last executing test programs: 13.402508724s ago: executing program 1 (id=516): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, 0x0, 0x0) 13.176543528s ago: executing program 1 (id=518): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x2, 0x3, 0x80, 0x20000006, 0x4d, 0x1, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0xf75, 0xff, 0x0, 0x5, 0x4, 0x0, 0x50, 0x3c5b, 0x1, 0x24, 0xd, 0x2, 0x4, 0xffffffff, 0xe661, 0x0, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x243, 0x3, 0xe, 0x0, 0x80108071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x6, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x3, 0x8, 0x4, 0x1, 0x40], [0x8, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea1, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x4b, 0x8000, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3038, 0x3e7, 0xb, 0x5, 0x4, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x1000, 0x7fd, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x66035635, 0x3, 0x8000, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x100, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xfffc, 0xa620, 0x1, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x7ff, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x3, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0x89, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 13.12598604s ago: executing program 1 (id=519): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x2, 0x0, @pic={0x7, 0x3, 0x5, 0xe, 0xb9, 0xf, 0x5, 0x1, 0x7f, 0x68, 0xcf, 0x80, 0x8, 0xa5, 0x0, 0x7}}) 12.985754948s ago: executing program 1 (id=520): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file2\x00', 0x1010051, &(0x7f0000000240)={[{@debug}, {@inlinecrypt}, {@noblock_validity}, {@dioread_lock}, {@nouid32}, {@resuid}]}, 0x1, 0x550, &(0x7f00000002c0)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143042, 0x80) 12.405285722s ago: executing program 1 (id=522): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000180)="c9f7b98600"/14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 11.048630591s ago: executing program 1 (id=527): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x9, 0x0, 0x0, 0x0, 0xfd], 0x0, [0x8, 0x6, 0x3c, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) 10.601231006s ago: executing program 32 (id=527): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x9, 0x0, 0x0, 0x0, 0xfd], 0x0, [0x8, 0x6, 0x3c, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) 2.810949797s ago: executing program 2 (id=568): r0 = eventfd2(0x2, 0x800) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x60000000}) writev(r0, &(0x7f0000001280)=[{&(0x7f0000000040)="6eb3ef930c53dea1", 0x8}], 0x1) 1.468097536s ago: executing program 0 (id=572): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="98000000", @ANYRES16=r1, @ANYBLOB="010025bd7000000000003900000008000300", @ANYRES32=r2, @ANYBLOB="7c005a800c00008005000600000000006c0000805400040093e424"], 0x98}, 0x1, 0x0, 0x0, 0x4000801}, 0x10) 1.422884368s ago: executing program 2 (id=573): r0 = socket$igmp(0x2, 0x3, 0x2) io_setup(0x7ff, &(0x7f0000000100)=0x0) r2 = eventfd2(0x8, 0x0) io_submit(r1, 0x3, &(0x7f0000000140)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x1, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r2}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x7ff, r0, 0x0, 0x0, 0x6, 0x0, 0x1, r2}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x2, r2}]) 1.238316868s ago: executing program 3 (id=574): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="80000000", @ANYRES16=r2, @ANYBLOB="010026bd7001000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="1200cd00070007000104630087090600740000004f0033"], 0x80}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 1.142022944s ago: executing program 0 (id=575): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 1.055204489s ago: executing program 2 (id=576): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x129042, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSBRK(r1, 0x5427) 976.544004ms ago: executing program 3 (id=577): openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x186, &(0x7f0000000180)={0x0, 0xe3f9, 0x13100, 0x3}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0) 842.987922ms ago: executing program 3 (id=578): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002480)=[{0x0}], 0x1, &(0x7f0000000040)}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') 791.384515ms ago: executing program 0 (id=579): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1, 0x1}}, {{0xa, 0x4e21, 0x0, @empty, 0x8}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x190) 767.446406ms ago: executing program 2 (id=580): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000018c0)={0x1c, r1, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x4000040) 596.695576ms ago: executing program 3 (id=581): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11000000040000000400000022"], 0x48) r1 = socket(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f0000000140), &(0x7f0000000080)=@udp=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r0, &(0x7f0000000040)}, 0x20) 596.440486ms ago: executing program 0 (id=582): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000080), 0x12) 534.205749ms ago: executing program 2 (id=583): syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x3008003, &(0x7f0000002ac0)=ANY=[], 0x2, 0x200, &(0x7f00000002c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fadvise64(r0, 0xe0ffff, 0x19, 0x3) execveat(r0, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x100) 426.796315ms ago: executing program 3 (id=584): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000008500)={0x9, {{0x2, 0x4e23, @multicast1}}, {{0x2, 0x4e24, @remote}}}, 0x108) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000280)=ANY=[@ANYBLOB="090000000000000002004e22e0000002"], 0x90) 292.713303ms ago: executing program 0 (id=585): prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) cachestat(r0, &(0x7f0000000500)={0xfffffffffffffffe, 0x6}, &(0x7f0000000540), 0x0) 121.937773ms ago: executing program 3 (id=586): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r0, 0x8b22, &(0x7f0000000040)) 57.001967ms ago: executing program 0 (id=587): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0x503, 0x0, 0x0, {}, [{0x8, 0x1, 0x2}]}, 0x20}}, 0x0) 0s ago: executing program 2 (id=588): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x24) close(r0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.121' (ED25519) to the list of known hosts. [ 82.502834][ T5755] cgroup: Unknown subsys name 'net' [ 82.666548][ T5755] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.421027][ T5755] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.025852][ T5768] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.034593][ T5768] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.057166][ T5768] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.065661][ T5768] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.073807][ T5768] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 86.081550][ T5768] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.102256][ T5771] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.118253][ T5771] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.127761][ T5771] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.145899][ T5771] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.154435][ T5771] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 86.162959][ T5771] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.208703][ T5771] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.221433][ T5771] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.229977][ T5771] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.239435][ T5771] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.250045][ T5771] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 86.258062][ T5771] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.266008][ T5771] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.272548][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.282358][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.293557][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.301952][ T5768] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 86.317359][ T5768] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.829742][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 86.861917][ T5770] chnl_net:caif_netlink_parms(): no params data found [ 86.887972][ T5766] chnl_net:caif_netlink_parms(): no params data found [ 86.962781][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 87.129380][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.137567][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.145000][ T5774] bridge_slave_0: entered allmulticast mode [ 87.152443][ T5774] bridge_slave_0: entered promiscuous mode [ 87.171876][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.187189][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.194566][ T5770] bridge_slave_0: entered allmulticast mode [ 87.208987][ T5770] bridge_slave_0: entered promiscuous mode [ 87.262510][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.277287][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.284615][ T5774] bridge_slave_1: entered allmulticast mode [ 87.297458][ T5774] bridge_slave_1: entered promiscuous mode [ 87.324448][ T5766] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.336903][ T5766] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.345025][ T5766] bridge_slave_0: entered allmulticast mode [ 87.353017][ T5766] bridge_slave_0: entered promiscuous mode [ 87.362682][ T5766] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.370054][ T5766] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.377762][ T5766] bridge_slave_1: entered allmulticast mode [ 87.385215][ T5766] bridge_slave_1: entered promiscuous mode [ 87.393919][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.401809][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.409595][ T5770] bridge_slave_1: entered allmulticast mode [ 87.417852][ T5770] bridge_slave_1: entered promiscuous mode [ 87.438143][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.445339][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.453303][ T5773] bridge_slave_0: entered allmulticast mode [ 87.461194][ T5773] bridge_slave_0: entered promiscuous mode [ 87.508241][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.515527][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.524832][ T5773] bridge_slave_1: entered allmulticast mode [ 87.533783][ T5773] bridge_slave_1: entered promiscuous mode [ 87.557592][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.597805][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.610544][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.624659][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.636938][ T5766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.654369][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.681526][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.693560][ T5766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.759538][ T5774] team0: Port device team_slave_0 added [ 87.810011][ T5774] team0: Port device team_slave_1 added [ 87.855114][ T5770] team0: Port device team_slave_0 added [ 87.868535][ T5773] team0: Port device team_slave_0 added [ 87.877989][ T5770] team0: Port device team_slave_1 added [ 87.925271][ T5766] team0: Port device team_slave_0 added [ 87.933499][ T5773] team0: Port device team_slave_1 added [ 87.965812][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.972969][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.006219][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.020549][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.027702][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.053935][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.067424][ T5766] team0: Port device team_slave_1 added [ 88.073995][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.083294][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.109480][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.163233][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.170637][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.197175][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.218090][ T5083] Bluetooth: hci0: command tx timeout [ 88.218108][ T5768] Bluetooth: hci1: command tx timeout [ 88.232128][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.239486][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.265803][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.278893][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.285904][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.312042][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.364259][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.371409][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.397849][ T5768] Bluetooth: hci3: command tx timeout [ 88.397872][ T5083] Bluetooth: hci2: command tx timeout [ 88.409587][ T5766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.451105][ T5770] hsr_slave_0: entered promiscuous mode [ 88.458178][ T5770] hsr_slave_1: entered promiscuous mode [ 88.479737][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.486756][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.512953][ T5766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.531238][ T5774] hsr_slave_0: entered promiscuous mode [ 88.539469][ T5774] hsr_slave_1: entered promiscuous mode [ 88.545817][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.553886][ T5774] Cannot create hsr debugfs directory [ 88.614371][ T5773] hsr_slave_0: entered promiscuous mode [ 88.621080][ T5773] hsr_slave_1: entered promiscuous mode [ 88.630247][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.637999][ T5773] Cannot create hsr debugfs directory [ 88.699352][ T5766] hsr_slave_0: entered promiscuous mode [ 88.706263][ T5766] hsr_slave_1: entered promiscuous mode [ 88.714651][ T5766] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.722897][ T5766] Cannot create hsr debugfs directory [ 89.187381][ T5770] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.202859][ T5770] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.218040][ T5770] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.228914][ T5770] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.296927][ T5774] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.316298][ T5774] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.349527][ T5774] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.379933][ T5774] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.416760][ T5766] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.434713][ T5766] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.455409][ T5766] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.466170][ T5766] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.569510][ T5773] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.582565][ T5773] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.594090][ T5773] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.605141][ T5773] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.762245][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.831219][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.865653][ T1024] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.873144][ T1024] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.885999][ T1024] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.893309][ T1024] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.925245][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.950161][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.005737][ T5766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.020629][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.045580][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.083997][ T5766] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.097321][ T1024] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.104600][ T1024] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.116474][ T1024] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.123715][ T1024] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.142434][ T1024] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.149753][ T1024] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.181230][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.188470][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.201189][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.208467][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.246885][ T2974] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.254078][ T2974] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.298127][ T5768] Bluetooth: hci0: command tx timeout [ 90.298142][ T5083] Bluetooth: hci1: command tx timeout [ 90.458904][ T5768] Bluetooth: hci2: command tx timeout [ 90.458914][ T5083] Bluetooth: hci3: command tx timeout [ 90.833838][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.942683][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.980310][ T5770] veth0_vlan: entered promiscuous mode [ 90.996671][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.023798][ T5766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.061711][ T5770] veth1_vlan: entered promiscuous mode [ 91.160830][ T5770] veth0_macvtap: entered promiscuous mode [ 91.174894][ T5770] veth1_macvtap: entered promiscuous mode [ 91.205845][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.232002][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.243960][ T5770] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.253702][ T5770] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.264199][ T5770] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.274558][ T5770] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.308916][ T5773] veth0_vlan: entered promiscuous mode [ 91.326951][ T5766] veth0_vlan: entered promiscuous mode [ 91.355821][ T5774] veth0_vlan: entered promiscuous mode [ 91.390779][ T5773] veth1_vlan: entered promiscuous mode [ 91.399460][ T5766] veth1_vlan: entered promiscuous mode [ 91.441521][ T5774] veth1_vlan: entered promiscuous mode [ 91.533064][ T3507] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.536636][ T5773] veth0_macvtap: entered promiscuous mode [ 91.542942][ T3507] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.572611][ T5766] veth0_macvtap: entered promiscuous mode [ 91.595375][ T5773] veth1_macvtap: entered promiscuous mode [ 91.641165][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.652594][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.666095][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.682669][ T5766] veth1_macvtap: entered promiscuous mode [ 91.690925][ T3507] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.699783][ T3507] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.715895][ T5774] veth0_macvtap: entered promiscuous mode [ 91.731204][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.742424][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.756080][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.770146][ T5774] veth1_macvtap: entered promiscuous mode [ 91.793453][ T5773] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.804135][ T5773] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.818111][ T5773] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.826881][ T5773] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.849345][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.861698][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.872112][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.883662][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.898631][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.923522][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.935634][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.945708][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.959723][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.969814][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.981106][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.993655][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.015214][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.026374][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.037906][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.048596][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.063889][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.077925][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.088859][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.099480][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.110101][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.120542][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.131455][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.144170][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.204974][ T5766] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.228853][ T5766] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.247712][ T5766] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.256563][ T5766] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.290684][ T5774] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.305220][ T5774] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.325893][ T967] cfg80211: failed to load regulatory.db [ 92.327392][ T5774] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.346871][ T5774] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.378366][ T5768] Bluetooth: hci0: command tx timeout [ 92.378371][ T5083] Bluetooth: hci1: command tx timeout [ 92.503194][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.531235][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.538859][ T5768] Bluetooth: hci3: command tx timeout [ 92.548591][ T5768] Bluetooth: hci2: command tx timeout [ 92.613385][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.667250][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.703566][ T1132] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.721504][ T1132] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.783816][ T1024] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.794804][ T3507] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.816231][ T3507] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.825508][ T1024] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.899836][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.916197][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.957665][ T786] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 93.050899][ T5864] tmpfs: Cannot retroactively limit size [ 93.134970][ T5866] netlink: 340 bytes leftover after parsing attributes in process `syz.2.3'. [ 93.195924][ T786] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 93.227249][ T5868] syz.0.1[5868]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 93.236497][ T786] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.281712][ T786] usb 2-1: Product: syz [ 93.285990][ T786] usb 2-1: Manufacturer: syz [ 93.327125][ T786] usb 2-1: SerialNumber: syz [ 93.371437][ T786] usb 2-1: config 0 descriptor?? [ 93.399288][ T5870] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 93.425825][ T5870] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.434835][ T5870] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.446945][ T5868] loop0: detected capacity change from 0 to 4096 [ 93.455887][ T5872] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8'. [ 93.629583][ T5873] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 93.816563][ T786] usb 2-1: Firmware: major: 216, minor: 113, hardware type: ATUSB (1) [ 94.030256][ T786] usb 2-1: failed to fetch extended address, random address set [ 94.114534][ T786] usb 2-1: USB disconnect, device number 2 [ 94.458470][ T5768] Bluetooth: hci1: command tx timeout [ 94.463985][ T5768] Bluetooth: hci0: command tx timeout [ 94.618113][ T5083] Bluetooth: hci3: command tx timeout [ 94.623799][ T5768] Bluetooth: hci2: command tx timeout [ 94.659963][ T5875] loop3: detected capacity change from 0 to 40427 [ 94.693264][ T5875] F2FS-fs (loop3): invalid crc value [ 94.727583][ T5875] F2FS-fs (loop3): Found nat_bits in checkpoint [ 94.943104][ T5875] F2FS-fs (loop3): Start checkpoint disabled! [ 94.982161][ T5896] misc userio: Invalid payload size [ 94.987853][ T5875] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 95.016381][ T5899] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 95.485923][ T12] kworker/u4:1: attempt to access beyond end of device [ 95.485923][ T12] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 95.505123][ T12] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 95.544149][ T5911] loop2: detected capacity change from 0 to 1024 [ 95.727840][ T786] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 95.919387][ T786] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 95.940101][ T786] usb 1-1: New USB device found, idVendor=1c9e, idProduct=9801, bcdDevice=25.d8 [ 95.957166][ T786] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.983266][ T786] usb 1-1: Product: syz [ 96.017571][ T786] usb 1-1: Manufacturer: syz [ 96.022365][ T786] usb 1-1: SerialNumber: syz [ 96.044671][ T786] usb 1-1: config 0 descriptor?? [ 96.073223][ T5915] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 96.099545][ T5915] netlink: 12 bytes leftover after parsing attributes in process `syz.3.20'. [ 96.310373][ T786] usb 1-1: USB disconnect, device number 2 [ 96.408641][ T5913] loop1: detected capacity change from 0 to 32768 [ 96.432490][ T5913] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.24 (5913) [ 96.517881][ T5913] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 96.552222][ T5913] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 96.587901][ T5913] BTRFS info (device loop1): using free space tree [ 96.698313][ T5768] Bluetooth: hci3: command tx timeout [ 96.762838][ T5913] BTRFS info (device loop1): enabling ssd optimizations [ 96.767476][ T5815] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 96.795425][ T5913] BTRFS info (device loop1): auto enabling async discard [ 96.967180][ T5815] usb 4-1: Using ep0 maxpacket: 32 [ 96.974370][ T5947] loop0: detected capacity change from 0 to 64 [ 96.993650][ T5815] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 97.015699][ T5913] BTRFS error (device loop1): balance: invalid convert system profile raid1c3 [ 97.029568][ T5815] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 97.067802][ T5815] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 97.093510][ T5815] usb 4-1: Product: syz [ 97.110581][ T5815] usb 4-1: Manufacturer: syz [ 97.115269][ T5815] usb 4-1: SerialNumber: syz [ 97.151295][ T5815] usb 4-1: config 0 descriptor?? [ 97.172737][ T5923] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 97.259176][ T5815] hub 4-1:0.0: bad descriptor, ignoring hub [ 97.280385][ T5766] Trying to free block not in datazone [ 97.286305][ T5815] hub: probe of 4-1:0.0 failed with error -5 [ 97.373095][ T5770] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 97.434767][ T5949] loop2: detected capacity change from 0 to 1024 [ 97.668865][ T27] audit: type=1800 audit(1769825624.887:2): pid=5949 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.33" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 98.231403][ T5951] loop0: detected capacity change from 0 to 32768 [ 98.249097][ T5951] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.34 (5951) [ 98.300563][ T5951] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 98.316672][ T5951] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 98.330468][ T5951] BTRFS info (device loop0): using free space tree [ 98.518738][ T5951] BTRFS info (device loop0): enabling ssd optimizations [ 98.527505][ T5951] BTRFS info (device loop0): auto enabling async discard [ 98.594394][ T5981] loop1: detected capacity change from 0 to 128 [ 99.060564][ T1142] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared) [ 99.137528][ T5991] loop2: detected capacity change from 0 to 256 [ 99.507665][ T5766] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 99.788420][ T28] usb 4-1: USB disconnect, device number 2 [ 100.042338][ T6002] loop2: detected capacity change from 0 to 128 [ 100.147376][ T6004] warning: `syz.3.51' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 100.167398][ T5989] loop1: detected capacity change from 0 to 32768 [ 100.174885][ T5989] ======================================================= [ 100.174885][ T5989] WARNING: The mand mount option has been deprecated and [ 100.174885][ T5989] and is ignored by this kernel. Remove the mand [ 100.174885][ T5989] option from the mount to silence this warning. [ 100.174885][ T5989] ======================================================= [ 100.549884][ T5989] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 100.558386][ T6014] Zero length message leads to an empty skb [ 100.875416][ T5989] XFS (loop1): Ending clean mount [ 100.893253][ T5989] XFS (loop1): Quotacheck needed: Please wait. [ 101.018649][ T5989] XFS (loop1): Quotacheck: Done. [ 101.356389][ T5770] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 101.938415][ T6041] loop1: detected capacity change from 0 to 4096 [ 102.045663][ T6041] ntfs: volume version 3.1. [ 102.290914][ T6048] netlink: 44 bytes leftover after parsing attributes in process `syz.2.66'. [ 102.608573][ T6055] loop3: detected capacity change from 0 to 64 [ 104.327777][ T23] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 104.421748][ T6094] loop2: detected capacity change from 0 to 4096 [ 104.537604][ T23] usb 2-1: Using ep0 maxpacket: 16 [ 104.555463][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.577134][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.628823][ T23] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 104.670076][ T23] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 104.712017][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.775252][ T23] usb 2-1: config 0 descriptor?? [ 104.970696][ T6100] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 105.007807][ T6100] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 105.014773][ T6100] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 105.021723][ T6100] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 105.028631][ T6100] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 105.036331][ T6100] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 105.043273][ T6100] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 105.050194][ T6100] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 105.057200][ T6100] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 105.064060][ T6100] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 105.331905][ T23] microsoft 0003:045E:07DA.0001: No inputs registered, leaving [ 105.387297][ T23] microsoft 0003:045E:07DA.0001: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 105.409661][ T23] microsoft 0003:045E:07DA.0001: no inputs found [ 105.416335][ T23] microsoft 0003:045E:07DA.0001: could not initialize ff, continuing anyway [ 105.579490][ T5815] usb 2-1: USB disconnect, device number 3 [ 105.625981][ T6106] fido_id[6106]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 105.887979][ T6090] loop0: detected capacity change from 0 to 65536 [ 106.076596][ T6090] XFS (loop0): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 106.122392][ T6090] XFS (loop0): Ending clean mount [ 106.143357][ T6090] XFS (loop0): Quotacheck needed: Please wait. [ 106.173393][ T6118] netlink: 132 bytes leftover after parsing attributes in process `syz.3.94'. [ 106.243664][ T6090] XFS (loop0): Quotacheck: Done. [ 106.333239][ T28] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_bnobt block 0x8004 [ 106.361565][ T28] XFS (loop0): Unmount and run xfs_repair [ 106.382010][ T28] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 106.411228][ T28] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 106.441340][ T28] 00000010: 00 00 00 00 00 00 80 04 00 00 00 00 00 00 00 00 ................ [ 106.482656][ T28] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 106.501951][ T28] 00000030: 00 00 00 01 21 05 00 0a 00 00 00 05 00 00 00 03 ....!........... [ 106.518340][ T28] 00000040: 00 00 04 a4 00 00 3b 5c 00 00 00 00 00 00 00 00 ......;\........ [ 106.528154][ T28] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 106.544547][ T28] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 106.575199][ T28] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 106.602198][ T6090] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x8004 len 2 error 74 [ 106.713071][ T5766] XFS (loop0): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 106.790053][ T6127] loop1: detected capacity change from 0 to 4096 [ 106.837693][ T6127] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 107.504515][ T6134] loop1: detected capacity change from 0 to 1764 [ 108.382934][ T6159] loop2: detected capacity change from 0 to 8 [ 108.547886][ T6159] SQUASHFS error: Failed to read block 0x260685: -5 [ 108.597426][ T6159] SQUASHFS error: Unable to read metadata cache entry [260685] [ 108.640888][ T6159] SQUASHFS error: Unable to read directory block [260685:0] [ 109.190105][ T6183] loop1: detected capacity change from 0 to 64 [ 109.733472][ T6157] loop0: detected capacity change from 0 to 40427 [ 109.782016][ T6157] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 109.821704][ T6157] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 109.930606][ T6157] F2FS-fs (loop0): Found nat_bits in checkpoint [ 110.131300][ T6205] netlink: 312 bytes leftover after parsing attributes in process `syz.1.124'. [ 110.187754][ T6157] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 110.194875][ T6157] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 110.841416][ T6212] syz.0.111 (6212): drop_caches: 2 [ 111.427209][ T3062] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 111.611685][ T6222] loop3: detected capacity change from 0 to 32768 [ 111.637156][ T3062] usb 2-1: Using ep0 maxpacket: 16 [ 111.649383][ T3062] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.660969][ T3062] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.683387][ T3062] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 111.747464][ T3062] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 111.775274][ T3062] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.809342][ T3062] usb 2-1: config 0 descriptor?? [ 112.047448][ T6231] loop2: detected capacity change from 0 to 32768 [ 112.119289][ T6231] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 112.243909][ T6232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.254411][ T6232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.271640][ T3062] microsoft 0003:045E:07DA.0002: unknown main item tag 0x2 [ 112.281795][ T3062] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 112.292478][ T3062] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 112.300454][ T3062] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 112.309346][ T3062] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 112.316724][ T3062] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 112.334390][ T3062] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 112.354770][ T3062] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 112.363036][ T3062] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 112.379462][ T6231] XFS (loop2): Ending clean mount [ 112.401888][ T3062] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0002/input/input6 [ 112.430946][ T6231] XFS (loop2): Quotacheck needed: Please wait. [ 112.461210][ T3062] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 112.556508][ T3062] usb 2-1: USB disconnect, device number 4 [ 112.565366][ T6231] XFS (loop2): Quotacheck: Done. [ 112.795247][ T5774] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 112.819819][ T6248] fido_id[6248]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 112.921460][ T6239] loop0: detected capacity change from 0 to 32768 [ 112.947909][ T6239] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.132 (6239) [ 112.973114][ T6239] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 112.988505][ T6239] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 113.002278][ T6239] BTRFS info (device loop0): using free space tree [ 113.040337][ T6239] BTRFS info (device loop0): enabling ssd optimizations [ 113.047641][ T6239] BTRFS info (device loop0): auto enabling async discard [ 113.070880][ T6251] loop3: detected capacity change from 0 to 4096 [ 113.098330][ T6251] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 113.212740][ T6251] ntfs: (device loop3): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 113.280155][ T6251] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 113.311150][ T6251] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 113.387643][ T6251] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 113.396451][ T6251] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 113.447510][ T6251] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 113.456321][ T6251] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 113.501969][ T6251] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 113.527117][ T6251] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 113.550619][ T5766] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 113.624748][ T6251] ntfs: volume version 3.1. [ 113.727229][ T6249] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop0 scanned by udevd (6249) [ 113.761085][ T6272] loop1: detected capacity change from 0 to 128 [ 113.885434][ T6272] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 113.936817][ T6272] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.161671][ T5770] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 114.204455][ T3062] IPVS: starting estimator thread 0... [ 114.337239][ T6282] IPVS: using max 22 ests per chain, 52800 per kthread [ 114.581197][ T6290] loop0: detected capacity change from 0 to 512 [ 114.611214][ T6290] EXT4-fs (loop0): 1 truncate cleaned up [ 114.634569][ T6290] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.771971][ T6294] loop1: detected capacity change from 0 to 8 [ 114.808756][ T6290] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.141: bg 0: block 465: padding at end of block bitmap is not set [ 114.940210][ T6300] loop3: detected capacity change from 0 to 512 [ 115.077923][ T5766] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.354655][ T6304] vlan2: entered allmulticast mode [ 115.441886][ T6309] loop0: detected capacity change from 0 to 2048 [ 115.493477][ T6309] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 115.993441][ T6319] loop0: detected capacity change from 0 to 4096 [ 116.041372][ T6319] ntfs: volume version 3.1. [ 116.167479][ T786] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 116.371954][ T6331] loop0: detected capacity change from 0 to 512 [ 116.378563][ T786] usb 3-1: Using ep0 maxpacket: 8 [ 116.399642][ T786] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 116.416651][ T786] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.439425][ T6331] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.453983][ T6331] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.475688][ T786] pvrusb2: Hardware description: Terratec Grabster AV400 [ 116.518380][ T786] pvrusb2: ********** [ 116.537395][ T786] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 116.557225][ T5860] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 116.589581][ T6331] EXT4-fs error (device loop0): ext4_get_inode_usage:888: inode #12: comm syz.0.159: corrupted xattr block 6: invalid header [ 116.604453][ T786] pvrusb2: Important functionality might not be entirely working. [ 116.622548][ T6331] EXT4-fs (loop0): Remounting filesystem read-only [ 116.636569][ T786] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 116.662167][ T786] pvrusb2: ********** [ 116.678801][ T1132] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 116.707664][ T2320] pvrusb2: Invalid write control endpoint [ 116.715261][ T1132] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 116.767176][ T5860] usb 2-1: Using ep0 maxpacket: 8 [ 116.779395][ T5860] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 