last executing test programs: 2.167232622s ago: executing program 3 (id=701): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="49530000000000000000670000000c0099000b00000026000000040042"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x20000040) 2.088182014s ago: executing program 1 (id=702): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, 0x0) 1.993265807s ago: executing program 4 (id=704): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0xd, &(0x7f00000010c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x13}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x7f, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x28) 1.984260427s ago: executing program 3 (id=705): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001a40)={0x20, r1, 0x1, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008804}, 0x8080) 1.872883651s ago: executing program 3 (id=707): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000280)={0xf, 0x8, 0xfa00, {r1, 0x4}}, 0x10) 1.848219262s ago: executing program 4 (id=708): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000600000914000200000000000000000000000000000000010f0007"], 0x48}, 0x2, 0x34005}, 0x0) 1.847661342s ago: executing program 1 (id=709): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x80d03, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x15) 1.741772885s ago: executing program 3 (id=710): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r0, 0x400448e6, 0x0) 1.700299816s ago: executing program 4 (id=712): r0 = semget$private(0x0, 0x20000000102, 0x0) semop(r0, &(0x7f0000000240)=[{0x3, 0x0, 0x1800}, {0x1, 0x8, 0x1800}, {0x1, 0xe65b}], 0x3) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000680)=[0x7, 0x7f, 0x1, 0x9d]) 1.645705958s ago: executing program 1 (id=713): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000200)='./file0\x00', 0x800090, &(0x7f0000000240)=ANY=[], 0x0, 0x635, &(0x7f0000000c80)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180200000000b000000095000000000000000000000000000064c933dfc65238b490267efd3de0d63d0cc364cacd5c93720fd4c8355c71a4437f0a93a0728b06f09e4f3bafcd5e81e2d1d2"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="6f73782e5d01dd9642eaef61f3703acf88e437249fc17da4d283a33be1a64913bc2bc64d9a46967a7af5188bbcd1078d0e40573f644be985e8ff09aee27fd3a8e744a77dc25257c0dfdc91e4e0e1ca639faf947a12bbae8b4edf30213f081a54754c78ea5ac9c4b8f49c01aac12ee8d4232e"], 0x0, 0x0, 0x0) 1.608448269s ago: executing program 3 (id=714): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x6) write$char_usb(r0, &(0x7f0000000000)="58cac2", 0x3) 1.516993122s ago: executing program 4 (id=716): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001d00)={&(0x7f00000017c0)={0x2, 0x0, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@rdma_args={0x48, 0x114, 0x1, {{0x0, 0x2}, {&(0x7f00000001c0)=""/117, 0x75}, &(0x7f0000001b40)=[{&(0x7f0000000140)=""/86, 0xffffff67}], 0x1, 0x0, 0x7}}], 0x48, 0x20000004}, 0x0) 1.442117214s ago: executing program 3 (id=717): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00222200000096231306e53f070f0000002a940183"], 0x0}, 0x0) 1.379978196s ago: executing program 0 (id=718): syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x40100001, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) 1.375979426s ago: executing program 4 (id=719): syz_mount_image$jfs(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', 0x20108c0, &(0x7f00000008c0)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYRES32, @ANYBLOB="a783c89422e31c30d6bf831c4426922089e2b8944eda733c7bed9440aee9df8636110f251ff75794e847bbad8f5979c9d55434d5344bc268e61948fc8a8ffe2d27c14972f79c1c977c01b4a8a4e35f14d116c59482add0c31e922b29fb4c24948818edc636cced878ca31c24c6a3a31bcdca27864f7611d3163d21939c3c5afb70", @ANYBLOB="013ced044bdd1d80c6a59bca5c1f9d57c0bf983de420f461a7414616093c243234af9243259143a1df24ac0219d7c378a65b310c8b4a0a5be52831340548247ed220c3c9fbc83337fa0b63b0a54e73ff5f9b6625b0faa1fb755e1af638d96ec92d0802aa01c49d12703c6452c7b0edad1ecfdc926cf6ee88d55c25510952b43a773f9cd35d70e03d69b2af2ead1c39ef1c55be4e5afc92674e57e227951a9706cec7b734dec89e0ed0de44f23a3de29cee4de42e117c71af53f785eb2feb89"], 0xfa, 0x61ee, &(0x7f0000012cc0)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000280), 0x2000) 1.349781197s ago: executing program 1 (id=720): r0 = socket$nl_route(0x10, 0x3, 0x0) io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}]) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000200025a729bd7000fddbdf650a0020cdff000006020001001400020020010000000000000000000000000001080017004e224e24080018"], 0x40}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) 1.149802383s ago: executing program 0 (id=721): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0e00000004000000040000000c"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) 1.103193855s ago: executing program 1 (id=722): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f00000000c0)=0x4d, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000000)=""/16, &(0x7f0000000240)=0x10) 1.032867087s ago: executing program 0 (id=723): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x4}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) 985.758508ms ago: executing program 1 (id=724): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5508, &(0x7f0000002480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='.\x00', 0x10000, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @a}}) 961.039549ms ago: executing program 0 (id=725): prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0x7, 0x7ffc0001}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x6, 0xf5, 0x9, 0x7fff0000}]}) 874.221142ms ago: executing program 0 (id=726): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x4}}}]}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "9c"}]}], {0x14, 0x14, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 750.733925ms ago: executing program 2 (id=727): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a010400000000000000000200000444000480400001800e000100627974656f726465720000002c000280080003400000000008000540000000b3080004400000000f08000540000000d2080004400000003d0900010073797a30000000000900020073797a3200000000050007"], 0xa0}}, 0x0) 665.539348ms ago: executing program 0 (id=728): r0 = msgget(0x2, 0x47a5f2ebe3f1275b) msgrcv(r0, 0x0, 0x0, 0xf33156785b568fcb, 0x1000) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000440)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8}, 0x0, 0x0, 0x8000, 0x1, 0x9, 0x0, 0x4, 0xe, 0x6}) 474.572514ms ago: executing program 2 (id=729): mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0) mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0xa, 0x2) 367.282957ms ago: executing program 4 (id=730): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x40045431, 0xffffffffffffffff) 366.668768ms ago: executing program 2 (id=731): r0 = add_key$user(&(0x7f0000000540), &(0x7f0000000580)={'syz', 0x0}, &(0x7f00000005c0)="8b", 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r0, 0x0) add_key$user(&(0x7f0000000d80), &(0x7f0000000dc0)={'syz', 0x0}, &(0x7f0000000e00)='\a', 0x1, 0xfffffffffffffffe) 268.698441ms ago: executing program 2 (id=732): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x56, 0x6fc2, 0x0, {0x6000, 0x1}, {0x52, 0x2}, @period={0x5c, 0x5, 0x0, 0x7f9e, 0x800, {0xfffe, 0x8001, 0x2, 0x200}, 0xffffffffffffff2a, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x12d8) 79.446807ms ago: executing program 2 (id=733): syz_mount_image$hfs(&(0x7f0000000280), &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1210080, &(0x7f00000002c0)={[{@uid={'uid', 0x3d, 0xee01}}, {@codepage={'codepage', 0x3d, 'cp857'}}, {@gid}, {@dir_umask={'dir_umask', 0x3d, 0x4}}, {@iocharset={'iocharset', 0x3d, 'cp936'}}, {@umask}, {@gid}]}, 0x41, 0x32e, &(0x7f0000000b00)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r0, 0x0, 0x0) 0s ago: executing program 2 (id=734): syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x200050, &(0x7f0000000080)=ANY=[], 0x1, 0x1d2, &(0x7f00000003c0)="$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") truncate(&(0x7f0000000280)='./file1\x00', 0x1bf8) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0) kernel console output (not intermixed with test programs): amily 0 port 6081 - 0 [ 71.317871][ T4187] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.326827][ T4187] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.349683][ T4191] device veth0_macvtap entered promiscuous mode [ 71.385296][ T23] Bluetooth: hci0: command 0x040f tx timeout [ 71.392134][ T23] Bluetooth: hci1: command 0x040f tx timeout [ 71.399688][ T23] Bluetooth: hci2: command 0x040f tx timeout [ 71.419244][ T4191] device veth1_macvtap entered promiscuous mode [ 71.456697][ T4232] Bluetooth: hci4: command 0x040f tx timeout [ 71.465825][ T4232] Bluetooth: hci3: command 0x040f tx timeout [ 71.487823][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.499270][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.507889][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.519811][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.574334][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.592603][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.606122][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.618065][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.629360][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.640406][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.654645][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.669014][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.678582][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.687868][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.697957][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.712998][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.721816][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.748948][ T4192] device veth0_vlan entered promiscuous mode [ 71.764122][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.783600][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.795729][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.806500][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.816457][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.827025][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.839587][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.850635][ T4191] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.861956][ T4191] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.871473][ T4191] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.880361][ T4191] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.894418][ T3067] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.905553][ T3067] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.908113][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.923336][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.932496][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.954314][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.961054][ T4192] device veth1_vlan entered promiscuous mode [ 71.973069][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.998971][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.043701][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.060552][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.097692][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.111014][ T4245] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.118931][ T4245] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.141541][ T4192] device veth0_macvtap entered promiscuous mode [ 72.150135][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.162965][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.172137][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.183402][ T4245] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.198139][ T4192] device veth1_macvtap entered promiscuous mode [ 72.212308][ T4245] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.222362][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.232595][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.247805][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.341718][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.373317][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.384076][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.395395][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.406375][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.417678][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.435741][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.454364][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.491061][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.523519][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.534249][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.544021][ T4245] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.552917][ T4245] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.566612][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.581895][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.592769][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.604427][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.631331][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.659118][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.685025][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.704532][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.718636][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.735734][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.746902][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.756831][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.776828][ T3067] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.796397][ T3067] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.809931][ T4192] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.827440][ T4192] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.840103][ T4192] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.851295][ T4192] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.863915][ T4234] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 72.875909][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.930505][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.954279][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.001058][ T4283] loop2: detected capacity change from 0 to 256 [ 73.015137][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.060882][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.117544][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.138554][ T4283] FAT-fs (loop2): Directory bread(block 64) failed [ 73.161561][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.170552][ T4286] loop1: detected capacity change from 0 to 8 [ 73.175380][ T4283] FAT-fs (loop2): Directory bread(block 65) failed [ 73.216837][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.224709][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.238329][ T4283] FAT-fs (loop2): Directory bread(block 66) failed [ 73.265671][ T4283] FAT-fs (loop2): Directory bread(block 67) failed [ 73.283169][ T4283] FAT-fs (loop2): Directory bread(block 68) failed [ 73.290994][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.292717][ T4283] FAT-fs (loop2): Directory bread(block 69) failed [ 73.300994][ T4234] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.336977][ T4283] FAT-fs (loop2): Directory bread(block 70) failed [ 73.343565][ T4283] FAT-fs (loop2): Directory bread(block 71) failed [ 73.368248][ T4234] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 73.389273][ T4234] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 73.410468][ T4234] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 73.420060][ T4283] FAT-fs (loop2): Directory bread(block 72) failed [ 73.427450][ T4234] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.435871][ T4283] FAT-fs (loop2): Directory bread(block 73) failed [ 73.467842][ T4234] usb 4-1: config 0 descriptor?? [ 73.478340][ T4284] Bluetooth: hci2: command 0x0419 tx timeout [ 73.484490][ T4284] Bluetooth: hci1: command 0x0419 tx timeout [ 73.526695][ T4284] Bluetooth: hci0: command 0x0419 tx timeout [ 73.546203][ T4268] Bluetooth: hci3: command 0x0419 tx timeout [ 73.560117][ T4268] Bluetooth: hci4: command 0x0419 tx timeout [ 73.672112][ T4291] loop1: detected capacity change from 0 to 256 [ 73.686056][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 73.702029][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 73.710287][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 73.723537][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 73.736178][ T4291] ======================================================= [ 73.736178][ T4291] WARNING: The mand mount option has been deprecated and [ 73.736178][ T4291] and is ignored by this kernel. Remove the mand [ 73.736178][ T4291] option from the mount to silence this warning. [ 73.736178][ T4291] ======================================================= [ 73.774326][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 73.796645][ T4280] loop0: detected capacity change from 0 to 32768 [ 73.803396][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 73.813611][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 73.821291][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 73.828956][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 73.844232][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 73.852170][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 73.870732][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 73.882358][ T4291] FAT-fs (loop1): Directory bread(block 64) failed [ 73.888895][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 73.898206][ T4291] FAT-fs (loop1): Directory bread(block 65) failed [ 73.913165][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 73.933450][ T4291] FAT-fs (loop1): Directory bread(block 66) failed [ 73.951310][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 73.962147][ T4234] plantronics 0003:047F:FFFF.0002: unbalanced delimiter at end of report description [ 73.990534][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 73.992985][ T4291] FAT-fs (loop1): Directory bread(block 67) failed [ 74.019125][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 74.027240][ T4234] plantronics 0003:047F:FFFF.0002: parse failed [ 74.033635][ T4234] plantronics: probe of 0003:047F:FFFF.0002 failed with error -22 [ 74.042528][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 74.051056][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 74.058725][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 74.066522][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 74.073948][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 74.081705][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 74.089235][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 74.097598][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 74.106486][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 74.124335][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 74.125226][ T4291] FAT-fs (loop1): Directory bread(block 68) failed [ 74.138826][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 74.155520][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 74.173311][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 74.209375][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 74.214166][ T4234] usb 4-1: USB disconnect, device number 2 [ 74.224983][ T4291] FAT-fs (loop1): Directory bread(block 69) failed [ 74.231633][ T4291] FAT-fs (loop1): Directory bread(block 70) failed [ 74.234533][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 74.261422][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 74.279036][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 74.295079][ T4291] FAT-fs (loop1): Directory bread(block 71) failed [ 74.295912][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 74.321804][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 74.329408][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 74.329814][ T4291] FAT-fs (loop1): Directory bread(block 72) failed [ 74.356035][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 74.364282][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 74.378294][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 74.388848][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 74.396733][ T4291] FAT-fs (loop1): Directory bread(block 73) failed [ 74.411401][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 74.434347][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 74.446854][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 74.455313][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 74.462842][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 74.470882][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 74.478558][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 74.495388][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 74.509762][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 74.529648][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 74.547483][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 74.555501][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 74.563037][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 74.571183][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 74.584145][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 74.600665][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 74.608633][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 74.624041][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 74.644042][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 74.658800][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 74.666672][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 74.682845][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 74.690736][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 74.698457][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 74.706176][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 74.713821][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 74.722835][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 74.730567][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 74.738698][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 74.746322][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 74.754054][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 74.761705][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 74.769498][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 74.777210][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 74.795142][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 74.811632][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 74.830127][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 74.847952][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 74.873542][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 74.887163][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 74.905002][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 74.912447][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 74.936188][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 74.952840][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 74.970942][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 74.985854][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 75.003698][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 75.020137][ T4307] loop3: detected capacity change from 0 to 2048 [ 75.027323][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 75.034758][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 75.044306][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 75.060199][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 75.071479][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 75.084201][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 75.094618][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 75.108473][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 75.117557][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 75.132436][ T4307] EXT4-fs (loop3): Journaled quota options ignored when QUOTA feature is enabled [ 75.143231][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 75.173907][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 75.212610][ T4307] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrjquota=./file1,noauto_da_alloc,bsddf,,errors=continue. Quota mode: writeback. [ 75.235596][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 75.243255][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 75.243719][ T4307] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.277269][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 75.289019][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 75.298262][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 75.306069][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 75.313495][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 75.321289][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 75.329822][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 75.338569][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 