last executing test programs: 7.68838355s ago: executing program 3 (id=1237): r0 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1b1c, 0x1d00, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x6, [{{0x9, 0x4, 0x0, 0x10, 0x15, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x36, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc, 0x0, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x81, 0x8}}]}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_read(r0, 0x2, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)={0x0, 0x4, 0x57, {0x57, 0x1, "a7ea3163fd3bc518194b120c1e73d54cfc4ad2841ef4f6a3fd7c59ccb785025f2e7b3504ff87cbfd10f3c080b73385a7015d3a32ed6b5217cdbb6fadb2ea7a288982d5337c364daf03bd400d66293b0a2b103dd93f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 5.387891046s ago: executing program 3 (id=1256): r0 = socket(0x10, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="440000001800010000000000000000000a002000000000000000000018001600140001000100000000000000000010000070000008000400", @ANYRES32=r2, @ANYBLOB="0600150008"], 0x44}}, 0x0) 5.340086962s ago: executing program 3 (id=1258): socket$l2tp(0x2, 0x2, 0x73) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)={0x44, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010100}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @remote}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x4000) 5.140333988s ago: executing program 3 (id=1261): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000300)='./file0\x00', 0x2000004, &(0x7f0000000500)=ANY=[@ANYBLOB="00e3078fbb81fca067351e718b1742354077ee6bdefb8addaf7c0c235850b66dac0ba564a370a77264f1a57d44c84efc49fa6c64b9351ea8fd59a458a7791fedcc466b0eab6ca6dd32fcc642517fa3219450b91e3118bf2b9d3cfa562ea44c058252d29181c81c637c6ba7d179122eee61e5c9f68165b6abd469da8d90c0632f7265bb040411d5748c475bb33a7ce77afb2ea533f1653d8cb67dad989bb0a1c16881f0d91d6cbd3751c289aecf4a00"/185, @ANYBLOB="b12398658f5ec6488081d04c33b5a507b1cac8c4376c1895046a1e6e068e53d002eb4279796b4c014f4febee026f87bd0eea7d27598f7ff2687552fdd651", @ANYRESOCT=0x0, @ANYRES64], 0x1, 0x497, &(0x7f0000002480)="$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") mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x80, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x2) getdents64(r0, 0x0, 0x31) 4.748496208s ago: executing program 3 (id=1264): r0 = timerfd_create(0x0, 0x80000) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) ioctl$TFD_IOC_SET_TICKS(r0, 0x40085400, &(0x7f0000000040)=0x8004) 4.228528966s ago: executing program 3 (id=1267): rseq(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) r0 = semget$private(0x0, 0x7, 0x0) semtimedop(r0, &(0x7f0000000300)=[{0x3, 0xfff7, 0x1000}], 0x1, 0x0) semctl$SETVAL(r0, 0x3, 0x10, &(0x7f0000000040)=0x4) 3.912253456s ago: executing program 32 (id=1267): rseq(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) r0 = semget$private(0x0, 0x7, 0x0) semtimedop(r0, &(0x7f0000000300)=[{0x3, 0xfff7, 0x1000}], 0x1, 0x0) semctl$SETVAL(r0, 0x3, 0x10, &(0x7f0000000040)=0x4) 3.889942549s ago: executing program 2 (id=1270): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_FPU(r2, 0x81a0ae8c, &(0x7f0000000300)) 3.354388308s ago: executing program 2 (id=1274): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000340), &(0x7f0000000380)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 3.054955416s ago: executing program 2 (id=1276): r0 = getpgrp(0xffffffffffffffff) syz_pidfd_open(r0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0xe, 0x80, 0x6, 0x3, 0xb819, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x3, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x2, 0x7, 0x4, 0x3c5b, 0x1, 0x1ff, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x8002, 0xb, 0x3, 0x8001, 0x4c74, 0x80000000, 0x800242, 0x2, 0xa, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x7, 0x8, 0x4, 0x1, 0x40], [0x1000000a, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x1, 0x1000, 0xfffffffc, 0x0, 0x4, 0x7, 0x5, 0x2f, 0xe, 0x1000312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x40008000, 0x9, 0x273d, 0x401, 0xfff, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0x8, 0x1, 0x2, 0x2, 0x20009, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x40000100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0xa, 0x5, 0x5, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x4, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x40003, 0x0, 0x3, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0xfffffffe, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x6, 0x1, 0x2, 0x14c, 0x60a7, 0x4, 0x7, 0xffffffff, 0x7ffffffe, 0x7, 0x4, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x7, 0x30b1d693, 0x5a2d, 0xc, 0xfffffff9, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0x9, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 2.764198254s ago: executing program 2 (id=1278): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000580)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 2.521892215s ago: executing program 1 (id=1280): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000000)) 2.513176266s ago: executing program 0 (id=1281): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) unshare(0x22020600) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) 2.312548462s ago: executing program 0 (id=1282): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000300)=[{&(0x7f00000001c0)="580000001400192340024b80040d8c560aff820fffff5bab003a0000002058000b4835ca945f010ebc000000000000008000f0fffeffe809005300fff5dd00000010400100030c100000000000224e0000d9af4c4ccf6c01", 0x58}], 0x1) syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), r0) 2.243723481s ago: executing program 0 (id=1283): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x2002) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000100)=0x924) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) 1.793025919s ago: executing program 2 (id=1284): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000000)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) 1.204559255s ago: executing program 0 (id=1285): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) msgrcv(0x0, 0x0, 0x0, 0x1, 0x1000) 1.002692031s ago: executing program 2 (id=1286): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000280)={[{@acl}, {@dir_resv_level={'dir_resv_level', 0x3d, 0x7}}, {@dir_resv_level={'dir_resv_level', 0x3d, 0x3}}, {@resv_level={'resv_level', 0x3d, 0x6}}, {@localflocks}, {@heartbeat_none}, {@coherency_full}, {@noacl}]}, 0x1, 0x4421, &(0x7f0000004500)="$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") open(&(0x7f00000000c0)='./file1\x00', 0x14927e, 0x6) setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f00000013c0)=ANY=[], 0x700, 0x0) llistxattr(&(0x7f00000001c0)='./file1\x00', 0x0, 0x0) 810.384926ms ago: executing program 1 (id=1287): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8080, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x5) 656.459436ms ago: executing program 1 (id=1288): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000980)={0x34, 0x0, [{0x1, 0x0, &(0x7f0000000080)=""/185}, {0xb000, 0x0, &(0x7f0000000140)=""/121}, {0x70000, 0x0, &(0x7f0000000000)=""/44}, {0xddd9b000, 0x0, &(0x7f0000000800)=""/149}, {0xeeee0000, 0x0, &(0x7f00000008c0)=""/147}]}) 572.462526ms ago: executing program 1 (id=1289): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="011b26b67000fddbdf2507"], 0x58}, 0x1, 0x0, 0x0, 0x5}, 0x404c044) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r0) 400.233449ms ago: executing program 1 (id=1290): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0xff}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000001c0)=0x3b) 200.540935ms ago: executing program 0 (id=1291): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x2, 0xfffffffffffffffd) 141.086822ms ago: executing program 1 (id=1292): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f00000001c0)=[{0x0, 0xe1, 0x0, 0x0, @time={0x0, 0x1}, {}, {}, @result={0x0, 0x1}}], 0x1c) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) 0s ago: executing program 0 (id=1293): syz_usb_connect(0x0, 0x36, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='nobarrier,mode=lfs,fsync_mode=strict\x00acl,\x00'], 0x1, 0x5535, &(0x7f0000000f40)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.idle_time\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x8004587d, &(0x7f0000000080)) kernel console output (not intermixed with test programs): T5851] usbip-host 1-1: 1-1 is not in match_busid table... skip! [ 130.887573][ T7095] EXT4-fs error (device loop3): ext4_validate_block_bitmap:430: comm syz.3.453: bg 0: block 5: invalid block bitmap [ 130.892811][ T7101] binder: 7100:7101 ioctl 4018620d 0 returned -22 [ 131.077739][ T5829] usb 1-1: USB disconnect, device number 5 [ 131.134624][ T5763] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.304164][ T7111] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 131.337369][ T7111] ext4 filesystem being mounted at /106/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.446809][ T5763] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 131.757060][ T7107] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop2 scanned by syz.2.457 (7107) [ 131.818271][ T7107] BTRFS info (device loop2): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 131.865025][ T7107] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 131.894125][ T7107] BTRFS info (device loop2): using free space tree [ 131.922847][ T7120] set_capacity_and_notify: 3 callbacks suppressed [ 131.922861][ T7120] loop0: detected capacity change from 0 to 64 [ 131.941019][ T7114] loop1: detected capacity change from 0 to 32768 [ 132.003522][ T7114] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 132.135451][ T7107] BTRFS info (device loop2): enabling ssd optimizations [ 132.152707][ T7107] BTRFS info (device loop2): auto enabling async discard [ 132.185165][ T5768] Bluetooth: hci0: command 0x0c1a tx timeout [ 132.282810][ T7114] XFS (loop1): Ending clean mount [ 132.309079][ T7114] XFS (loop1): Quotacheck needed: Please wait. [ 132.335447][ T5768] Bluetooth: hci1: command 0x0c1a tx timeout [ 132.355352][ T7116] loop3: detected capacity change from 0 to 40427 [ 132.403987][ T7116] F2FS-fs (loop3): invalid crc value [ 132.416463][ T5773] Bluetooth: hci2: command 0x0c1a tx timeout [ 132.433071][ T7116] F2FS-fs (loop3): Found nat_bits in checkpoint [ 132.484845][ T7114] XFS (loop1): Quotacheck: Done. [ 132.575867][ T5773] Bluetooth: hci3: command 0x0c1a tx timeout [ 132.624774][ T5765] BTRFS info (device loop2): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 132.679970][ T7116] F2FS-fs (loop3): Start checkpoint disabled! [ 132.738720][ T7151] loop0: detected capacity change from 0 to 1024 [ 132.745585][ T7116] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 132.788578][ T5762] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 132.964458][ T7151] hfsplus: xattr search failed [ 133.069631][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.076867][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.942049][ T7163] loop3: detected capacity change from 0 to 32768 [ 133.953791][ T7163] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.468 (7163) [ 133.977652][ T7163] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 133.989494][ T7163] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 134.002918][ T7163] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 134.023812][ T7163] BTRFS info (device loop3): use zstd compression, level 3 [ 134.031848][ T7163] BTRFS info (device loop3): using free space tree [ 134.076242][ T7163] BTRFS info (device loop3): enabling ssd optimizations [ 134.083513][ T7163] BTRFS info (device loop3): auto enabling async discard [ 134.255418][ T5773] Bluetooth: hci0: command 0x0c1a tx timeout [ 134.285485][ T5829] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 134.333498][ T5763] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 134.425722][ T5773] Bluetooth: hci1: command 0x0c1a tx timeout [ 134.500590][ T5773] Bluetooth: hci2: command 0x0c1a tx timeout [ 134.506217][ T7193] bond0: entered promiscuous mode [ 134.527975][ T5829] usb 3-1: Using ep0 maxpacket: 16 [ 134.538100][ T7193] bond_slave_0: entered promiscuous mode [ 134.570305][ T5829] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.582061][ T7193] bond_slave_1: entered promiscuous mode [ 134.601606][ T5829] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.615755][ T7193] dummy0: entered promiscuous mode [ 134.632993][ T7193] hsr1: entered promiscuous mode [ 134.645979][ T5829] usb 3-1: config 0 interface 0 has no altsetting 0 [ 134.655411][ T5773] Bluetooth: hci3: command 0x0c1a tx timeout [ 134.663008][ T7193] hsr1: entered allmulticast mode [ 134.671126][ T5829] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 134.695087][ T5829] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.725031][ T7193] bond0: entered allmulticast mode [ 134.730293][ T7193] bond_slave_0: entered allmulticast mode [ 134.736476][ T7193] bond_slave_1: entered allmulticast mode [ 134.738694][ T5829] usb 3-1: config 0 descriptor?? [ 134.746638][ T7193] dummy0: entered allmulticast mode [ 135.071269][ T7205] loop0: detected capacity change from 0 to 64 [ 135.081761][ T7207] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 135.088886][ T7207] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 135.198701][ T5829] hid (null): report_id 3323596431 is invalid [ 135.225519][ T5829] hid (null): unknown global tag 0xe [ 135.231281][ T5829] hid (null): unknown global tag 0xe [ 135.242847][ T5829] hid (null): unknown global tag 0xe [ 135.252724][ T5829] hid (null): unknown global tag 0x63 [ 135.252761][ T7210] tipc: Started in network mode [ 135.258692][ T5829] hid (null): unknown global tag 0xd [ 135.263859][ T7210] tipc: Node identity ac14140f, cluster identity 4711 [ 135.298697][ T7210] tipc: New replicast peer: 255.255.255.255 [ 135.308226][ T7210] tipc: Enabled bearer , priority 10 [ 135.434675][ T5828] usb 3-1: USB disconnect, device number 6 [ 135.623793][ T7226] loop0: detected capacity change from 0 to 2048 [ 135.644876][ T7226] EXT4-fs: Ignoring removed mblk_io_submit option [ 135.673028][ T7226] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.778727][ T7226] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.487: bg 0: block 234: padding at end of block bitmap is not set [ 135.862145][ T7226] EXT4-fs (loop0): Remounting filesystem read-only [ 135.912971][ T5764] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.035397][ T7241] program syz.3.492 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 136.074572][ T7245] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 136.358236][ T5773] Bluetooth: hci0: command 0x0c1a tx timeout [ 136.473844][ T7258] bond0: entered promiscuous mode [ 136.486801][ T7258] bond_slave_0: entered promiscuous mode [ 136.492993][ T7258] bond_slave_1: entered promiscuous mode [ 136.499079][ T5773] Bluetooth: hci1: command 0x0c1a tx timeout [ 136.514220][ T7258] batadv_slave_0: entered promiscuous mode [ 136.521675][ T7258] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 