116.803039][ T5766] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.807846][ T5860] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 116.847081][ T5860] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 116.868529][ T5860] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 116.885178][ T5860] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 116.913502][ T2320] pvrusb2: Invalid write control endpoint [ 116.930849][ T5860] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.947361][ T2320] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 116.970908][ T2320] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 116.988422][ T2320] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 117.017065][ T2320] pvrusb2: Device being rendered inoperable [ 117.033542][ T2320] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 117.042132][ T6321] pvrusb2: Attempted to execute control transfer when device not ok [ 117.063014][ T2320] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 117.077807][ T786] usb 3-1: USB disconnect, device number 2 [ 117.097118][ T2320] pvrusb2: Attached sub-driver cx25840 [ 117.109747][ T2320] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 117.140546][ T2320] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 117.203409][ T5860] usb 2-1: GET_CAPABILITIES returned 0 [ 117.217811][ T5860] usbtmc 2-1:16.0: can't read capabilities [ 117.311630][ T6341] loop0: detected capacity change from 0 to 512 [ 117.322543][ T6336] loop3: detected capacity change from 0 to 32768 [ 117.365848][ T6336] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz.3.161 (6336) [ 117.387961][ T6341] EXT4-fs (loop0): 1 truncate cleaned up [ 117.395371][ T6341] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.412745][ T6336] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 117.463119][ T6336] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 117.474273][ T6336] BTRFS info (device loop3): using free space tree [ 117.545424][ T786] usb 2-1: USB disconnect, device number 5 [ 117.592475][ T5766] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.621002][ T6336] BTRFS info (device loop3): enabling ssd optimizations [ 117.644969][ T6336] BTRFS info (device loop3): auto enabling async discard [ 117.950297][ T2974] Bluetooth: hci4: Frame reassembly failed (-84) [ 117.960043][ T2974] Bluetooth: hci4: Frame reassembly failed (-84) [ 117.987606][ T6364] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 118.091345][ T5773] BTRFS info (device loop3): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 118.203854][ T6368] loop1: detected capacity change from 0 to 64 [ 118.228076][ T6368] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing [ 118.275957][ T6368] BFS-fs: bfs_readdir(): Bad f_pos=00000104 for loop1:00000002 [ 118.817133][ T5860] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 118.871291][ T6384] overlay: filesystem on ./file0 is read-only [ 118.976001][ T6388] loop2: detected capacity change from 0 to 1024 [ 119.028706][ T5860] usb 2-1: Using ep0 maxpacket: 8 [ 119.056231][ T5860] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 119.079850][ T5860] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 119.110542][ T5860] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 119.141695][ T5860] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 119.198155][ T5860] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 119.227491][ T5860] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.485301][ T5860] usb 2-1: GET_CAPABILITIES returned 0 [ 119.512124][ T5860] usbtmc 2-1:16.0: can't read capabilities [ 119.739548][ T6398] loop2: detected capacity change from 0 to 2048 [ 119.791495][ T6399] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 119.840030][ T5860] usb 2-1: USB disconnect, device number 6 [ 119.977421][ T5083] Bluetooth: hci4: command 0x1003 tx timeout [ 119.984498][ T5768] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 121.003270][ T6417] loop1: detected capacity change from 0 to 1024 [ 121.342104][ T12] hfsplus: b-tree write err: -5, ino 8 [ 121.539471][ T6426] loop1: detected capacity change from 0 to 256 [ 121.889301][ T6431] netlink: 8 bytes leftover after parsing attributes in process `syz.2.194'. [ 121.943353][ T6436] loop3: detected capacity change from 0 to 512 [ 121.968666][ T6432] hsr0: entered promiscuous mode [ 121.982554][ T6436] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 122.009681][ T6432] macsec1: entered allmulticast mode [ 122.015826][ T6432] hsr0: entered allmulticast mode [ 122.021902][ T6436] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 122.032647][ T6432] hsr_slave_0: entered allmulticast mode [ 122.040375][ T6432] hsr_slave_1: entered allmulticast mode [ 122.060727][ T6432] hsr0: left allmulticast mode [ 122.068192][ T6436] EXT4-fs (loop3): 1 truncate cleaned up [ 122.073999][ T6432] hsr_slave_0: left allmulticast mode [ 122.081724][ T6436] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.094090][ T6432] hsr_slave_1: left allmulticast mode [ 122.171747][ T6436] fscrypt (loop3, inode 18): Unsupported encryption flags (0x10) [ 122.182249][ T6435] netlink: 8 bytes leftover after parsing attributes in process `syz.1.196'. [ 122.256326][ T6440] loop2: detected capacity change from 0 to 1024 [ 122.296944][ T6440] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.325945][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.427117][ T6440] EXT4-fs error (device loop2): ext4_empty_dir:3166: inode #11: block 623: comm syz.2.198: Attempting to read directory block (623) that is past i_size (638464) [ 122.613385][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.929692][ T6454] loop1: detected capacity change from 0 to 4096 [ 123.090404][ T6461] loop2: detected capacity change from 0 to 4096 [ 123.276704][ T6461] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 123.441980][ T6468] use of bytesused == 0 is deprecated and will be removed in the future, [ 123.474286][ T6468] use the actual size instead. [ 123.520321][ T6461] ntfs3: loop2: ino=0, "file1" failed to extend initialized size to 100003. [ 123.906222][ T6477] loop3: detected capacity change from 0 to 1024 [ 123.981265][ T6477] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=802c018, mo2=0002] [ 124.002409][ T6477] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.143675][ T6487] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 124.155920][ T6477] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.212: bg 0: block 88: padding at end of block bitmap is not set [ 124.232946][ T6477] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2853: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 124.274293][ T6490] capability: warning: `syz.0.217' uses deprecated v2 capabilities in a way that may be insecure [ 124.375046][ T6492] netlink: 8 bytes leftover after parsing attributes in process `syz.1.218'. [ 124.397270][ T6492] netlink: 8 bytes leftover after parsing attributes in process `syz.1.218'. [ 124.506356][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.785840][ T6498] loop0: detected capacity change from 0 to 4096 [ 124.911306][ T6486] loop2: detected capacity change from 0 to 32768 [ 124.942479][ T6498] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 125.054155][ T27] kauditd_printk_skb: 34 callbacks suppressed [ 125.054172][ T27] audit: type=1800 audit(1769825652.287:3): pid=6486 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.213" name="file1" dev="loop2" ino=4 res=0 errno=0 [ 125.213137][ T6498] ntfs3: loop0: ino=0, "file1" failed to extend initialized size to 100003. [ 125.350172][ T6510] Illegal XDP return value 4294967294 on prog (id 11) dev N/A, expect packet loss! [ 125.537259][ T23] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 125.763692][ T23] usb 2-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 125.783155][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.809924][ T23] usb 2-1: config 0 descriptor?? [ 126.053918][ T6520] loop0: detected capacity change from 0 to 4096 [ 126.288760][ T23] kye 0003:0458:0138.0003: unbalanced collection at end of report description [ 126.304296][ T23] kye 0003:0458:0138.0003: parse failed [ 126.317898][ T23] kye: probe of 0003:0458:0138.0003 failed with error -22 [ 126.552801][ T23] usb 2-1: USB disconnect, device number 7 [ 127.356555][ T6558] loop0: detected capacity change from 0 to 2048 [ 127.391056][ T6558] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 127.515830][ T27] audit: type=1800 audit(1769825654.747:4): pid=6558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.250" name="file3" dev="loop0" ino=1347 res=0 errno=0 [ 128.073452][ T6568] loop1: detected capacity change from 0 to 8192 [ 128.082072][ T6576] loop3: detected capacity change from 0 to 256 [ 128.142376][ T6568] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 128.241314][ T6568] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 128.307407][ T6568] REISERFS (device loop1): using ordered data mode [ 128.334589][ T6568] reiserfs: using flush barriers [ 128.378690][ T6568] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 128.448189][ T6568] REISERFS (device loop1): checking transaction log (loop1) [ 128.515235][ T6568] REISERFS (device loop1): Using r5 hash to sort names [ 128.542352][ T6568] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 129.055059][ T6600] loop0: detected capacity change from 0 to 64 [ 129.145276][ T27] audit: type=1800 audit(1769825656.377:5): pid=6600 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.269" name="file2" dev="loop0" ino=6 res=0 errno=0 [ 129.861376][ T6628] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 130.306141][ T6638] loop0: detected capacity change from 0 to 2048 [ 130.366151][ T6638] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 130.447630][ T6624] loop1: detected capacity change from 0 to 32768 [ 130.510457][ T6624] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 130.676150][ T6624] XFS (loop1): Ending clean mount [ 130.727915][ T6624] XFS (loop1): Quotacheck needed: Please wait. [ 130.772824][ T6653] netlink: 8 bytes leftover after parsing attributes in process `syz.2.290'. [ 130.856108][ T6624] XFS (loop1): Quotacheck: Done. [ 130.959183][ T27] audit: type=1800 audit(1769825658.197:6): pid=6624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.279" name="file1" dev="loop1" ino=6150 res=0 errno=0 [ 131.148287][ T5770] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 131.232501][ T6665] loop3: detected capacity change from 0 to 512 [ 131.382737][ T6665] EXT4-fs error (device loop3): ext4_orphan_get:1424: comm syz.3.296: bad orphan inode 11862016 [ 131.430297][ T6665] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 131.457636][ T6665] ext4 filesystem being mounted at /75/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.648210][ T6665] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 132.076614][ T6684] loop1: detected capacity change from 0 to 8192 [ 132.083267][ T5815] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 132.104425][ T6684] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 132.136789][ T6684] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 132.146707][ T6684] REISERFS (device loop1): using ordered data mode [ 132.154218][ T6684] reiserfs: using flush barriers [ 132.167169][ T6684] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 132.184524][ T6684] REISERFS (device loop1): checking transaction log (loop1) [ 132.193979][ T6684] REISERFS (device loop1): Using r5 hash to sort names [ 132.202469][ T6684] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 132.281958][ T5815] usb 3-1: Using ep0 maxpacket: 8 [ 132.295496][ T5815] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 132.326219][ T5815] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.373738][ T5815] pvrusb2: Hardware description: Terratec Grabster AV400 [ 132.407170][ T5815] pvrusb2: ********** [ 132.437466][ T5815] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 132.487975][ T5815] pvrusb2: Important functionality might not be entirely working. [ 132.519794][ T6690] netlink: 136 bytes leftover after parsing attributes in process `syz.3.305'. [ 132.522920][ T5815] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 132.549926][ T6690] netlink: 39 bytes leftover after parsing attributes in process `syz.3.305'. [ 132.567193][ T5815] pvrusb2: ********** [ 132.576381][ T6690] netlink: 39 bytes leftover after parsing attributes in process `syz.3.305'. [ 132.596266][ T2320] pvrusb2: Invalid write control endpoint [ 132.770197][ T2320] pvrusb2: Invalid write control endpoint [ 132.776045][ T2320] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 132.828349][ T2320] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 132.838271][ T2320] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 132.853077][ T2320] pvrusb2: Device being rendered inoperable [ 132.862835][ T6679] pvrusb2: Attempted to execute control transfer when device not ok [ 132.879216][ T2320] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 132.888036][ T786] usb 3-1: USB disconnect, device number 3 [ 132.901654][ T2320] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 132.915822][ T6695] Bluetooth: MGMT ver 1.22 [ 132.936718][ T2320] pvrusb2: Attached sub-driver cx25840 [ 132.953087][ T2320] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 132.977325][ T2320] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 133.086847][ T6686] loop0: detected capacity change from 0 to 32768 [ 133.126801][ T6686] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop0 scanned by syz.0.303 (6686) [ 133.161731][ T6686] BTRFS info (device loop0): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 133.174140][ T6686] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 133.186761][ T6686] BTRFS info (device loop0): using free space tree [ 133.263843][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.272017][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.290294][ T6686] BTRFS info (device loop0): enabling ssd optimizations [ 133.299807][ T6686] BTRFS info (device loop0): auto enabling async discard [ 133.355658][ T27] audit: type=1800 audit(1769825660.587:7): pid=6686 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.303" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 133.467773][ T28] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 133.528271][ T5766] BTRFS info (device loop0): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 133.677168][ T28] usb 4-1: Using ep0 maxpacket: 8 [ 133.719217][ T28] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 133.747050][ T28] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 133.756881][ T28] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 133.804269][ T6693] loop1: detected capacity change from 0 to 32768 [ 133.828387][ T28] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 133.844457][ T6717] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 133.887161][ T28] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 133.937344][ T28] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.975931][ T27] audit: type=1800 audit(1769825661.207:8): pid=6693 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.306" name="file1" dev="loop1" ino=4 res=0 errno=0 [ 134.200519][ T28] usb 4-1: GET_CAPABILITIES returned 0 [ 134.221299][ T28] usbtmc 4-1:16.0: can't read capabilities [ 134.438414][ T6719] loop0: detected capacity change from 0 to 8192 [ 134.461091][ T6719] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 134.486589][ T6719] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 134.507969][ T6719] REISERFS (device loop0): using ordered data mode [ 134.514559][ T6719] reiserfs: using flush barriers [ 134.529028][ T28] usb 4-1: USB disconnect, device number 3 [ 134.602341][ T6719] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 134.621686][ T6719] REISERFS (device loop0): checking transaction log (loop0) [ 134.631646][ T6719] REISERFS (device loop0): Using rupasov hash to sort names [ 134.639510][ T6719] REISERFS (device loop0): using 3.5.x disk format [ 134.671972][ T6719] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 134.700463][ T6719] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 134.737585][ T6719] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 134.752418][ T6719] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 134.803619][ T6719] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 134.834793][ T6719] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 134.852229][ T6719] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 134.865980][ T6719] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 134.884059][ T6719] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 134.904596][ T6719] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 135.809346][ T6735] loop2: detected capacity change from 0 to 32768 [ 135.836677][ T6735] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 136.019687][ T6735] XFS (loop2): Ending clean mount [ 136.046905][ T6735] XFS (loop2): Quotacheck needed: Please wait. [ 136.131044][ T6735] XFS (loop2): Quotacheck: Done. [ 136.367294][ T6771] capability: warning: `syz.0.329' uses 32-bit capabilities (legacy support in use) [ 136.408658][ T5774] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 136.423488][ T6771] program syz.0.329 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 136.783842][ T6783] Bluetooth: MGMT ver 1.22 [ 137.093512][ T6793] loop2: detected capacity change from 0 to 128 [ 137.149968][ T6793] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 137.205233][ T6793] hpfs: filesystem error: improperly stopped [ 137.251481][ T6793] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 137.312381][ T6793] hpfs: You really don't want any checks? You are crazy... [ 137.344418][ T6793] hpfs: hpfs_map_sector(): read error [ 137.367901][ T6793] hpfs: code page support is disabled [ 137.391264][ T6793] hpfs: hpfs_map_4sectors(): unaligned read [ 137.420237][ T6793] hpfs: hpfs_map_4sectors(): unaligned read [ 137.447157][ T6793] hpfs: filesystem error: unable to find root dir [ 137.801385][ T6806] CUSE: info not properly terminated [ 138.521811][ T6826] loop3: detected capacity change from 0 to 4096 [ 138.545098][ T6826] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 138.585105][ T6826] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 138.623543][ T6826] ntfs: (device loop3): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 138.635562][ T786] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 138.685153][ T6826] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 138.763363][ T6826] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 138.820514][ T6826] ntfs: volume version 3.1. [ 138.825600][ T6826] ntfs: (device loop3): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 138.825851][ T6826] ntfs: (device loop3): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 138.826536][ T6826] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 138.826569][ T6826] ntfs: (device loop3): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 138.826586][ T6826] ntfs: (device loop3): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 138.827133][ T786] usb 3-1: Using ep0 maxpacket: 32 [ 138.829708][ T786] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 138.829748][ T786] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 138.829791][ T786] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 138.829820][ T786] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 138.829847][ T786] usb 3-1: config 0 interface 0 has no altsetting 0 [ 138.833351][ T786] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 138.833380][ T786] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 138.833404][ T786] usb 3-1: Product: syz [ 138.833420][ T786] usb 3-1: Manufacturer: syz [ 138.833436][ T786] usb 3-1: SerialNumber: syz [ 138.836177][ T786] usb 3-1: config 0 descriptor?? [ 138.839892][ T786] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 138.846860][ T786] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 138.857383][ T5083] Bluetooth: hci2: command 0x0401 tx timeout [ 138.857536][ T5768] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 138.989515][ T6839] 9pnet_fd: Insufficient options for proto=fd [ 139.111867][ T23] usb 3-1: USB disconnect, device number 4 [ 139.111978][ C1] ldusb 3-1:0.0: usb_submit_urb failed (-19) [ 139.115912][ T23] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 139.343278][ T6822] ldusb: No device or device unplugged -19 [ 140.253609][ T6850] loop1: detected capacity change from 0 to 32768 [ 140.344082][ T6850] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 140.580281][ T6850] XFS (loop1): Ending clean mount [ 140.643993][ T6850] XFS (loop1): Metadata CRC error detected at xfs_rmapbt_read_verify+0x42/0xd0, xfs_rmapbt block 0x14 [ 140.684147][ T6850] XFS (loop1): Unmount and run xfs_repair [ 140.700939][ T6850] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 140.725193][ T6850] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff RMB3............ [ 140.747110][ T23] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 140.756703][ T6850] 00000010: 00 00 00 00 00 00 00 14 00 00 00 01 00 00 00 80 ................ [ 140.775614][ T6850] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 140.792592][ T6850] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01 ....[.;......... [ 140.804268][ T6850] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00 ................ [ 140.818471][ T6850] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb ................ [ 140.831318][ T6850] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02 ................ [ 140.841995][ T6850] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00 ................ [ 140.854920][ T6850] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x14 len 4 error 74 [ 140.885745][ T6850] XFS (loop1): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x183c/0x1e00 (fs/xfs/libxfs/xfs_defer.c:598). Shutting down filesystem. [ 140.907112][ T6850] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 140.920528][ T6864] loop2: detected capacity change from 0 to 32768 [ 140.946206][ T5770] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 140.980112][ T23] usb 1-1: config 0 has an invalid interface number: 204 but max is 0 [ 141.007961][ T23] usb 1-1: config 0 has no interface number 0 [ 141.066572][ T23] usb 1-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=29.3d [ 141.080672][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.090900][ T23] usb 1-1: Product: syz [ 141.095330][ T6864] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 141.111053][ T23] usb 1-1: Manufacturer: syz [ 141.123741][ T23] usb 1-1: SerialNumber: syz [ 141.141939][ T23] usb 1-1: config 0 descriptor?? [ 141.165033][ T23] ems_usb 1-1:0.204 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 141.176307][ T23] ems_usb: probe of 1-1:0.204 failed with error -22 [ 141.280538][ T6864] XFS (loop2): Ending clean mount [ 141.390294][ T6864] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 141.578677][ T5815] usb 1-1: USB disconnect, device number 3 [ 142.591480][ T6917] input: syz0 as /devices/virtual/input/input7 [ 143.031736][ T6929] loop1: detected capacity change from 0 to 24 [ 143.058088][ T6929] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 143.109286][ T6929] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 143.976303][ T5768] Bluetooth: hci3: link tx timeout [ 143.983718][ T5768] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 144.242523][ T6946] loop2: detected capacity change from 0 to 512 [ 144.281287][ T6936] loop1: detected capacity change from 0 to 32768 [ 144.321295][ T6946] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.361730][ T6946] ext4 filesystem being mounted at /121/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 144.398868][ T6936] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 144.600287][ T6946] EXT4-fs error (device loop2): ext4_do_update_inode:5248: inode #2: comm syz.2.387: corrupted inode contents [ 144.613342][ T6961] loop3: detected capacity change from 0 to 512 [ 144.669339][ T6961] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.682158][ T6961] ext4 filesystem being mounted at /100/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.744812][ T6936] XFS (loop1): Ending clean mount [ 144.748317][ T6946] EXT4-fs error (device loop2): ext4_dirty_inode:6124: inode #2: comm syz.2.387: mark_inode_dirty error [ 144.795223][ T6936] XFS (loop1): Quotacheck needed: Please wait. [ 144.834194][ T6961] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 144.838126][ T6946] EXT4-fs error (device loop2): ext4_do_update_inode:5248: inode #2: comm syz.2.387: corrupted inode contents [ 144.913821][ T6946] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #2: comm syz.2.387: mark_inode_dirty error [ 144.930778][ T6936] XFS (loop1): Quotacheck: Done. [ 145.031870][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.084787][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.398524][ T5770] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 146.061237][ T5768] Bluetooth: hci3: command 0x0406 tx timeout [ 146.299044][ T6981] process 'syz.1.396' launched '/dev/fd/3' with NULL argv: empty string added [ 146.540740][ T6984] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 146.561427][ T6984] overlayfs: conflicting lowerdir path [ 146.831690][ T6976] loop2: detected capacity change from 0 to 32768 [ 146.877507][ T6997] loop1: detected capacity change from 0 to 256 [ 146.888513][ T6997] exfat: Deprecated parameter 'namecase' [ 146.894546][ T6976] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 147.014980][ T6997] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xee17df4f, utbl_chksum : 0xe619d30d) [ 147.037450][ T6990] loop3: detected capacity change from 0 to 4096 [ 147.220777][ T6976] XFS (loop2): Ending clean mount [ 147.433665][ T6976] XFS (loop2): User initiated shutdown received. [ 147.457357][ T6976] XFS (loop2): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:501). Shutting down filesystem. [ 147.530365][ T6976] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 147.666262][ T5774] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 148.569919][ T7038] loop1: detected capacity change from 0 to 128 [ 148.607926][ T7019] loop3: detected capacity change from 0 to 32768 [ 149.497183][ T786] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 149.643742][ T7058] loop1: detected capacity change from 0 to 512 [ 149.710914][ T786] usb 1-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 149.730409][ T7058] EXT4-fs error (device loop1): ext4_orphan_get:1398: inode #17: comm syz.1.427: iget: bogus i_mode (0) [ 149.751466][ T786] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.783418][ T786] usb 1-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 149.808640][ T7058] EXT4-fs