 162 interface 84 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 279.873220][ T7149] loop0: detected capacity change from 0 to 32768 [ 279.902513][ T7149] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz.0.279 (7149) [ 279.918811][ T7149] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 279.929230][ T7149] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 279.938047][ T7149] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 279.947986][ T7149] BTRFS info (device loop0): use zstd compression, level 3 [ 279.955249][ T7149] BTRFS info (device loop0): force clearing of disk cache [ 279.962416][ T7149] BTRFS info (device loop0): enabling disk space caching [ 279.969447][ T7149] BTRFS info (device loop0): disk space caching is enabled [ 280.812821][ T5818] usb 3-1: config 162 interface 2 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 280.845390][ T7149] BTRFS info (device loop0): enabling ssd optimizations [ 280.852824][ T7149] BTRFS info (device loop0): auto enabling async discard [ 280.860834][ T7149] BTRFS info (device loop0): rebuilding free space tree [ 280.900176][ T7149] BTRFS info (device loop0): disabling free space tree [ 280.907255][ T7149] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 280.917005][ T7149] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 280.960731][ T5818] usb 3-1: config 162 interface 2 altsetting 1 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 281.126897][ T5818] usb 3-1: config 162 interface 2 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 281.206126][ T5818] usb 3-1: config 162 interface 2 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 281.375981][ T5818] usb 3-1: config 162 interface 84 has no altsetting 0 [ 281.531468][ T5773] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 281.548413][ T5818] usb 3-1: config 162 interface 2 has no altsetting 0 [ 282.305897][ T5818] usb 3-1: string descriptor 0 read error: -71 [ 282.365824][ T5818] usb 3-1: New USB device found, idVendor=0e8d, idProduct=763f, bcdDevice=9b.23 [ 282.414894][ T5818] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.490640][ T5818] usb 3-1: can't set config #162, error -71 [ 282.564815][ T5818] usb 3-1: USB disconnect, device number 3 [ 283.463493][ T5782] blk_print_req_error: 26 callbacks suppressed [ 283.463506][ T5782] I/O error, dev loop0, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 283.483720][ T5776] I/O error, dev loop0, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 283.552818][ T5776] I/O error, dev loop0, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 283.581033][ T5782] I/O error, dev loop0, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 283.590210][ T5782] buffer_io_error: 24 callbacks suppressed [ 283.590220][ T5782] Buffer I/O error on dev loop0p5, logical block 8, async page read [ 283.628580][ T5776] Buffer I/O error on dev loop0p1, logical block 8, async page read [ 283.682294][ T5776] I/O error, dev loop0, sector 9 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 283.722297][ T5776] Buffer I/O error on dev loop0p1, logical block 9, async page read [ 283.730398][ T5776] I/O error, dev loop0, sector 10 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 283.731190][ T5782] I/O error, dev loop0, sector 9 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 283.780961][ T5776] Buffer I/O error on dev loop0p1, logical block 10, async page read [ 283.789138][ T5776] I/O error, dev loop0, sector 11 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 283.863018][ T5782] Buffer I/O error on dev loop0p5, logical block 9, async page read [ 283.890578][ T5776] Buffer I/O error on dev loop0p1, logical block 11, async page read [ 283.898749][ T5776] I/O error, dev loop0, sector 12 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 283.925846][ T5782] I/O error, dev loop0, sector 10 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 283.977544][ T5782] Buffer I/O error on dev loop0p5, logical block 10, async page read [ 284.004858][ T5776] Buffer I/O error on dev loop0p1, logical block 12, async page read [ 284.020521][ T5782] Buffer I/O error on dev loop0p5, logical block 11, async page read [ 284.028676][ T5782] Buffer I/O error on dev loop0p5, logical block 12, async page read [ 285.410607][ T174] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 285.517227][ T7194] loop3: detected capacity change from 0 to 8 [ 285.577368][ T7194] SQUASHFS error: zlib decompression failed, data probably corrupt [ 285.599265][ T7181] loop0: detected capacity change from 0 to 65536 [ 285.617679][ T7194] SQUASHFS error: Failed to read block 0x9b: -5 [ 285.644215][ T174] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 285.664489][ T7194] SQUASHFS error: Unable to read metadata cache entry [99] [ 285.686078][ T7181] XFS (loop0): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 285.703272][ T174] usb 2-1: too many endpoints for config 2 interface 0 altsetting 48: 120, using maximum allowed: 30 [ 285.722340][ T7194] SQUASHFS error: Unable to read inode 0x127 [ 285.760628][ T174] usb 2-1: config 2 interface 0 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 120 [ 285.829814][ T7181] XFS (loop0): Ending clean mount [ 285.852377][ T174] usb 2-1: config 2 interface 0 has no altsetting 0 [ 285.926373][ T7181] XFS (loop0): Quotacheck needed: Please wait. [ 285.937139][ T174] usb 2-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 285.972494][ T174] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.019189][ T9] XFS (loop0): Metadata CRC error detected at xfs_agf_read_verify+0x196/0x260, xfs_agf block 0x1 [ 286.043279][ T174] usb 2-1: Product: syz [ 286.179134][ T174] usb 2-1: Manufacturer: syz [ 286.195800][ T9] XFS (loop0): Unmount and run xfs_repair [ 286.860168][ T5786] Bluetooth: hci3: command 0x0406 tx timeout [ 286.879046][ T174] usb 2-1: SerialNumber: syz [ 286.940135][ T9] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 286.991374][ T9] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 287.043165][ T9] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 287.086159][ T9] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 287.137218][ T9] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 287.187552][ T174] usb 2-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 287.205966][ T9] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 287.257093][ T174] usb 2-1: selecting invalid altsetting 0 [ 287.270597][ T9] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 287.334174][ T9] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 287.351937][ T174] usb 2-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 287.386675][ T9] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 287.447954][ T5947] XFS (loop0): metadata I/O error in "xfs_read_agf+0x277/0x5a0" at daddr 0x1 len 1 error 74 [ 287.462285][ T174] usb 2-1: USB disconnect, device number 6 [ 287.542509][ T7181] XFS (loop0): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 287.721018][ T5773] XFS (loop0): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 288.687424][ T7210] loop0: detected capacity change from 0 to 512 [ 288.749104][ T7210] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 288.815234][ T7210] EXT4-fs (loop0): orphan cleanup on readonly fs [ 288.880775][ T7210] EXT4-fs error (device loop0): ext4_orphan_get:1434: comm syz.0.292: bad orphan inode 15 [ 288.958325][ T7210] ext4_test_bit(bit=14, block=18) = 1 [ 289.001371][ T7210] is_bad_inode(inode)=0 [ 289.005566][ T7210] NEXT_ORPHAN(inode)=1023 [ 289.056698][ T7210] max_ino=32 [ 289.060156][ T7210] i_nlink=0 [ 289.131888][ T7210] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.292: bg 0: block 161: padding at end of block bitmap is not set [ 289.175875][ T7215] loop2: detected capacity change from 0 to 164 [ 289.223345][ T7210] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 289.292671][ T7210] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 289.580156][ T7217] loop2: detected capacity change from 0 to 4096 [ 289.623985][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.639542][ T7217] EXT4-fs: Ignoring removed i_version option [ 289.716298][ T7217] EXT4-fs (loop2): bad block size 8192 [ 290.876038][ T7226] loop2: detected capacity change from 0 to 128 [ 291.542541][ T5776] blk_print_req_error: 98 callbacks suppressed [ 291.542553][ T5776] I/O error, dev loop0, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 291.560257][ T5913] I/O error, dev loop0, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 291.639295][ T7226] befs: (loop2): No write support. Marking filesystem read-only [ 291.798451][ T7228] loop3: detected capacity change from 0 to 32768 [ 291.814186][ T7228] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.291 (7228) [ 291.841346][ T7228] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 291.851684][ T7228] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 291.860390][ T7228] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 291.869843][ T7228] BTRFS info (device loop3): use zstd compression, level 3 [ 291.877093][ T7228] BTRFS info (device loop3): force clearing of disk cache [ 291.884255][ T7228] BTRFS info (device loop3): enabling disk space caching [ 291.891355][ T7228] BTRFS info (device loop3): disk space caching is enabled [ 291.924418][ T5913] I/O error, dev loop0, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 291.957971][ T7226] befs: (loop2): invalid magic header [ 291.968598][ T5776] I/O error, dev loop0, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 291.991456][ T5913] buffer_io_error: 86 callbacks suppressed [ 291.991467][ T5913] Buffer I/O error on dev loop0p5, logical block 8, async page read [ 292.036506][ T5776] Buffer I/O error on dev loop0p1, logical block 8, async page read [ 292.086407][ T5913] I/O error, dev loop0, sector 9 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 292.097556][ T5776] I/O error, dev loop0, sector 9 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 292.135518][ T7228] BTRFS info (device loop3): enabling ssd optimizations [ 292.142693][ T7228] BTRFS info (device loop3): auto enabling async discard [ 292.157117][ T7228] BTRFS info (device loop3): rebuilding free space tree [ 292.172312][ T7228] BTRFS info (device loop3): disabling free space tree [ 292.179311][ T7228] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 292.189010][ T7228] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 292.223054][ T5913] Buffer I/O error on dev loop0p5, logical block 9, async page read [ 292.241356][ T5776] Buffer I/O error on dev loop0p1, logical block 9, async page read [ 292.256072][ T5913] I/O error, dev loop0, sector 10 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 292.273441][ T5776] I/O error, dev loop0, sector 10 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 292.315711][ T5782] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 292.461100][ T5913] Buffer I/O error on dev loop0p5, logical block 10, async page read [ 292.469289][ T5776] Buffer I/O error on dev loop0p1, logical block 10, async page read [ 292.542660][ T5776] I/O error, dev loop0, sector 11 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 292.552321][ T5913] Buffer I/O error on dev loop0p5, logical block 11, async page read [ 292.602042][ T5913] Buffer I/O error on dev loop0p5, logical block 12, async page read [ 292.618490][ T5776] Buffer I/O error on dev loop0p1, logical block 11, async page read [ 292.763140][ T5913] Buffer I/O error on dev loop0p5, logical block 13, async page read [ 292.893546][ T5772] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 293.055908][ T7252] loop2: detected capacity change from 0 to 8192 [ 293.166009][ T7252] loop2: p1 p2 p3 [ 293.169901][ T7252] loop2: partition table partially beyond EOD, truncated [ 293.226326][ T7252] loop2: p1 start 51379968 is beyond EOD, truncated [ 293.282197][ T7252] loop2: p3 size 100663552 extends beyond EOD, truncated [ 293.293983][ T7254] loop3: detected capacity change from 0 to 512 [ 293.401136][ T7254] EXT4-fs: Ignoring removed orlov option [ 293.473092][ T7254] EXT4-fs (loop3): inodes count not valid: 0 vs 32 [ 293.859309][ T7256] loop2: detected capacity change from 0 to 4096 [ 293.898164][ T5782] udevd[5782]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 293.932719][ T5776] udevd[5776]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 293.977447][ T7256] ntfs3: loop2: Primary boot: unsupported bytes per index 8192. [ 294.035122][ T7256] ntfs3: loop2: try to read out of volume at offset 0x1ffe00 [ 294.270082][ T7261] loop2: detected capacity change from 0 to 16 [ 294.322577][ T7261] erofs: (device loop2): erofs_superblock_csum_verify: invalid checksum 0xa96f5be3, 0x7bbbea8c expected [ 295.286971][ T5776] udevd[5776]: incorrect erofs checksum on /dev/loop2 [ 296.244916][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 296.337083][ T8] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 296.740696][ T8] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 296.775396][ T8] usb 4-1: config 0 has no interface number 0 [ 296.911264][ T8] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 10 [ 296.949266][ T8] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0xA has invalid maxpacket 33406, setting to 64 [ 297.006339][ T8] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.04 [ 297.038567][ T8] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 297.084043][ T8] usb 4-1: Product: syz [ 297.105908][ T8] usb 4-1: SerialNumber: syz [ 297.147757][ T8] usb 4-1: config 0 descriptor?? [ 297.185735][ T7269] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 297.224180][ T8] usbhid 4-1:0.8: couldn't find an input interrupt endpoint [ 297.356754][ T7274] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 297.564037][ T8] usb 4-1: USB disconnect, device number 4 [ 297.834486][ T5782] blk_print_req_error: 46 callbacks suppressed [ 297.834498][ T5782] I/O error, dev loop0, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 297.853965][ T5776] I/O error, dev loop0, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 297.890633][ T5782] I/O error, dev loop0, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 297.916336][ T5776] I/O error, dev loop0, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 297.953448][ T5782] buffer_io_error: 38 callbacks suppressed [ 297.953460][ T5782] Buffer I/O error on dev loop0p5, logical block 8, async page read [ 297.988796][ T5776] Buffer I/O error on dev loop0p1, logical block 8, async page read [ 298.021197][ T5776] I/O error, dev loop0, sector 9 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 298.041328][ T5782] I/O error, dev loop0, sector 9 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 298.056509][ T7288] loop0: detected capacity change from 0 to 4096 [ 298.085224][ T5776] Buffer I/O error on dev loop0p1, logical block 9, async page read [ 298.095817][ T5782] Buffer I/O error on dev loop0p5, logical block 9, async page read [ 298.114041][ T7288] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 298.175984][ T7288] ntfs3: loop0: RAW NTFS volume: Filesystem size 0.00 Gb > volume size 0.00 Gb. Mount in read-only. [ 298.265898][ T7288] ntfs3: loop0: Inode r=0 is not in use! [ 298.315580][ T7288] ntfs3: loop0: Failed to load $MFT (-116). [ 298.334203][ T7290] loop3: detected capacity change from 0 to 64 [ 298.473425][ T7290] hfs: unable to read tree header [ 298.545167][ T7290] hfs: unable to open catalog tree [ 298.559427][ T5913] I/O error, dev loop0, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 298.743614][ T7292] loop2: detected capacity change from 0 to 32768 [ 298.757564][ T5776] I/O error, dev loop0, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 298.770330][ T7292] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.310 (7292) [ 298.784595][ T7290] hfs: can't find a HFS filesystem on dev loop3 [ 298.797320][ T7292] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 298.807561][ T7292] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 298.816455][ T7292] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 298.825910][ T7292] BTRFS info (device loop2): use zstd compression, level 3 [ 298.833165][ T7292] BTRFS info (device loop2): force clearing of disk cache [ 298.840271][ T7292] BTRFS info (device loop2): enabling disk space caching [ 298.847335][ T7292] BTRFS info (device loop2): disk space caching is enabled [ 298.876426][ T5913] I/O error, dev loop0, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 298.903728][ T5776] I/O error, dev loop0, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 298.943414][ T5913] Buffer I/O error on dev loop0p5, logical block 8, async page read [ 298.963521][ T5776] Buffer I/O error on dev loop0p1, logical block 8, async page read [ 298.993512][ T5913] Buffer I/O error on dev loop0p5, logical block 9, async page read [ 299.020111][ T7295] loop0: detected capacity change from 0 to 4096 [ 299.026820][ T5776] Buffer I/O error on dev loop0p1, logical block 9, async page read [ 299.052087][ T5913] Buffer I/O error on dev loop0p5, logical block 10, async page read [ 299.095571][ T5776] Buffer I/O error on dev loop0p1, logical block 10, async page read [ 299.112178][ T7292] BTRFS info (device loop2): enabling ssd optimizations [ 299.119268][ T7292] BTRFS info (device loop2): auto enabling async discard [ 299.128188][ T7292] BTRFS info (device loop2): rebuilding free space tree [ 299.154181][ T7292] BTRFS info (device