75.346383][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 75.353871][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 75.364562][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 75.373381][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 75.387741][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 75.398890][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 75.408783][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 75.419605][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 75.428847][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 75.436948][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 75.444406][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 75.451996][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 75.459971][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 75.467495][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 75.476456][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 75.483947][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 75.491731][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 75.499251][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 75.506975][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 75.514457][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 75.522142][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 75.529662][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 75.538147][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 75.545668][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 75.553388][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 75.560877][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 75.568551][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 75.576076][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 75.583656][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 75.591185][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 75.598914][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 75.606438][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 75.614014][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 75.621821][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 75.630411][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 75.638533][ T4235] hid-generic 0005:0003:0000.0001: unknown main item tag 0x0 [ 75.666461][ T4235] hid-generic 0005:0003:0000.0001: hidraw0: BLUETOOTH HID v0.05 Device [syz0] on syz0 [ 75.688585][ T4280] XFS (loop0): Mounting V5 Filesystem [ 75.761937][ T4280] XFS (loop0): log mount failed [ 75.813563][ T4313] fido_id[4313]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 76.025283][ T4323] loop1: detected capacity change from 0 to 256 [ 76.033796][ T4321] loop3: detected capacity change from 0 to 2048 [ 76.170758][ T4329] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 76.823654][ T4351] loop0: detected capacity change from 0 to 1024 [ 76.870632][ T4352] loop3: detected capacity change from 0 to 2048 [ 76.924519][ T4351] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 77.254669][ T4359] loop1: detected capacity change from 0 to 1024 [ 77.666677][ T4368] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 77.771783][ T26] audit: type=1804 audit(1781233204.298:2): pid=4368 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.36" name="/newroot/10/file0/file1" dev="loop3" ino=1048612 res=1 errno=0 [ 77.902184][ T4344] non-latin1 character 0xffff found in JFS file name [ 77.919851][ T4344] mount with iocharset=utf8 to access [ 77.937289][ T4348] XFS (loop4): Mounting V5 Filesystem [ 78.057360][ T4361] set_capacity_and_notify: 3 callbacks suppressed [ 78.057382][ T4361] loop0: detected capacity change from 0 to 32768 [ 78.126205][ T4361] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.32 (4361) [ 78.163705][ T4348] XFS (loop4): Ending clean mount [ 78.210576][ T4361] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 78.262185][ T4361] BTRFS info (device loop0): setting nodatasum [ 78.278691][ T4348] XFS (loop4): Quotacheck needed: Please wait. [ 78.325981][ T4361] BTRFS info (device loop0): force zlib compression, level 3 [ 78.368400][ T4361] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 78.423569][ T4392] vivid-002: disconnect [ 78.439803][ T4361] BTRFS info (device loop0): use lzo compression, level 0 [ 78.447605][ T4348] XFS (loop4): Quotacheck: Done. [ 78.478366][ T4389] vivid-002: reconnect [ 78.503848][ T4361] BTRFS info (device loop0): turning on flush-on-commit [ 78.542716][ T4361] BTRFS info (device loop0): enabling auto defrag [ 78.583266][ T4361] BTRFS info (device loop0): max_inline at 4096 [ 78.624053][ T4361] BTRFS info (device loop0): using free space tree [ 78.648009][ T4361] BTRFS info (device loop0): has skinny extents [ 78.753443][ T4192] XFS (loop4): Unmounting Filesystem [ 78.762274][ T4404] loop3: detected capacity change from 0 to 1024 [ 79.099477][ T4361] BTRFS info (device loop0): enabling ssd optimizations [ 79.265075][ T4431] capability: warning: `syz.3.52' uses deprecated v2 capabilities in a way that may be insecure [ 79.289063][ T26] audit: type=1800 audit(1781233205.818:3): pid=4361 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.32" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 79.538356][ T4436] loop4: detected capacity change from 0 to 256 [ 79.650311][ T4436] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x246f1341, utbl_chksum : 0xe619d30d) [ 79.931565][ T4451] loop3: detected capacity change from 0 to 128 [ 79.990462][ T4451] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 80.046046][ T4451] hpfs: filesystem error: improperly stopped [ 80.052101][ T4451] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 80.131751][ T4451] hpfs: You really don't want any checks? You are crazy... [ 80.155384][ T4424] loop1: detected capacity change from 0 to 32768 [ 80.166046][ T4451] hpfs: hpfs_map_sector(): read error [ 80.171462][ T4451] hpfs: code page support is disabled [ 80.240866][ T4451] hpfs: hpfs_map_4sectors(): unaligned read [ 80.263193][ T4451] hpfs: hpfs_map_4sectors(): unaligned read [ 80.293933][ T4451] hpfs: filesystem error: unable to find root dir [ 80.594716][ T4469] loop0: detected capacity change from 0 to 64 [ 80.700199][ T4468] loop3: detected capacity change from 0 to 2048 [ 80.810846][ T26] audit: type=1800 audit(1781233207.338:4): pid=4469 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.65" name="file1" dev="loop0" ino=21 res=0 errno=0 [ 80.905450][ T4468] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 80.954175][ T4468] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.157439][ T4458] loop4: detected capacity change from 0 to 32768 [ 81.206785][ T4468] overlayfs: failed to create directory ./bus/index (errno: 28); mounting read-only [ 81.245042][ T4468] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 81.326533][ T4458] JBD2: Ignoring recovery information on journal [ 81.464751][ T4477] loop1: detected capacity change from 0 to 32768 [ 81.522266][ T4458] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 81.564057][ T4477] XFS (loop1): Mounting V5 Filesystem [ 81.880604][ T4477] XFS (loop1): Ending clean mount [ 81.930853][ T4477] XFS (loop1): Quotacheck needed: Please wait. [ 82.024265][ T4477] XFS (loop1): Quotacheck: Done. [ 82.105263][ T4192] ocfs2: Unmounting device (7,4) on (node local) [ 82.223666][ T4191] XFS (loop1): Unmounting Filesystem [ 82.445959][ T4500] loop3: detected capacity change from 0 to 764 [ 82.762665][ T4493] read_mapping_page failed! [ 82.820060][ T4493] ERROR: (device loop2): txCommit: [ 82.820060][ T4493] [ 82.870836][ T4504] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,errors=remount-ro,max_dir_size_kb=0x0000000000000004,grpjquota=,. Quota mode: writeback. [ 82.943002][ T4507] read_mapping_page failed! [ 83.025318][ T4507] ERROR: (device loop2): txCommit: [ 83.025318][ T4507] [ 83.112184][ T4514] set_capacity_and_notify: 2 callbacks suppressed [ 83.112202][ T4514] loop3: detected capacity change from 0 to 64 [ 83.450818][ T4520] loop4: detected capacity change from 0 to 4096 [ 83.506747][ T4520] EXT4-fs (loop4): Ignoring removed orlov option [ 83.564287][ T4520] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,debug_want_extra_isize=0x0000000000000010,nodioread_nolock,nolazytime,lazytime,stripe=0x0000000000000000,minixdf,orlov,,errors=continue. Quota mode: writeback. [ 83.726295][ T3067] attempt to access beyond end of device [ 83.726295][ T3067] loop0: rw=1, want=162, limit=64 [ 83.782316][ T3067] Buffer I/O error on dev loop0, logical block 161, lost async page write [ 83.793092][ T3067] attempt to access beyond end of device [ 83.793092][ T3067] loop0: rw=1, want=163, limit=64 [ 83.804147][ T3067] Buffer I/O error on dev loop0, logical block 162, lost async page write [ 83.813961][ T3067] attempt to access beyond end of device [ 83.813961][ T3067] loop0: rw=1, want=164, limit=64 [ 83.826357][ T3067] Buffer I/O error on dev loop0, logical block 163, lost async page write [ 83.835890][ T3067] attempt to access beyond end of device [ 83.835890][ T3067] loop0: rw=1, want=168, limit=64 [ 83.847613][ T3067] Buffer I/O error on dev loop0, logical block 167, lost async page write [ 83.870975][ T3067] attempt to access beyond end of device [ 83.870975][ T3067] loop0: rw=1, want=170, limit=64 [ 83.902572][ T3067] Buffer I/O error on dev loop0, logical block 169, lost async page write [ 83.914938][ T4453] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 83.946197][ T3067] attempt to access beyond end of device [ 83.946197][ T3067] loop0: rw=1, want=172, limit=64 [ 83.975798][ T3067] Buffer I/O error on dev loop0, logical block 171, lost async page write [ 83.994073][ T3067] attempt to access beyond end of device [ 83.994073][ T3067] loop0: rw=1, want=173, limit=64 [ 84.006269][ T3067] Buffer I/O error on dev loop0, logical block 172, lost async page write [ 84.025419][ T3067] attempt to access beyond end of device [ 84.025419][ T3067] loop0: rw=1, want=174, limit=64 [ 84.044137][ T3067] Buffer I/O error on dev loop0, logical block 173, lost async page write [ 84.055884][ T3067] attempt to access beyond end of device [ 84.055884][ T3067] loop0: rw=1, want=175, limit=64 [ 84.073244][ T3067] Buffer I/O error on dev loop0, logical block 174, lost async page write [ 84.083583][ T3067] attempt to access beyond end of device [ 84.083583][ T3067] loop0: rw=1, want=176, limit=64 [ 84.104339][ T4537] ALSA: mixer_oss: invalid OSS volume 'LIDE' [ 84.120784][ T3067] Buffer I/O error on dev loop0, logical block 175, lost async page write [ 84.125502][ T4235] usb 3-1: new low-speed USB device number 2 using dummy_hcd [ 84.165043][ T4453] usb 4-1: Using ep0 maxpacket: 8 [ 84.291553][ T4543] loop1: detected capacity change from 0 to 512 [ 84.325290][ T4453] usb 4-1: unable to get BOS descriptor or descriptor too short [ 84.381340][ T4543] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 84.416797][ T4543] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 84.445789][ T4543] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.93: Corrupt directory, running e2fsck is recommended [ 84.490257][ T4543] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 84.505349][ T4543] EXT4-fs error (device loop1): ext4_iget_extra_inode:4573: inode #15: comm syz.1.93: corrupted in-inode xattr [ 84.516029][ T4235] usb 3-1: config 0 interface 0 has no altsetting 0 [ 84.523757][ T4235] usb 3-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice= 0.00 [ 84.533062][ T4235] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.543022][ T4543] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.93: couldn't read orphan inode 15 (err -117) [ 84.564971][ T4235] usb 3-1: config 0 descriptor?? [ 84.575128][ T4453] usb 4-1: New USB device found, idVendor=0582, idProduct=002f, bcdDevice= 0.40 [ 84.584250][ T4453] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.604951][ T4543] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,auto_da_alloc=0x0000000000000004,jqfmt=vfsold,nolazytime,grpjquota=.noload,resuid=0x0000000000000000,barrier=0x0000000000001000,grpid,,,errors=continue. Quota mode: writeback. [ 84.630313][ C0] vkms_vblank_simulate: vblank timer overrun [ 84.639773][ T4453] usb 4-1: Product: syz [ 84.643985][ T4453] usb 4-1: Manufacturer: syz [ 84.652290][ T4453] usb 4-1: SerialNumber: syz [ 84.795390][ T1110] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 85.036418][ T4453] snd-usb-audio: probe of 4-1:1.0 failed with error -2 [ 85.051513][ T4235] apple 0003:05AC:030A.0003: unknown main item tag 0x2 [ 85.069597][ T1110] usb 5-1: Using ep0 maxpacket: 32 [ 85.083315][ T4235] apple 