136.535901][ T7258] Cannot create hsr debugfs directory [ 136.575075][ T5773] Bluetooth: hci2: command 0x0c1a tx timeout [ 136.735746][ T5773] Bluetooth: hci3: command 0x0c1a tx timeout [ 136.745193][ T789] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 136.958608][ T789] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 136.988655][ T789] usb 2-1: config 0 has no interface number 0 [ 137.017754][ T789] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 137.050642][ T789] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.094828][ T789] usb 2-1: Product: syz [ 137.121012][ T789] usb 2-1: Manufacturer: syz [ 137.142875][ T789] usb 2-1: SerialNumber: syz [ 137.196886][ T8] tipc: Node number set to 2886997007 [ 137.202355][ T789] usb 2-1: config 0 descriptor?? [ 137.271865][ T7269] loop0: detected capacity change from 0 to 2048 [ 137.339574][ T7269] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 137.432946][ T27] audit: type=1800 audit(1768830689.777:18): pid=7269 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.504" name="file1" dev="loop0" ino=1346 res=0 errno=0 [ 138.101423][ T789] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 138.145579][ T789] asix 2-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 138.214114][ T789] asix: probe of 2-1:0.251 failed with error -71 [ 138.259957][ T789] usb 2-1: USB disconnect, device number 6 [ 138.280966][ T7251] loop2: detected capacity change from 0 to 262144 [ 138.352108][ T7251] F2FS-fs (loop2): Found nat_bits in checkpoint [ 138.417119][ T7251] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 138.460123][ T7267] loop3: detected capacity change from 0 to 40427 [ 138.497771][ T7251] F2FS-fs (loop2): inconsistent node block, nid:8, node_footer[nid:134217736,ino:8,ofs:0,cpver:58012970595321314,blkaddr:30726] [ 138.525478][ T7267] F2FS-fs (loop3): Wrong segment_count / block_count (31 > 0) [ 138.535597][ T7267] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 138.594594][ T7267] F2FS-fs (loop3): invalid crc value [ 138.641671][ T7267] F2FS-fs (loop3): Found nat_bits in checkpoint [ 138.826546][ T5773] Bluetooth: hci3: command 0x0c1a tx timeout [ 138.853704][ T7267] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 138.914988][ T7267] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 139.072063][ T7294] IPv6: NLM_F_REPLACE set, but no existing node found! [ 139.193383][ T7295] loop2: detected capacity change from 0 to 4096 [ 139.235245][ T7295] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 139.545606][ T41] ntfs3: loop2: ino=1e, ntfs3_write_inode failed, -22. [ 140.124002][ T7317] macvlan0: entered promiscuous mode [ 140.165093][ T5828] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 140.243734][ T7309] loop2: detected capacity change from 0 to 32768 [ 140.266583][ T7309] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 140.311311][ T7309] JBD2: Ignoring recovery information on journal [ 140.350757][ T7320] netlink: 16 bytes leftover after parsing attributes in process `syz.3.524'. [ 140.388044][ T5828] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 140.423692][ T5828] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.453699][ T5828] usb 2-1: New USB device found, idVendor=056a, idProduct=f43b, bcdDevice=ff.ff [ 140.463241][ T7323] loop0: detected capacity change from 0 to 512 [ 140.473533][ T7309] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 140.482844][ T5828] usb 2-1: New USB device strings: Mfr=255, Product=0, SerialNumber=0 [ 140.508194][ T5828] usb 2-1: Manufacturer: syz [ 140.521995][ T5828] usb 2-1: config 0 descriptor?? [ 140.573539][ T7323] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.753769][ T7313] loop1: detected capacity change from 0 to 512 [ 140.764793][ T27] audit: type=1800 audit(1768830693.117:19): pid=7329 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.519" name="file1" dev="loop2" ino=17059 res=0 errno=0 [ 140.787029][ T7313] EXT4-fs: quotafile must be on filesystem root [ 140.835676][ T5979] blk_print_req_error: 44 callbacks suppressed [ 140.835695][ T5979] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 140.851729][ T7309] syz.2.519 (7309) used greatest stack depth: 18224 bytes left [ 140.876469][ T5764] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.914914][ T49] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 140.971292][ T8] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 140.982864][ T49] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 141.001265][ T5765] ocfs2: Unmounting device (7,2) on (node local) [ 141.039108][ T5828] wacom 0003:056A:F43B.000A: Unknown device_type for 'syz'. Ignoring. [ 141.135385][ T5828] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 141.227557][ T5828] usb 2-1: USB disconnect, device number 7 [ 141.590015][ T7332] loop3: detected capacity change from 0 to 32768 [ 141.666192][ T7332] XFS (loop3): DAX unsupported by block device. Turning off DAX. [ 141.679911][ T7332] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 141.821764][ T7332] XFS (loop3): Ending clean mount [ 141.861611][ T7332] XFS (loop3): Quotacheck needed: Please wait. [ 141.867607][ T7355] Bluetooth: MGMT ver 1.22 [ 141.887061][ T5828] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_cntbt block 0x10 [ 141.910545][ T5828] XFS (loop3): Unmount and run xfs_repair [ 141.921534][ T5828] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 141.935379][ T8] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 141.953894][ T5828] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 141.974968][ T5828] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10 ................ [ 141.998615][ T5828] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 142.018878][ T5828] 00000030: 00 00 00 00 20 bb 84 11 00 00 04 4e 00 00 00 02 .... ......N.... [ 142.035869][ T7338] loop0: detected capacity change from 0 to 32768 [ 142.043589][ T7338] XFS: attr2 mount option is deprecated. [ 142.055029][ T5828] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00 ...`............ [ 142.069772][ T788] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 142.077511][ T5828] 00000050: 00 00 00 00 00 00 07 00 00 00 00 00 00 00 00 00 ................ [ 142.103474][ T5828] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 142.120437][ T5828] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 142.136874][ T49] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x10 len 8 error 74 [ 142.163029][ T7338] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 142.211520][ T7332] XFS (loop3): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 142.265461][ T788] usb 3-1: Using ep0 maxpacket: 32 [ 142.289763][ T788] usb 3-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 142.330757][ T5763] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 142.332782][ T788] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.377468][ T7338] XFS (loop0): Ending clean mount [ 142.390701][ T788] usb 3-1: config 0 descriptor?? [ 142.398382][ T7338] XFS (loop0): Quotacheck needed: Please wait. [ 142.437403][ T788] as10x_usb: device has been detected [ 142.443568][ T788] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 142.473849][ T788] usb 3-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 142.559079][ T788] as10x_usb: error during firmware upload part1 [ 142.559199][ T7338] XFS (loop0): Quotacheck: Done. [ 142.584687][ T788] Registered device nBox DVB-T Dongle [ 142.764128][ T5802] usb 3-1: USB disconnect, device number 7 [ 142.779988][ T5764] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 142.884791][ T5802] Unregistered device nBox DVB-T Dongle [ 142.890902][ T5802] as10x_usb: device has been disconnected [ 143.284258][ T7374] Set syz1 is full, maxelem 4110 reached [ 143.423554][ T7388] netlink: 68 bytes leftover after parsing attributes in process `syz.0.545'. [ 143.505107][ T5829] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 143.691593][ T7396] loop2: detected capacity change from 0 to 4096 [ 143.700736][ T7396] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 143.725162][ T5829] usb 4-1: Using ep0 maxpacket: 16 [ 143.730637][ T7396] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 4096) [ 143.750997][ T5829] usb 4-1: config 0 has an invalid interface number: 236 but max is 0 [ 143.768972][ T5829] usb 4-1: config 0 has no interface number 0 [ 143.785057][ T5829] usb 4-1: config 0 interface 236 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.788308][ T7399] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 143.811151][ T5829] usb 4-1: config 0 interface 236 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 143.849552][ T5829] usb 4-1: config 0 interface 236 has no altsetting 0 [ 143.858311][ T5829] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 143.873328][ T5829] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.894620][ T5829] usb 4-1: config 0 descriptor?? [ 143.920263][ T5829] usbhid 4-1:0.236: can't add hid device: -22 [ 143.942055][ T5829] usbhid: probe of 4-1:0.236 failed with error -22 [ 144.289142][ T5802] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 144.427282][ T7414] loop1: detected capacity change from 0 to 256 [ 144.490007][ T5802] usb 1-1: Using ep0 maxpacket: 8 [ 144.502568][ T5802] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 144.521998][ T5802] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.551359][ T5802] pvrusb2: Hardware description: Terratec Grabster AV400 [ 144.564960][ T5802] pvrusb2: ********** [ 144.573875][ T5802] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 144.587710][ T5802] pvrusb2: Important functionality might not be entirely working. [ 144.603182][ T5802] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 144.624367][ T5802] pvrusb2: ********** [ 144.628553][ T7410] loop2: detected capacity change from 0 to 32768 [ 144.643768][ T7410] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.555 (7410) [ 144.669321][ T7410] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 144.680627][ T7410] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 144.722974][ T7410] BTRFS info (device loop2): using free space tree [ 144.756750][ T2316] pvrusb2: Invalid write control endpoint [ 144.787769][ T7430] tap0: tun_chr_ioctl cmd 35108 [ 144.813246][ T7410] BTRFS info (device loop2): enabling ssd optimizations [ 144.848744][ T7410] BTRFS info (device loop2): auto enabling async discard [ 144.921144][ T2316] pvrusb2: Invalid write control endpoint [ 144.962286][ T2316] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 144.975128][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 145.014958][ T2316] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 145.022555][ T2316] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 145.047638][ T5765] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 145.052648][ T2316] pvrusb2: Device being rendered inoperable [ 145.080661][ T2316] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 145.086947][ T788] usb 1-1: USB disconnect, device number 6 [ 145.104836][ T2316] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 145.140870][ T2316] pvrusb2: Attached sub-driver cx25840 [ 145.184432][ T2316] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 145.218853][ T2316] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 145.972343][ T7457] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 146.116801][ T7459] ALSA: seq fatal error: cannot create timer (-19) [ 146.281653][ T5851] usb 4-1: USB disconnect, device number 11 [ 146.491278][ T7481] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.500099][ T7481] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.508574][ T7481] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.517235][ T7481] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.537303][ T7481] Zero length message leads to an empty skb [ 146.923223][ T7499] loop2: detected capacity change from 0 to 256 [ 147.043655][ T7499] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 147.080913][ T7503] sp0: Synchronizing with TNC [ 147.895286][ T788] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 148.074356][ T7538] loop3: detected capacity change from 0 to 736 [ 148.099455][ T788] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.126975][ T788] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 148.158603][ T788] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.202805][ T788] usb 1-1: config 0 descriptor?? [ 148.349395][ T7544] loop2: detected capacity change from 0 to 1024 [ 148.402498][ T7544] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 148.633996][ T788] keytouch 0003:0926:3333.000B: fixing up Keytouch IEC report descriptor [ 148.682400][ T788] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.000B/input/input15 [ 148.898876][ T788] keytouch 0003:0926:3333.000B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 149.064015][ T788] usb 1-1: USB disconnect, device number 7 [ 149.150491][ T7562] fido_id[7562]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 149.444249][ T7581] netlink: 16 bytes leftover after parsing attributes in process `syz.1.613'. [ 149.534073][ T7585] input: syz1 as /devices/virtual/input/input16 [ 150.123280][ T7608] loop2: detected capacity change from 0 to 736 [ 150.847816][ T7631] loop1: detected capacity change from 0 to 512 [ 150.888626][ T7631] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.195360][ T5762] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.751764][ T7640] loop0: detected capacity change from 0 to 40427 [ 151.761298][ T7658] loop2: detected capacity change from 0 to 128 [ 151.764276][ T7656] loop1: detected capacity change from 0 to 736 [ 151.788910][ T7640] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x7ffff [ 151.815941][ T7640] F2FS-fs (loop0): invalid crc value [ 151.846764][ T27] audit: type=1800 audit(1768830704.197:20): pid=7658 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.653" name="file1" dev="loop2" ino=1048601 res=0 errno=0 [ 151.857060][ T7658] FAT-fs (loop2): error, invalid FAT chain (i_pos 548, last_block 8) [ 151.888989][ T7658] FAT-fs (loop2): Filesystem has been set read-only [ 151.899978][ T7658] FAT-fs (loop2): error, corrupted file size (i_pos 548, 522) [ 151.900435][ T7640] F2FS-fs (loop0): Found nat_bits in checkpoint [ 152.085368][ T7640] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 152.211606][ T7665] loop3: detected capacity change from 0 to 1024 [ 152.246110][ T7665] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 152.258103][ T5764] syz-executor: attempt to access beyond end of device [ 152.258103][ T5764] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 152.307150][ T5764] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 152.493056][ T7674] loop3: detected capacity change from 0 to 512 [ 152.521623][ T7674] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.732196][ T5763] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.895114][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 153.053764][ T7671] loop1: detected capacity change from 0 to 40427 [ 153.070499][ T7671] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x7ffff [ 