loop2): disabling free space tree [ 299.161307][ T7292] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 299.171064][ T7292] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 299.195457][ T7295] ntfs3: loop0: RAW NTFS volume: Filesystem size 0.00 Gb > volume size 0.00 Gb. Mount in read-only. [ 299.442163][ T7295] ntfs3: loop0: $Bitmap is corrupted. [ 300.413453][ T7311] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 300.535297][ T5774] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 302.813045][ T7325] loop2: detected capacity change from 0 to 512 [ 302.882492][ T7325] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 303.507282][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.760482][ T5786] Bluetooth: hci3: command 0x0406 tx timeout [ 306.335756][ T5782] blk_print_req_error: 40 callbacks suppressed [ 306.335767][ T5782] I/O error, dev loop0, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 306.365914][ T5776] I/O error, dev loop0, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 306.393386][ T7367] loop0: detected capacity change from 0 to 164 [ 306.422466][ T5776] I/O error, dev loop0, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 306.506356][ T5776] buffer_io_error: 32 callbacks suppressed [ 306.506367][ T5776] Buffer I/O error on dev loop0p1, logical block 8, async page read [ 306.593746][ T7365] loop3: detected capacity change from 0 to 4096 [ 306.657944][ T7365] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 306.802974][ T7365] ntfs3: loop3: Failed to load $Volume (-22). [ 306.868568][ T5782] I/O error, dev loop3, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 307.955428][ T6000] I/O error, dev loop0, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 307.974312][ T5776] I/O error, dev loop0, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 308.025046][ T7371] loop0: detected capacity change from 0 to 4096 [ 308.043170][ T5776] I/O error, dev loop0, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 308.055729][ T6000] I/O error, dev loop0, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 308.110605][ T7371] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 308.142991][ T5776] Buffer I/O error on dev loop0p1, logical block 8, async page read [ 308.155093][ T6000] Buffer I/O error on dev loop0p5, logical block 8, async page read [ 308.252381][ T7371] ntfs3: loop0: mft corrupted [ 308.283747][ T7371] ntfs3: loop0: Failed to load $Extend (-22). [ 308.350548][ T7371] ntfs3: loop0: Failed to initialize $Extend. [ 308.583460][ T7380] loop3: detected capacity change from 0 to 32768 [ 308.594095][ T7380] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.330 (7380) [ 308.623431][ T7380] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 308.633758][ T7380] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 308.642600][ T7380] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 308.652044][ T7380] BTRFS info (device loop3): use zstd compression, level 3 [ 308.659232][ T7380] BTRFS info (device loop3): force clearing of disk cache [ 308.666381][ T7380] BTRFS info (device loop3): enabling disk space caching [ 308.673518][ T7380] BTRFS info (device loop3): disk space caching is enabled [ 308.822616][ T7380] BTRFS info (device loop3): enabling ssd optimizations [ 308.829640][ T7380] BTRFS info (device loop3): auto enabling async discard [ 308.837469][ T7380] BTRFS info (device loop3): rebuilding free space tree [ 308.872561][ T7380] BTRFS info (device loop3): disabling free space tree [ 308.879532][ T7380] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 308.889282][ T7380] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 309.182787][ T7400] loop0: detected capacity change from 0 to 128 [ 309.236566][ T7400] EXT4-fs error (device loop0): __ext4_fill_super:5517: inode #2: comm syz.0.332: iget: checksum invalid [ 309.349494][ T5772] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 309.401130][ T7400] EXT4-fs (loop0): get root inode failed [ 309.460854][ T7400] EXT4-fs (loop0): mount failed [ 309.570062][ T5782] I/O error, dev loop0, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 309.702409][ T7403] loop2: detected capacity change from 0 to 2048 [ 309.723542][ T5776] I/O error, dev loop0, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 309.942446][ T5782] Buffer I/O error on dev loop0p5, logical block 8, async page read [ 309.979176][ T5776] Buffer I/O error on dev loop0p1, logical block 8, async page read [ 310.004947][ T5782] Buffer I/O error on dev loop0p5, logical block 9, async page read [ 310.046023][ T5776] Buffer I/O error on dev loop0p1, logical block 9, async page read [ 311.020555][ T5782] Buffer I/O error on dev loop0p5, logical block 10, async page read [ 311.028725][ T5782] Buffer I/O error on dev loop0p5, logical block 11, async page read [ 311.069438][ T5776] Buffer I/O error on dev loop0p1, logical block 10, async page read [ 311.406868][ T7412] loop3: detected capacity change from 0 to 8192 [ 311.422192][ T5776] blk_print_req_error: 34 callbacks suppressed [ 311.422203][ T5776] I/O error, dev loop0, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 311.439829][ T5782] I/O error, dev loop0, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 311.498000][ T5782] I/O error, dev loop0, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 311.541195][ T5776] I/O error, dev loop0, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 311.568477][ T5782] buffer_io_error: 25 callbacks suppressed [ 311.568486][ T5782] Buffer I/O error on dev loop0p5, logical block 8, async page read [ 311.602836][ T5776] Buffer I/O error on dev loop0p1, logical block 8, async page read [ 311.640360][ T5782] I/O error, dev loop0, sector 9 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 311.653683][ T5776] I/O error, dev loop0, sector 9 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 311.680593][ T7412] loop3: p1[EZD] p3 p4 [ 311.684957][ T7412] loop3: partition table partially beyond EOD, truncated [ 311.738139][ T5782] Buffer I/O error on dev loop0p5, logical block 9, async page read [ 311.747748][ T5776] Buffer I/O error on dev loop0p1, logical block 9, async page read [ 311.758785][ T7412] loop3: p3 start 150994944 is beyond EOD, truncated [ 311.802265][ T5782] I/O error, dev loop0, sector 10 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 311.812256][ T5776] I/O error, dev loop0, sector 10 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 311.841312][ T7412] loop3: p4 size 50331648 extends beyond EOD, truncated [ 311.881074][ T5782] Buffer I/O error on dev loop0p5, logical block 10, async page read [ 311.889258][ T5782] I/O error, dev loop0, sector 11 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 311.900506][ T5776] Buffer I/O error on dev loop0p1, logical block 10, async page read [ 311.960220][ T5776] I/O error, dev loop0, sector 11 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 312.012617][ T5782] Buffer I/O error on dev loop0p5, logical block 11, async page read [ 312.025684][ T5776] Buffer I/O error on dev loop0p1, logical block 11, async page read [ 312.072953][ T5782] Buffer I/O error on dev loop0p5, logical block 12, async page read [ 312.092020][ T5776] Buffer I/O error on dev loop0p1, logical block 12, async page read [ 312.327857][ T5913] udevd[5913]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 312.355126][ T5782] udevd[5782]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 313.525941][ T7419] loop3: detected capacity change from 0 to 512 [ 313.591306][ T7419] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 313.662589][ T7416] loop2: detected capacity change from 0 to 32768 [ 313.706351][ T7416] XFS: attr2 mount option is deprecated. [ 313.839252][ T7416] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 313.862362][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.914158][ T7416] XFS (loop2): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 313.975627][ T7430] loop0: detected capacity change from 0 to 64 [ 314.027125][ T7430] hfs: gid requires an argument [ 314.077072][ T7416] XFS (loop2): Ending clean mount [ 314.083957][ T7430] hfs: unable to parse mount options [ 314.287032][ T5774] XFS (loop2): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 314.774529][ T7435] loop3: detected capacity change from 0 to 8192 [ 314.868270][ T7442] loop2: detected capacity change from 0 to 24 [ 314.914160][ T7442] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 314.933577][ T7439] loop0: detected capacity change from 0 to 8192 [ 315.007535][ T7442] romfs: bad initial checksum on dev loop2. [ 315.028843][ T7439] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 315.109189][ T7439] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 