0003:05AC:030A.0003: unknown main item tag 0xe [ 85.094985][ T4453] usb 4-1: USB disconnect, device number 3 [ 85.126103][ T4235] apple 0003:05AC:030A.0003: unknown main item tag 0x7 [ 85.133066][ T4235] apple 0003:05AC:030A.0003: unknown main item tag 0x0 [ 85.193735][ T4235] apple 0003:05AC:030A.0003: hidraw0: USB HID v0.20 Device [HID 05ac:030a] on usb-dummy_hcd.2-1/input0 [ 85.205262][ T1110] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.231069][ T1110] usb 5-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 85.256303][ T4235] usb 3-1: USB disconnect, device number 2 [ 85.264450][ T1110] usb 5-1: config 0 interface 0 has no altsetting 0 [ 85.281570][ T1110] usb 5-1: New USB device found, idVendor=046d, idProduct=0a07, bcdDevice= 0.00 [ 85.321920][ T1110] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.354768][ T1110] usb 5-1: config 0 descriptor?? [ 85.398524][ T4300] udevd[4300]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 85.434092][ T4566] loop0: detected capacity change from 0 to 8192 [ 85.470575][ T4566] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 85.484290][ T4569] fido_id[4569]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 85.526389][ T4566] exFAT-fs (loop0): invalid fs_name [ 85.537923][ T4566] exFAT-fs (loop0): failed to read boot sector [ 85.577706][ T4566] exFAT-fs (loop0): failed to recognize exfat type [ 85.839260][ T1110] lg-g15 0003:046D:0A07.0004: unknown main item tag 0x3 [ 85.860572][ T1110] lg-g15 0003:046D:0A07.0004: unknown main item tag 0x0 [ 85.872165][ T1110] lg-g15 0003:046D:0A07.0004: unknown main item tag 0x0 [ 85.891652][ T1110] lg-g15 0003:046D:0A07.0004: unknown main item tag 0x0 [ 85.901805][ T1110] lg-g15 0003:046D:0A07.0004: unknown main item tag 0x0 [ 85.944895][ T1110] lg-g15 0003:046D:0A07.0004: unknown main item tag 0x0 [ 85.972300][ T1110] lg-g15 0003:046D:0A07.0004: unknown main item tag 0x6 [ 86.005227][ T1110] lg-g15 0003:046D:0A07.0004: hidraw0: USB HID v1.01 Device [HID 046d:0a07] on usb-dummy_hcd.4-1/input0 [ 86.053054][ T1110] usb 5-1: USB disconnect, device number 2 [ 86.120074][ T4581] loop2: detected capacity change from 0 to 512 [ 86.139146][ T4568] loop1: detected capacity change from 0 to 32768 [ 86.175181][ T4568] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.104 (4568) [ 86.211120][ T4582] fido_id[4582]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 86.237807][ T4568] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 86.265151][ T4581] EXT4-fs (loop2): Ignoring removed bh option [ 86.281544][ T4568] BTRFS info (device loop1): turning off barriers [ 86.306967][ T4568] BTRFS info (device loop1): turning on async discard [ 86.313811][ T4568] BTRFS info (device loop1): doing ref verification [ 86.341094][ T4568] BTRFS info (device loop1): using free space tree [ 86.351270][ T4568] BTRFS info (device loop1): has skinny extents [ 86.376983][ T4581] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,nogrpid,bh,,errors=continue. Quota mode: writeback. [ 86.454960][ T4581] ext4 filesystem being mounted at /16/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 86.485965][ T4575] loop0: detected capacity change from 0 to 32768 [ 86.530676][ T4575] ERROR: (device loop0): diAllocAG: nfreeinos = 0, but iag on freelist [ 86.530676][ T4575] [ 86.554296][ T4568] BTRFS info (device loop1): enabling ssd optimizations [ 86.562390][ T4575] ERROR: (device loop0): remounting filesystem as read-only [ 86.569979][ T4575] ialloc: diAlloc returned -5! [ 86.582776][ T1107] cfg80211: failed to load regulatory.db [ 86.707942][ T4607] loop4: detected capacity change from 0 to 64 [ 87.011108][ T4613] loop2: detected capacity change from 0 to 64 [ 87.189874][ T4615] loop4: detected capacity change from 0 to 2048 [ 87.324123][ T4615] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 87.405556][ T4620] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,usrquota,minixdf,nombcache,. Quota mode: writeback. [ 87.442634][ T4620] ext4 filesystem being mounted at /31/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 87.519501][ T4300] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 10 /dev/loop1 scanned by udevd (4300) [ 87.648453][ T4620] EXT4-fs error (device loop3): ext4_get_first_dir_block:3605: inode #12: block 32: comm syz.3.118: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 87.822822][ T4620] EXT4-fs (loop3): Remounting filesystem read-only [ 87.831946][ T4620] EXT4-fs error (device loop3): ext4_get_first_dir_block:3608: inode #12: comm syz.3.118: directory missing '.' [ 87.961485][ T4620] EXT4-fs (loop3): Remounting filesystem read-only [ 88.218749][ T4646] netlink: 8 bytes leftover after parsing attributes in process `syz.4.128'. [ 88.388416][ T4652] overlayfs: unrecognized mount option "/v98PIx@Q3}g{.$߂ ugG1e HID va.e8 Device [syz0] on syz1 [ 100.972227][ T4198] handle_bad_sector: 118 callbacks suppressed [ 100.972247][ T4198] attempt to access beyond end of device [ 100.972247][ T4198] loop2: rw=2049, want=45104, limit=40427 [ 101.166457][ T5040] set_capacity_and_notify: 1 callbacks suppressed [ 101.166475][ T5040] loop3: detected capacity change from 0 to 256 [ 101.246561][ T5040] exfat: Deprecated parameter 'namecase' [ 101.256893][ T5040] exfat: Deprecated parameter 'namecase' [ 101.364685][ T5040] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 101.526194][ T5043] fido_id[5043]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 102.112849][ T5064] netlink: 8 bytes leftover after parsing attributes in process `syz.0.287'. [ 102.140986][ T5062] loop2: detected capacity change from 0 to 4096 [ 102.230001][ T5068] loop3: detected capacity change from 0 to 512 [ 102.268775][ T5062] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 102.357754][ T5068] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 102.387868][ T5068] EXT4-fs warning (device loop3): __ext4_ioctl:882: Setting inode version is not supported with metadata_csum enabled. [ 102.413803][ T5062] ntfs3: loop2: failed to convert "076c" to cp874 [ 102.535262][ T5062] ntfs3: loop2: ino=5, "/" directory corrupted [ 102.559556][ T5070] loop0: detected capacity change from 0 to 4096 [ 102.596431][ T5077] netlink: 20 bytes leftover after parsing attributes in process `syz.3.291'. [ 102.673257][ T5070] ntfs: volume version 3.1. [ 102.770864][ T5083] loop3: detected capacity change from 0 to 64 [ 102.891861][ T5083] hfs: unable to locate alternate MDB [ 102.929282][ T5083] hfs: continuing without an alternate MDB [ 103.135006][ T4735] Bluetooth: hci2: command 0x0401 tx timeout [ 103.162702][ T5096] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 103.717452][ T5114] loop4: detected capacity change from 0 to 1024 [ 103.735007][ T4453] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 103.757646][ T5114] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 103.830937][ T5117] loop2: detected capacity change from 0 to 1024 [ 103.908800][ T5122] netlink: 44 bytes leftover after parsing attributes in process `syz.1.311'. [ 103.986489][ T5117] hfsplus: bad catalog entry type [ 103.995111][ T4453] usb 4-1: Using ep0 maxpacket: 16 [ 104.094758][ T154] hfsplus: b-tree write err: -5, ino 25 [ 104.115538][ T154] hfsplus: b-tree write err: -5, ino 4 [ 104.121359][ T154] hfsplus: b-tree write err: -5, ino 2 [ 104.123350][ T4453] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 104.325146][ T4453] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 104.360147][ T4453] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.393657][ T4453] usb 4-1: Product: syz [ 104.400520][ T4453] usb 4-1: Manufacturer: syz [ 104.421376][ T4453] usb 4-1: SerialNumber: syz [ 104.603042][ T5144] loop1: detected capacity change from 0 to 512 [ 104.637854][ T5121] loop0: detected capacity change from 0 to 40427 [ 104.701305][ T5121] F2FS-fs (loop0): Found nat_bits in checkpoint [ 104.776391][ T5144] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,bsddf,stripe=0x0000000000000005,journal_ioprio=0x0000000000000007,. Quota mode: writeback. [ 104.795321][ T4453] usb 4-1: 1:1 : sample bitwidth 185 in over sample bytes 3 [ 104.811442][ T4453] usb 4-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 104.825241][ T5144] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.895551][ T4453] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 104.904995][ T5121] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2 [ 104.914190][ T5121] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 105.041479][ T4453] usb 4-1: USB disconnect, device number 5 [ 105.104234][ T5121] attempt to access beyond end of device [ 105.104234][ T5121] loop0: rw=2049, want=45104, limit=40427 [ 105.348207][ T4275] udevd[4275]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 105.447129][ T5168] loop2: detected capacity change from 0 to 4096 [ 105.508056][ T5168] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 106.275474][ T5193] loop0: detected capacity change from 0 to 8 [ 106.406171][ T4269] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 106.442439][ T5178] syz.1.344 (5178): drop_caches: 2 [ 106.665132][ T4269] usb 4-1: Using ep0 maxpacket: 8 [ 106.680595][ T5178] ODEBUG: Out of memory. ODEBUG disabled [ 106.785144][ T4269] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 106.803673][ T4269] usb 4-1: config 179 has no interface number 0 [ 106.812727][ T4269] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 106.848385][ T4269] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 106.882786][ T4269] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 106.920607][ T4269] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 106.956152][ T4269] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 106.996689][ T4269] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 107.019346][ T4269] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.075304][ T5190] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 107.124382][ T5178] syz.1.344 (5178): drop_caches: 2 [ 107.346280][ T5190] udc-core: couldn't find an available UDC or it's busy [ 107.361800][ T5190] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 107.428172][ T5222] loop4: detected capacity change from 0 to 2048 [ 107.492353][ T5222] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 107.604458][ T4188] usb 4-1: USB disconnect, device number 6 [ 107.614954][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 107.623804][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 107.947217][ T5236] netlink: 'syz.4.361': attribute type 4 has an invalid length. [ 107.982143][ T5212] loop2: detected capacity change from 0 to 32768 [ 107.993059][ T5236] netlink: 17 bytes leftover after parsing attributes in process `syz.4.361'. [ 108.040170][ T5212] XFS: attr2 mount option is deprecated. [ 108.066929][ T5216] loop1: detected capacity change from 0 to 40427 [ 108.111423][ T5216] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 108.120020][ T5216] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 108.153682][ T5244] loop4: detected capacity change from 0 to 512 [ 108.210392][ T5216] F2FS-fs (loop1): invalid crc value [ 108.221325][ T5212] XFS (loop2): Mounting V5 Filesystem [ 108.264004][ T5244] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e019, mo2=0002] [ 108.272033][ T5250] netlink: 104 bytes leftover after parsing attributes in process `syz.3.365'. [ 108.288226][ T5216] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 108.337007][ T5244] System zones: 0-2, 18-18, 34-34 [ 108.343274][ T5244] EXT4-fs (loop4): orphan cleanup on readonly fs [ 108.360799][ T5259] loop0: detected capacity change from 0 to 64 [ 108.426141][ T5212] XFS (loop2): Ending clean mount [ 108.439613][ T5212] XFS (loop2): Quotacheck needed: Please wait. [ 108.515613][ T5244] EXT4-fs (loop4): 1 orphan inode deleted [ 108.531705][ T5244] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000000,debug,nombcache,,errors=continue. Quota mode: none. [ 108.598566][ T5212] XFS (loop2): Quotacheck: Done. [ 108.670571][ T5216] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 108.684976][ T5216] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 108.693429][ T5269] loop0: detected capacity change from 0 to 1024 [ 108.753907][ T4198] XFS (loop2): Unmounting Filesystem [ 108.875206][ T5273] Zero length message leads to an empty skb [ 108.908922][ T5269] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 108.944957][ T5269] hfsplus: xattr searching failed [ 108.959891][ T5274] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 108.978442][ T5274] hfsplus: xattr searching failed [ 109.019528][ T4191] attempt to access beyond end of device [ 109.019528][ T4191] loop1: rw=2049, want=45104, limit=40427 [ 109.167519][ T3067] hfsplus: b-tree write err: -5, ino 25 [ 109.173310][ T3067] hfsplus: b-tree write err: -5, ino 4 [ 109.205136][ T3067] hfsplus: b-tree write err: -5, ino 2 [ 109.210761][ T3067] hfsplus: b-tree write err: -5, ino 20 [ 109.270199][ T3067] hfsplus: b-tree write err: -5, ino 23 [ 109.307267][ T5284] loop3: detected capacity change from 0 to 256 [ 109.425364][ T5284] FAT-fs (loop3): Directory bread(block 64) failed [ 109.462075][ T5284] FAT-fs (loop3): Directory bread(block 65) failed [ 109.507544][ T5284] FAT-fs (loop3): Directory bread(block 66) failed [ 109.514144][ T5284] FAT-fs (loop3): Directory bread(block 67) failed [ 109.592066][ T5284] FAT-fs (loop3): Directory bread(block 68) failed [ 109.627997][ T5284] FAT-fs (loop3): Directory bread(block 69) failed [ 109.650618][ T5284] FAT-fs (loop3): Directory bread(block 70) failed [ 109.695312][ T5284] FAT-fs (loop3): Directory bread(block 71) failed [ 109.709569][ T5284] FAT-fs (loop3): Directory bread(block 72) failed [ 109.738277][ T5284] FAT-fs (loop3): Directory bread(block 73) failed [ 110.001363][ T5314] netlink: 20 bytes leftover after parsing attributes in process `syz.1.391'. [ 110.009361][ T5315] IPVS: sync thread started: state = BACKUP, mcast_ifn = vxcan1, syncid = 3, id = 0 [ 110.381664][ T5334] loop2: detected capacity change from 0 to 512 [ 110.444067][ T5334] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 110.474976][ T5334] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 110.503672][ T5334] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 110.543902][ T5334] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 110.613501][ T5334] EXT4-fs (loop2): 1 truncate cleaned up [ 110.647500][ T5334] EXT4-fs (loop2): mounted filesystem without journal. Opts: nomblk_io_submit,usrjquota="errors=continue,noload,mblk_io_submit,grpjquota="errors=continue,errors=remount-ro,jqfmt=vfsv1,. Quota mode: writeback. [ 110.729261][ T5334] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #2: block 4: comm syz.2.401: lblock 0 mapped to illegal pblock 4 (length 1) [ 110.768362][ T5334] EXT4-fs (loop2): Remounting filesystem read-only [ 110.784625][ T5342] loop0: detected capacity change from 0 to 4096 [ 110.896498][ T5343] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 111.028512][ T5325] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.397 (5325) [ 111.110502][ T5325] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 111.162338][ T5325] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 111.222113][ T5325] BTRFS info (device loop1): use zstd compression, level 3 [ 111.249968][ T5325] BTRFS info (device loop1): using free space tree [ 111.301842][ T5348] set_capacity_and_notify: 2 callbacks suppressed [ 111.301857][ T5348] loop4: detected capacity change from 0 to 4096 [ 111.324272][ T5325] BTRFS info (device loop1): has skinny extents [ 111.446683][ T5348] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 111.605911][ T5348] ntfs: volume version 3.1. [ 111.693891][ T5370] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 111.728742][ T5325] BTRFS info (device loop1): enabling ssd optimizations [ 111.821702][ T5348] ntfs: (device loop4): ntfs_read_locked_inode(): $INDEX_ROOT attribute is corrupt. [ 111.880174][ T5348] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x40 as bad. Run chkdsk. [ 111.992240][ T4192] ntfs: (device loop4): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 112.087913][ T5394] netlink: 28 bytes leftover after parsing attributes in process `syz.2.421'. [ 112.109924][ T5395] loop3: detected capacity change from 0 to 1024 [ 112.120036][ T4914] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 9 /dev/loop1 scanned by udevd (4914) [ 112.213068][ T5396] netlink: 64 bytes leftover after parsing attributes in process `syz.4.420'. [ 112.467835][ T154] hfsplus: b-tree write err: -5, ino 25 [ 112.473673][ T154] hfsplus: b-tree write err: -5, ino 4 [ 112.536203][ T154] hfsplus: b-tree write err: -5, ino 2 [ 112.562036][ T154] hfsplus: b-tree write err: -5, ino 17 [ 112.762038][ T4314] kernel write not supported for file /input/event0 (pid: 4314 comm: kworker/0:6) [ 112.797195][ T5424] loop3: detected capacity change from 0 to 4096 [ 112.812647][ T5424] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 112.950517][ T5424] ntfs3: loop3: failed to convert "c46c" to maciceland [ 112.987692][ T4188] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 113.130975][ T5439] netlink: 12 bytes leftover after parsing attributes in process `syz.3.437'. [ 113.185031][ T4749] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 113.265013][ T4188] usb 2-1: Using ep0 maxpacket: 8 [ 113.294940][ T4735] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 113.365272][ T5449] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 113.395030][ T4188] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.415305][ T4188] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 113.439768][ T5452] loop3: detected capacity change from 0 to 1024 [ 113.446481][ T4188] usb 2-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 113.456484][ T4188] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.476813][ T4188] usb 2-1: config 0 descriptor?? [ 113.631803][ T5458] loop2: detected capacity change from 0 to 2048 [ 113.649399][ T5458] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 113.665060][ T4735] usb 1-1: config 0 has an invalid interface number: 205 but max is 0 [ 113.674120][ T4735] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 113.674461][ T5459] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 113.750239][ T4735] usb 1-1: config 0 has no interface number 0 [ 113.774842][ T4735] usb 1-1: config 0 interface 205 has no altsetting 0 [ 113.790912][ T4749] usb 5-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 113.802129][ T4749] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.813991][ T4749] usb 5-1: Product: syz [ 113.818598][ T4749] usb 5-1: Manufacturer: syz [ 113.823246][ T4749] usb 5-1: SerialNumber: syz [ 113.844518][ T4749] usb 5-1: config 0 descriptor?? [ 113.907780][ T4749] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 113.960035][ T4188] logitech 0003:046D:C50C.0008: unknown main item tag 0x3 [ 113.976547][ T4188] logitech 0003:046D:C50C.0008: unknown main item tag 0x0 [ 113.983835][ T4188] logitech 0003:046D:C50C.0008: unknown main item tag 0x0 [ 113.991794][ T4735] usb 1-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 114.004771][ T4188] logitech 0003:046D:C50C.0008: unknown main item tag 0x0 [ 114.012284][ T4735] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.045454][ T4188] logitech 0003:046D:C50C.0008: unknown main item tag 0x0 [ 114.052653][ T4188] logitech 0003:046D:C50C.0008: item fetching failed at offset 16/43 [ 114.055619][ T5408] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 114.062198][ T4735] usb 1-1: Product: syz [ 114.072767][ T4735] usb 1-1: Manufacturer: syz [ 114.078291][ T4188] logitech 0003:046D:C50C.0008: parse failed [ 114.084349][ T4188] logitech: probe of 0003:046D:C50C.0008 failed with error -22 [ 114.092200][ T4735] usb 1-1: SerialNumber: syz [ 114.113596][ T4735] usb 1-1: config 0 descriptor?? [ 114.137879][ T5471] netlink: 8 bytes leftover after parsing attributes in process `syz.2.452'. [ 114.174206][ T4188] usb 2-1: USB disconnect, device number 3 [ 114.182446][ T4735] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 114.213456][ T4735] dvb-usb: bulk message failed: -22 (3/0) [ 114.271541][ T4735] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 114.305185][ T4735] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 114.317229][ T4735] usb 1-1: media controller created [ 114.323736][ T4735] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 114.325239][ T5408] usb 4-1: Using ep0 maxpacket: 8 [ 114.361184][ T4735] dvb-usb: bulk message failed: -22 (6/0) [ 114.368662][ T4735] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 114.446585][ T4735] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input6 [ 114.465236][ T5408] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.470820][ T4735] dvb-usb: schedule remote query interval to 150 msecs. [ 114.483592][ T5408] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 114.483608][ T4735] dvb-usb: bulk message failed: -22 (3/0) [ 114.507429][ T5408] usb 4-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 114.516710][ T5408] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.533974][ T5408] usb 4-1: config 0 descriptor?? [ 114.535120][ T4735] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 114.571390][ T4735] usb 1-1: USB disconnect, device number 3 [ 114.577645][ T4749] gspca_sunplus: reg_w_riv err -71 [ 114.582850][ T4749] sunplus: probe of 5-1:0.0 failed with error -71 [ 114.592325][ T4749] usb 5-1: USB disconnect, device number 5 [ 114.609020][ T4735] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 114.822653][ T5482] loop1: detected capacity change from 0 to 4096 [ 114.917239][ T5482] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 115.036904][ T5408] logitech 0003:046D:C218.0009: unknown main item tag 0x0 [ 115.044130][ T5408] logitech 0003:046D:C218.0009: unknown main item tag 0x0 [ 115.085054][ T5408] logitech 0003:046D:C218.0009: unknown main item tag 0x0 [ 115.092282][ T5408] logitech 0003:046D:C218.0009: unknown main item tag 0x0 [ 115.142461][ T5408] logitech 0003:046D:C218.0009: unknown main item tag 0x0 [ 115.175744][ T5408] logitech 0003:046D:C218.0009: unknown main item tag 0x0 [ 115.182950][ T5408] logitech 0003:046D:C218.0009: unknown main item tag 0x0 [ 115.224895][ T5408] logitech 0003:046D:C218.0009: unknown main item tag 0x0 [ 115.260061][ T5408] logitech 0003:046D:C218.0009: unbalanced delimiter at end of report description [ 115.285236][ T5408] logitech 0003:046D:C218.0009: parse failed [ 115.305082][ T5408] logitech: probe of 0003:046D:C218.0009 failed with error -22 [ 115.349231][ T5408] usb 4-1: USB disconnect, device number 7 [ 115.388377][ T5485] loop2: detected capacity change from 0 to 32768 [ 115.593603][ T5501] loop1: detected capacity change from 0 to 1024 [ 115.707264][ T5044] hfsplus: b-tree write err: -5, ino 25 [ 115.707509][ T5044] hfsplus: b-tree write err: -5, ino 4 [ 115.707590][ T5044] hfsplus: b-tree write err: -5, ino 2 [ 116.041793][ T5515] netlink: 277 bytes leftover after parsing attributes in process `syz.0.472'. [ 116.666807][ T5521] loop0: detected capacity change from 0 to 32768 [ 116.873191][ T5517] syz.3.473 (5517): drop_caches: 2 [ 116.902730][ T5521] ialloc: diAlloc returned -5! [ 116.923248][ T5517] syz.3.473 (5517): drop_caches: 2 [ 116.968854][ T275] ERROR: (device loop0): diUpdatePMap: the iag is outside the map [ 116.968854][ T275] [ 117.004949][ T275] ERROR: (device loop0): remounting filesystem as read-only [ 117.018235][ T5527] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 117.036705][ T5527] i2c i2c-0: DVB: adapter 0 frontend 0 symbol rate 1614071250 out of range (1000000..45000000) [ 117.091895][ T5533] loop4: detected capacity change from 0 to 512 [ 117.159543][ T5536] loop2: detected capacity change from 0 to 256 [ 117.195551][ T5536] exfat: Deprecated parameter 'namecase' [ 117.218741][ T5536] exfat: Deprecated parameter 'utf8' [ 117.224120][ T5536] exfat: Deprecated parameter 'namecase' [ 117.233053][ T5533] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 117.242433][ T5533] EXT4-fs (loop4): orphan cleanup on readonly fs [ 117.257230][ T5533] EXT4-fs warning (device loop4): ext4_enable_quotas:6488: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 117.264060][ T5536] exfat: Deprecated parameter 'namecase' [ 117.283847][ T5544] loop3: detected capacity change from 0 to 64 [ 117.291155][ T5533] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 117.301006][ T5533] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #13: comm syz.4.482: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 117.321141][ T5533] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.482: couldn't read orphan inode 13 (err -117) [ 117.334546][ T5533] EXT4-fs (loop4): mounted filesystem without journal. Opts: sysvgroups,noblock_validity,min_batch_time=0x0000000000000514,grpquota,stripe=0x0000000000000007,debug,grpid,,errors=continue. Quota mode: writeback. [ 117.364735][ T5536] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 117.385831][ T5533] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 117.396600][ T5533] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=2856c09c, mo2=0002] [ 117.427397][ T5533] System zones: 0-2, 18-18, 34-34 [ 117.433830][ T5533] EXT4-fs warning (device loop4): ext4_enable_quotas:6488: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 