153.098844][ T7671] F2FS-fs (loop1): invalid crc value [ 153.111410][ T7671] F2FS-fs (loop1): Found nat_bits in checkpoint [ 153.159658][ T7671] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 153.251842][ T5762] syz-executor: attempt to access beyond end of device [ 153.251842][ T5762] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 153.270512][ T5762] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 153.297452][ T7687] loop3: detected capacity change from 0 to 128 [ 153.348874][ T27] audit: type=1800 audit(1768830705.697:21): pid=7687 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.655" name="file1" dev="loop3" ino=1048602 res=0 errno=0 [ 153.351601][ T7687] FAT-fs (loop3): error, invalid FAT chain (i_pos 548, last_block 8) [ 153.379020][ T7687] FAT-fs (loop3): Filesystem has been set read-only [ 153.386779][ T7687] FAT-fs (loop3): error, corrupted file size (i_pos 548, 522) [ 153.473042][ T7689] program syz.3.656 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 153.759099][ T7695] loop0: detected capacity change from 0 to 1024 [ 153.786253][ T7695] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 154.246278][ T7710] netlink: 64 bytes leftover after parsing attributes in process `syz.0.664'. [ 154.369705][ T7717] program syz.0.668 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 154.409175][ T7718] netlink: 64 bytes leftover after parsing attributes in process `syz.2.677'. [ 154.513193][ T7721] netlink: 4 bytes leftover after parsing attributes in process `syz.1.680'. [ 154.636171][ T5851] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 154.645129][ T7721] team0 (unregistering): Port device team_slave_0 removed [ 154.672357][ T7721] team0 (unregistering): Port device team_slave_1 removed [ 154.836871][ T5851] usb 4-1: Using ep0 maxpacket: 32 [ 154.850886][ T5851] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.875279][ T5851] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.895268][ T5851] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 154.911832][ T5851] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.944606][ T5851] usb 4-1: config 0 descriptor?? [ 155.277481][ T7747] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.286672][ T7747] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.295562][ T7747] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.304372][ T7747] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.398351][ T5851] koneplus 0003:1E7D:2D51.000C: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.3-1/input0 [ 155.816219][ T5851] usb 4-1: USB disconnect, device number 12 [ 156.469703][ T7777] loop3: detected capacity change from 0 to 512 [ 156.554878][ T7777] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.616305][ T7777] ext4 filesystem being mounted at /163/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 156.760855][ T5763] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.939442][ T7793] loop2: detected capacity change from 0 to 256 [ 157.045043][ T7793] FAT-fs (loop2): Directory bread(block 64) failed [ 157.051698][ T5828] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 157.060343][ T7793] FAT-fs (loop2): Directory bread(block 65) failed [ 157.067195][ T5768] Bluetooth: hci3: command 0x0c1a tx timeout [ 157.074048][ T7793] FAT-fs (loop2): Directory bread(block 66) failed [ 157.081198][ T7793] FAT-fs (loop2): Directory bread(block 67) failed [ 157.088274][ T7793] FAT-fs (loop2): Directory bread(block 68) failed [ 157.105118][ T7793] FAT-fs (loop2): Directory bread(block 69) failed [ 157.112323][ T7793] FAT-fs (loop2): Directory bread(block 70) failed [ 157.118954][ T7793] FAT-fs (loop2): Directory bread(block 71) failed [ 157.125648][ T7793] FAT-fs (loop2): Directory bread(block 72) failed [ 157.132190][ T7793] FAT-fs (loop2): Directory bread(block 73) failed [ 157.260087][ T5828] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 157.285062][ T5828] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.293108][ T5828] usb 2-1: Product: syz [ 157.315227][ T5828] usb 2-1: Manufacturer: syz [ 157.329388][ T5828] usb 2-1: SerialNumber: syz [ 157.356778][ T5828] usb 2-1: config 0 descriptor?? [ 157.783297][ T7817] delete_channel: no stack [ 157.789370][ T7815] delete_channel: no stack [ 157.795631][ T5828] usb 2-1: Firmware: major: 0, minor: 3, hardware type: UNKNOWN (64) [ 157.972675][ T7820] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.997830][ T5828] usb 2-1: failed to fetch extended address, random address set [ 158.038563][ T5828] usb 2-1: atusb_probe: initialization failed, error = -524 [ 158.048885][ T5828] atusb: probe of 2-1:0.0 failed with error -524 [ 158.066549][ T5828] usb 2-1: USB disconnect, device number 8 [ 158.151670][ T7820] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.242433][ T7820] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.332957][ T7820] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.420544][ T7820] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.439901][ T7820] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.453151][ T7820] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.467760][ T7820] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.546411][ T7825] loop3: detected capacity change from 0 to 256 [ 158.632831][ T7825] FAT-fs (loop3): Directory bread(block 64) failed [ 158.639768][ T7825] FAT-fs (loop3): Directory bread(block 65) failed [ 158.654334][ T7825] FAT-fs (loop3): Directory bread(block 66) failed [ 158.684666][ T7825] FAT-fs (loop3): Directory bread(block 67) failed [ 158.697603][ T7825] FAT-fs (loop3): Directory bread(block 68) failed [ 158.705397][ T7825] FAT-fs (loop3): Directory bread(block 69) failed [ 158.716586][ T7825] FAT-fs (loop3): Directory bread(block 70) failed [ 158.728787][ T7825] FAT-fs (loop3): Directory bread(block 71) failed [ 158.745153][ T7825] FAT-fs (loop3): Directory bread(block 72) failed [ 158.772232][ T7825] FAT-fs (loop3): Directory bread(block 73) failed [ 158.823395][ T7832] loop1: detected capacity change from 0 to 4096 [ 158.893722][ T7832] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 158.958775][ T7832] ntfs3: loop1: Failed to load $Extend (-22). [ 158.985145][ T7832] ntfs3: loop1: Failed to initialize $Extend. [ 159.193651][ T7839] loop0: detected capacity change from 0 to 16 [ 159.215603][ T7839] erofs: (device loop0): mounted with root inode @ nid 36. [ 159.319933][ T7843] delete_channel: no stack [ 159.336709][ T7842] delete_channel: no stack [ 159.515271][ T788] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 159.716557][ T788] usb 1-1: config 1 has an invalid descriptor of length 211, skipping remainder of the config [ 159.728994][ T788] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 159.744004][ T788] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 159.753699][ T788] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 159.773483][ T7857] loop2: detected capacity change from 0 to 512 [ 159.780081][ T788] usb 1-1: SerialNumber: syz [ 159.872539][ T7857] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.905200][ T7857] ext4 filesystem being mounted at /155/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 159.999955][ T788] usb 1-1: 0:2 : does not exist [ 160.006045][ T788] usb 1-1: usbmixer: too many channels (61) in unit 5 [ 160.009780][ T5765] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.027692][ T788] usb 1-1: USB disconnect, device number 8 [ 160.119491][ T5754] udevd[5754]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 160.191787][ T7864] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 160.209476][ T7864] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.416424][ T7864] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 160.427138][ T7864] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.556361][ T7864] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 160.585544][ T7864] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.702482][ T7864] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 160.713899][ T7864] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.922576][ T7864] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.932469][ T7864] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.949114][ T7864] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.957470][ T7864] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.972785][ T7864] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.981512][ T7864] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.996191][ T7864] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.004392][ T7864] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.566826][ T7894] loop3: detected capacity change from 0 to 16 [ 161.592212][ T7894] erofs: (device loop3): mounted with root inode @ nid 36. [ 161.633460][ T7892] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 161.657600][ T7892] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.786753][ T7892] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 161.800993][ T7892] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.906770][ T7892] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 161.919878][ T7892] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.925178][ T5829] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 161.990514][ T7892] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 162.000944][ T7892] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.098798][ T7892] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.108616][ T7892] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.116679][ T5829] usb 4-1: config 1 has an invalid descriptor of length 211, skipping remainder of the config [ 162.127887][ T7892] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.131897][ T5829] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 162.136686][ T7892] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.150697][ T5829] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 162.162762][ T5829] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 162.165473][ T7892] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.176629][ T5829] usb 4-1: SerialNumber: syz [ 162.180648][ T7892] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.208349][ T7892] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.217100][ T7892] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.403895][ T5829] usb 4-1: 0:2 : does not exist [ 162.409059][ T5829] usb 4-1: usbmixer: too many channels (61) in unit 5 [ 162.429813][ T5829] usb 4-1: USB disconnect, device number 13 [ 162.456284][ T5754] udevd[5754]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 162.682793][ T7906] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 162.693807][ T7906] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.720633][ T7907] loop0: detected capacity change from 0 to 4096 [ 162.747879][ T7906] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 162.748627][ T7907] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 162.777384][ T7906] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.779396][ T7907] ntfs3: loop0: Failed to load $Extend (-22). [ 162.798750][ T7907] ntfs3: loop0: Failed to initialize $Extend. [ 162.850734][ T7906] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 162.868453][ T7906] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.935125][ T788] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 162.951461][ T7906] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 162.967142][ T7906] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.165041][ T788] usb 3-1: Using ep0 maxpacket: 16 [ 163.195426][ T788] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.218159][ T788] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x2 has an invalid bInterval 129, changing to 11 [ 163.232507][ T7914] loop3: detected capacity change from 0 to 128 [ 163.240503][ T788] usb 3-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 163.256821][ T788] usb 3-1: config 0 interface 0 has no altsetting 0 [ 163.263890][ T788] usb 3-1: New USB device found, idVendor=1e71, idProduct=2010, bcdDevice= 0.00 [ 163.273335][ T7914] EXT4-fs (loop3): Test dummy encryption mode enabled [ 163.285006][ T788] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.295535][ T7914] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 163.302549][ T788] usb 3-1: config 0 descriptor?? [ 163.342682][ T7914] ext4 filesystem being mounted at /179/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 163.447694][ T5763] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 163.728668][ T788] nzxt-smart2 0003:1E71:2010.000D: unknown main item tag 0x0 [ 163.736375][ T788] nzxt-smart2 0003:1E71:2010.000D: unknown main item tag 0x0 [ 163.743771][ T788] nzxt-smart2 0003:1E71:2010.000D: unknown main item tag 0x0 [ 163.751705][ T788] nzxt-smart2 0003:1E71:2010.000D: unknown main item tag 0x0 [ 163.759805][ T788] nzxt-smart2 0003:1E71:2010.000D: unknown main item tag 0x0 [ 163.769935][ T788] nzxt-smart2 0003:1E71:2010.000D: hidraw0: USB HID v0.05 Device [HID 1e71:2010] on usb-dummy_hcd.2-1/input0 [ 163.937955][ T788] usb 3-1: USB disconnect, device number 8 [ 164.592467][ T7918] loop3: detected capacity change from 0 to 4096 [ 164.597182][ T7922] netlink: 108 bytes leftover after parsing attributes in process `syz.0.754'. [ 164.640820][ T7924] loop2: detected capacity change from 0 to 128 [ 164.653941][ T7918] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 164.682078][ T7918] ntfs3: loop3: Failed to load $Extend (-22). [ 164.690093][ T7924] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 164.715770][ T7918] ntfs3: loop3: Failed to initialize $Extend. [ 164.750634][ T7924] hpfs: filesystem error: improperly stopped [ 164.760920][ T7924] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 164.795516][ T7924] hpfs: You really don't want any checks? You are crazy... [ 164.811028][ T7924] hpfs: hpfs_map_sector(): read error [ 164.836066][ T7924] hpfs: code page support is disabled [ 164.842388][ T7924] hpfs: hpfs_map_4sectors(): unaligned read [ 164.849613][ T7924] hpfs: hpfs_map_4sectors(): unaligned read [ 164.856182][ T7924] hpfs: filesystem error: unable to find root dir [ 164.878180][ T7928] block nbd0: Unsupported socket: should be TCP or UNIX. [ 164.894028][ T7924] hpfs: hpfs_map_4sectors(): unaligned read [ 164.907168][ T7924] hpfs: hpfs_map_sector(): read error [ 165.330972][ T27] audit: type=1326 audit(1768830717.677:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7940 comm="syz.0.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe006f9acb9 code=0x7ffc0000 [ 165.385192][ T27] audit: type=1326 audit(1768830717.677:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7940 comm="syz.0.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fe006f9acb9 code=0x7ffc0000 [ 165.440977][ T27] audit: type=1326 audit(1768830717.677:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7940 comm="syz.0.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe006f9acb9 code=0x7ffc0000 [ 165.480838][ T27] audit: type=1326 audit(1768830717.677:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7940 comm="syz.0.