error (device loop1): ext4_orphan_get:1403: comm syz.1.427: couldn't read orphan inode 17 (err -117) [ 149.832835][ T786] usb 1-1: config 0 interface 0 has no altsetting 0 [ 149.840075][ T786] usb 1-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 149.854107][ T786] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.869314][ T7058] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.907312][ T786] usb 1-1: config 0 descriptor?? [ 149.994073][ T7058] EXT4-fs error (device loop1): ext4_validate_block_bitmap:430: comm syz.1.427: bg 0: block 7: invalid block bitmap [ 150.144106][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.374866][ T786] hid-alps 0003:044E:120C.0004: hidraw0: USB HID v0.04 Device [HID 044e:120c] on usb-dummy_hcd.0-1/input0 [ 150.592113][ T786] usb 1-1: USB disconnect, device number 4 [ 150.693945][ T7056] loop3: detected capacity change from 0 to 40427 [ 150.720093][ T7056] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 150.733467][ T7056] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 150.765615][ T7056] F2FS-fs (loop3): Found nat_bits in checkpoint [ 150.915412][ T7056] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 150.934703][ T7056] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 151.898724][ T7085] loop1: detected capacity change from 0 to 40427 [ 151.915434][ T59] Bluetooth: hci4: Frame reassembly failed (-84) [ 151.934454][ T7085] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 151.947631][ T5860] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 151.955566][ T7099] Bluetooth: hci4: Frame reassembly failed (-84) [ 151.972779][ T7085] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 151.995630][ T7085] F2FS-fs (loop1): build fault injection attr: rate: 17008, type: 0x7ffff [ 152.012677][ T7085] F2FS-fs (loop1): invalid crc value [ 152.026360][ T7085] F2FS-fs (loop1): Found nat_bits in checkpoint [ 152.137343][ T5860] usb 3-1: Using ep0 maxpacket: 32 [ 152.148244][ T7085] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 152.156364][ T7085] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 152.167542][ T5860] usb 3-1: unable to get BOS descriptor or descriptor too short [ 152.176917][ T5860] usb 3-1: config 1 interface 0 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 32 [ 152.187520][ T5860] usb 3-1: config 1 interface 0 has no altsetting 0 [ 152.197697][ T5860] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 152.207537][ T5860] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.215750][ T5860] usb 3-1: Product: syz [ 152.224293][ T5860] usb 3-1: Manufacturer: syz [ 152.230500][ T5860] usb 3-1: SerialNumber: syz [ 152.242911][ T7091] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 152.307103][ T7085] syz.1.435: attempt to access beyond end of device [ 152.307103][ T7085] loop1: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 152.323721][ T7085] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 152.335761][ T7085] syz.1.435: attempt to access beyond end of device [ 152.335761][ T7085] loop1: rw=2049, sector=40992, nr_sectors = 8 limit=40427 [ 152.353359][ T7085] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 152.485037][ T5860] cdc_ether: probe of 3-1:1.0 failed with error -71 [ 152.509282][ T5860] usb 3-1: USB disconnect, device number 5 [ 152.975433][ T7114] kvm: apic: phys broadcast and lowest prio [ 153.317530][ T7125] loop2: detected capacity change from 0 to 512 [ 153.332352][ T7125] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x00097272 (sector = 1) [ 153.494431][ T7129] loop2: detected capacity change from 0 to 128 [ 153.556291][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 153.556308][ T27] audit: type=1800 audit(1769825680.787:9): pid=7129 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.455" name="file1" dev="loop2" ino=1048601 res=0 errno=0 [ 153.867393][ T5860] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 153.988547][ T5768] Bluetooth: hci4: command 0x1003 tx timeout [ 153.996859][ T5083] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 154.079057][ T5860] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.097139][ T5860] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 154.106553][ T5860] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.123406][ T5860] usb 4-1: config 0 descriptor?? [ 154.562157][ T5860] keytouch 0003:0926:3333.0005: fixing up Keytouch IEC report descriptor [ 154.607711][ T5860] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0005/input/input8 [ 154.820206][ T5860] keytouch 0003:0926:3333.0005: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 155.214308][ T23] usb 4-1: USB disconnect, device number 4 [ 155.225627][ T7168] loop2: detected capacity change from 0 to 512 [ 155.313454][ T7168] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 155.380759][ T7168] EXT4-fs error (device loop2): ext4_orphan_get:1398: inode #17: comm syz.2.471: inode has both inline data and extents flags [ 155.464900][ T7168] EXT4-fs error (device loop2): ext4_orphan_get:1403: comm syz.2.471: couldn't read orphan inode 17 (err -117) [ 155.518831][ T7168] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.596544][ T7168] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.471: bg 0: block 65: padding at end of block bitmap is not set [ 155.635658][ T7168] Quota error (device loop2): write_blk: dquota write failed [ 155.655921][ T7168] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 155.680725][ T7180] Quota error (device loop2): do_check_range: Getting block 144 out of range 0-5 [ 155.692759][ T7168] EXT4-fs error (device loop2): ext4_acquire_dquot:6949: comm syz.2.471: Failed to acquire dquot type 0 [ 155.787412][ T786] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 155.805127][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.982034][ T786] usb 1-1: Using ep0 maxpacket: 32 [ 156.009375][ T786] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.043793][ T786] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.069487][ T786] usb 1-1: config 0 interface 0 has no altsetting 0 [ 156.085583][ T786] usb 1-1: New USB device found, idVendor=056a, idProduct=00b9, bcdDevice= 0.00 [ 156.100653][ T786] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.130812][ T786] usb 1-1: config 0 descriptor?? [ 156.576560][ T786] wacom 0003:056A:00B9.0006: unknown main item tag 0x0 [ 156.617186][ T786] wacom 0003:056A:00B9.0006: unknown main item tag 0x0 [ 156.637469][ T786] wacom 0003:056A:00B9.0006: unknown main item tag 0x0 [ 156.657125][ T786] wacom 0003:056A:00B9.0006: unknown main item tag 0x0 [ 156.681146][ T786] wacom 0003:056A:00B9.0006: unknown main item tag 0x0 [ 156.697208][ T786] wacom 0003:056A:00B9.0006: Unknown device_type for 'HID 056a:00b9'. Assuming pen. [ 156.722363][ T7184] loop2: detected capacity change from 0 to 32768 [ 156.757611][ T786] wacom 0003:056A:00B9.0006: hidraw0: USB HID v0.00 Device [HID 056a:00b9] on usb-dummy_hcd.0-1/input0 [ 156.783101][ T786] input: Wacom Intuos4 6x9 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:00B9.0006/input/input9 [ 156.843896][ T7184] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 156.899386][ T786] usb 1-1: USB disconnect, device number 5 [ 157.056214][ T7198] fido_id[7198]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 157.205300][ T7184] XFS (loop2): Ending clean mount [ 157.233521][ T7184] XFS (loop2): Quotacheck needed: Please wait. [ 157.332636][ T7184] XFS (loop2): Quotacheck: Done. [ 157.511886][ T5774] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 157.677139][ T3062] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 157.799560][ T7225] team0: entered allmulticast mode [ 157.817153][ T7225] team_slave_0: entered allmulticast mode [ 157.827468][ T7225] team_slave_1: entered allmulticast mode [ 157.931108][ T3062] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 157.967130][ T3062] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 158.011386][ T3062] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 158.034342][ T3062] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 158.043482][ T3062] usb 4-1: SerialNumber: syz [ 158.295946][ T3062] usb 4-1: 0:2 : does not exist [ 158.398468][ T3062] usb 4-1: USB disconnect, device number 5 [ 158.485701][ T7237] overlayfs: workdir and upperdir must reside under the same mount [ 159.226696][ T7239] loop2: detected capacity change from 0 to 32768 [ 159.270035][ T7255] netlink: 80 bytes leftover after parsing attributes in process `syz.1.505'. [ 159.334022][ T27] audit: type=1800 audit(1769825686.567:10): pid=7239 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.497" name="file1" dev="loop2" ino=4 res=0 errno=0 [ 159.407183][ T23] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 159.612885][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.636660][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.657852][ T23] usb 4-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 159.678411][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.693562][ T23] usb 4-1: config 0 descriptor?? [ 159.888490][ T7267] netlink: 4 bytes leftover after parsing attributes in process `syz.1.510'. [ 159.996818][ T7267] netlink: 4 bytes leftover after parsing attributes in process `syz.1.510'. [ 160.156077][ T23] hid-led 0003:0FC5:B080.0007: unknown main item tag 0x0 [ 160.172710][ T23] hid-led 0003:0FC5:B080.0007: unknown main item tag 0x0 [ 160.188102][ T23] hid-led 0003:0FC5:B080.0007: unknown main item tag 0x0 [ 160.204088][ T7267] netlink: 4 bytes leftover after parsing attributes in process `syz.1.510'. [ 160.549723][ T23] hid-led: probe of 0003:0FC5:B080.0007 failed with error -71 [ 160.578032][ T23] usb 4-1: USB disconnect, device number 6 [ 160.734219][ T3062] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 160.939744][ T3062] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.961113][ T3062] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 160.971807][ T3062] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.992389][ T3062] usb 3-1: config 0 descriptor?? [ 160.992504][ T7296] loop1: detected capacity change from 0 to 512 [ 161.007323][ T786] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 161.017894][ T7296] EXT4-fs: inline encryption not supported [ 161.051144][ T7296] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 161.059801][ T7296] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e018, mo2=0002] [ 161.068628][ T7296] EXT4-fs (loop1): orphan cleanup on readonly fs [ 161.075279][ T7296] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 161.085021][ T7296] EXT4-fs warning (device loop1): ext4_enable_quotas:7184: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 161.099941][ T7296] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 161.118042][ T7296] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.520: bg 0: block 40: padding at end of block bitmap is not set [ 161.207137][ T786] usb 1-1: Using ep0 maxpacket: 32 [ 161.217238][ T7296] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6653: Corrupt filesystem [ 161.229624][ T786] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 161.249626][ T7296] EXT4-fs (loop1): 1 truncate cleaned up [ 161.256216][ T786] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.278865][ T7296] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 161.305162][ T786] usb 1-1: config 0 descriptor?? [ 161.414316][ T7296] EXT4-fs error (device loop1): ext4_encrypted_get_link:46: inode #16: comm syz.1.520: bad symlink. [ 161.510471][ T3062] keytouch 0003:0926:3333.0008: fixing up Keytouch IEC report descriptor [ 161.550529][ T3062] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0008/input/input12 [ 161.579253][ T786] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 161.632187][ T786] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 161.650989][ T786] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 161.678451][ T786] usb 1-1: media controller created [ 161.734427][ T3062] keytouch 0003:0926:3333.0008: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 161.788909][ T7289] az6027: more than 2 i2c messages at a time is not handled yet. TODO. [ 161.808264][ T786] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 161.930627][ T786] az6027: usb out operation failed. (-71) [ 161.969117][ T786] az6027: usb out operation failed. (-71) [ 161.977111][ T786] stb0899_attach: Driver disabled by Kconfig [ 161.983722][ T786] az6027: no front-end attached [ 161.983722][ T786] [ 162.033817][ T9] usb 3-1: USB disconnect, device number 6 [ 162.051430][ T786] az6027: usb out operation failed. (-71) [ 162.076200][ T786] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 162.121548][ T786] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input13 [ 162.185133][ T786] dvb-usb: schedule remote query interval to 400 msecs. [ 162.209255][ T786] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 162.235260][ T786] usb 1-1: USB disconnect, device number 6 [ 162.286435][ T6977] udevd[6977]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 162.397447][ T786] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 162.733221][ T7308] loop2: detected capacity change from 0 to 256 [ 162.748621][ T7308] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 162.803600][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.873129][ T7308] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 