117.449405][ T5544] attempt to access beyond end of device [ 117.449405][ T5544] loop3: rw=2049, want=268435470, limit=64 [ 117.461846][ T5544] buffer_io_error: 102 callbacks suppressed [ 117.461863][ T5544] Buffer I/O error on dev loop3, logical block 134217734, lost async page write [ 117.650047][ T5551] loop3: detected capacity change from 0 to 16 [ 117.682264][ T5551] erofs: (device loop3): mounted with root inode @ nid 36. [ 117.829886][ T26] audit: type=1800 audit(1781233244.358:7): pid=5551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.489" name="file1" dev="loop3" ino=86 res=0 errno=0 [ 117.876187][ T5551] attempt to access beyond end of device [ 117.876187][ T5551] loop3: rw=16777216, want=34359739512, limit=16 [ 118.602187][ T5554] loop4: detected capacity change from 0 to 32768 [ 118.717739][ T5554] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.490 (5554) [ 118.732052][ T5577] loop2: detected capacity change from 0 to 64 [ 118.766287][ T5554] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 118.794934][ T5554] BTRFS info (device loop4): setting nodatasum [ 118.801170][ T5554] BTRFS info (device loop4): force zlib compression, level 3 [ 118.872893][ T5554] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 118.932774][ T5554] BTRFS info (device loop4): use lzo compression, level 0 [ 118.988211][ T5554] BTRFS info (device loop4): turning on flush-on-commit [ 119.024145][ T5554] BTRFS info (device loop4): enabling auto defrag [ 119.065090][ T5554] BTRFS info (device loop4): max_inline at 4096 [ 119.071420][ T5554] BTRFS info (device loop4): using free space tree [ 119.106066][ T5554] BTRFS info (device loop4): has skinny extents [ 119.357486][ T5607] loop3: detected capacity change from 0 to 256 [ 119.445519][ T5554] BTRFS info (device loop4): enabling ssd optimizations [ 119.469442][ T26] audit: type=1800 audit(1781233245.998:8): pid=5607 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.506" name="file1" dev="loop3" ino=1048643 res=0 errno=0 [ 119.525524][ T5607] FAT-fs (loop3): error, corrupted file size (i_pos 196, 2097152) [ 119.543154][ T5612] loop1: detected capacity change from 0 to 4096 [ 119.722844][ T5612] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 119.763254][ T5620] loop3: detected capacity change from 0 to 1024 [ 119.880844][ T5620] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c128, mo2=0002] [ 119.904393][ T5623] netlink: 8 bytes leftover after parsing attributes in process `syz.2.512'. [ 119.929701][ T5620] System zones: 0-1, 3-8 [ 119.951836][ T5620] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,jqfmt=vfsv1,norecovery,debug,journal_dev=0x0000000000000009,nodioread_nolock,. Quota mode: none. [ 120.265320][ T5612] ntfs3: loop1: failed to convert "076c" to cp869 [ 120.314036][ T5612] ntfs3: loop1: ino=5, "/" directory corrupted [ 120.475012][ T13] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 120.544026][ T5643] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 120.557725][ T5637] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 120.577659][ T5637] EXT4-fs (loop3): inline encryption not supported [ 120.618291][ T5637] EXT4-fs (loop3): Test dummy encryption mode enabled [ 120.651768][ T5643] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3894: comm syz.1.520: Allocating blocks 41-42 which overlap fs metadata [ 120.697084][ T5637] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c198, mo2=0003] [ 120.714973][ T13] usb 5-1: Using ep0 maxpacket: 16 [ 120.729231][ T5643] Quota error (device loop1): write_blk: dquota write failed [ 120.737545][ T5643] Quota error (device loop1): find_free_dqentry: Can't write quota data block 5 [ 120.750134][ T5637] System zones: 0-5 [ 120.754961][ T5643] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 120.765135][ T5643] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.520: Failed to acquire dquot type 1 [ 120.795462][ T5637] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,jqfmt=vfsv0,inlinecrypt,debug,test_dummy_encryption=v1,norecovery,delalloc,nogrpid,minixdf,,errors=continue. Quota mode: writeback. [ 120.824110][ T5643] EXT4-fs error (device loop1): mb_free_blocks:1889: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 120.837612][ T13] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.851514][ T5643] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #12: comm syz.1.520: corrupted inode contents [ 120.863954][ T5643] EXT4-fs error (device loop1): ext4_dirty_inode:6077: inode #12: comm syz.1.520: mark_inode_dirty error [ 120.881245][ T5643] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #12: comm syz.1.520: corrupted inode contents [ 120.882032][ T13] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.913447][ T5643] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #12: comm syz.1.520: mark_inode_dirty error [ 120.939559][ T5643] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #12: comm syz.1.520: corrupted inode contents [ 120.970170][ T5643] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 120.990890][ T5643] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #12: comm syz.1.520: corrupted inode contents [ 121.003048][ T13] usb 5-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 121.023454][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.045808][ T5643] EXT4-fs error (device loop1): ext4_truncate:4286: inode #12: comm syz.1.520: mark_inode_dirty error [ 121.073389][ T13] usb 5-1: config 0 descriptor?? [ 121.080656][ T5643] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 121.115942][ T21] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 121.139519][ T5643] EXT4-fs (loop1): 1 truncate cleaned up [ 121.160558][ T5643] EXT4-fs (loop1): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000800000,noblock_validity,inode_readahead_blks=0x0000000000200000,errors=remount-ro,noinit_itable,abort,noauto_da_alloc,errors=continue,resgid=0x00000000000000002. Quota mode: writeback. [ 121.405095][ T21] usb 1-1: Using ep0 maxpacket: 32 [ 121.568207][ T13] wacom 0003:056A:0084.000A: unbalanced delimiter at end of report description [ 121.580495][ T5669] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 121.584689][ T5664] NILFS error (device loop3): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 121.600619][ T13] wacom 0003:056A:0084.000A: parse failed [ 121.607010][ T13] wacom: probe of 0003:056A:0084.000A failed with error -22 [ 121.658674][ T5664] NILFS (loop3): mounting fs with errors [ 121.713608][ T5664] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 121.735311][ T5664] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 121.746897][ T21] usb 1-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 121.767946][ T5664] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 121.794879][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.805193][ T26] audit: type=1800 audit(1781233248.338:9): pid=5664 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.530" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 121.834959][ T21] usb 1-1: Product: syz [ 121.839206][ T21] usb 1-1: Manufacturer: syz [ 121.843843][ T21] usb 1-1: SerialNumber: syz [ 121.856466][ T21] usb 1-1: config 0 descriptor?? [ 121.874093][ T13] usb 5-1: USB disconnect, device number 6 [ 121.907710][ T21] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 121.929061][ T21] dvb-usb: bulk message failed: -22 (2/0) [ 121.957810][ T21] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 122.015120][ T21] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 122.023232][ T21] usb 1-1: media controller created [ 122.093182][ T21] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 122.110554][ T5654] dvb-usb: bulk message failed: -22 (3/0) [ 122.185375][ T21] usb 1-1: selecting invalid altsetting 7 [ 122.191170][ T21] cxusb: set interface failed [ 122.196295][ T21] dvb-usb: bulk message failed: -22 (1/0) [ 122.283320][ T21] DVB: Unable to find symbol lgdt330x_attach() [ 122.300041][ T21] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 122.485011][ T21] rc_core: IR keymap rc-dvico-portable not found [ 122.499027][ T21] Registered IR keymap rc-empty [ 122.517115][ T21] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 122.557795][ T21] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input7 [ 122.594309][ T21] dvb-usb: schedule remote query interval to 100 msecs. [ 122.610461][ T21] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 122.661792][ T5679] set_capacity_and_notify: 5 callbacks suppressed [ 122.661807][ T5679] loop1: detected capacity change from 0 to 32768 [ 122.692932][ T21] usb 1-1: USB disconnect, device number 4 [ 122.788908][ T21] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 122.815524][ T5679] XFS: attr2 mount option is deprecated. [ 122.882569][ T5683] loop2: detected capacity change from 0 to 32768 [ 122.958486][ T5679] XFS (loop1): Mounting V5 Filesystem [ 123.071175][ T5690] loop3: detected capacity change from 0 to 32768 [ 123.163694][ T5679] XFS (loop1): Ending clean mount [ 123.177639][ T5712] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 123.208756][ T5690] ialloc: diAlloc returned -5! [ 123.219138][ T5679] XFS (loop1): Quotacheck needed: Please wait. [ 123.311583][ T5679] XFS (loop1): Quotacheck: Done. [ 123.377646][ T21] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 123.427719][ T4191] XFS (loop1): Unmounting Filesystem [ 123.654940][ T21] usb 1-1: Using ep0 maxpacket: 8 [ 123.695839][ T4862] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 123.793157][ T5727] loop2: detected capacity change from 0 to 256 [ 123.815241][ T21] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.828868][ T21] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 123.838539][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.857527][ T21] usb 1-1: config 0 descriptor?? [ 123.926691][ T21] iowarrior 1-1:0.0: no interrupt-in endpoint found [ 123.950131][ T5729] loop1: detected capacity change from 0 to 1024 [ 124.055120][ T4862] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 124.079410][ T4862] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 124.100343][ T4862] usb 5-1: config 0 interface 0 has no altsetting 0 [ 124.108612][ T4862] usb 5-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00 [ 124.123007][ T4862] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.168430][ T4862] usb 5-1: config 0 descriptor?? [ 124.172749][ T21] usb 1-1: USB disconnect, device number 5 [ 124.515019][ T4737] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 124.564320][ T5752] loop3: detected capacity change from 0 to 1024 [ 124.647188][ T4862] pantherlord 0003:0810:0001.000B: unknown main item tag 0x3 [ 124.654654][ T4862] pantherlord 0003:0810:0001.000B: unknown main item tag 0x0 [ 124.684931][ T4862] pantherlord 0003:0810:0001.000B: unknown main item tag 0x0 [ 124.703676][ T4862] pantherlord 0003:0810:0001.000B: unknown main item tag 0x0 [ 124.753578][ T4862] pantherlord 0003:0810:0001.000B: unknown main item tag 0x0 [ 124.764979][ T4737] usb 3-1: Using ep0 maxpacket: 32 [ 124.773070][ T4862] pantherlord 0003:0810:0001.000B: unknown main item tag 0x0 [ 124.782652][ T4862] pantherlord 0003:0810:0001.000B: unknown main item tag 0x0 [ 124.811735][ T4862] pantherlord 0003:0810:0001.000B: unknown main item tag 0x0 [ 124.863195][ T4862] pantherlord 0003:0810:0001.000B: hidraw0: USB HID v0.04 Device [HID 0810:0001] on usb-dummy_hcd.4-1/input0 [ 124.878516][ T5761] loop3: detected capacity change from 0 to 1024 [ 124.885207][ T4862] pantherlord 0003:0810:0001.000B: no output reports found [ 124.914910][ T4862] usb 5-1: USB disconnect, device number 7 [ 124.950671][ T4737] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 125.154988][ T4737] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 125.164087][ T4737] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.191619][ T5768] loop0: detected capacity change from 0 to 1024 [ 125.205557][ T4737] usb 3-1: Product: syz [ 125.209781][ T4737] usb 3-1: Manufacturer: syz [ 125.214403][ T4737] usb 3-1: SerialNumber: syz [ 125.233128][ T4737] usb 3-1: config 0 descriptor?? [ 125.258754][ T5766] fido_id[5766]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 125.296875][ T4737] smsc75xx v1.0.0 [ 125.300565][ T4737] smsc75xx 3-1:0.0 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 125.312428][ T5768] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 125.329858][ T5770] loop3: detected capacity change from 0 to 4096 [ 125.345235][ T4737] smsc75xx: probe of 3-1:0.0 failed with error -22 [ 125.451400][ T5773] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 125.539669][ T5754] loop1: detected