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7fe006f9acb9 code=0x7ffc0000 [ 165.508695][ T27] audit: type=1326 audit(1768830717.677:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7940 comm="syz.0.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe006f9acb9 code=0x7ffc0000 [ 165.686854][ T7947] loop2: detected capacity change from 0 to 32768 [ 165.711150][ T7947] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 165.750090][ T7947] XFS (loop2): Ending clean mount [ 165.855988][ T5765] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 165.881374][ T7958] loop0: detected capacity change from 0 to 128 [ 165.907175][ T7958] EXT4-fs (loop0): Test dummy encryption mode enabled [ 165.939499][ T7958] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 165.973507][ T7958] ext4 filesystem being mounted at /206/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 166.113431][ T5764] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 166.569057][ T7973] x_tables: ip_tables: sctp match: only valid for protocol 132 [ 166.925095][ T788] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 167.118396][ T788] usb 4-1: Using ep0 maxpacket: 16 [ 167.141809][ T788] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.154626][ T788] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x2 has an invalid bInterval 129, changing to 11 [ 167.180961][ T788] usb 4-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 167.194496][ T788] usb 4-1: config 0 interface 0 has no altsetting 0 [ 167.205464][ T788] usb 4-1: New USB device found, idVendor=1e71, idProduct=2010, bcdDevice= 0.00 [ 167.214647][ T788] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.235717][ T788] usb 4-1: config 0 descriptor?? [ 167.413656][ T7982] loop0: detected capacity change from 0 to 1024 [ 167.474445][ T7985] loop2: detected capacity change from 0 to 1024 [ 167.611947][ T12] hfsplus: b-tree write err: -5, ino 4 [ 167.617706][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 167.674097][ T788] nzxt-smart2 0003:1E71:2010.000E: unknown main item tag 0x0 [ 167.682639][ T788] nzxt-smart2 0003:1E71:2010.000E: unknown main item tag 0x0 [ 167.692393][ T788] nzxt-smart2 0003:1E71:2010.000E: unknown main item tag 0x0 [ 167.702856][ T788] nzxt-smart2 0003:1E71:2010.000E: unknown main item tag 0x0 [ 167.710599][ T788] nzxt-smart2 0003:1E71:2010.000E: unknown main item tag 0x0 [ 167.723265][ T788] nzxt-smart2 0003:1E71:2010.000E: hidraw0: USB HID v0.05 Device [HID 1e71:2010] on usb-dummy_hcd.3-1/input0 [ 167.895223][ T788] usb 4-1: USB disconnect, device number 14 [ 167.981350][ T7906] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.989773][ T7906] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.004690][ T7906] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.013105][ T7906] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.029628][ T7906] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.038074][ T7906] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.053093][ T7906] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.061493][ T7906] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.137705][ T7995] loop1: detected capacity change from 0 to 128 [ 168.154673][ T7995] EXT4-fs (loop1): Test dummy encryption mode enabled [ 168.173853][ T7995] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 168.193223][ T7995] ext4 filesystem being mounted at /209/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 168.266241][ T8003] netlink: 4 bytes leftover after parsing attributes in process `syz.2.783'. [ 168.363101][ T5762] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 168.947854][ T8023] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 168.975512][ T8023] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.050770][ T8011] loop1: detected capacity change from 0 to 32768 [ 169.061427][ T8023] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 169.095653][ T8023] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.114439][ T8011] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 169.171006][ T8023] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 169.185166][ T8023] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.197118][ T8017] loop2: detected capacity change from 0 to 32768 [ 169.210843][ T8011] XFS (loop1): Ending clean mount [ 169.236334][ T8017] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.788 (8017) [ 169.279316][ T8023] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 169.296500][ T8017] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 169.310595][ T8017] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 169.319493][ T8017] BTRFS info (device loop2): turning on flush-on-commit [ 169.327133][ T8017] BTRFS info (device loop2): use zlib compression, level 3 [ 169.334550][ T8017] BTRFS info (device loop2): disabling free space tree [ 169.341658][ T8017] BTRFS info (device loop2): enabling disk space caching [ 169.349193][ T8023] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.359266][ T8017] BTRFS info (device loop2): setting nodatasum [ 169.369396][ T8017] BTRFS info (device loop2): turning off barriers [ 169.389651][ T8017] BTRFS info (device loop2): enabling ssd optimizations [ 169.398392][ T8017] BTRFS info (device loop2): force clearing of disk cache [ 169.406114][ T5762] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 169.406410][ T8017] BTRFS info (device loop2): disk space caching is enabled [ 169.605961][ T8023] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.619913][ T8017] BTRFS info (device loop2): rebuilding free space tree [ 169.635737][ T8023] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.687363][ T8017] BTRFS info (device loop2): disabling free space tree [ 169.693928][ T8023] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.714849][ T8017] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 169.744120][ T8023] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.765086][ T8017] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 169.780539][ T8051] loop1: detected capacity change from 0 to 1024 [ 169.787351][ T5828] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 169.868789][ T8023] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.877952][ T27] audit: type=1800 audit(1768830722.227:27): pid=8051 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.793" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 169.883005][ T8023] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.971136][ T8023] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.976857][ T5828] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 169.999080][ T5828] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.024861][ T8023] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.034569][ T5828] usb 1-1: config 0 descriptor?? [ 170.060646][ T5828] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 170.187150][ T5765] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 170.203150][ T8054] loop3: detected capacity change from 0 to 128 [ 170.239181][ T8054] EXT4-fs (loop3): Test dummy encryption mode enabled [ 170.283363][ T8054] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 170.367488][ T8054] ext4 filesystem being mounted at /187/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 170.477654][ T5763] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 170.495464][ T5828] cpia1 1-1:0.0: unexpected state after lo power cmd: 00 [ 170.896381][ T5828] gspca_cpia1: usb_control_msg 02, error -71 [ 170.913611][ T5828] cpia1 1-1:0.0: only firmware version 1 is supported (got: 0) [ 170.936607][ T8066] loop2: detected capacity change from 0 to 128 [ 170.986961][ T8066] EXT4-fs (loop2): Test dummy encryption mode enabled [ 171.000181][ T5828] usb 1-1: USB disconnect, device number 9 [ 171.004215][ T8068] loop1: detected capacity change from 0 to 128 [ 171.029081][ T8066] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 171.042452][ T8066] ext4 filesystem being mounted at /182/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 171.066284][ T8068] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 171.094517][ T8068] hpfs: filesystem error: improperly stopped [ 171.101627][ T8068] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 171.109784][ T8068] hpfs: You really don't want any checks? You are crazy... [ 171.117829][ T8068] hpfs: hpfs_map_sector(): read error [ 171.123748][ T8068] hpfs: code page support is disabled [ 171.141311][ T8068] hpfs: hpfs_map_4sectors(): unaligned read [ 171.152483][ T8068] hpfs: hpfs_map_4sectors(): unaligned read [ 171.158743][ T8068] hpfs: filesystem error: unable to find root dir [ 171.210639][ T5765] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 171.230104][ T8068] hpfs: hpfs_map_4sectors(): unaligned read [ 171.247232][ T8068] hpfs: hpfs_map_sector(): read error [ 171.901252][ T8100] loop0: detected capacity change from 0 to 128 [ 171.951065][ T8100] EXT4-fs (loop0): Test dummy encryption mode enabled [ 171.981072][ T8100] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 172.047144][ T8100] ext4 filesystem being mounted at /219/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 172.284036][ T5764] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 172.553708][ T5851] kernel write not supported for file /vcsa1 (pid: 5851 comm: kworker/1:6) [ 173.116544][ T8116] loop0: detected capacity change from 0 to 32768 [ 173.132527][ T8116] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.822 (8116) [ 173.169368][ T8116] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 173.205182][ T8116] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 173.213950][ T8116] BTRFS info (device loop0): turning on flush-on-commit [ 173.275529][ T8116] BTRFS info (device loop0): use zlib compression, level 3 [ 173.282890][ T8116] BTRFS info (device loop0): disabling free space tree [ 173.288226][ T8142] loop2: detected capacity change from 0 to 128 [ 173.302583][ T8143] loop3: detected capacity change from 0 to 512 [ 173.312451][ T8116] BTRFS info (device loop0): enabling disk space caching [ 173.319811][ T8142] EXT4-fs (loop2): Test dummy encryption mode enabled [ 173.336656][ T8116] BTRFS info (device loop0): setting nodatasum [ 173.342864][ T8116] BTRFS info (device loop0): turning off barriers [ 173.356674][ T8142] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 173.399147][ T8142] ext4 filesystem being mounted at /192/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 173.414363][ T8143] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c098, mo2=0002] [ 173.437262][ T8116] BTRFS info (device loop0): enabling ssd optimizations [ 173.444276][ T8116] BTRFS info (device loop0): force clearing of disk cache [ 173.455705][ T8143] System zones: 0-2, 18-18, 34-35 [ 173.460900][ T8116] BTRFS info (device loop0): disk space caching is enabled [ 173.499282][ T8143] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.541074][ T8143] ext4 filesystem being mounted at /201/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 173.590954][ T5763] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.731807][ T8116] BTRFS info (device loop0): rebuilding free space tree [ 173.839197][ T8116] BTRFS info (device loop0): disabling free space tree [ 173.853245][ T8116] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 173.871475][ T8116] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 173.895869][ T5765] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 173.915167][ T8169] loop3: detected capacity change from 0 to 64 [ 174.137147][ T5764] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 174.235529][ T8177] netlink: 24 bytes leftover after parsing attributes in process `syz.3.843'. [ 174.584504][ T8184] loop1: detected capacity change from 0 to 512 [ 174.662865][ T8184] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c098, mo2=0002] [ 174.693365][ T8184] System zones: 0-2, 18-18, 34-35 [ 174.726381][ T8184] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.767748][ T8184] ext4 filesystem being mounted at /225/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 174.945536][ T5762] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.288826][ T8202] loop2: detected capacity change from 0 to 64 [ 175.549181][ T27] audit: type=1326 audit(1768830727.897:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8209 comm="syz.3.855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46b699acb9 code=0x7ffc0000 [ 175.570250][ T8212] loop1: detected capacity change from 0 to 64 [ 175.595344][ T8212] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing [ 175.619555][ T27] audit: type=1326 audit(1768830727.927:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8209 comm="syz.3.855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f46b699acb9 code=0x7ffc0000 [ 175.701173][ T27] audit: type=1326 audit(1768830727.927:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8209 comm="syz.3.855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46b699acb9 code=0x7ffc0000 [ 175.731466][ T8214] input: syz0 as /devices/virtual/input/input17 [ 175.743401][ T27] audit: type=1326 audit(1768830727.927:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8209 comm="syz.3.855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46b699acb9 code=0x7ffc0000 [ 175.838651][ T27] audit: type=1326 audit(1768830727.927:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8209 comm="syz.3.855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f46b699acb9 code=0x7ffc0000 [ 175.913256][ T27] audit: type=1326 audit(1768830727.927:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8209 comm="syz.3.855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46b699acb9 code=0x7ffc0000 [ 175.973681][ T8220] loop1: detected capacity change from 0 to 1024 [ 176.154691][ T41] hfsplus: b-tree write err: -5, ino 4 [ 176.504851][ T8234] loop1: detected capacity change from 0 to 4096 [ 176.516593][ T8208] loop0: detected capacity change from 0 to 40427 [ 176.533068][ T8208] F2FS-fs (loop0): invalid crc value [ 176.560408][ T8208] F2FS-fs (loop0): Found nat_bits in checkpoint [ 176.570213][ T8240] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 176.619938][ T27] audit: type=1800 audit(1768830728.967:34): pid=8234 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.876" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 176.776594][ T8208] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 176.838501][ T8247] x_tables: ip_tables: sctp match: only valid for protocol 132 [ 176.883268][ T8249] netlink: 452 bytes leftover after parsing attributes in process `syz.2.871'. [ 177.045801][ T5764] syz-executor: attempt to access beyond end of device [ 177.045801][ T5764] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 177.107468][ T5764] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 177.371446][ T27] audit: type=1800 audit(1768830729.717:35): pid=8257 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.878" name="file1" dev="loop1" ino=8 res=0 errno=0 [ 177.568848][ T8244] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 177.669058][ T8273] 9pnet_fd: p9_fd_create_tcp (8273): problem binding to privport [ 177.715415][ T8244] XFS (loop3): Ending clean mount [ 177.836352][ T5763] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 178.533154][ T8296] set_capacity_and_notify: 2 callbacks suppressed [ 178.533169][ T8296] loop0: detected capacity change from 0 to 1024 [ 178.579039][ T8296] EXT4-fs: Ignoring removed nobh option [ 178.588124][ T8303] netlink: 8 bytes leftover after parsing attributes in process `syz.2.895'. [ 178.607546][ T8296] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 178.628126][ T8303] netlink: 4 bytes leftover after parsing attributes in process `syz.2.895'. [ 178.688808][ T8303] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.697378][ T8303] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.705932][ T8303] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.714091][ T8303] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.745568][ T8296] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #11: comm syz.0.890: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 178.840494][ T8296] EXT4-fs error (device loop0): ext4_orphan_get:1403: comm syz.0.890: couldn't read orphan inode 11 (err -117) [ 178.856893][ T8296] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.005318][ T8296] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:478: comm syz.0.890: Invalid block bitmap block 0 in block_group 0 [ 179.041407][ T8296] Quota error (device loop0): write_blk: dquota write failed [ 179.049082][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 179.065027][ T8296] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 179.079625][ T8296] EXT4-fs error (device loop0): ext4_acquire_dquot:6949: comm syz.0.890: Failed to acquire dquot type 0 [ 179.093640][ T8313] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.890: Invalid inode bitmap blk 137438953472 in block_group 0 [ 179.363131][ T59] EXT4-fs error (device loop0): __ext4_get_inode_loc:4489: comm kworker/u4:4: Invalid inode table block 8589934593 in block_group 0 [ 179.399198][ T5764] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.475508][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 179.615042][ T5773] Bluetooth: hci3: command 0x0c1a tx timeout [ 179.811937][ T8336] netlink: 8 bytes leftover after parsing attributes in process `syz.0.906'. [ 179.855965][ T8336] netlink: 4 bytes leftover after parsing attributes in process `syz.0.906'. [ 180.269261][ T8356] loop3: detected capacity change from 0 to 22 [ 180.280634][ T8356] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 180.291056][ T8356] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 180.655518][ T5828] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 180.836809][ T5828] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.847888][ T5828] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.858288][ T5828] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 180.867438][ T5828] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.877570][ T5828] usb 2-1: config 0 descriptor?? [ 181.294070][ T5828] cp2112 0003:10C4:EA90.000F: unknown main item tag 0x0 [ 181.303273][ T5828] cp2112 0003:10C4:EA90.000F: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 181.502571][ T5828] cp2112 0003:10C4:EA90.000F: Part Number: 0x1A Device Version: 0xC4 [ 181.710916][ T5828] cp2112 0003:10C4:EA90.000F: error requesting SMBus config [ 181.720473][ T5828] cp2112: probe of 0003:10C4:EA90.000F failed with error -71 [ 181.731716][ T5828] usb 2-1: USB disconnect, device number 9 [ 182.311780][ T8382] netlink: 8 bytes leftover after parsing attributes in process `syz.1.926'. [ 182.325775][ T8382] netlink: 4 bytes leftover after parsing attributes in process `syz.1.926'. [ 182.573227][ T8390] netlink: 8 bytes leftover after parsing attributes in process `syz.1.941'. [ 182.600091][ T8390] netlink: 4 bytes leftover after parsing attributes in process `syz.1.941'. [ 182.743988][ T8392] loop1: detected capacity change from 0 to 22 [ 182.770218][ T8392] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 182.798484][ T8392] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 182.806880][ T8394] loop3: detected capacity change from 0 to 2048 [ 182.861856][ T8394] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 183.050687][ T8379] loop0: detected capacity change from 0 to 32768 [ 183.073024][ T8386] loop2: detected capacity change from 0 to 32768 [ 183.086004][ T8379] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz.0.935 (8379) [ 183.137962][ T8396] loop1: detected capacity change from 0 to 8 [ 183.153204][ T8379] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 183.167662][ T8379] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 183.180057][ T8379] BTRFS info (device loop0): doing ref verification [ 183.185442][ T8396] SQUASHFS error: zlib decompression failed, data probably corrupt [ 183.187911][ T8379] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 183.215450][ T8396] SQUASHFS error: Failed to read block 0x9b: -5 [ 183.221754][ T8396] SQUASHFS error: Unable to read metadata cache entry [99] [ 183.229313][ T8396] SQUASHFS error: Unable to read inode 0x127 [ 183.237411][ T8379] BTRFS info (device loop0): use lzo compression, level 0 [ 183.244613][ T8379] BTRFS info (device loop0): using free space tree [ 183.252832][ T8386] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 183.401270][ T8379] BTRFS info (device loop0): enabling ssd optimizations [ 183.409524][ T5765] ocfs2: Unmounting device (7,2) on (node local) [ 183.435191][ T8379] BTRFS info (device loop0): auto enabling async discard [ 183.819849][ T5764] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 184.576168][ T8428] loop1: detected capacity change from 0 to 32768 [ 184.651541][ T8428] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 184.795145][ T5828] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 184.823106][ T8428] XFS (loop1): Ending clean mount [ 184.845816][ T8433] loop3: detected capacity change from 0 to 32768 [ 184.845857][ T8428] XFS (loop1): Quotacheck needed: Please wait. [ 184.878193][ T8433] syz.3.945: attempt to access beyond end of device [ 184.878193][ T8433] loop14: rw=0, sector=8, nr_sectors = 8 limit=0 [ 184.891301][ T8433] lbmIODone: I/O error in JFS log [ 184.910029][ T8433] *** Log Format Error ! *** [ 184.915276][ T8433] lmLogInit: exit(-22) [ 184.919599][ T8433] lmLogOpen: exit(-22) [ 184.938786][ T8433] ERROR: (device loop3): jfs_link: read-only filesystem [ 184.938786][ T8433] [ 184.950320][ T8428] XFS (loop1): Quotacheck: Done. [ 184.975046][ T5828] usb 1-1: Using ep0 maxpacket: 8 [ 184.980233][ T8433] ERROR: (device loop3): remounting filesystem as read-only [ 185.126591][ T5828] usb 1-1: unable to get BOS descriptor or descriptor too short [ 185.169084][ T5828] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 185.199735][ T5828] usb 1-1: can't read configurations, error -71 [ 185.238758][ T5762] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 185.360463][ T8452] loop2: detected capacity change from 0 to 2048 [ 185.395694][ T8452] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 185.732602][ T8461] loop2: detected capacity change from 0 to 512 [ 185.848830][ T8461] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.998375][ T8461] EXT4-fs (loop2): shut down requested (2) [ 186.156711][ T5765] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.402357][ T8468] loop1: detected capacity change from 0 to 40427 [ 186.413156][ T8468] F2FS-fs (loop1): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 186.426509][ T8468] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 186.446413][ T8468] F2FS-fs (loop1): invalid crc value [ 186.463689][ T8468] F2FS-fs (loop1): Found nat_bits in checkpoint [ 186.551665][ T8468] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 186.558994][ T8468] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 186.598144][ T8462] loop3: detected capacity change from 0 to 40427 [ 186.610401][ T8471] f2fs_ckpt-7:1: attempt to access beyond end of device [ 186.610401][ T8471] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 186.635350][ T8462] F2FS-fs (loop3): invalid crc value [ 186.640820][ T8471] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 186.659055][ T8475] syz.1.952: attempt to access beyond end of device [ 186.659055][ T8475] loop1: rw=524288, sector=45072, nr_sectors = 24 limit=40427 [ 186.664848][ T8462] F2FS-fs (loop3): Found nat_bits in checkpoint [ 186.708255][ T8475] syz.1.952: attempt to access beyond end of device [ 186.708255][ T8475] loop1: rw=0, sector=45072, nr_sectors = 8 limit=40427 [ 186.752794][ T27] audit: type=1800 audit(1768830739.097:36): pid=8475 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.952" name="/" dev="loop1" ino=8 res=0 errno=0 [ 186.773508][ T8462] F2FS-fs (loop3): Start checkpoint disabled! [ 186.791206][ T8462] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 187.157107][ T12] kworker/u4:1: attempt to access beyond end of device [ 187.157107][ T12] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 187.215045][ T12] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 187.235872][ T12] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 187.670138][ T8488] loop3: detected capacity change from 0 to 64 [ 187.678471][ T8488] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 187.749339][ T8482] loop2: detected capacity change from 0 to 40427 [ 187.772106][ T8482] F2FS-fs (loop2): invalid crc value [ 187.783462][ T8482] F2FS-fs (loop2): Found nat_bits in checkpoint [ 187.805112][ T8] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 187.848820][ T8482] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 187.920856][ T5765] syz-executor: attempt to access beyond end of device [ 187.920856][ T5765] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 187.945644][ T5765] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 188.008841][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 188.032826][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 188.071922][ T8] usb 2-1: New USB device found, idVendor=056a, idProduct=00b8, bcdDevice= 0.00 [ 188.102298][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.137009][ T8] usb 2-1: config 0 descriptor?? [ 188.467929][ T8502] loop3: detected capacity change from 0 to 512 [ 188.497696][ T8502] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.566633][ T8502] EXT4-fs (loop3): shut down requested (2) [ 188.568038][ T8] wacom 0003:056A:00B8.0010: unknown main item tag 0x0 [ 188.590636][ T8] wacom 0003:056A:00B8.0010: Unknown device_type for 'HID 056a:00b8'. Assuming pen. [ 188.604011][ T8] wacom 0003:056A:00B8.0010: hidraw0: USB HID v5.59 Device [HID 056a:00b8] on usb-dummy_hcd.1-1/input0 [ 188.626910][ T8] input: Wacom Intuos4 4x6 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:00B8.0010/input/input18 [ 188.671772][ T5763] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.847916][ T5829] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 188.873662][ T8] usb 2-1: USB disconnect, device number 10 [ 189.035083][ T5829] usb 3-1: Using ep0 maxpacket: 8 [ 189.139694][ T5829] usb 3-1: unable to get BOS descriptor or descriptor too short [ 189.160515][ T5829] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 189.183406][ T5829] usb 3-1: can't read configurations, error -71 [ 189.347861][ T8516] loop0: detected capacity change from 0 to 32768 [ 189.368298][ T8516] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 189.418149][ T8516] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 189.473042][ T8516] XFS (loop0): Starting recovery (logdev: internal) [ 189.493409][ T8516] XFS (loop0): Ending recovery (logdev: internal) [ 189.567968][ T5764] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 189.781318][ T8530] loop2: detected capacity change from 0 to 22 [ 189.806293][ T8530] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 189.830333][ T8530] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 190.194865][ T8528] loop3: detected capacity change from 0 to 40427 [ 190.210988][ T8528] F2FS-fs (loop3): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 190.219866][ T8528] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 190.246136][ T8528] F2FS-fs (loop3): invalid crc value [ 190.266639][ T8528] F2FS-fs (loop3): Found nat_bits in checkpoint [ 190.318651][ T8528] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 190.326279][ T8528] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 190.391408][ T8532] f2fs_ckpt-7:3: attempt to access beyond end of device [ 190.391408][ T8532] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 190.406931][ T8532] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 190.419246][ T8528] syz.3.969: attempt to access beyond end of device [ 190.419246][ T8528] loop3: rw=524288, sector=45072, nr_sectors = 24 limit=40427 [ 190.435540][ T8528] syz.3.969: attempt to access beyond end of device [ 190.435540][ T8528] loop3: rw=0, sector=45072, nr_sectors = 8 limit=40427 [ 190.449324][ T27] audit: type=1800 audit(1768830742.807:37): pid=8528 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.969" name="/" dev="loop3" ino=8 res=0 errno=0 [ 191.451686][ T8562] loop2: detected capacity change from 0 to 128 [ 191.548205][ T5754] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 191.703527][ T8567] 9pnet_fd: p9_fd_create_tcp (8567): problem binding to privport [ 192.365151][ T789] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 192.584430][ T789] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 192.604968][ T789] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.612992][ T789] usb 3-1: Product: syz [ 192.628448][ T789] usb 3-1: Manufacturer: syz [ 192.633062][ T789] usb 3-1: SerialNumber: syz [ 192.657564][ T789] usb 3-1: config 0 descriptor?? [ 193.075138][ T789] airspy 3-1:0.0: Board ID: 00 [ 193.079978][ T789] airspy 3-1:0.0: Firmware version: [ 193.495346][ T789] airspy 3-1:0.0: usb_control_msg() failed -71 request 0e [ 193.518931][ T789] airspy 3-1:0.0: Registered as swradio24 [ 193.524710][ T789] airspy 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 193.576832][ T789] usb 3-1: USB disconnect, device number 11 [ 194.145019][ T5753] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 194.240091][ T8613] loop3: detected capacity change from 0 to 40427 [ 194.261276][ T8613] F2FS-fs (loop3): Found nat_bits in checkpoint [ 194.308120][ T8613] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 194.339261][ T5753] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.346670][ T27] audit: type=1800 audit(1768830746.697:38): pid=8613 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1007" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 194.374083][ T5753] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.387269][ T5753] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 194.400169][ T5753] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.413654][ T5753] usb 1-1: config 0 descriptor?? [ 194.430380][ T5763] syz-executor: attempt to access beyond end of device [ 194.430380][ T5763] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 194.449607][ T5763] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 194.502383][ T5768] Bluetooth: hci3: command 0x0c1a tx timeout [ 194.509075][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.515441][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.838017][ T5753] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x0 [ 194.847766][ T5753] cp2112 0003:10C4:EA90.0011: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 195.036193][ T5753] cp2112 0003:10C4:EA90.0011: Part Number: 0x1A Device Version: 0xC4 [ 195.237903][ T5753] cp2112 0003:10C4:EA90.0011: error requesting SMBus config [ 195.247151][ T5753] cp2112: probe of 0003:10C4:EA90.0011 failed with error -71 [ 195.264993][ T5753] usb 1-1: USB disconnect, device number 12 [ 196.355703][ T5829] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 196.403319][ T8641] loop0: detected capacity change from 0 to 32768 [ 196.415420][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 196.450077][ T8641] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 196.532044][ T5764] ocfs2: Unmounting device (7,0) on (node local) [ 196.562455][ T5829] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 196.576646][ T5829] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.584840][ T5829] usb 3-1: Product: syz [ 196.590655][ T5829] usb 3-1: Manufacturer: syz [ 196.595690][ T5829] usb 3-1: SerialNumber: syz [ 196.615814][ T5829] usb 3-1: config 0 descriptor?? [ 196.949447][ T8652] loop1: detected capacity change from 0 to 256 [ 196.959506][ T8652] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 197.035438][ T5829] usb 3-1: Firmware: major: 0, minor: 3, hardware type: UNKNOWN (64) [ 197.145316][ T5753] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 197.246159][ T5829] usb 3-1: failed to fetch extended address, random address set [ 197.253905][ T5829] usb 3-1: atusb_probe: initialization failed, error = -524 [ 197.261523][ T5829] atusb: probe of 3-1:0.0 failed with error -524 [ 197.274948][ T5829] usb 3-1: USB disconnect, device number 12 [ 197.354991][ T5753] usb 1-1: Using ep0 maxpacket: 32 [ 197.362046][ T5753] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.375283][ T5753] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.385376][ T5753] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 197.394422][ T5753] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.404455][ T5753] usb 1-1: config 0 descriptor?? [ 197.830858][ T5753] koneplus 0003:1E7D:2D51.0012: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.0-1/input0 [ 197.889230][ T8664] loop1: detected capacity change from 0 to 128 [ 198.024845][ T8664] syz.1.1036: attempt to access beyond end of device [ 198.024845][ T8664] loop1: rw=2049, sector=185, nr_sectors = 856 limit=128 [ 198.082849][ T59] kworker/u4:4: attempt to access beyond end of device [ 198.082849][ T59] loop1: rw=1, sector=145, nr_sectors = 40 limit=128 [ 198.313374][ T5753] usb 1-1: USB disconnect, device number 13 [ 198.461675][ T8671] loop2: detected capacity change from 0 to 32768 [ 198.484698][ T8671] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 198.529920][ T8671] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 198.580435][ T8671] XFS (loop2): Starting recovery (logdev: internal) [ 198.601044][ T8671] XFS (loop2): Ending recovery (logdev: internal) [ 198.711090][ T5765] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 199.106015][ T8692] netlink: 332 bytes leftover after parsing attributes in process `syz.3.1034'. [ 199.176299][ T8694] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1035'. [ 199.517362][ T8690] loop2: detected capacity change from 0 to 32768 [ 199.590914][ T8690] syz.2.1032: attempt to access beyond end of device [ 199.590914][ T8690] loop14: rw=0, sector=8, nr_sectors = 8 limit=0 [ 199.647798][ T8690] lbmIODone: I/O error in JFS log [ 199.661116][ T8690] *** Log Format Error ! *** [ 199.680180][ T8690] lmLogInit: exit(-22) [ 199.684347][ T8690] lmLogOpen: exit(-22) [ 199.729083][ T8690] ERROR: (device loop2): jfs_link: read-only filesystem [ 199.729083][ T8690] [ 199.758328][ T8690] ERROR: (device loop2): remounting filesystem as read-only [ 200.274529][ T8703] loop1: detected capacity change from 0 to 2048 [ 200.344040][ T8704] loop0: detected capacity change from 0 to 4096 [ 200.373736][ T8704] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 200.377953][ T8708] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 200.457721][ T8708] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 200.499753][ T8708] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4) [ 200.511906][ T8704] ntfs3: loop0: Failed to initialize $Extend/$Reparse. [ 200.515048][ T5851] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 200.558573][ T8708] Remounting filesystem read-only [ 200.563751][ T996] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 200.588023][ T996] NILFS (loop1): discard dirty block: blocknr=39, size=1024 [ 200.603800][ T996] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 200.619146][ T8704] ntfs3: loop0: ino=5, "/" directory corrupted [ 200.620249][ T996] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 200.638883][ T996] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 200.647978][ T996] NILFS (loop1): discard dirty page: offset=0, ino=2 [ 200.654717][ T996] NILFS (loop1): discard dirty block: blocknr=18, size=1024 [ 200.673148][ T996] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 200.693459][ T996] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 200.703577][ T996] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 200.719954][ T996] NILFS (loop1): discard dirty page: offset=0, ino=5 [ 200.727054][ T996] NILFS (loop1): discard dirty block: blocknr=41, size=1024 [ 200.730896][ T5851] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 200.734391][ T996] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 200.752946][ T996] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 200.760151][ T5851] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.762322][ T996] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 200.779187][ T8703] NILFS (loop1): mounting fs with errors [ 200.788296][ T8703] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=2) [ 200.790268][ T5851] usb 4-1: Product: syz [ 200.798416][ T8703] Remounting filesystem read-only [ 200.816389][ T5851] usb 4-1: Manufacturer: syz [ 200.832747][ T5851] usb 4-1: SerialNumber: syz [ 200.841742][ T5851] usb 4-1: config 0 descriptor?? [ 201.265016][ T5851] usb 4-1: Firmware: major: 0, minor: 3, hardware type: UNKNOWN (64) [ 201.476771][ T5851] usb 4-1: failed to fetch extended address, random address set [ 201.484457][ T5851] usb 4-1: atusb_probe: initialization failed, error = -524 [ 201.505139][ T5851] atusb: probe of 4-1:0.0 failed with error -524 [ 201.525291][ T5851] usb 4-1: USB disconnect, device number 15 [ 201.550596][ T5764] ntfs3: loop0: ino=1a, ntfs_sync_fs failed, -22. [ 201.672577][ T5762] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer [ 201.682491][ T8712] loop0: detected capacity change from 0 to 256 [ 201.691559][ T5762] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 201.714373][ T5762] NILFS (loop1): discard dirty block: blocknr=35, size=1024 [ 201.724520][ T5762] NILFS (loop1): discard dirty block: blocknr=36, size=1024 [ 201.744065][ T5762] NILFS (loop1): discard dirty block: blocknr=37, size=1024 [ 201.754664][ T8712] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 201.769172][ T5762] NILFS (loop1): discard dirty block: blocknr=38, size=1024 [ 201.779599][ T8712] FAT-fs (loop0): Filesystem has been set read-only [ 201.782695][ T5762] NILFS (loop1): discard dirty page: offset=0, ino=4 [ 201.798885][ T5762] NILFS (loop1): discard dirty block: blocknr=40, size=1024 [ 201.808130][ T5762] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 201.819002][ T5762] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 201.828274][ T5762] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 201.850943][ T5762] NILFS (loop1): discard dirty page: offset=0, ino=3 [ 201.859276][ T5762] NILFS (loop1): discard dirty block: blocknr=42, size=1024 [ 201.870013][ T5762] NILFS (loop1): discard dirty block: blocknr=43, size=1024 [ 201.878916][ T5762] NILFS (loop1): discard dirty block: blocknr=44, size=1024 [ 201.890681][ T5762] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 201.901289][ T5762] NILFS (loop1): discard dirty page: offset=196608, ino=3 [ 201.911928][ T5762] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 201.922455][ T5762] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 201.941707][ T5762] NILFS (loop1): discard dirty block: blocknr=49, size=1024 [ 201.949031][ T8718] netlink: 332 bytes leftover after parsing attributes in process `syz.2.1048'. [ 201.968439][ T5762] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 202.194617][ T8724] loop0: detected capacity change from 0 to 1024 [ 202.467307][ T8732] binder: 8730:8732 ioctl 4018620d 0 returned -22 [ 202.893416][ T8731] loop2: detected capacity change from 0 to 40427 [ 202.916182][ T8731] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 202.923344][ T8731] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 202.932187][ T8731] F2FS-fs (loop2): build fault injection attr: rate: 17008, type: 0x7ffff [ 202.942061][ T8731] F2FS-fs (loop2): invalid crc value [ 202.953350][ T8731] F2FS-fs (loop2): Found nat_bits in checkpoint [ 202.985076][ T5851] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 203.015364][ T5829] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 203.040611][ T8731] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 203.051883][ T8731] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 203.146473][ T8747] loop1: detected capacity change from 0 to 32768 [ 203.169831][ T8731] syz.2.1054: attempt to access beyond end of device [ 203.169831][ T8731] loop2: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 203.184293][ T8747] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop1 scanned by syz.1.1063 (8747) [ 203.184672][ T5851] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 203.198114][ T8731] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 203.226913][ T8747] BTRFS info (device loop1): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 203.236572][ T5829] usb 4-1: Using ep0 maxpacket: 16 [ 203.237341][ T8731] syz.2.1054: attempt to access beyond end of device [ 203.237341][ T8731] loop2: rw=2049, sector=40976, nr_sectors = 8 limit=40427 [ 203.256281][ T5851] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 203.257789][ T8747] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 203.277803][ T8731] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 203.279916][ T5829] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 203.286023][ T8747] BTRFS info (device loop1): using free space tree [ 203.315501][ T5851] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 203.326946][ T5829] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.345098][ T5829] usb 4-1: Product: syz [ 203.368495][ T5851] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 203.382549][ T5829] usb 4-1: Manufacturer: syz [ 203.387851][ T5829] usb 4-1: SerialNumber: syz [ 203.392595][ T8747] BTRFS info (device loop1): enabling ssd optimizations [ 203.401626][ T5829] r8152-cfgselector 4-1: config 0 descriptor?? [ 203.408242][ T8747] BTRFS info (device loop1): auto enabling async discard [ 203.415384][ T5851] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 203.415412][ T5851] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 203.415430][ T5851] usb 1-1: Manufacturer: syz [ 203.448957][ T5851] usb 1-1: config 0 descriptor?? [ 203.634099][ T5829] r8152-cfgselector 4-1: Needed 1 retries to read version [ 203.654365][ T5829] usbip-host 4-1: 4-1 is not in match_busid table... skip! [ 203.746299][ T5762] BTRFS info (device loop1): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 203.763751][ T8741] loop0: detected capacity change from 0 to 2048 [ 203.801490][ T8741] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 203.900764][ T8768] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 203.929866][ T8741] syz.0.1061: attempt to access beyond end of device [ 203.929866][ T8741] loop0: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 203.952050][ T789] usb 4-1: USB disconnect, device number 16 [ 203.959184][ T5754] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 10 /dev/loop1 scanned by udevd (5754) [ 204.195031][ T5851] rc_core: IR keymap rc-hauppauge not found [ 204.202317][ T5851] Registered IR keymap rc-empty [ 204.225056][ T5851] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 204.272101][ T5851] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 204.330713][ T5851] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 204.368109][ T5851] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input21 [ 204.425154][ T5851] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 204.493093][ T5851] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 204.535272][ T5851] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 204.574129][ T5851] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 204.615439][ T5851] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 204.676456][ T5851] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 204.733368][ T5851] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 204.776229][ T8788] loop3: detected capacity change from 0 to 1024 [ 204.807183][ T5851] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 204.859338][ T5851] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 204.882903][ T8788] hfsplus: xattr search failed [ 204.907286][ T5851] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 204.952457][ T5851] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 204.963793][ T5851] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 204.992785][ T5851] usb 1-1: USB disconnect, device number 14 [ 205.514326][ T8804] loop1: detected capacity change from 0 to 1024 [ 205.623513][ T1322] hfsplus: b-tree write err: -5, ino 4 [ 205.818735][ T8812] loop0: detected capacity change from 0 to 1764 [ 205.876046][ T8814] bond0: entered promiscuous mode [ 205.887324][ T8814] bond_slave_0: entered promiscuous mode [ 205.893192][ T8814] bond_slave_1: entered promiscuous mode [ 205.903354][ T8814] dummy0: entered promiscuous mode [ 205.910484][ T8814] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 205.918786][ T8814] Cannot create hsr debugfs directory [ 205.928875][ T8814] hsr1: entered promiscuous mode [ 205.933940][ T8814] hsr1: entered allmulticast mode [ 205.955712][ T8814] bond0: entered allmulticast mode [ 205.961546][ T8814] bond_slave_0: entered allmulticast mode [ 205.969246][ T8814] bond_slave_1: entered allmulticast mode [ 205.986528][ T8814] dummy0: entered allmulticast mode [ 206.169096][ T8824] loop3: detected capacity change from 0 to 1024 [ 206.269452][ T49] hfsplus: b-tree write err: -5, ino 4 [ 206.455033][ T5753] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 206.643845][ T5753] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 206.664758][ T5753] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 206.676014][ T5753] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 206.687423][ T5753] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 206.710586][ T5753] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 206.721612][ T5753] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 206.730945][ T5753] usb 2-1: Manufacturer: syz [ 206.733247][ T8832] loop3: detected capacity change from 0 to 1764 [ 206.740440][ T5753] usb 2-1: config 0 descriptor?? [ 207.021130][ T8828] loop1: detected capacity change from 0 to 2048 [ 207.043208][ T8828] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 207.097235][ T8844] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 207.097744][ T8828] syz.1.1090: attempt to access beyond end of device [ 207.097744][ T8828] loop1: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 207.235154][ T5753] rc_core: IR keymap rc-hauppauge not found [ 207.241299][ T5753] Registered IR keymap rc-empty [ 207.247488][ T5753] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 207.275475][ T5753] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 207.285033][ T5851] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 207.305583][ T5753] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 207.321001][ T5753] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input22 [ 207.339100][ T5753] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 207.379427][ T5753] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 207.428030][ T5753] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 207.467543][ T5851] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 207.470169][ T5753] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 207.478832][ T5851] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 207.494369][ T5851] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 207.503572][ T5851] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.514013][ T5851] usb 1-1: config 0 descriptor?? [ 207.519439][ T5753] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 207.522015][ T5851] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 207.535697][ T5851] dvb-usb: bulk message failed: -22 (3/0) [ 207.555396][ T5753] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 207.567955][ T5851] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 207.582721][ T5851] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 207.590110][ T5851] usb 1-1: media controller created [ 207.600180][ T5851] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 207.604467][ T5753] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 207.640577][ T5851] dvb-usb: bulk message failed: -22 (6/0) [ 207.645257][ T5753] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 207.661576][ T5851] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 207.686487][ T5753] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 207.694583][ T5851] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input23 [ 207.709398][ T5851] dvb-usb: schedule remote query interval to 150 msecs. [ 207.717868][ T5851] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 207.725643][ T5753] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 207.766953][ T5753] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 207.802679][ T5753] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 207.813889][ T8843] dibusb: i2c wr: len=61 is too big! [ 207.813889][ T8843] [ 207.828090][ T5851] usb 1-1: USB disconnect, device number 15 [ 207.840466][ T5753] usb 2-1: USB disconnect, device number 11 [ 207.899112][ T8853] loop3: detected capacity change from 0 to 2048 [ 207.913028][ T5851] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 208.105190][ T8855] loop2: detected capacity change from 0 to 2048 [ 208.156330][ T8855] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 208.225951][ T27] audit: type=1800 audit(1768830760.577:39): pid=8855 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1101" name="file1" dev="loop2" ino=1346 res=0 errno=0 [ 209.007573][ T8869] loop0: detected capacity change from 0 to 32768 [ 209.030869][ T8869] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 209.035298][ T8877] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 209.056865][ T8877] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 209.063581][ T8877] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 209.070426][ T8877] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 209.096051][ T8877] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 209.102602][ T8877] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 209.142409][ T8877] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 209.152542][ T8877] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 209.153655][ T8869] XFS (loop0): Ending clean mount [ 209.162194][ T8877] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 209.200178][ T8877] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 209.207099][ T8877] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 209.213720][ T8877] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 209.229267][ T8877] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 209.238384][ T8877] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 209.282651][ T5764] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 209.842510][ T8891] loop1: detected capacity change from 0 to 8192 [ 209.872275][ T8897] loop3: detected capacity change from 0 to 2048 [ 209.919334][ T8897] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 210.000463][ T8897] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.143009][ T8897] EXT4-fs error (device loop3): ext4_find_dest_de:2115: inode #12: block 9: comm syz.3.1115: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=13, rec_len=21, size=56 fake=0 [ 210.186182][ T5851] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 210.199818][ T8897] EXT4-fs (loop3): Remounting filesystem read-only [ 210.290474][ T5763] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.386497][ T5851] usb 2-1: Using ep0 maxpacket: 16 [ 210.406684][ T5851] usb 2-1: config 0 interface 0 has no altsetting 0 [ 210.413364][ T5851] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 210.434298][ T5851] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.450580][ T5851] usb 2-1: config 0 descriptor?? [ 210.456342][ T8916] loop0: detected capacity change from 0 to 2048 [ 210.486719][ T8916] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 210.526768][ T27] audit: type=1800 audit(1768830762.867:40): pid=8916 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1124" name="file1" dev="loop0" ino=1367 res=0 errno=0 [ 210.582314][ T789] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 210.655189][ T5773] Bluetooth: hci3: command 0x0c1a tx timeout [ 210.731688][ T8922] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1126'. [ 210.808633][ T789] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.825326][ T789] usb 3-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 210.829731][ T8924] loop0: detected capacity change from 0 to 2048 [ 210.834440][ T789] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.850724][ T789] usb 3-1: config 0 descriptor?? [ 210.856866][ T8924] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 210.856917][ T8924] UDF-fs: Scanning with blocksize 512 failed [ 210.860737][ T8924] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 210.900335][ T5851] hid (null): unknown global tag 0xe [ 210.932023][ T5851] hid (null): unknown global tag 0xc [ 210.938328][ T5851] hid (null): unknown global tag 0x1a [ 210.943816][ T5851] hid (null): unknown global tag 0xd [ 210.952362][ T5851] hid (null): global environment stack underflow [ 210.967644][ T5851] hid (null): unknown global tag 0xd [ 210.973160][ T5851] hid (null): invalid report_count 1666728304 [ 210.980789][ T5851] hid (null): unknown global tag 0xa1 [ 210.995080][ T5851] hid (null): unknown global tag 0xe [ 211.008953][ T5851] hid (null): invalid report_size 33679 [ 211.031889][ T5851] hid (null): unknown global tag 0xc [ 211.171429][ T5851] usb 2-1: USB disconnect, device number 12 [ 211.298988][ T8920] loop3: detected capacity change from 0 to 32768 [ 211.330038][ T789] razer 0003:1532:010E.0014: unknown main item tag 0x0 [ 211.337969][ T789] razer 0003:1532:010E.0014: unknown main item tag 0x0 [ 211.345817][ T789] razer 0003:1532:010E.0014: unknown main item tag 0x0 [ 211.353258][ T789] razer 0003:1532:010E.0014: unknown main item tag 0x0 [ 211.360811][ T789] razer 0003:1532:010E.0014: unknown main item tag 0x0 [ 211.381760][ T8920] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 211.519041][ T8920] XFS (loop3): Ending clean mount [ 211.526230][ T789] razer 0003:1532:010E.0014: hidraw0: USB HID v0.00 Device [HID 1532:010e] on usb-dummy_hcd.2-1/input0 [ 211.548354][ T8920] XFS (loop3): Quotacheck needed: Please wait. [ 211.592007][ T8920] XFS (loop3): Quotacheck: Done. [ 211.721608][ T5763] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 211.753333][ T5828] usb 3-1: USB disconnect, device number 13 [ 212.219525][ T8947] loop0: detected capacity change from 0 to 32768 [ 212.244455][ T8947] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 212.262138][ T8947] JBD2: Ignoring recovery information on journal [ 212.321180][ T8947] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 212.528962][ T27] audit: type=1800 audit(1768830764.867:41): pid=8947 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1134" name="file1" dev="loop0" ino=17059 res=0 errno=0 [ 212.574657][ T5764] ocfs2: Unmounting device (7,0) on (node local) [ 212.842287][ T8963] loop2: detected capacity change from 0 to 8192 [ 212.913107][ T8963] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 212.938731][ T8963] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 212.958866][ T8963] REISERFS (device loop2): using ordered data mode [ 213.019822][ T8963] reiserfs: using flush barriers [ 213.056327][ T8963] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 213.080180][ T8963] REISERFS (device loop2): checking transaction log (loop2) [ 213.217082][ T8963] REISERFS (device loop2): Using tea hash to sort names [ 213.235622][ T8963] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 213.456932][ T8975] loop3: detected capacity change from 0 to 256 [ 213.577689][ T8977] loop1: detected capacity change from 0 to 64 [ 213.607027][ T8977] hfs: unable to locate alternate MDB [ 213.613121][ T8977] hfs: continuing without an alternate MDB [ 213.874152][ T8984] loop2: detected capacity change from 0 to 512 [ 213.973936][ T8984] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.040198][ T8984] ext4 filesystem being mounted at /271/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 214.188015][ T5765] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.366762][ T9002] tap0: tun_chr_ioctl cmd 35108 [ 214.865475][ T5753] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 215.045453][ T5753] usb 1-1: Using ep0 maxpacket: 32 [ 215.054608][ T5753] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 215.082279][ T5753] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 215.091892][ T5753] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 215.100790][ T788] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 215.109114][ T5753] usb 1-1: Product: syz [ 215.114135][ T5753] usb 1-1: Manufacturer: syz [ 215.120168][ T5753] usb 1-1: SerialNumber: syz [ 215.134036][ T5753] usb 1-1: config 0 descriptor?? [ 215.140457][ T9010] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 215.151443][ T5753] hub 1-1:0.0: bad descriptor, ignoring hub [ 215.157702][ T5753] hub: probe of 1-1:0.0 failed with error -5 [ 215.285356][ T788] usb 3-1: Using ep0 maxpacket: 32 [ 215.296887][ T788] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.315046][ T788] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.336500][ T788] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 215.365382][ T788] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.397353][ T788] usb 3-1: config 0 descriptor?? [ 215.410312][ T788] hub 3-1:0.0: USB hub found [ 215.535554][ T5753] usb 1-1: USB disconnect, device number 16 [ 215.612420][ T788] hub 3-1:0.0: config failed, can't read hub descriptor (err -90) [ 215.652292][ T9041] loop3: detected capacity change from 0 to 256 [ 215.713871][ T9041] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x389acbd6, utbl_chksum : 0xe619d30d) [ 215.760518][ T9041] syz.3.1172: attempt to access beyond end of device [ 215.760518][ T9041] loop3: rw=524288, sector=34359738488, nr_sectors = 8 limit=256 [ 215.783219][ T9041] syz.3.1172: attempt to access beyond end of device [ 215.783219][ T9041] loop3: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 215.815275][ T27] audit: type=1800 audit(1768830768.167:42): pid=9041 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1172" name="file1" dev="loop3" ino=1048607 res=0 errno=0 [ 215.822582][ T788] usbhid 3-1:0.0: can't add hid device: -71 [ 215.839815][ T9041] exFAT-fs (loop3): error, tried to truncate zeroed cluster. [ 215.842904][ T788] usbhid: probe of 3-1:0.0 failed with error -71 [ 215.871482][ T9041] exFAT-fs (loop3): Filesystem has been set read-only [ 215.886641][ T9041] exFAT-fs (loop3): hint_cluster is invalid (1), rewind to the first cluster [ 215.897780][ T788] usb 3-1: USB disconnect, device number 14 [ 215.928257][ T9041] exFAT-fs (loop3): error, invalid access to exfat cache (entry 0x00000000) [ 215.939439][ T9041] exFAT-fs (loop3): error, failed to bmap (inode : ffff88805aeb87e0 iblock : 9, err : -5) [ 215.962760][ T9041] exFAT-fs (loop3): error, tried to truncate zeroed cluster. [ 215.970651][ T9041] exFAT-fs (loop3): error, tried to truncate zeroed cluster. [ 216.502589][ T9049] loop3: detected capacity change from 0 to 32768 [ 216.514773][ T9049] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.1178 (9049) [ 216.558925][ T9049] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 216.576930][ T9049] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 216.596679][ T9049] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 216.645359][ T9049] BTRFS info (device loop3): trying to use backup root at mount time [ 216.653580][ T9049] BTRFS info (device loop3): use zlib compression, level 3 [ 216.684990][ T9049] BTRFS info (device loop3): enabling ssd optimizations [ 216.695253][ T9049] BTRFS info (device loop3): disabling tree log [ 216.701560][ T9049] BTRFS info (device loop3): using free space tree [ 216.754125][ T9066] loop0: detected capacity change from 0 to 4096 [ 216.812513][ T1088] BTRFS warning (device loop3): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0x26333c6f level 0 [ 216.857111][ T9066] ntfs: volume version 3.1. [ 216.873225][ T9049] BTRFS warning (device loop3): couldn't read tree root [ 216.906380][ T9049] BTRFS warning (device loop3): try to load backup roots slot 1 [ 216.924319][ T59] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x78ca8373 level 0 [ 216.969081][ T9049] BTRFS warning (device loop3): couldn't read tree root [ 216.995394][ T9049] BTRFS warning (device loop3): try to load backup roots slot 2 [ 217.031709][ T1322] BTRFS error (device loop3): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 