315.238419][ T7439] loop0: unable to read partition table [ 315.709034][ T7439] loop_reread_partitions: partition scan of loop0 () failed (rc=-5) [ 315.809001][ T5140] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 315.877952][ T7451] loop3: detected capacity change from 0 to 1764 [ 315.886095][ T5140] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 315.912279][ T5140] loop0: unable to read partition table [ 315.963279][ T7456] loop2: detected capacity change from 0 to 8 [ 316.040874][ T7456] SQUASHFS error: zlib decompression failed, data probably corrupt [ 316.100571][ T7456] SQUASHFS error: Failed to read block 0x9b: -5 [ 316.106863][ T7456] SQUASHFS error: Unable to read metadata cache entry [99] [ 316.170265][ T7458] loop0: detected capacity change from 0 to 4096 [ 316.189180][ T7456] SQUASHFS error: Unable to read inode 0x127 [ 316.314073][ T7458] ntfs3: loop0: $Secure::$SDH is corrupted. [ 316.379583][ T7458] ntfs3: loop0: Failed to initialize $Secure (-22). [ 316.826442][ T7468] loop0: detected capacity change from 0 to 32768 [ 316.847747][ T7468] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz.0.354 (7468) [ 316.881357][ T7468] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 316.891748][ T7468] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 316.900540][ T7468] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 316.910371][ T7468] BTRFS info (device loop0): use zstd compression, level 3 [ 316.917625][ T7468] BTRFS info (device loop0): force clearing of disk cache [ 316.924813][ T7468] BTRFS info (device loop0): enabling disk space caching [ 316.931875][ T7468] BTRFS info (device loop0): disk space caching is enabled [ 316.939374][ T5816] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 316.955053][ T7470] loop2: detected capacity change from 0 to 1024 [ 317.024226][ T7468] BTRFS info (device loop0): enabling ssd optimizations [ 317.032134][ T7468] BTRFS info (device loop0): auto enabling async discard [ 317.052589][ T7468] BTRFS info (device loop0): rebuilding free space tree [ 317.081907][ T7468] BTRFS info (device loop0): disabling free space tree [ 317.088878][ T7468] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 317.098728][ T7468] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 317.134573][ T7470] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 317.271412][ T5816] usb 4-1: config 1 has an invalid interface descriptor of length 2, skipping [ 317.314716][ T7470] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 317.331034][ T5816] usb 4-1: config 1 has an invalid descriptor of length 36, skipping remainder of the config [ 317.365211][ T7470] EXT4-fs error (device loop2): ext4_acquire_dquot:6953: comm syz.2.356: Failed to acquire dquot type 0 [ 317.382949][ T5816] usb 4-1: too many endpoints for config 1 interface 0 altsetting 7: 255, using maximum allowed: 30 [ 317.436080][ T5816] usb 4-1: config 1 interface 0 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 317.461215][ T7470] EXT4-fs (loop2): 1 truncate cleaned up [ 317.485697][ T7470] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 317.564018][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.570334][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.594721][ T5773] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 317.606115][ T5816] usb 4-1: config 1 interface 0 has no altsetting 0 [ 317.650746][ T5816] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 317.701957][ T5816] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 317.765604][ T5816] usb 4-1: SerialNumber: syz [ 317.804389][ T5816] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 317.848842][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.878778][ T5816] cdc_acm 4-1:1.0: This needs exactly 3 endpoints [ 317.899532][ T5816] cdc_acm: probe of 4-1:1.0 failed with error -22 [ 318.136379][ T5816] usb 4-1: USB disconnect, device number 5 [ 318.227104][ T7493] loop0: detected capacity change from 0 to 8192 [ 318.302926][ T7493] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 318.361300][ T174] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 318.379783][ T7493] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 318.422159][ T7493] REISERFS (device loop0): using ordered data mode [ 318.449051][ T7493] reiserfs: using flush barriers [ 318.519623][ T7493] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 318.592099][ T7493] REISERFS (device loop0): checking transaction log (loop0) [ 318.605051][ T174] usb 3-1: unable to get BOS descriptor or descriptor too short [ 318.633752][ T174] usb 3-1: config index 0 descriptor too short (expected 64366, got 110) [ 318.660539][ T174] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 318.690805][ T7493] REISERFS error (device loop0): vs-7000 search_by_entry_key: search_by_key returned item position == 0 [ 318.726328][ T174] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 318.750694][ T7493] REISERFS (device loop0): Remounting filesystem read-only [ 318.801938][ T174] usb 3-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 318.855657][ T174] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.904533][ T174] usb 3-1: Product: syz [ 318.940591][ T174] usb 3-1: Manufacturer: syz [ 318.955445][ T174] usb 3-1: SerialNumber: syz [ 319.052245][ T7500] loop3: detected capacity change from 0 to 4096 [ 319.106547][ T7500] ntfs3: loop3: Primary boot: invalid record size -127. [ 319.181631][ T7500] ntfs3: loop3: try to read out of volume at offset 0x1ffe00 [ 319.244935][ T174] usb 3-1: Can't get UAC3 power state for id 10 [ 319.300847][ T174] usb 3-1: 2:0: failed to get current value for ch 0 (-71) [ 319.369896][ T174] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2) [ 319.850092][ T7508] loop3: detected capacity change from 0 to 128 [ 319.864953][ T174] usb 3-1: USB disconnect, device number 4 [ 319.942872][ T7510] loop0: detected capacity change from 0 to 128 [ 319.982195][ T6020] udevd[6020]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 320.027706][ T7510] FAT-fs (loop0): bogus sectors per cluster 0 [ 320.083080][ T5776] blk_print_req_error: 72 callbacks suppressed [ 320.083093][ T5776] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 320.098917][ T7510] FAT-fs (loop0): Can't find a valid FAT filesystem [ 320.464194][ T7512] loop3: detected capacity change from 0 to 32768 [ 320.489089][ T7512] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.366 (7512) [ 320.504008][ T7512] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 320.514222][ T7512] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 320.522982][ T7512] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 320.532406][ T7512] BTRFS info (device loop3): use zstd compression, level 3 [ 320.539598][ T7512] BTRFS info (device loop3): force clearing of disk cache [ 320.546755][ T7512] BTRFS info (device loop3): enabling disk space caching [ 320.553836][ T7512] BTRFS info (device loop3): disk space caching is enabled [ 320.686386][ T7526] loop2: detected capacity change from 0 to 512 [ 320.707102][ T7512] BTRFS info (device loop3): enabling ssd optimizations [ 320.714514][ T7512] BTRFS info (device loop3): auto enabling async discard [ 320.726960][ T7512] BTRFS info (device loop3): rebuilding free space tree [ 321.763062][ T7533] loop0: detected capacity change from 0 to 512 [ 321.797637][ T7512] BTRFS info (device loop3): disabling free space tree [ 321.804747][ T7512] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 321.814485][ T7512] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 321.993748][ T7533] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 322.010266][ T7526] EXT4-fs error (device loop2): ext4_orphan_get:1408: inode #15: comm syz.2.367: casefold flag without casefold feature [ 322.103773][ T7526] EXT4-fs error (device loop2): ext4_orphan_get:1413: comm syz.2.367: couldn't read orphan inode 15 (err -117) [ 322.215899][ T5772] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 322.305919][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.326403][ T7526] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 322.426274][ T7526] ext4 filesystem being mounted at /84/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 322.550285][ T7545] loop0: detected capacity change from 0 to 64 [ 322.859124][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 323.744177][ T7559] loop2: detected capacity change from 0 to 256 [ 323.878366][ T7563] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 325.166413][ T7569] loop3: detected capacity change from 0 to 512 [ 325.258864][ T7569] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 325.802508][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.210567][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 