capacity change from 0 to 32768 [ 125.662047][ T5775] EXT4-fs (loop4): Test dummy encryption mode enabled [ 125.745394][ T5775] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,grpquota,,errors=continue. Quota mode: writeback. [ 126.185709][ T5775] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 126.237823][ T5775] EXT4-fs error (device loop4): ext4_empty_dir:3154: inode #12: block 80: comm syz.4.576: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 126.257498][ T5408] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 126.286948][ T5775] EXT4-fs warning (device loop4): ext4_empty_dir:3156: inode #12: comm syz.4.576: directory missing '..' [ 126.357619][ T5772] XFS (loop0): Mounting V5 Filesystem [ 126.485847][ T5772] XFS (loop0): Ending clean mount [ 126.505030][ T5408] usb 4-1: Using ep0 maxpacket: 8 [ 126.628018][ T5408] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.646935][ T5408] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 126.663872][ T5408] usb 4-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 126.679837][ T5408] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.699877][ T5408] usb 4-1: config 0 descriptor?? [ 126.733789][ T4187] XFS (loop0): Unmounting Filesystem [ 126.875276][ T4314] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 127.072830][ T5816] capability: warning: `syz.1.589' uses 32-bit capabilities (legacy support in use) [ 127.203581][ T5408] hid-multitouch 0003:0EEF:72D0.000C: unknown main item tag 0x0 [ 127.213137][ T5823] netlink: 220 bytes leftover after parsing attributes in process `syz.1.592'. [ 127.224509][ T5408] hid-multitouch 0003:0EEF:72D0.000C: unknown main item tag 0x0 [ 127.241402][ T5408] hid-multitouch 0003:0EEF:72D0.000C: unknown main item tag 0x0 [ 127.250279][ T4314] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 127.270690][ T4314] usb 5-1: config 0 has no interface number 0 [ 127.277391][ T5408] hid-multitouch 0003:0EEF:72D0.000C: unknown main item tag 0x0 [ 127.285275][ T5823] netlink: 8 bytes leftover after parsing attributes in process `syz.1.592'. [ 127.296947][ T5408] hid-multitouch 0003:0EEF:72D0.000C: unknown main item tag 0x0 [ 127.309920][ T5408] hid-multitouch 0003:0EEF:72D0.000C: unknown main item tag 0x0 [ 127.317544][ T4284] usb 3-1: USB disconnect, device number 3 [ 127.324372][ T5408] hid-multitouch 0003:0EEF:72D0.000C: unknown main item tag 0x0 [ 127.343816][ T5408] hid-multitouch 0003:0EEF:72D0.000C: hidraw0: USB HID v0.08 Device [HID 0eef:72d0] on usb-dummy_hcd.3-1/input0 [ 127.428610][ T5408] usb 4-1: USB disconnect, device number 8 [ 127.455124][ T4314] usb 5-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 127.464224][ T4314] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.541166][ T4314] usb 5-1: Product: syz [ 127.550541][ T4314] usb 5-1: Manufacturer: syz [ 127.565338][ T4314] usb 5-1: SerialNumber: syz [ 127.573623][ T4314] usb 5-1: config 0 descriptor?? [ 127.620100][ T5829] fido_id[5829]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 127.661923][ T4314] usb 5-1: selecting invalid altsetting 1 [ 127.688714][ T4314] dvb_ttusb_budget: ttusb_init_controller: error [ 127.704183][ T4314] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 127.821563][ T4314] DVB: Unable to find symbol stv0299_attach() [ 127.910964][ T4314] DVB: Unable to find symbol tda8083_attach() [ 127.950655][ T4314] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 127.964751][ T5842] netlink: 4 bytes leftover after parsing attributes in process `syz.1.599'. [ 127.993439][ T4314] usb 5-1: USB disconnect, device number 8 [ 128.030429][ T5844] ubi8: attaching mtd0 [ 128.049147][ T5844] ubi8: scanning is finished [ 128.077775][ T5844] ubi8: empty MTD device detected [ 128.088025][ T5844] ubi8 error: ubi_read_volume_table: LEB size too small for a volume record [ 128.130420][ T5844] ubi8 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 128.269011][ T5852] set_capacity_and_notify: 6 callbacks suppressed [ 128.269029][ T5852] loop3: detected capacity change from 0 to 512 [ 128.295549][ T5854] loop1: detected capacity change from 0 to 16 [ 128.315744][ T5854] erofs: (device loop1): mounted with root inode @ nid 36. [ 128.397025][ T5852] EXT4-fs (loop3): Ignoring removed nobh option [ 128.466732][ T5852] fscrypt (loop3, inode 2): Error -61 getting encryption context [ 128.495023][ T5852] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -61 [ 128.583141][ T5852] EXT4-fs error (device loop3): ext4_orphan_get:1406: inode #13: comm syz.3.603: inode has both inline data and extents flags [ 128.624262][ T5852] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.603: couldn't read orphan inode 13 (err -117) [ 128.652367][ T5852] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,nouid32,nobh,stripe=0x000000000000ffff,block_validity,grpjquota=",errors=continue. Quota mode: writeback. [ 128.791008][ T5852] EXT4-fs (loop3): old and new quota format mixing [ 128.936795][ T5865] loop1: detected capacity change from 0 to 64 [ 128.976367][ T5867] loop0: detected capacity change from 0 to 256 [ 128.984904][ T26] audit: type=1400 audit(1781233255.508:10): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=3A2F2F26B43138FC84 pid=5864 comm="syz.1.611" [ 129.081957][ T5861] loop4: detected capacity change from 0 to 32768 [ 129.103581][ T5867] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 129.264141][ T5878] loop3: detected capacity change from 0 to 1024 [ 129.299745][ T5878] hfsplus: unable to parse mount options [ 129.429606][ T5878] kAFS: unable to lookup cell 'sYSAٸ?hrF5=X$jӋZ^ۺ2׳Hq=VJtd琎zhD A[stL}Zv݌̥ϳ܏y 43ۣ#989?\?mGiXR~Eڟ[_r/Wnn޸qOPML{2/D#DkLL~8@<T4lݬo\ŵX1q)+T_^dZiV/T>Vz;ղc˿,<@' [ 129.458803][ T5888] loop0: detected capacity change from 0 to 1024 [ 129.514215][ T5891] netlink: 'syz.2.621': attribute type 62 has an invalid length. [ 130.041447][ T5924] loop2: detected capacity change from 0 to 256 [ 130.084706][ T5921] loop3: detected capacity change from 0 to 4096 [ 130.107846][ T5926] mmap: syz.4.637 (5926) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 130.149279][ T5927] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 130.210740][ T5924] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 130.314364][ T5921] NILFS (loop3): nilfs_palloc_commit_free_entry (ino=6): entry number 14 already freed [ 130.357645][ T5932] loop4: detected capacity change from 0 to 4096 [ 130.486426][ T5938] netlink: 16 bytes leftover after parsing attributes in process `syz.2.641'. [ 130.721335][ T4192] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 130.742564][ T4192] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 131.000250][ T5954] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 131.069824][ T5954] cramfs: empty filesystem [ 131.086171][ T4300] udevd[4300]: incorrect cramfs checksum on /dev/loop2 [ 131.284857][ T5969] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 131.325009][ T21] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 131.351123][ T5960] NILFS (loop4): DAT doesn't have a block to manage vblocknr = 648518346341351424 [ 131.402992][ T5960] NILFS error (device loop4): nilfs_bmap_truncate: broken bmap (inode number=12) [ 131.490366][ T5960] Remounting filesystem read-only [ 131.535890][ T5960] NILFS (loop4): error -5 truncating bmap (ino=12) [ 131.764104][ T4192] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 131.895068][ T21] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 131.914441][ T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.954831][ T21] usb 4-1: Product: syz [ 131.970068][ T21] usb 4-1: Manufacturer: syz [ 131.974723][ T21] usb 4-1: SerialNumber: syz [ 132.072078][ T21] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 132.120316][ T6003] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 132.164464][ T5990] NILFS (loop1): error -2 preparing GC: cannot delete virtual blocks from DAT file [ 132.228151][ T6005] netlink: 8 bytes leftover after parsing attributes in process `syz.4.674'. [ 132.286930][ T6007] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 2621 [ 132.364141][ T6009] netlink: 16 bytes leftover after parsing attributes in process `syz.2.676'. [ 132.439283][ T6013] netlink: 8 bytes leftover after parsing attributes in process `syz.1.677'. [ 132.511752][ T6013] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan2: link becomes ready [ 132.638464][ T6017] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fff0000) [ 132.657822][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.660276][ T6017] FAT-fs (loop2): Filesystem has been set read-only [ 132.664378][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.692949][ T6017] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fff0000) [ 132.736361][ T6019] ntfs: (device loop0): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 132.838958][ T6019] ntfs: volume version 3.1. [ 132.925063][ T21] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 132.959759][ T6019] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 133.002206][ T6019] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 133.058400][ T6019] ntfs: (device loop0): ntfs_cluster_alloc(): Failed to map page. [ 133.066508][ T6030] bond0: option downdelay: invalid value (18446744073709551607) [ 133.074183][ T6030] bond0: option downdelay: allowed values 0 - 2147483647 [ 133.110622][ T6019] ntfs: (device loop0): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -5). [ 133.127924][ T6019] ntfs: (device loop0): ntfs_attr_extend_allocation(): Cannot extend allocation of inode 0x43, attribute type 0x80, because the conversion from resident to non-resident attribute failed with error code -5. [ 133.189735][ T6019] ntfs: (device loop0): ntfs_prepare_file_for_write(): Cannot perform write to inode 0x43, attribute type 0x80, because extending the allocation failed (error 5). [ 133.304121][ T6036] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 133.350747][ T6036] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 133.358817][ T6014] set_capacity_and_notify: 7 callbacks suppressed [ 133.358832][ T6014] loop4: detected capacity change from 0 to 40427 [ 133.371887][ T6036] hpfs: You really don't want any checks? You are crazy... [ 133.394349][ T6036] hpfs: hpfs_map_sector(): read error [ 133.417858][ T6036] hpfs: code page support is disabled [ 133.423448][ T6036] hpfs: hpfs_map_4sectors(): unaligned read [ 133.431464][ T4749] usb 4-1: USB disconnect, device number 9 [ 133.447478][ T6014] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 133.454491][ T6014] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 133.476425][ T6036] hpfs: hpfs_map_4sectors(): unaligned read [ 133.519458][ T6036] hpfs: filesystem error: unable to find root dir [ 133.534407][ T6014] F2FS-fs (loop4): build fault injection attr: rate: 17008, type: 0x1ffff [ 133.602283][ T6014] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x1f8 [ 133.655140][ T6014] F2FS-fs (loop4): invalid crc value [ 133.703664][ T6014] F2FS-fs (loop4): Found nat_bits in checkpoint [ 133.863265][ T6059] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 133.913068][ T6059] netlink: 8 bytes leftover after parsing attributes in process `syz.0.699'. [ 133.927483][ T6014] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 133.946425][ T6059] netlink: 12 bytes leftover after parsing attributes in process `syz.0.699'. [ 133.955670][ T6014] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 133.965097][ T4447] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 134.025145][ T21] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 134.030090][ T6065] netlink: 'syz.3.701': attribute type 66 has an invalid length. [ 134.034004][ T21] ath9k_htc: Failed to initialize the device [ 134.099735][ T4749] usb 4-1: ath9k_htc: USB layer deinitialized [ 134.340531][ T6078] netlink: 16 bytes leftover after parsing attributes in process `syz.4.708'. [ 134.365140][ T4447] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 134.395235][ T4447] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 134.427446][ T4447] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 134.467361][ T4447] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.508762][ T4447] usb 3-1: config 0 descriptor?? [ 134.530096][ T6091] loop1: detected capacity change from 0 to 1024 [ 134.561016][ T4447] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 134.579120][ T4447] dvb-usb: bulk message failed: -22 (3/0) [ 134.617470][ T4447] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 134.648701][ T6096] netlink: 'syz.0.715': attribute type 1 has an invalid length. [ 134.671590][ T6096] netlink: 128 bytes leftover after parsing attributes in process `syz.0.715'. [ 