162.943986][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.144301][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.260736][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.433808][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.233526][ T5768] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 164.246607][ T5768] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 164.257520][ T5768] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 164.265110][ T7340] loop2: detected capacity change from 0 to 256 [ 164.271864][ T3062] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 164.282789][ T5768] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 164.297604][ T5768] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 164.310940][ T5768] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 164.376395][ T7340] exFAT-fs (loop2): failed to load upcase table (idx : 0x00002e7f, chksum : 0x03279930, utbl_chksum : 0xe619d30d) [ 164.469628][ T3062] usb 1-1: Using ep0 maxpacket: 16 [ 164.477625][ T3062] usb 1-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 164.493620][ T3062] usb 1-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 164.514011][ T3062] usb 1-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 164.564032][ T3062] usb 1-1: config 1 interface 0 has no altsetting 0 [ 164.586638][ T3062] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 164.598826][ T3062] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.634749][ T3062] usb 1-1: Product: syz [ 164.652962][ T3062] usb 1-1: Manufacturer: syz [ 164.667102][ T3062] usb 1-1: SerialNumber: syz [ 164.680955][ T27] audit: type=1800 audit(1769825691.917:11): pid=7340 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.538" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=1048603 res=0 errno=0 [ 164.780773][ T7348] loop3: detected capacity change from 0 to 256 [ 164.791991][ T7348] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 164.803349][ T7348] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 164.850616][ T7348] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 164.984149][ T3062] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 165.216363][ T3062] usb 1-1: USB disconnect, device number 7 [ 165.245707][ T3062] usblp0: removed [ 165.559488][ T7334] chnl_net:caif_netlink_parms(): no params data found [ 166.054597][ T7334] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.077680][ T7334] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.094231][ T7334] bridge_slave_0: entered allmulticast mode [ 166.109977][ T7334] bridge_slave_0: entered promiscuous mode [ 166.143883][ T7334] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.178599][ T7334] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.205253][ T7334] bridge_slave_1: entered allmulticast mode [ 166.217604][ T7334] bridge_slave_1: entered promiscuous mode [ 166.377187][ T5768] Bluetooth: hci1: command tx timeout [ 166.401623][ T7334] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 166.581514][ T11] hsr_slave_0: left promiscuous mode [ 166.604195][ T11] hsr_slave_1: left promiscuous mode [ 166.623454][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 166.653059][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 166.713181][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 166.736257][ T7375] loop3: detected capacity change from 0 to 32768 [ 166.763208][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 166.778642][ T7375] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz.3.547 (7375) [ 166.819028][ T7395] loop2: detected capacity change from 0 to 16 [ 166.889449][ T11] bridge_slave_1: left allmulticast mode [ 166.895172][ T11] bridge_slave_1: left promiscuous mode [ 166.910011][ T7395] erofs: (device loop2): mounted with root inode @ nid 36. [ 166.962499][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.090890][ T11] bridge_slave_0: left promiscuous mode [ 167.096835][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.308177][ T7375] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 167.350246][ T7375] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 167.369383][ T7375] BTRFS info (device loop3): using free space tree [ 167.390941][ T11] veth1_macvtap: left promiscuous mode [ 167.418346][ T11] veth0_macvtap: left promiscuous mode [ 167.429312][ T11] veth1_vlan: left promiscuous mode [ 167.448595][ T11] veth0_vlan: left promiscuous mode [ 167.567912][ T7375] BTRFS info (device loop3): enabling ssd optimizations [ 167.594665][ T7375] BTRFS info (device loop3): auto enabling async discard [ 168.151300][ T5773] BTRFS info (device loop3): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 168.460325][ T5768] Bluetooth: hci1: command tx timeout [ 169.347714][ T11] team0 (unregistering): Port device team_slave_1 removed [ 169.413970][ T11] team0 (unregistering): Port device team_slave_0 removed [ 169.473134][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 169.541197][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 170.029758][ T11] bond0 (unregistering): Released all slaves [ 170.148470][ T7334] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.259578][ T7334] team0: Port device team_slave_0 added [ 170.351152][ T7334] team0: Port device team_slave_1 added [ 170.375392][ T7443] netlink: 8 bytes leftover after parsing attributes in process `syz.0.571'. [ 170.483218][ T7334] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.496510][ T7334] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.534345][ T7334] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.554985][ T5768] Bluetooth: hci1: command tx timeout [ 170.594581][ T7334] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.607979][ T7334] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.642187][ T7334] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.662568][ T7450] loop2: detected capacity change from 0 to 2048 [ 170.697468][ T28] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 170.755215][ T7453] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 170.874307][ T7334] hsr_slave_0: entered promiscuous mode [ 170.908686][ T28] usb 4-1: Using ep0 maxpacket: 32 [ 170.922437][ T28] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.936768][ T7334] hsr_slave_1: entered promiscuous mode [ 170.964814][ T28] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.997485][ T28] usb 4-1: config 0 interface 0 has no altsetting 0 [ 171.027404][ T28] usb 4-1: New USB device found, idVendor=056a, idProduct=00b9, bcdDevice= 0.00 [ 171.036550][ T28] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.101633][ T28] usb 4-1: config 0 descriptor?? [ 171.180784][ T7453] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 171.202879][ T7453] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4) [ 171.231932][ T7453] Remounting filesystem read-only [ 171.241794][ T3507] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 171.255136][ T3507] NILFS (loop2): discard dirty block: blocknr=39, size=1024 [ 171.267137][ T3507] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 171.282519][ T3507] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 171.292390][ T3507] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 171.309376][ T3507] NILFS (loop2): discard dirty page: offset=0, ino=2 [ 171.331864][ T3507] NILFS (loop2): discard dirty block: blocknr=18, size=1024 [ 171.344021][ T3507] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 171.362787][ T3507] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 171.373454][ T3507] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 171.405466][ T5774] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer [ 171.437851][ T5774] NILFS (loop2): discard dirty page: offset=0, ino=6 [ 171.450967][ T5774] NILFS (loop2): discard dirty block: blocknr=35, size=1024 [ 171.477985][ T5774] NILFS (loop2): discard dirty block: blocknr=36, size=1024 [ 171.486243][ T5774] NILFS (loop2): discard dirty block: blocknr=37, size=1024 [ 171.501303][ T5774] NILFS (loop2): discard dirty block: blocknr=38, size=1024 [ 171.513094][ T5774] NILFS (loop2): discard dirty page: offset=0, ino=5 [ 171.526186][ T5774] NILFS (loop2): discard dirty block: blocknr=41, size=1024 [ 171.533780][ T5774] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 171.544082][ T5774] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 171.567106][ T5774] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 171.605392][ T5774] NILFS (loop2): discard dirty page: offset=0, ino=4 [ 171.625321][ T28] wacom 0003:056A:00B9.0009: unknown main item tag 0x0 [ 171.637580][ T5774] NILFS (loop2): discard dirty block: blocknr=40, size=1024 [ 171.646841][ T5774] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 171.655836][ T28] wacom 0003:056A:00B9.0009: unknown main item tag 0x0 [ 171.655901][ T28] wacom 0003:056A:00B9.0009: unknown main item tag 0x0 [ 171.655927][ T28] wacom 0003:056A:00B9.0009: unknown main item tag 0x0 [ 171.705236][ T5774] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 171.708211][ T28] wacom 0003:056A:00B9.0009: unknown main item tag 0x0 [ 171.726888][ T28] wacom 0003:056A:00B9.0009: Unknown device_type for 'HID 056a:00b9'. Assuming pen. [ 171.741484][ T28] wacom 0003:056A:00B9.0009: hidraw0: USB HID v0.00 Device [HID 056a:00b9] on usb-dummy_hcd.3-1/input0 [ 171.763616][ T5774] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 171.774289][ T28] input: Wacom Intuos4 6x9 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:00B9.0009/input/input15 [ 171.819365][ T5774] NILFS (loop2): discard dirty page: offset=0, ino=3 [ 171.846678][ T5774] NILFS (loop2): discard dirty block: blocknr=42, size=1024 [ 171.887559][ T5774] NILFS (loop2): discard dirty block: blocknr=43, size=1024 [ 171.894947][ T5774] NILFS (loop2): discard dirty block: blocknr=44, size=1024 [ 171.933599][ T5774] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 171.947522][ T28] usb 4-1: USB disconnect, device number 7 [ 171.957054][ T5774] NILFS (loop2): discard dirty page: offset=196608, ino=3 [ 171.974631][ T5774] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 171.995106][ T5774] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 172.012668][ T5774] NILFS (loop2): discard dirty block: blocknr=49, size=1024 [ 172.023237][ T5774] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 172.056239][ T7468] fido_id[7468]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 172.134340][ T6249] udevd[6249]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 172.239149][ T7334] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 172.270247][ T7334] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 172.316007][ T7334] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 172.334288][ T7334] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 172.573739][ T7334] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.607580][ T7482] netlink: 'syz.0.572': attribute type 4 has an invalid length. [ 172.617667][ T5768] Bluetooth: hci1: command tx timeout [ 172.648015][ T7482] netlink: 20 bytes leftover after parsing attributes in process `syz.0.572'. [ 172.671725][ T7334] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.734524][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.741794][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.775514][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.783615][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.469140][ T7513] loop2: detected capacity change from 0 to 16 [ 173.531726][ T7513] erofs: (device loop2): mounted with root inode @ nid 36. [ 173.616618][ T7513] syz.2.583: attempt to access beyond end of device [ 173.616618][ T7513] loop2: rw=524288, sector=16, nr_sectors = 32 limit=16 [ 173.643624][ T7334] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.653312][ T7513] syz.2.583: attempt to access beyond end of device [ 173.653312][ T7513] loop2: rw=524288, sector=8, nr_sectors = 32 limit=16 [ 173.715073][ T7522] syz.2.583: attempt to access beyond end of device [ 173.715073][ T7522] loop2: rw=0, sector=8, nr_sectors = 32 limit=16 [ 173.865974][ T5774] BUG: Bad page state in process syz-executor pfn:243b1 [ 173.873841][ T5774] page:ffffea000090ec40 refcount:0 mapcount:0 mapping:ffff8880618c9278 index:0x2 pfn:0x243b1 [ 173.884320][ T5774] aops:z_erofs_cache_aops ino:0 [ 173.889349][ T5774] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff) [ 173.897444][ T5774] page_type: 0xffffffff() [ 173.901843][ T5774] raw: 00fff00000000001 dead000000000100 dead000000000122 ffff8880618c9278 [ 173.910688][ T5774] raw: 0000000000000002 0000000000000000 00000000ffffffff 0000000000000000 [ 173.919386][ T5774] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 173.926748][ T5774] page_owner tracks the page as allocated [ 173.933684][ T5774] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x192840(GFP_NOWAIT|__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 7513, tgid 7512 (syz.2.583), ts 173606256188, free_ts 154697685337 [ 173.955846][ T5774] post_alloc_hook+0x1c1/0x200 [ 173.960821][ T5774] get_page_from_freelist+0x1951/0x19e0 [ 173.966417][ T5774] __alloc_pages+0x1f0/0x460 [ 173.971270][ T5774] z_erofs_do_read_page+0x2181/0x36b0 [ 173.976703][ T5774] z_erofs_readahead+0x88b/0xda0 [ 173.982089][ T5774] read_pages+0x189/0x850 [ 173.986484][ T5774] page_cache_ra_unbounded+0x68a/0x770 [ 173.992298][ T5774] force_page_cache_ra+0x2c1/0x320 [ 173.997529][ T5774] generic_fadvise+0x47e/0x780 [ 174.002351][ T5774] __x64_sys_fadvise64+0x140/0x180 [ 174.007568][ T5774] do_syscall_64+0x55/0xa0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 174.012117][ T5774] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 174.018270][ T5774] page last free stack trace: [ 174.022992][ T5774] free_unref_page_prepare+0x7b2/0x8c0 [ 174.028602][ T5774] free_unref_page+0x32/0x2e0 [ 174.033789][ T5774] __unfreeze_partials+0x1cf/0x210 [ 174.039207][ T5774] put_cpu_partial+0x17c/0x250 [ 174.044153][ T5774] __slab_free+0x319/0x400 [ 174.048938][ T5774] qlist_free_all+0x75/0xd0 [ 174.053639][ T5774] kasan_quarantine_reduce+0x143/0x160 [ 174.059238][ T5774] __kasan_slab_alloc+0x22/0x80 [ 174.064154][ T5774] slab_post_alloc_hook+0x6e/0x4b0 [ 174.069701][ T5774] __kmem_cache_alloc_node+0x13a/0x250 [ 174.075232][ T5774] __kmalloc+0xa4/0x230 [ 174.079493][ T5774] tomoyo_realpath_from_path+0xe3/0x5d0 [ 174.085171][ T5774] tomoyo_path_perm+0x282/0x560 [ 174.090142][ T5774] security_inode_getattr+0xd3/0x120 [ 174.095485][ T5774] __x64_sys_newfstat+0x12c/0x250 [ 174.100698][ T5774] do_syscall_64+0x55/0xa0 [ 174.105357][ T5774] Modules linked in: [ 174.109385][ T5774] CPU: 1 PID: 5774 Comm: syz-executor Not tainted syzkaller #0 [ 174.116981][ T5774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 174.127258][ T5774] Call Trace: [ 174.130569][ T5774] [ 174.133523][ T5774] dump_stack_lvl+0x18c/0x250 [ 174.138388][ T5774] ? show_regs_print_info+0x20/0x20 [ 174.143777][ T5774] ? swiotlb_print_info+0x70/0x70 [ 174.148845][ T5774] bad_page+0x14b/0x170 [ 174.153035][ T5774] free_unref_page_prepare+0x85f/0x8c0 [ 174.158532][ T5774] free_unref_page+0x32/0x2e0 [ 174.163245][ T5774] ? __folio_put+0xef/0x210 [ 174.167904][ T5774] erofs_try_to_free_all_cached_pages+0x295/0x5f0 [ 174.174370][ T5774] erofs_shrink_workstation+0x11f/0x290 [ 174.179963][ T5774] ? erofs_shrinker_unregister+0x170/0x170 [ 174.185797][ T5774] ? io_schedule+0xd0/0xd0 [ 174.190250][ T5774] ? kobject_put+0x428/0x460 [ 174.194877][ T5774] erofs_shrinker_unregister+0x5d/0x170 [ 174.200454][ T5774] erofs_put_super+0x4e/0x150 [ 174.205168][ T5774] ? erofs_free_inode+0xb0/0xb0 [ 174.210064][ T5774] generic_shutdown_super+0x134/0x2b0 [ 174.215468][ T5774] kill_block_super+0x44/0x90 [ 174.220178][ T5774] erofs_kill_sb+0x4c/0x140 [ 174.224814][ T5774] deactivate_locked_super+0x97/0x100 [ 174.230221][ T5774] cleanup_mnt+0x43b/0x4d0 [ 174.234757][ T5774] task_work_run+0x1d4/0x260 [ 174.239417][ T5774] ? task_work_cancel+0x220/0x220 [ 174.244552][ T5774] ? exit_to_user_mode_loop+0x3b/0x110 [ 174.250162][ T5774] exit_to_user_mode_loop+0xe6/0x110 [ 174.255525][ T5774] exit_to_user_mode_prepare+0xee/0x180 [ 174.261118][ T5774] syscall_exit_to_user_mode+0x1a/0x50 [ 174.266634][ T5774] do_syscall_64+0x61/0xa0 [ 174.271095][ T5774] ? clear_bhb_loop+0x40/0x90 [ 174.275801][ T5774] ? clear_bhb_loop+0x40/0x90 [ 174.280509][ T5774] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 174.286433][ T5774] RIP: 0033:0x7fc0af39c117 [ 174.290896][ T5774] Code: a2 c7 05 7c 94 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 174.310974][ T5774] RSP: 002b:00007ffef6d51d88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 174.319509][ T5774] RAX: 0000000000000000 RBX: 00007fc0af40471f RCX: 00007fc0af39c117 [ 174.327509][ T5774] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffef6d51e40 [ 174.335515][ T5774] RBP: 00007ffef6d51e40 R08: 00007ffef6d52e40 R09: 00000000ffffffff [ 174.343518][ T5774] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffef6d52ed0 [ 174.351709][ T5774] R13: 00007fc0af40471f R14: 000000000002a6a5 R15: 00007ffef6d52f10 [ 174.359736][ T5774] [ 174.363834][ T5774] Disabling lock debugging due to kernel taint [ 174.370154][ T5774] BUG: Bad page state in process syz-executor pfn:243b2 [ 174.377315][ T5774] page:ffffea000090ec80 refcount:0 mapcount:0 mapping:ffff8880618c9278 index:0x3 pfn:0x243b2 [ 174.387584][ T5774] aops:z_erofs_cache_aops ino:0 [ 174.392500][ T5774] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff) [ 174.400298][ T5774] page_type: 0xffffffff() [ 174.404670][ T5774] raw: 00fff00000000001 dead000000000100 dead000000000122 ffff8880618c9278 [ 174.413437][ T5774] raw: 0000000000000003 0000000000000000 00000000ffffffff 0000000000000000 [ 174.422208][ T5774] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 174.429563][ T5774] page_owner tracks the page as allocated [ 174.435409][ T5774] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x192840(GFP_NOWAIT|__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 7513, tgid 7512 (syz.2.583), ts 173606274432, free_ts 154697685337 [ 174.458114][ T5774] post_alloc_hook+0x1c1/0x200 [ 174.462935][ T5774] get_page_from_freelist+0x1951/0x19e0 [ 174.468787][ T5774] __alloc_pages+0x1f0/0x460 [ 174.473433][ T5774] z_erofs_do_read_page+0x2181/0x36b0 [ 174.478912][ T5774] z_erofs_readahead+0x88b/0xda0 [ 174.483900][ T5774] read_pages+0x189/0x850 [ 174.488334][ T5774] page_cache_ra_unbounded+0x68a/0x770 [ 174.493835][ T5774] force_page_cache_ra+0x2c1/0x320 [ 174.499037][ T5774] generic_fadvise+0x47e/0x780 [ 174.504964][ T5774] __x64_sys_fadvise64+0x140/0x180 [ 174.510180][ T5774] do_syscall_64+0x55/0xa0 [ 174.514643][ T5774] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 174.520627][ T5774] page last free stack trace: [ 174.525342][ T5774] free_unref_page_prepare+0x7b2/0x8c0 [ 174.530993][ T5774] free_unref_page+0x32/0x2e0 [ 174.535744][ T5774] __unfreeze_partials+0x1cf/0x210 [ 174.541021][ T5774] put_cpu_partial+0x17c/0x250 [ 174.546212][ T5774] __slab_free+0x319/0x400 [ 174.550985][ T5774] qlist_free_all+0x75/0xd0 [ 174.555540][ T5774] kasan_quarantine_reduce+0x143/0x160 [ 174.561204][ T5774] __kasan_slab_alloc+0x22/0x80 [ 174.566189][ T5774] slab_post_alloc_hook+0x6e/0x4b0 [ 174.571407][ T5774] __kmem_cache_alloc_node+0x13a/0x250 [ 174.576916][ T5774] __kmalloc+0xa4/0x230 [ 174.581167][ T5774] tomoyo_realpath_from_path+0xe3/0x5d0 [ 174.586753][ T5774] tomoyo_path_perm+0x282/0x560 [ 174.591691][ T5774] security_inode_getattr+0xd3/0x120 [ 174.597043][ T5774] __x64_sys_newfstat+0x12c/0x250 [ 174.602113][ T5774] do_syscall_64+0x55/0xa0 [ 174.606588][ T5774] Modules linked in: [ 174.610557][ T5774] CPU: 1 PID: 5774 Comm: syz-executor Tainted: G B syzkaller #0 [ 174.619619][ T5774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 174.629719][ T5774] Call Trace: [ 174.633034][ T5774] [ 174.636032][ T5774] dump_stack_lvl+0x18c/0x250 [ 174.640769][ T5774] ? show_regs_print_info+0x20/0x20 [ 174.646031][ T5774] ? swiotlb_print_info+0x70/0x70 [ 174.651115][ T5774] bad_page+0x14b/0x170 [ 174.655775][ T5774] free_unref_page_prepare+0x85f/0x8c0 [ 174.661290][ T5774] free_unref_page+0x32/0x2e0 [ 174.666025][ T5774] ? __folio_put+0xef/0x210 [ 174.670573][ T5774] erofs_try_to_free_all_cached_pages+0x295/0x5f0 [ 174.677125][ T5774] erofs_shrink_workstation+0x11f/0x290 [ 174.682742][ T5774] ? erofs_shrinker_unregister+0x170/0x170 [ 174.688592][ T5774] ? io_schedule+0xd0/0xd0 [ 174.693229][ T5774] ? kobject_put+0x428/0x460 [ 174.697887][ T5774] erofs_shrinker_unregister+0x5d/0x170 [ 174.703488][ T5774] erofs_put_super+0x4e/0x150 [ 174.708271][ T5774] ? erofs_free_inode+0xb0/0xb0 [ 174.713177][ T5774] generic_shutdown_super+0x134/0x2b0 [ 174.718688][ T5774] kill_block_super+0x44/0x90 [ 174.723493][ T5774] erofs_kill_sb+0x4c/0x140 [ 174.728057][ T5774] deactivate_locked_super+0x97/0x100 [ 174.733561][ T5774] cleanup_mnt+0x43b/0x4d0 [ 174.738087][ T5774] task_work_run+0x1d4/0x260 [ 174.742824][ T5774] ? task_work_cancel+0x220/0x220 [ 174.747897][ T5774] ? exit_to_user_mode_loop+0x3b/0x110 [ 174.753459][ T5774] exit_to_user_mode_loop+0xe6/0x110 [ 174.758796][ T5774] exit_to_user_mode_prepare+0xee/0x180 [ 174.764395][ T5774] syscall_exit_to_user_mode+0x1a/0x50 [ 174.769907][ T5774] do_syscall_64+0x61/0xa0 [ 174.774369][ T5774] ? clear_bhb_loop+0x40/0x90 [ 174.779118][ T5774] ? clear_bhb_loop+0x40/0x90 [ 174.783844][ T5774] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 174.789772][ T5774] RIP: 0033:0x7fc0af39c117 [ 174.794226][ T5774] Code: a2 c7 05 7c 94 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 174.814082][ T5774] RSP: 002b:00007ffef6d51d88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 174.822772][ T5774] RAX: 0000000000000000 RBX: 00007fc0af40471f RCX: 00007fc0af39c117 [ 174.830878][ T5774] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffef6d51e40 [ 174.838892][ T5774] RBP: 00007ffef6d51e40 R08: 00007ffef6d52e40 R09: 00000000ffffffff [ 174.846913][ T5774] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffef6d52ed0 [ 174.855572][ T5774] R13: 00007fc0af40471f R14: 000000000002a6a5 R15: 00007ffef6d52f10 [ 174.863603][ T5774] [ 174.867548][ T5774] BUG: Bad page state in process syz-executor pfn:243b3 [ 174.874636][ T5774] page:ffffea000090ecc0 refcount:0 mapcount:0 mapping:ffff8880618c9278 index:0x4 pfn:0x243b3 [ 174.885050][ T5774] aops:z_erofs_cache_aops ino:0 [ 174.890091][ T5774] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff) [ 174.897900][ T5774] page_type: 0xffffffff() [ 174.902277][ T5774] raw: 00fff00000000001 dead000000000100 dead000000000122 ffff8880618c9278 [ 174.911177][ T5774] raw: 0000000000000004 0000000000000000 00000000ffffffff 0000000000000000 [ 174.919842][ T5774] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 174.927232][ T5774] page_owner tracks the page as allocated [ 174.932984][ T5774] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x192840(GFP_NOWAIT|__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 7513, tgid 7512 (syz.2.583), ts 173606292441, free_ts 154697685337 [ 174.955508][ T5774] post_alloc_hook+0x1c1/0x200 [ 174.960443][ T5774] get_page_from_freelist+0x1951/0x19e0 [ 174.966045][ T5774] __alloc_pages+0x1f0/0x460 [ 174.970734][ T5774] z_erofs_do_read_page+0x2181/0x36b0 [ 174.976247][ T5774] z_erofs_readahead+0x88b/0xda0 [ 174.981391][ T5774] read_pages+0x189/0x850 [ 174.985763][ T5774] page_cache_ra_unbounded+0x68a/0x770 [ 174.991316][ T5774] force_page_cache_ra+0x2c1/0x320 [ 174.996469][ T5774] generic_fadvise+0x47e/0x780 [ 175.001323][ T5774] __x64_sys_fadvise64+0x140/0x180 [ 175.006744][ T5774] do_syscall_64+0x55/0xa0 [ 175.011270][ T5774] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 175.017245][ T5774] page last free stack trace: [ 175.021956][ T5774] free_unref_page_prepare+0x7b2/0x8c0 [ 175.027610][ T5774] free_unref_page+0x32/0x2e0 [ 175.032512][ T5774] __unfreeze_partials+0x1cf/0x210 [ 175.037758][ T5774] put_cpu_partial+0x17c/0x250 [ 175.042565][ T5774] __slab_free+0x319/0x400 [ 175.047086][ T5774] qlist_free_all+0x75/0xd0 [ 175.051657][ T5774] kasan_quarantine_reduce+0x143/0x160 [ 175.057566][ T5774] __kasan_slab_alloc+0x22/0x80 [ 175.062470][ T5774] slab_post_alloc_hook+0x6e/0x4b0 [ 175.067723][ T5774] __kmem_cache_alloc_node+0x13a/0x250 [ 175.073234][ T5774] __kmalloc+0xa4/0x230 [ 175.077482][ T5774] tomoyo_realpath_from_path+0xe3/0x5d0 [ 175.083179][ T5774] tomoyo_path_perm+0x282/0x560 [ 175.088170][ T5774] security_inode_getattr+0xd3/0x120 [ 175.094421][ T5774] __x64_sys_newfstat+0x12c/0x250 [ 175.099575][ T5774] do_syscall_64+0x55/0xa0 [ 175.104056][ T5774] Modules linked in: [ 175.108038][ T5774] CPU: 1 PID: 5774 Comm: syz-executor Tainted: G B syzkaller #0 [ 175.117135][ T5774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 175.127310][ T5774] Call Trace: [ 175.130622][ T5774] [ 175.133596][ T5774] dump_stack_lvl+0x18c/0x250 [ 175.138327][ T5774] ? show_regs_print_info+0x20/0x20 [ 175.143575][ T5774] ? swiotlb_print_info+0x70/0x70 [ 175.148689][ T5774] bad_page+0x14b/0x170 [ 175.152901][ T5774] free_unref_page_prepare+0x85f/0x8c0 [ 175.158398][ T5774] free_unref_page+0x32/0x2e0 [ 175.163134][ T5774] ? __folio_put+0xef/0x210 [ 175.167664][ T5774] erofs_try_to_free_all_cached_pages+0x295/0x5f0 [ 175.174128][ T5774] erofs_shrink_workstation+0x11f/0x290 [ 175.179714][ T5774] ? erofs_shrinker_unregister+0x170/0x170 [ 175.185919][ T5774] ? io_schedule+0xd0/0xd0 [ 175.190456][ T5774] ? kobject_put+0x428/0x460 [ 175.195075][ T5774] erofs_shrinker_unregister+0x5d/0x170 [ 175.200667][ T5774] erofs_put_super+0x4e/0x150 [ 175.205406][ T5774] ? erofs_free_inode+0xb0/0xb0 [ 175.210395][ T5774] generic_shutdown_super+0x134/0x2b0 [ 175.215981][ T5774] kill_block_super+0x44/0x90 [ 175.220777][ T5774] erofs_kill_sb+0x4c/0x140 [ 175.225330][ T5774] deactivate_locked_super+0x97/0x100 [ 175.230766][ T5774] cleanup_mnt+0x43b/0x4d0 [ 175.235237][ T5774] task_work_run+0x1d4/0x260 [ 175.239956][ T5774] ? task_work_cancel+0x220/0x220 [ 175.245027][ T5774] ? exit_to_user_mode_loop+0x3b/0x110 [ 175.250613][ T5774] exit_to_user_mode_loop+0xe6/0x110 [ 175.255932][ T5774] exit_to_user_mode_prepare+0xee/0x180 [ 175.261608][ T5774] syscall_exit_to_user_mode+0x1a/0x50 [ 175.267116][ T5774] do_syscall_64+0x61/0xa0 [ 175.271598][ T5774] ? clear_bhb_loop+0x40/0x90 [ 175.276397][ T5774] ? clear_bhb_loop+0x40/0x90 [ 175.281106][ T5774] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 175.287066][ T5774] RIP: 0033:0x7fc0af39c117 [ 175.291523][ T5774] Code: a2 c7 05 7c 94 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 175.311264][ T5774] RSP: 002b:00007ffef6d51d88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 175.319723][ T5774] RAX: 0000000000000000 RBX: 00007fc0af40471f RCX: 00007fc0af39c117 [ 175.327813][ T5774] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffef6d51e40 [ 175.335811][ T5774] RBP: 00007ffef6d51e40 R08: 00007ffef6d52e40 R09: 00000000ffffffff [ 175.343813][ T5774] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffef6d52ed0 [ 175.351847][ T5774] R13: 00007fc0af40471f R14: 000000000002a6a5 R15: 00007ffef6d52f10 [ 175.359866][ T5774]