327.240903][ T7586] loop2: detected capacity change from 0 to 32768 [ 327.314841][ T7586] OCFS2: ERROR (device loop2): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode 66: 1 clusters [ 327.390675][ T7586] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 328.426628][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 328.451195][ T7586] OCFS2: File system is now read-only. [ 328.469982][ T7612] loop0: detected capacity change from 0 to 512 [ 328.483231][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 328.500556][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 328.528482][ T7586] (syz.2.386,7586,0):ocfs2_read_locked_inode:554 ERROR: status = -30 [ 328.542006][ T7612] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 328.579534][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 328.600327][ T7586] (syz.2.386,7586,0):ocfs2_init_global_system_inodes:448 ERROR: status = -30 [ 328.626376][ T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 328.649326][ T7586] (syz.2.386,7586,0):ocfs2_init_global_system_inodes:472 ERROR: status = -30 [ 328.676639][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.694814][ T7586] (syz.2.386,7586,0):ocfs2_initialize_super:2252 ERROR: status = -30 [ 328.707324][ T9] usb 2-1: Product: syz [ 328.722961][ T9] usb 2-1: Manufacturer: syz [ 328.727586][ T9] usb 2-1: SerialNumber: syz [ 328.732450][ T7586] (syz.2.386,7586,0):ocfs2_fill_super:1178 ERROR: status = -30 [ 328.893363][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.302384][ T51] Bluetooth: hci0: unexpected event for opcode 0x2028 [ 329.520881][ T7626] loop0: detected capacity change from 0 to 32768 [ 329.547438][ T7626] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz.0.398 (7626) [ 329.566867][ T7626] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 329.577219][ T7626] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 329.586250][ T7626] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 329.595707][ T7626] BTRFS info (device loop0): use zstd compression, level 3 [ 329.603137][ T7626] BTRFS info (device loop0): force clearing of disk cache [ 329.610754][ T7626] BTRFS info (device loop0): enabling disk space caching [ 329.617778][ T7626] BTRFS info (device loop0): disk space caching is enabled [ 329.637741][ T9] usb 2-1: 0:2 : does not exist [ 329.687417][ T9] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 329.739545][ T7626] BTRFS info (device loop0): enabling ssd optimizations [ 329.746919][ T7626] BTRFS info (device loop0): auto enabling async discard [ 329.757740][ T7626] BTRFS info (device loop0): rebuilding free space tree [ 329.786168][ T7626] BTRFS info (device loop0): disabling free space tree [ 329.793269][ T7626] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 329.803001][ T7626] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 329.860897][ T9] usb 2-1: USB disconnect, device number 7 [ 330.037663][ T5782] udevd[5782]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 330.241466][ T5773] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 330.307836][ T8] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 331.351006][ T8] usb 4-1: unable to get BOS descriptor or descriptor too short [ 331.394940][ T8] usb 4-1: not running at top speed; connect to a high speed hub [ 331.460179][ T8] usb 4-1: config 12 has an invalid interface number: 126 but max is 0 [ 331.501720][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 331.532947][ T51] Bluetooth: hci1: unexpected event for opcode 0x2023 [ 331.539861][ T8] usb 4-1: config 12 has no interface number 0 [ 331.568912][ T8] usb 4-1: config 12 interface 126 has no altsetting 0 [ 331.650162][ T8] usb 4-1: string descriptor 0 read error: -22 [ 331.673946][ T8] usb 4-1: New USB device found, idVendor=2013, idProduct=025c, bcdDevice=a4.f9 [ 331.731768][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.750030][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 332.814528][ T9] usb 3-1: config 7 has an invalid interface number: 208 but max is 0 [ 332.874798][ T9] usb 3-1: config 7 has no interface number 0 [ 332.955029][ T8] dvb-usb: found a 'PCTV 2002e' in cold state, will try to load a firmware [ 332.973644][ T9] usb 3-1: config 7 interface 208 altsetting 0 endpoint 0xD has an invalid bInterval 252, changing to 7 [ 333.110595][ T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice=5f.ef [ 333.170509][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.180314][ T8] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 333.225367][ T9] usb 3-1: Product: syz [ 333.229572][ T9] usb 3-1: Manufacturer: syz [ 333.250635][ T8] dib0700: firmware download failed at 7 with -22 [ 333.310595][ T9] usb 3-1: SerialNumber: syz [ 333.327320][ T8] usb 4-1: USB disconnect, device number 6 [ 333.665807][ T9] appletouch 3-1:7.208: Could not find int-in endpoint [ 333.675013][ T7666] comedi comedi0: dmm32at: I/O port conflict (0x3,16) [ 333.840693][ T9] appletouch: probe of 3-1:7.208 failed with error -5 [ 334.085220][ T9] usbhid 3-1:7.208: couldn't find an input interrupt endpoint [ 334.168434][ T9] usb 3-1: USB disconnect, device number 5 [ 335.280673][ T7677] netlink: 56 bytes leftover after parsing attributes in process `syz.1.414'. [ 335.382329][ T7677] netlink: 56 bytes leftover after parsing attributes in process `syz.1.414'. [ 336.827463][ T7687] netlink: 124 bytes leftover after parsing attributes in process `syz.1.418'. [ 336.887451][ T7690] netlink: 'syz.0.419': attribute type 10 has an invalid length. [ 336.988400][ T7690] macvlan1: entered allmulticast mode [ 337.039444][ T7690] veth1_vlan: entered allmulticast mode [ 337.102877][ T7690] team0: Port device macvlan1 added [ 337.268556][ T7695] loop2: detected capacity change from 0 to 32768 [ 337.283971][ T7695] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.422 (7695) [ 337.329079][ T7695] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 337.339464][ T7695] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 337.348288][ T7695] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 337.357736][ T7695] BTRFS info (device loop2): use zstd compression, level 3 [ 337.365054][ T7695] BTRFS info (device loop2): force clearing of disk cache [ 337.372218][ T7695] BTRFS info (device loop2): enabling disk space caching [ 337.379248][ T7695] BTRFS info (device loop2): disk space caching is enabled [ 337.542348][ T7695] BTRFS info (device loop2): enabling ssd optimizations [ 337.549333][ T7695] BTRFS info (device loop2): auto enabling async discard [ 337.559295][ T7695] BTRFS info (device loop2): rebuilding free space tree [ 337.628970][ T7695] BTRFS info (device loop2): disabling free space tree [ 337.636221][ T7695] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 337.645939][ T7695] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 338.260164][ T5774] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 339.369352][ T7728] netlink: 32 bytes leftover after parsing attributes in process `syz.2.428'. [ 339.467502][ T7728] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.556822][ T7728] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 339.932219][ T7739] comedi comedi0: aio_aio12_8: I/O port conflict (0x59,32) [ 340.331418][ T7745] loop2: detected capacity change from 0 to 32768 [ 340.344532][ T7745] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.436 (7745) [ 340.368891][ T7745] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 340.379152][ T7745] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 340.387931][ T7745] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 340.397356][ T7745] BTRFS info (device loop2): use zstd compression, level 3 [ 340.404586][ T7745] BTRFS info (device loop2): force clearing of disk cache [ 340.411721][ T7745] BTRFS info (device loop2): enabling disk space caching [ 340.418734][ T7745] BTRFS info (device loop2): disk space caching is enabled [ 340.448371][ T7745] BTRFS info (device loop2): enabling ssd optimizations [ 340.455534][ T7745] BTRFS info (device loop2): auto enabling async discard [ 340.466581][ T7745] BTRFS info (device loop2): rebuilding free space tree [ 340.506047][ T7745] BTRFS info (device loop2): disabling free space tree [ 340.513059][ T7745] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 340.522919][ T7745] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 341.127207][ T5774] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 342.122582][ T7766] loop3: detected capacity change from 0 to 4096 [ 342.166890][ T7773] netlink: 'syz.2.440': attribute type 1 has an invalid length. [ 342.174786][ T7766] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 342.697622][ T51] Bluetooth: hci0: unexpected event for opcode 