134.688512][ T4447] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 134.699459][ T4447] usb 3-1: media controller created [ 134.720677][ T4447] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 134.749682][ T6051] dvb-usb: bulk message failed: -22 (2/0) [ 134.781962][ T4447] dvb-usb: bulk message failed: -22 (6/0) [ 134.789986][ T4447] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 134.846641][ T4447] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input8 [ 134.885203][ T4447] dvb-usb: schedule remote query interval to 150 msecs. [ 134.941126][ T4447] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 134.978254][ T4447] usb 3-1: USB disconnect, device number 4 [ 135.014887][ T4314] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 135.069824][ T4447] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 135.209396][ T26] audit: type=1326 audit(1781233261.738:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6115 comm="syz.0.725" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8906aa7e59 code=0x7ffc0000 [ 135.264878][ T4314] usb 4-1: Using ep0 maxpacket: 16 [ 135.273442][ T26] audit: type=1326 audit(1781233261.768:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6115 comm="syz.0.725" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8906aa7e59 code=0x7ffc0000 [ 135.354379][ T26] audit: type=1326 audit(1781233261.768:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6115 comm="syz.0.725" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8906aa7e59 code=0x7ffc0000 [ 135.385037][ T4314] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.396926][ T26] audit: type=1326 audit(1781233261.778:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6115 comm="syz.0.725" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f8906aa7e59 code=0x7ffc0000 [ 135.424880][ T4314] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.467050][ T4314] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 135.480168][ T26] audit: type=1326 audit(1781233261.778:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6115 comm="syz.0.725" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8906aa7e59 code=0x7ffc0000 [ 135.527322][ T26] audit: type=1326 audit(1781233261.778:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6115 comm="syz.0.725" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f8906aa7e59 code=0x7ffc0000 [ 135.532033][ T4314] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 135.570943][ T26] audit: type=1326 audit(1781233261.778:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6115 comm="syz.0.725" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f8906aa7e59 code=0x7ffc0000 [ 135.585900][ T4314] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.650303][ T4314] usb 4-1: config 0 descriptor?? [ 135.706764][ T6104] loop4: detected capacity change from 0 to 32768 [ 136.063886][ T6131] loop2: detected capacity change from 0 to 64 [ 136.129115][ T6114] loop1: detected capacity change from 0 to 40427 [ 136.147980][ T4314] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 136.157963][ T4314] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 136.165290][ T4314] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 136.171638][ T6114] F2FS-fs (loop1): Fix alignment : internally, start(4096) end(16896) block(12288) [ 136.173030][ T4314] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 136.198405][ T4314] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 136.207225][ T6114] F2FS-fs (loop1): invalid crc value [ 136.214049][ T4314] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 136.223048][ T4314] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 136.231951][ T4314] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 136.243936][ T4314] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 136.264377][ T4314] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 136.290529][ T6134] loop2: detected capacity change from 0 to 64 [ 136.292482][ T275] ------------[ cut here ]------------ [ 136.297896][ T6114] F2FS-fs (loop1): Found nat_bits in checkpoint [ 136.314090][ T275] WARNING: CPU: 1 PID: 275 at fs/jfs/jfs_dmap.c:2943 dbAdjTree+0x448/0x4d0 [ 136.317457][ T4314] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 136.365350][ T275] Modules linked in: [ 136.370629][ T275] CPU: 1 PID: 275 Comm: jfsCommit Not tainted syzkaller #0 [ 136.392108][ T4314] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 136.400513][ T6134] attempt to access beyond end of device [ 136.400513][ T6134] loop2: rw=0, want=414, limit=64 [ 136.417290][ T275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 136.420765][ T4314] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 136.467882][ T275] RIP: 0010:dbAdjTree+0x448/0x4d0 [ 136.476610][ T4314] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 136.486911][ T275] Code: e8 ed ec ee fe e9 5a ff ff ff e8 b3 d3 a9 fe eb 05 e8 ac d3 a9 fe 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 98 d3 a9 fe <0f> 0b eb e8 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ee fb ff ff 4c [ 136.490454][ T4314] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 136.512007][ T6134] Trying to free block not in datazone [ 136.531816][ T4314] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.000D/input/input9 [ 136.555392][ T4314] microsoft 0003:045E:07DA.000D: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 136.560360][ T275] RSP: 0018:ffffc900026ef668 EFLAGS: 00010293 [ 136.569464][ T6114] F2FS-fs (loop1): recover fsync data on readonly fs [ 136.588967][ T4314] usb 4-1: USB disconnect, device number 10 [ 136.603413][ T6135] Trying to free block not in datazone [ 136.612983][ T275] [ 136.619705][ T6114] F2FS-fs (loop1): Cannot turn on quotas: -2 on 1 [ 136.631672][ T275] RAX: ffffffff82cf7558 RBX: ffff888022a63010 RCX: ffff88801dd28000 [ 136.646882][ T6114] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2 [ 136.664748][ T275] RDX: 0000000000000000 RSI: 0000000000000155 RDI: 0000000000020056 [ 136.683882][ T6114] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 136.712285][ T275] RBP: 0000000000020056 R08: ffffea00008a98c7 R09: 1ffffd4000115318 [ 136.734005][ T4245] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.748331][ T275] R10: dffffc0000000000 R11: fffff94000115319 R12: ffff888022a63018 [ 136.772352][ T275] R13: dffffc0000000000 R14: 0000000000000004 R15: 0000000000000155 [ 136.789764][ T6136] fido_id[6136]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 136.831977][ T275] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 136.895495][ T275] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 136.902148][ T275] CR2: 00007f69a8e67000 CR3: 0000000029f2a000 CR4: 00000000003506e0 [ 136.927669][ T275] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 136.936018][ T275] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 136.944139][ T275] Call Trace: [ 136.952529][ T275] [ 136.960423][ T275] ? __might_sleep+0xf0/0xf0 [ 136.970379][ T275] ? mark_page_accessed+0xce5/0x12b0 [ 136.977131][ T275] dbJoin+0x238/0x300 [ 136.981178][ T275] dbFreeBits+0x4e1/0xd80 [ 136.988372][ T275] dbFree+0x32e/0x640 [ 136.992448][ T275] txFreeMap+0x9e2/0xde0 [ 136.999601][ T275] ? do_raw_spin_unlock+0x11d/0x230 [ 137.005204][ T275] xtTruncate+0xcc0/0x2d10 [ 137.008843][ T4245] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.009697][ T275] ? xtInitRoot+0x160/0x160 [ 137.025311][ T275] ? invalidate_inode_page+0x360/0x360 [ 137.030909][ T275] ? __lock_acquire+0x7d10/0x7d10 [ 137.036409][ T275] ? do_raw_spin_lock+0x128/0x2f0 [ 137.041567][ T275] ? memset+0x1e/0x40 [ 137.045973][ T275] ? __dquot_initialize+0x213/0xcd0 [ 137.051750][ T275] jfs_free_zero_link+0x358/0x4b0 [ 137.057367][ T275] ? inode_wait_for_writeback+0x1df/0x220 [ 137.063285][ T275] ? jfs_write_failed+0x190/0x190 [ 137.068780][ T275] ? sb_clear_inode_writeback+0x360/0x360 [ 137.074696][ T275] ? do_raw_spin_lock+0x128/0x2f0 [ 137.104090][ T275] ? bit_waitqueue+0x30/0x30 [ 137.115944][ T275] jfs_evict_inode+0x359/0x430 [ 137.120876][ T275] ? evict+0x4c3/0x8d0 [ 137.136872][ T275] ? jfs_write_inode+0x220/0x220 [ 137.154394][ T275] evict+0x4c9/0x8d0 [ 137.165822][ T275] ? proc_nr_inodes+0x320/0x320 [ 137.170574][ T4245] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.170946][ T275] ? do_raw_spin_unlock+0x11d/0x230 [ 137.187672][ T275] ? _raw_spin_unlock+0x24/0x40 [ 137.192676][ T275] ? iput+0x706/0x8a0 [ 137.197387][ T275] jfs_lazycommit+0x435/0xb40 [ 137.202192][ T275] ? txFreelock+0x5a0/0x5a0 [ 137.207133][ T275] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 137.213153][ T275] ? sched_dynamic_update+0x210/0x210 [ 137.221766][ T275] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 137.227836][ T275] ? __kthread_parkme+0x157/0x1b0 [ 137.232985][ T275] kthread+0x436/0x520 [ 137.237248][ T275] ? txFreelock+0x5a0/0x5a0 [ 137.241868][ T275] ? kthread_blkcg+0xd0/0xd0 [ 137.246654][ T275] ret_from_fork+0x1f/0x30 [ 137.251202][ T275] [ 137.254328][ T275] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 137.261629][ T275] CPU: 1 PID: 275 Comm: jfsCommit Not tainted syzkaller #0 [ 137.268851][ T275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 137.279144][ T275] Call Trace: [ 137.282448][ T275] [ 137.285401][ T275] dump_stack_lvl+0x188/0x250 [ 137.290111][ T275] ? show_regs_print_info+0x20/0x20 [ 137.295339][ T275] ? load_image+0x400/0x400 [ 137.299879][ T275] panic+0x2e5/0x810 [ 137.303810][ T275] ? bpf_jit_dump+0xd0/0xd0 [ 137.308350][ T275] ? ret_from_fork+0x1f/0x30 [ 137.313013][ T275] ? dbAdjTree+0x448/0x4d0 [ 137.317467][ T275] __warn+0x248/0x2b0 [ 137.321477][ T275] ? dbAdjTree+0x448/0x4d0 [ 137.325923][ T275] report_bug+0x1b7/0x2e0 [ 137.330281][ T275] handle_bug+0x3a/0x70 [ 137.334474][ T275] exc_invalid_op+0x16/0x40 [ 137.339004][ T275] asm_exc_invalid_op+0x16/0x20 [ 137.343879][ T275] RIP: 0010:dbAdjTree+0x448/0x4d0 [ 137.348937][ T275] Code: e8 ed ec ee fe e9 5a ff ff ff e8 b3 d3 a9 fe eb 05 e8 ac d3 a9 fe 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 98 d3 a9 fe <0f> 0b eb e8 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ee fb ff ff 4c [ 137.368606][ T275] RSP: 0018:ffffc900026ef668 EFLAGS: 00010293 [ 137.375038][ T275] RAX: ffffffff82cf7558 RBX: ffff888022a63010 RCX: ffff88801dd28000 [ 137.383043][ T275] RDX: 0000000000000000 RSI: 0000000000000155 RDI: 0000000000020056 [ 137.391047][ T275] RBP: 0000000000020056 R08: ffffea00008a98c7 R09: 1ffffd4000115318 [ 137.399141][ T275] R10: dffffc0000000000 R11: fffff94000115319 R12: ffff888022a63018 [ 137.407144][ T275] R13: dffffc0000000000 R14: 0000000000000004 R15: 0000000000000155 [ 137.415149][ T275] ? dbAdjTree+0x448/0x4d0 [ 137.419610][ T275] ? dbAdjTree+0x448/0x4d0 [ 137.424080][ T275] ? __might_sleep+0xf0/0xf0 [ 137.428718][ T275] ? mark_page_accessed+0xce5/0x12b0 [ 137.434232][ T275] dbJoin+0x238/0x300 [ 137.438271][ T275] dbFreeBits+0x4e1/0xd80 [ 137.442654][ T275] dbFree+0x32e/0x640 [ 137.446677][ T275] txFreeMap+0x9e2/0xde0 [ 137.450951][ T275] ? do_raw_spin_unlock+0x11d/0x230 [ 137.456186][ T275] xtTruncate+0xcc0/0x2d10 [ 137.460664][ T275] ? xtInitRoot+0x160/0x160 [ 137.465213][ T275] ? invalidate_inode_page+0x360/0x360 [ 137.470705][ T275] ? __lock_acquire+0x7d10/0x7d10 [ 137.475755][ T275] ? do_raw_spin_lock+0x128/0x2f0 [ 137.480815][ T275] ? memset+0x1e/0x40 [ 137.484818][ T275] ? __dquot_initialize+0x213/0xcd0 [ 137.490052][ T275] jfs_free_zero_link+0x358/0x4b0 [ 137.495113][ T275] ? inode_wait_for_writeback+0x1df/0x220 [ 137.500870][ T275] ? jfs_write_failed+0x190/0x190 [ 137.505928][ T275] ? sb_clear_inode_writeback+0x360/0x360 [ 137.511683][ T275] ? do_raw_spin_lock+0x128/0x2f0 [ 137.516741][ T275] ? bit_waitqueue+0x30/0x30 [ 137.521394][ T275] jfs_evict_inode+0x359/0x430 [ 137.526187][ T275] ? evict+0x4c3/0x8d0 [ 137.530295][ T275] ? jfs_write_inode+0x220/0x220 [ 137.535262][ T275] evict+0x4c9/0x8d0 [ 137.539211][ T275] ? proc_nr_inodes+0x320/0x320 [ 137.544063][ T275] ? do_raw_spin_unlock+0x11d/0x230 [ 137.549270][ T275] ? _raw_spin_unlock+0x24/0x40 [ 137.554164][ T275] ? iput+0x706/0x8a0 [ 137.558189][ T275] jfs_lazycommit+0x435/0xb40 [ 137.563032][ T275] ? txFreelock+0x5a0/0x5a0 [ 137.567567][ T275] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 137.573500][ T275] ? sched_dynamic_update+0x210/0x210 [ 137.578913][ T275] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 137.584856][ T275] ? __kthread_parkme+0x157/0x1b0 [ 137.589920][ T275] kthread+0x436/0x520 [ 137.594019][ T275] ? txFreelock+0x5a0/0x5a0 [ 137.598550][ T275] ? kthread_blkcg+0xd0/0xd0 [ 137.603177][ T275] ret_from_fork+0x1f/0x30 [ 137.607641][ T275] [ 137.610949][ T275] Kernel Offset: disabled [ 137.615541][ T275] Rebooting in 86400 seconds..