0x100c [ 342.709792][ T51] Bluetooth: hci2: unexpected event for opcode 0x2060 [ 343.060372][ T7783] loop2: detected capacity change from 0 to 32768 [ 343.078450][ T7783] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.445 (7783) [ 343.103870][ T7783] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 343.114498][ T7783] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 343.129495][ T7783] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 343.139268][ T7783] BTRFS info (device loop2): use zstd compression, level 3 [ 343.146560][ T7783] BTRFS info (device loop2): force clearing of disk cache [ 343.153857][ T7783] BTRFS info (device loop2): enabling disk space caching [ 343.160928][ T7783] BTRFS info (device loop2): disk space caching is enabled [ 343.328778][ T7783] BTRFS info (device loop2): enabling ssd optimizations [ 343.335894][ T7783] BTRFS info (device loop2): auto enabling async discard [ 343.346182][ T7783] BTRFS info (device loop2): rebuilding free space tree [ 343.368949][ T7783] BTRFS info (device loop2): disabling free space tree [ 343.377383][ T7783] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 343.387691][ T7783] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 343.956767][ T7806] loop3: detected capacity change from 0 to 32768 [ 344.023849][ T7806] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz.3.448 (7806) [ 344.036982][ T5774] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 344.850082][ T51] Bluetooth: hci3: unexpected cc 0x200b length: 2 > 1 [ 344.857194][ T51] Bluetooth: hci3: unexpected event for opcode 0x200b [ 346.395237][ T7831] loop2: detected capacity change from 0 to 32768 [ 346.414575][ T7831] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.457 (7831) [ 346.433826][ T7831] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 346.444138][ T7831] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 346.452931][ T7831] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 346.462355][ T7831] BTRFS info (device loop2): use zstd compression, level 3 [ 346.469548][ T7831] BTRFS info (device loop2): force clearing of disk cache [ 346.476741][ T7831] BTRFS info (device loop2): enabling disk space caching [ 346.483854][ T7831] BTRFS info (device loop2): disk space caching is enabled [ 346.684753][ T7831] BTRFS info (device loop2): enabling ssd optimizations [ 346.693373][ T7831] BTRFS info (device loop2): auto enabling async discard [ 346.711999][ T7831] BTRFS info (device loop2): rebuilding free space tree [ 346.736028][ T7831] BTRFS info (device loop2): disabling free space tree [ 346.743150][ T7831] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 346.752939][ T7831] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 346.924255][ T7851] loop0: detected capacity change from 0 to 32768 [ 346.940754][ T7851] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz.0.460 (7851) [ 347.759356][ T5774] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 350.062710][ T51] Bluetooth: hci3: unexpected event for opcode 0x0403 [ 350.843150][ T7889] loop0: detected capacity change from 0 to 32768 [ 350.876191][ T7889] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.474 (7889) [ 350.972110][ T7889] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 351.050295][ T7889] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 351.099987][ T7889] BTRFS info (device loop0): using free space tree [ 351.132105][ T5786] Bluetooth: hci0: unexpected event for opcode 0x2006 [ 351.359905][ T7909] loop2: detected capacity change from 0 to 32768 [ 351.381634][ T7909] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.472 (7909) [ 351.400895][ T7909] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 351.411406][ T7909] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 351.420638][ T7909] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 351.430031][ T7909] BTRFS info (device loop2): use zstd compression, level 3 [ 351.437428][ T7909] BTRFS info (device loop2): force clearing of disk cache [ 351.444862][ T7909] BTRFS info (device loop2): enabling disk space caching [ 351.451962][ T7909] BTRFS info (device loop2): disk space caching is enabled [ 351.509780][ T7889] BTRFS info (device loop0): enabling ssd optimizations [ 351.547615][ T7889] BTRFS info (device loop0): auto enabling async discard [ 351.588027][ T7909] BTRFS info (device loop2): enabling ssd optimizations [ 351.595895][ T7909] BTRFS info (device loop2): auto enabling async discard [ 351.614429][ T7909] BTRFS info (device loop2): rebuilding free space tree [ 351.648272][ T7909] BTRFS info (device loop2): disabling free space tree [ 351.655272][ T7909] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 351.665023][ T7909] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 351.928372][ T5786] Bluetooth: Wrong link type (-57) [ 351.938723][ T5774] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 352.034986][ T5773] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 352.240607][ T5786] Bluetooth: hci3: command 0x0406 tx timeout [ 352.370160][ T5776] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop0 scanned by udevd (5776) [ 353.191124][ T5818] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 353.436196][ T5818] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 353.483307][ T5818] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.559506][ T5818] usb 2-1: Product: syz [ 353.587767][ T5818] usb 2-1: Manufacturer: syz [ 353.626573][ T5818] usb 2-1: SerialNumber: syz [ 353.826837][ T7960] netlink: 24 bytes leftover after parsing attributes in process `syz.3.488'. [ 353.894054][ T9] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 353.906097][ T27] audit: type=1326 audit(1789193145.670:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7961 comm="syz.0.490" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f066e99e159 code=0x7ffc0000 [ 354.092501][ T27] audit: type=1326 audit(1789193145.670:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7961 comm="syz.0.490" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f066e99e159 code=0x7ffc0000 [ 354.173598][ T7964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 354.250240][ T7964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 354.318192][ T27] audit: type=1326 audit(1789193145.720:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7961 comm="syz.0.490" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f066e99e159 code=0x7ffc0000 [ 354.484797][ T27] audit: type=1326 audit(1789193145.720:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7961 comm="syz.0.490" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f066e99e159 code=0x7ffc0000 [ 356.431718][ T9] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 356.439204][ T9] ath9k_htc: Failed to initialize the device [ 360.070934][ T8] usb 2-1: USB disconnect, device number 8 [ 360.167827][ T8] usb 2-1: ath9k_htc: USB layer deinitialized [ 360.260590][ T27] audit: type=1326 audit(1789193145.720:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7961 comm="syz.0.490" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f066e99e159 code=0x7ffc0000 [ 360.343434][ T7973] (null): rxe_set_mtu: Set mtu to 1024 [ 361.413815][ T7973] infiniband syz0: set active [ 361.418829][ T7973] infiniband syz0: added veth0_vlan [ 361.595712][ T7989] loop2: detected capacity change from 0 to 32768 [ 361.615547][ T7989] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.489 (7989) [ 361.631725][ T7989] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 361.642001][ T7989] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 361.650901][ T7989] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 361.660706][ T7989] BTRFS info (device loop2): use zstd compression, level 3 [ 361.667903][ T7989] BTRFS info (device loop2): force clearing of disk cache [ 361.675161][ T7989] BTRFS info (device loop2): enabling disk space caching [ 361.682262][ T7989] BTRFS info (device loop2): disk space caching is enabled [ 361.708098][ T7973] syz0: rxe_create_cq: returned err = -12 [ 361.743121][ T7989] BTRFS info (device loop2): enabling ssd optimizations [ 361.750174][ T7989] BTRFS info (device loop2): auto enabling async discard [ 361.760784][ T5819] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 361.769102][ T7989] BTRFS info (device loop2): rebuilding free space tree [ 361.788379][ T7973] infiniband syz0: Couldn't create ib_mad CQ [ 361.797686][ T7989] BTRFS info (device loop2): disabling free space tree [ 361.805254][ T7989] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 361.814983][ T7989] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 361.852544][ T7973] infiniband syz0: Couldn't open port 1 [ 362.027429][ T5774] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 362.104654][ T7973] RDS/IB: syz0: added [ 362.116483][ T5819] usb 2-1: Using ep0 maxpacket: 8 [ 362.152341][ T5819] usb 2-1: config 2 has an invalid interface number: 31 but max is 0 [ 362.169936][ T7973] smc: adding ib device syz0 with port count 1 [ 362.196794][ T5819] usb 2-1: config 2 has no interface number 0 [ 362.220888][ T7973] smc: ib device syz0 port 1 has pnetid [ 362.250807][ T5819] usb 2-1: config 2 interface 31 has no altsetting 0 [ 362.308156][ T5819] usb 2-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 362.366881][ T5819] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.423395][ T5819] usb 2-1: Product: syz [ 362.449933][ T5819] usb 2-1: Manufacturer: syz [ 362.500565][ T5819] usb 2-1: SerialNumber: syz [ 362.976537][ T5819] ch9200: probe of 2-1:2.31 failed with error -22 [ 363.015804][ T5819] usb 2-1: USB disconnect, device number 9 [ 363.505476][ T8027] loop3: detected capacity change from 0 to 32768 [ 363.528688][ T8027] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.512 (8027) [ 363.543205][ T8027] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 363.553785][ T8027] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 363.562532][ T8027] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 363.571953][ T8027] BTRFS info (device loop3): use zstd compression, level 3 [ 363.579147][ T8027] BTRFS info (device loop3): force clearing of disk cache [ 363.586317][ T8027] BTRFS info (device loop3): enabling disk space caching [ 363.593387][ T8027] BTRFS info (device loop3): disk space caching is enabled [ 363.745830][ T8027] BTRFS info (device loop3): enabling ssd optimizations [ 363.752955][ T8027] BTRFS info (device loop3): auto enabling async discard [ 363.767139][ T8027] BTRFS info (device loop3): rebuilding free space tree [ 363.788615][ T8027] BTRFS info (device loop3): disabling free space tree [ 363.795679][ T8027] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 363.805451][ T8027] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 364.072476][ T5772] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 364.328594][ T174] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 364.561120][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 364.567459][ T174] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 364.641173][ T174] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 364.701292][ T174] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 364.803953][ T174] usb 3-1: New USB device found, idVendor=056e, idProduct=010c, bcdDevice= 0.00 [ 364.872156][ T174] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.910857][ T8061] netlink: 8 bytes leftover after parsing attributes in process `syz.1.519'. [ 364.951942][ T174] usb 3-1: config 0 descriptor?? [ 364.957152][ T8061] netlink: 12 bytes leftover after parsing attributes in process `syz.1.519'. [ 365.039667][ T8061] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 365.049184][ T8061] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 365.058194][ T8061] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 365.066987][ T8061] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 365.100147][ T8061] vxlan0: entered promiscuous mode [ 365.106392][ T8061] vxlan0: entered allmulticast mode [ 365.565877][ T174] elecom 0003:056E:010C.0003: unknown main item tag 0x0 [ 365.599878][ T174] elecom 0003:056E:010C.0003: unknown main item tag 0x0 [ 365.647574][ T8068] loop0: detected capacity change from 0 to 4096 [ 365.661176][ T174] elecom 0003:056E:010C.0003: unknown main item tag 0x0 [ 365.699906][ T174] elecom 0003:056E:010C.0003: unknown main item tag 0x0 [ 365.743286][ T8068] ntfs3: loop0: Failed to load $Extend (-22). [ 365.756907][ T174] elecom 0003:056E:010C.0003: unknown main item tag 0x0 [ 365.777186][ T8068] ntfs3: loop0: Failed to initialize $Extend. [ 365.795742][ T174] elecom 0003:056E:010C.0003: unknown main item tag 0x0 [ 365.833189][ T174] elecom 0003:056E:010C.0003: unknown main item tag 0x0 [ 365.898041][ T174] elecom 0003:056E:010C.0003: unknown main item tag 0x0 [ 365.914433][ T51] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 365.953435][ T174] elecom 0003:056E:010C.0003: unknown main item tag 0x0 [ 366.013185][ T174] elecom 0003:056E:010C.0003: unknown main item tag 0x0 [ 366.020174][ T174] elecom 0003:056E:010C.0003: unknown main item tag 0x0 [ 366.086458][ T174] elecom 0003:056E:010C.0003: unknown main item tag 0x0 [ 367.004318][ T174] elecom 0003:056E:010C.0003: unknown main item tag 0x0 [ 367.073202][ T174] elecom 0003:056E:010C.0003: unknown main item tag 0x0 [ 367.080225][ T174] elecom 0003:056E:010C.0003: unknown main item tag 0x0 [ 367.163297][ T174] elecom 0003:056E:010C.0003: unknown main item tag 0x0 [ 367.201960][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 367.227841][ T174] elecom 0003:056E:010C.0003: unknown main item tag 0x0 [ 367.273695][ T174] elecom 0003:056E:010C.0003: unknown main item tag 0x0 [ 367.316823][ T174] elecom 0003:056E:010C.0003: unknown main item tag 0x0 [ 367.353039][ T174] elecom 0003:056E:010C.0003: unknown main item tag 0x0 [ 367.387647][ T174] elecom 0003:056E:010C.0003: unknown main item tag 0x0 [ 367.433069][ T174] elecom 0003:056E:010C.0003: unknown main item tag 0x0 [ 367.459754][ T174] elecom 0003:056E:010C.0003: unknown main item tag 0x0 [ 367.487172][ T174] elecom 0003:056E:010C.0003: unknown main item tag 0x0 [ 367.540292][ T174] elecom 0003:056E:010C.0003: hidraw0: USB HID v0.00 Device [HID 056e:010c] on usb-dummy_hcd.2-1/input0 [ 367.605726][ T174] usb 3-1: USB disconnect, device number 6 [ 367.630858][ T5819] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 367.722229][ T8093] fido_id[8093]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 367.851833][ T5819] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 367.886570][ T5819] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 367.923899][ T5819] usb 4-1: New USB device found, idVendor=0af0, idProduct=6711, bcdDevice= 0.00 [ 367.944219][ T5819] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 367.984875][ T5819] usb 4-1: Product: syz [ 368.009475][ T5819] usb 4-1: Manufacturer: syz [ 368.535046][ T8106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.577799][ T8106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.280980][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 369.369456][ T8122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 369.422813][ T8122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 370.159647][ C0] net hso0: Invalid frame (0) length [ 370.478657][ T9] usb 4-1: USB disconnect, device number 7 [ 370.725971][ T8141] loop3: detected capacity change from 0 to 2048 [ 371.449373][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 371.542208][ T8141] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 371.646472][ T8139] geneve0: entered promiscuous mode [ 371.745804][ T8141] syz.3.543: attempt to access beyond end of device [ 371.745804][ T8141] loop3: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 371.770455][ T8150] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 372.569184][ T8165] tipc: Started in network mode [ 372.600217][ T8165] tipc: Node identity 7f, cluster identity 4711 [ 372.636619][ T8165] tipc: Node number set to 127 [ 373.582565][ T8183] loop3: detected capacity change from 0 to 32768 [ 373.607293][ T8183] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.552 (8183) [ 373.634455][ T8183] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 373.646153][ T8183] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 373.654931][ T8183] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 373.664347][ T8183] BTRFS info (device loop3): use zstd compression, level 3 [ 373.671875][ T8183] BTRFS info (device loop3): force clearing of disk cache [ 373.678985][ T8183] BTRFS info (device loop3): enabling disk space caching [ 373.686050][ T8183] BTRFS info (device loop3): disk space caching is enabled [ 374.508202][ T5786] Bluetooth: hci3: command 0x0406 tx timeout [ 374.612779][ T8183] BTRFS info (device loop3): enabling ssd optimizations [ 374.619798][ T8183] BTRFS info (device loop3): auto enabling async discard [ 374.628962][ T8183] BTRFS info (device loop3): rebuilding free space tree [ 374.697429][ T8183] BTRFS info (device loop3): disabling free space tree [ 374.705211][ T8183] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 374.714950][ T8183] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 374.979789][ T5772] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 376.338296][ T8217] loop3: detected capacity change from 0 to 4096 [ 376.480191][ T8217] ntfs3: loop3: Failed to load $Extend (-22). [ 376.542061][ T8217] ntfs3: loop3: Failed to initialize $Extend. [ 376.677072][ T5786] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 378.967692][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.978058][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.133321][ T9] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 379.160546][ T8248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 379.210727][ T8248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 379.378007][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 379.439005][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 379.480469][ T9] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 379.489538][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.581068][ T9] usb 3-1: config 0 descriptor?? [ 379.670647][ T9] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 379.708097][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 379.756448][ T9] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 379.866396][ T9] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 379.929516][ T9] usb 3-1: media controller created [ 379.953161][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 379.972687][ T8242] dvb-usb: bulk message failed: -22 (4/0) [ 380.064176][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 380.070298][ T9] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 380.179648][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input8 [ 380.317523][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 380.381892][ T9] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 380.469003][ T9] usb 3-1: USB disconnect, device number 7 [ 380.572700][ T9] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 380.730771][ T5819] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 381.877972][ T5819] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 381.934228][ T5819] usb 2-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 382.012858][ T5819] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.082456][ T5819] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 382.970538][ T5818] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 383.194740][ T5818] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 383.208675][ T5819] stv0680 2-1:4.0: STV(e): camera ping failed!! [ 383.261548][ T5818] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 383.327083][ T5818] usb 4-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 383.392898][ T5818] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.421526][ T5819] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 383.461785][ T5818] usb 4-1: config 0 descriptor?? [ 383.482751][ T5819] stv0680 2-1:4.0: last error: 86, command = 0x0 [ 383.502588][ T8301] netlink: 'syz.2.570': attribute type 3 has an invalid length. [ 383.543159][ T5819] usb 2-1: USB disconnect, device number 10 [ 384.003869][ T8310] bridge0: entered promiscuous mode [ 384.019849][ T8309] bridge0: left promiscuous mode [ 384.075167][ T8] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 384.155064][ T5818] hid-led: probe of 0003:1D34:000A.0004 failed with error -71 [ 384.220708][ T5818] usb 4-1: USB disconnect, device number 8 [ 384.281913][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 384.313810][ T8] usb 3-1: too many endpoints for config 0 interface 0 altsetting 4: 132, using maximum allowed: 30 [ 384.343476][ T8] usb 3-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 132 [ 384.376986][ T8] usb 3-1: config 0 interface 0 has no altsetting 0 [ 385.176671][ T8] usb 3-1: New USB device found, idVendor=056a, idProduct=0015, bcdDevice= 0.00 [ 385.228514][ T5819] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 385.252890][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.284097][ T8] usb 3-1: config 0 descriptor?? [ 385.430635][ T5819] usb 2-1: Using ep0 maxpacket: 8 [ 385.454850][ T5819] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 385.486382][ T5819] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.528082][ T5819] usb 2-1: Product: syz [ 385.548013][ T5819] usb 2-1: Manufacturer: syz [ 385.570646][ T5819] usb 2-1: SerialNumber: syz [ 385.590707][ T5819] usb 2-1: config 0 descriptor?? [ 385.727564][ T8] wacom 0003:056A:0015.0005: Unknown device_type for 'HID 056a:0015'. Assuming pen. [ 385.782045][ T8] wacom 0003:056A:0015.0005: hidraw0: USB HID v10.05 Device [HID 056a:0015] on usb-dummy_hcd.2-1/input0 [ 385.860811][ T8] input: Wacom Graphire4 4x5 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:0015.0005/input/input9 [ 385.887852][ T5819] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 386.001240][ T8] usb 3-1: USB disconnect, device number 8 [ 386.266090][ T5819] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71 [ 386.303246][ T5819] usb 2-1: USB disconnect, device number 11 [ 387.844423][ T5786] list_del corruption, ffff888078277c80->next is LIST_POISON1 (dead000000000100) [ 387.855599][ T5786] ------------[ cut here ]------------ [ 387.861198][ T5786] kernel BUG at lib/list_debug.c:58! [ 387.874443][ T5786] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 387.880711][ T5786] CPU: 0 PID: 5786 Comm: kworker/u5:6 Not tainted syzkaller #0 [ 387.888250][ T5786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 387.898290][ T5786] Workqueue: hci0 hci_cmd_sync_work [ 387.903553][ T5786] RIP: 0010:__list_del_entry_valid_or_report+0xe9/0x130 [ 387.910543][ T5786] Code: 48 89 de e8 69 78 49 06 0f 0b 48 c7 c7 60 39 1d 8b 48 89 de e8 58 78 49 06 0f 0b 48 c7 c7 c0 39 1d 8b 48 89 de e8 47 78 49 06 <0f> 0b 48 c7 c7 20 3a 1d 8b 48 89 de e8 36 78 49 06 0f 0b 48 c7 c7 [ 387.930202][ T5786] RSP: 0018:ffffc90004677a00 EFLAGS: 00010246 [ 387.936256][ T5786] RAX: 000000000000004e RBX: ffff888078277c80 RCX: 235269e0a37fd400 [ 387.944218][ T5786] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 387.952198][ T5786] RBP: 1ffff1100f04ef93 R08: ffffc90004677707 R09: 1ffff920008ceee0 [ 387.960167][ T5786] R10: dffffc0000000000 R11: fffff520008ceee1 R12: dffffc0000000000 [ 387.968118][ T5786] R13: dffffc0000000000 R14: dead000000000100 R15: dead000000000122 [ 387.976073][ T5786] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 387.984981][ T5786] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 387.991546][ T5786] CR2: 00007fd0a1232ff8 CR3: 0000000041ab2000 CR4: 00000000003506f0 [ 387.999513][ T5786] Call Trace: [ 388.002836][ T5786] [ 388.005840][ T5786] mgmt_pending_remove+0x53/0x1f0 [ 388.010879][ T5786] mgmt_add_adv_patterns_monitor_complete+0x45d/0x730 [ 388.017622][ T5786] ? mgmt_add_adv_patterns_monitor_sync+0x90/0x90 [ 388.024054][ T5786] ? msft_monitor_supported+0x69/0x80 [ 388.029442][ T5786] ? hci_add_adv_monitor+0x17d/0x2a0 [ 388.034728][ T5786] ? mgmt_add_adv_patterns_monitor_sync+0x90/0x90 [ 388.041126][ T5786] hci_cmd_sync_work+0x24b/0x380 [ 388.046047][ T5786] ? process_scheduled_works+0x975/0x1600 [ 388.051821][ T5786] process_scheduled_works+0xa60/0x1600 [ 388.057394][ T5786] ? worker_attach_to_pool+0x370/0x370 [ 388.062852][ T5786] ? assign_work+0x3cc/0x5d0 [ 388.067430][ T5786] worker_thread+0xa5e/0xfe0 [ 388.072008][ T5786] ? _raw_spin_unlock+0x40/0x40 [ 388.076885][ T5786] ? __kthread_parkme+0x71/0x1c0 [ 388.081851][ T5786] kthread+0x2fa/0x390 [ 388.085908][ T5786] ? pr_cont_work+0x550/0x550 [ 388.090566][ T5786] ? kthread_blkcg+0xd0/0xd0 [ 388.095139][ T5786] ret_from_fork+0x48/0x80 [ 388.099561][ T5786] ? kthread_blkcg+0xd0/0xd0 [ 388.104131][ T5786] ret_from_fork_asm+0x11/0x20 [ 388.108904][ T5786] [ 388.111909][ T5786] Modules linked in: [ 388.508299][ T5786] ---[ end trace 0000000000000000 ]--- [ 388.513900][ T5786] RIP: 0010:__list_del_entry_valid_or_report+0xe9/0x130 [ 388.521606][ T5786] Code: 48 89 de e8 69 78 49 06 0f 0b 48 c7 c7 60 39 1d 8b 48 89 de e8 58 78 49 06 0f 0b 48 c7 c7 c0 39 1d 8b 48 89 de e8 47 78 49 06 <0f> 0b 48 c7 c7 20 3a 1d 8b 48 89 de e8 36 78 49 06 0f 0b 48 c7 c7 [ 388.543181][ T5786] RSP: 0018:ffffc90004677a00 EFLAGS: 00010246 [ 388.550330][ T5786] RAX: 000000000000004e RBX: ffff888078277c80 RCX: 235269e0a37fd400 [ 388.558454][ T5786] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 388.567092][ T5786] RBP: 1ffff1100f04ef93 R08: ffffc90004677707 R09: 1ffff920008ceee0 [ 388.576168][ T5786] R10: dffffc0000000000 R11: fffff520008ceee1 R12: dffffc0000000000 [ 388.584674][ T5786] R13: dffffc0000000000 R14: dead000000000100 R15: dead000000000122 [ 388.593316][ T5786] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 388.603289][ T5786] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 388.609961][ T5786] CR2: 00007f433c9b7000 CR3: 000000002ef5d000 CR4: 00000000003506f0 [ 388.619456][ T5786] Kernel panic - not syncing: Fatal exception [ 388.625591][ T5786] Kernel Offset: disabled [ 388.629928][ T5786] Rebooting in 86400 seconds..