217.064128][ T9049] BTRFS warning (device loop3): couldn't read tree root [ 217.103191][ T9085] loop2: detected capacity change from 0 to 64 [ 217.104987][ T9049] BTRFS warning (device loop3): try to load backup roots slot 3 [ 217.168366][ T9049] BTRFS info (device loop3): auto enabling async discard [ 217.187761][ T9049] BTRFS info (device loop3): rebuilding free space tree [ 217.205170][ T9085] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing [ 217.257514][ T9049] BTRFS info (device loop3): checking UUID tree [ 217.496065][ T5763] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 217.799344][ T9105] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1195'. [ 217.851753][ T9105] vlan2: entered promiscuous mode [ 218.054592][ T9113] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1201'. [ 218.569197][ T9129] loop3: detected capacity change from 0 to 256 [ 218.613634][ T9129] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 218.636340][ T9129] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 218.671601][ T9116] loop1: detected capacity change from 0 to 32768 [ 218.701512][ T9129] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 218.774098][ T9116] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 218.788210][ T9128] loop0: detected capacity change from 0 to 8192 [ 218.817573][ T9128] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 218.847943][ T9128] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 218.860790][ T9128] REISERFS (device loop0): using ordered data mode [ 218.867549][ T9128] reiserfs: using flush barriers [ 218.874239][ T9128] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 218.884375][ T9116] XFS (loop1): Ending clean mount [ 218.917037][ T9116] XFS (loop1): Quotacheck needed: Please wait. [ 218.987711][ T9128] REISERFS (device loop0): checking transaction log (loop0) [ 219.042431][ T9116] XFS (loop1): Quotacheck: Done. [ 219.218323][ T5762] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 219.376968][ T9128] REISERFS (device loop0): Using tea hash to sort names [ 219.405395][ T9128] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 220.253213][ T9151] loop3: detected capacity change from 0 to 40427 [ 220.280542][ T9151] F2FS-fs (loop3): Invalid log blocks per segment (83886089) [ 220.285038][ T789] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 220.299275][ T9151] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 220.332839][ T9151] F2FS-fs (loop3): invalid crc value [ 220.376319][ T9151] F2FS-fs (loop3): Found nat_bits in checkpoint [ 220.433825][ T9151] F2FS-fs (loop3): Start checkpoint disabled! [ 220.442201][ T9151] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 220.453642][ T9151] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 220.502049][ T789] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 220.519214][ T789] usb 1-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 220.539889][ T9161] loop2: detected capacity change from 0 to 40427 [ 220.550796][ T789] usb 1-1: config 0 interface 0 has no altsetting 0 [ 220.566346][ T789] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 220.593808][ T9161] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 220.602165][ T789] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.613205][ T9161] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 220.623967][ T789] usb 1-1: config 0 descriptor?? [ 220.639865][ T9161] F2FS-fs (loop2): Found nat_bits in checkpoint [ 220.641230][ T9176] loop1: detected capacity change from 0 to 64 [ 220.732633][ T996] kworker/u4:6: attempt to access beyond end of device [ 220.732633][ T996] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 220.776655][ T9161] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 220.783787][ T9161] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 220.795913][ T996] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 220.812571][ T996] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 220.970168][ T9161] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 221.021182][ T9161] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 221.050784][ T789] wacom 0003:056A:0331.0015: unknown main item tag 0x0 [ 221.065601][ T9161] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 221.088234][ T789] wacom 0003:056A:0331.0015: unknown main item tag 0x0 [ 221.102982][ T9161] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 221.121694][ T789] wacom 0003:056A:0331.0015: unknown main item tag 0x0 [ 221.130608][ T9161] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 221.141940][ T9161] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 221.150512][ T789] wacom 0003:056A:0331.0015: hidraw0: USB HID v0.00 Device [HID 056a:0331] on usb-dummy_hcd.0-1/input0 [ 221.177486][ T9161] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 221.287676][ T789] usb 1-1: USB disconnect, device number 17 [ 221.318759][ T9185] fido_id[9185]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 221.730401][ T9195] ip6erspan0: tun_chr_ioctl cmd 1074025675 [ 221.745188][ T9195] ip6erspan0: persist disabled [ 222.346599][ T789] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 222.385304][ T9203] loop0: detected capacity change from 0 to 32768 [ 222.411567][ T9203] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 222.463779][ T9219] loop1: detected capacity change from 0 to 4096 [ 222.479709][ T9219] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 222.550775][ T789] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.566059][ T789] usb 4-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 21 [ 222.592046][ T789] usb 4-1: config 0 interface 0 has no altsetting 0 [ 222.599864][ T789] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1d00, bcdDevice= 0.00 [ 222.603096][ T9219] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 222.612644][ T789] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.653308][ T789] usb 4-1: config 0 descriptor?? [ 222.718988][ T5764] ocfs2: Unmounting device (7,0) on (node local) [ 223.117175][ T9217] loop2: detected capacity change from 0 to 32768 [ 223.173480][ T9217] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 223.212646][ T9237] loop1: detected capacity change from 0 to 65 [ 223.230044][ T9237] BFS-fs: bfs_fill_super(): NOTE: filesystem loop1 was created with 512 inodes, the real maximum is 511, mounting anyway [ 223.344201][ T9217] XFS (loop2): Ending clean mount [ 223.389500][ T9217] XFS (loop2): Quotacheck needed: Please wait. [ 223.458417][ T789] corsair-cpro 0003:1B1C:1D00.0016: hidraw0: USB HID v0.00 Device [HID 1b1c:1d00] on usb-dummy_hcd.3-1/input0 [ 223.522274][ T9217] XFS (loop2): Quotacheck: Done. [ 223.579891][ T9217] XFS (loop2): User initiated shutdown received. [ 223.619401][ T9217] XFS (loop2): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:497). Shutting down filesystem. [ 223.653543][ T9217] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 223.709607][ T5765] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 223.723158][ T9248] program syz.0.1250 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 223.836254][ T9249] loop1: detected capacity change from 0 to 4096 [ 223.863022][ T9249] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 223.897544][ T789] corsair-cpro: probe of 0003:1B1C:1D00.0016 failed with error -110 [ 223.933848][ T789] usb 4-1: USB disconnect, device number 17 [ 224.011448][ T27] audit: type=1800 audit(1768830776.347:43): pid=9249 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1251" name="file1" dev="loop1" ino=30 res=0 errno=0 [ 224.156928][ T788] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 224.345518][ T788] usb 1-1: Using ep0 maxpacket: 16 [ 224.367575][ T788] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 224.391706][ T788] usb 1-1: config 0 has no interface number 0 [ 224.402258][ T788] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.430807][ T788] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 224.471276][ T788] usb 1-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 224.497967][ T788] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.529570][ T788] usb 1-1: config 0 descriptor?? [ 224.540166][ T9268] loop3: detected capacity change from 0 to 128 [ 224.566049][ T9269] veth1_to_bond: entered allmulticast mode [ 224.570329][ T9268] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 224.580393][ T9267] veth1_to_bond: left allmulticast mode [ 224.632110][ T9268] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 224.692028][ T9268] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 93: 0x5d != 0x05 [ 224.715147][ T9268] UDF-fs: error (device loop3): udf_count_free_bitmap: udf_count_free failed [ 224.860468][ T5763] UDF-fs: error (device loop3): udf_read_inode: (ino 104) failed !bh [ 224.887914][ T5763] UDF-fs: error (device loop3): udf_read_inode: (ino 104) failed !bh [ 225.091779][ T9265] loop2: detected capacity change from 0 to 32768 [ 225.113882][ T9265] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.1259 (9265) [ 225.136268][ T9265] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 225.155658][ T9265] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 225.169109][ T9265] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 225.177931][ T9278] loop1: detected capacity change from 0 to 2048 [ 225.179076][ T9265] BTRFS info (device loop2): use zstd compression, level 3 [ 225.193333][ T788] uclogic 0003:28BD:0071.0017: pen parameters not found [ 225.193376][ T788] uclogic 0003:28BD:0071.0017: interface is invalid, ignoring [ 225.206477][ T9265] BTRFS info (device loop2): using free space tree [ 225.258996][ T1088] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 225.262819][ T9278] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 225.285258][ T1088] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.299712][ T788] usb 1-1: USB disconnect, device number 18 [ 225.434989][ T9265] BTRFS info (device loop2): enabling ssd optimizations [ 225.442000][ T9265] BTRFS info (device loop2): auto enabling async discard [ 225.500383][ T1088] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 225.534536][ T1088] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.626526][ T5765] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 225.646348][ T1088] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 225.681646][ T1088] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.818472][ T1088] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 225.845090][ T9297] netlink: 277 bytes leftover after parsing attributes in process `syz.1.1269'. [ 225.864579][ T1088] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.686972][ T5768] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 226.699279][ T5768] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 226.709767][ T5768] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 226.735493][ T5768] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 226.743264][ T5768] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 226.752292][ T5768] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 227.479999][ T789] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 227.654253][ T9314] chnl_net:caif_netlink_parms(): no params data found [ 227.675017][ T789] usb 2-1: Using ep0 maxpacket: 8 [ 227.688433][ T789] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 227.698775][ T789] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 227.709686][ T789] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 227.720280][ T789] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 227.733705][ T789] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 227.743982][ T789] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.915575][ T9314] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.922724][ T9314] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.944716][ T9314] bridge_slave_0: entered allmulticast mode [ 227.956692][ T9314] bridge_slave_0: entered promiscuous mode [ 228.007779][ T789] usb 2-1: GET_CAPABILITIES returned 0 [ 228.013334][ T789] usbtmc 2-1:16.0: can't read capabilities [ 228.113274][ T9314] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.120843][ T9314] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.128549][ T9314] bridge_slave_1: entered allmulticast mode [ 228.140497][ T9314] bridge_slave_1: entered promiscuous mode [ 228.238401][ T789] usb 2-1: USB disconnect, device number 13 [ 228.463483][ T9314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 228.500268][ T9314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 228.638328][ T1088] batadv_slave_0: left promiscuous mode [ 228.685911][ T1088] hsr_slave_0: left promiscuous mode [ 228.712656][ T1088] hsr_slave_1: left promiscuous mode [ 228.732728][ T1088] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 228.754830][ T1088] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 228.770196][ T1088] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 228.787974][ T1088] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 228.815579][ T5768] Bluetooth: hci0: command tx timeout [ 228.824290][ T1088] bridge_slave_1: left allmulticast mode [ 228.848335][ T1088] bridge_slave_1: left promiscuous mode [ 228.857212][ T1088] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.928090][ T1088] bridge_slave_0: left allmulticast mode [ 228.937437][ T1088] bridge_slave_0: left promiscuous mode [ 228.946482][ T1088] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.036279][ T1088] veth1_macvtap: left promiscuous mode [ 229.042519][ T1088] veth0_macvtap: left promiscuous mode [ 229.068110][ T1088] veth1_vlan: left promiscuous mode [ 229.073923][ T1088] veth0_vlan: left promiscuous mode [ 229.340461][ T9373] loop2: detected capacity change from 0 to 32768 [ 229.445176][ T9373] JBD2: Ignoring recovery information on journal [ 229.518362][ T9373] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 229.659402][ T9373] [ 229.661783][ T9373] ====================================================== [ 229.668809][ T9373] WARNING: possible circular locking dependency detected [ 229.675870][ T9373] syzkaller #0 Not tainted [ 229.680289][ T9373] ------------------------------------------------------ [ 229.687323][ T9373] syz.2.1286/9373 is trying to acquire lock: [ 229.693310][ T9373] ffff88805ae26d98 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2){+.+.}-{3:3}, at: ocfs2_xattr_set+0xba4/0x13e0 [ 229.705535][ T9373] [ 229.705535][ T9373] but task is already holding lock: [ 229.712910][ T9373] ffff88805ad64e38 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x476/0x13e0 [ 229.722427][ T9373] [ 229.722427][ T9373] which lock already depends on the new lock. [ 229.722427][ T9373] [ 229.732842][ T9373] [ 229.732842][ T9373] the existing dependency chain (in reverse order) is: [ 229.741965][ T9373] [ 229.741965][ T9373] -> #4 (&oi->ip_xattr_sem){++++}-{3:3}: [ 229.749822][ T9373] down_read+0x46/0x2e0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 229.755042][ T9373] ocfs2_init_acl+0x30a/0x770 [ 229.760352][ T9373] ocfs2_mknod+0x140f/0x2300 [ 229.765482][ T9373] ocfs2_mkdir+0x196/0x430 [ 229.770460][ T9373] vfs_mkdir+0x296/0x440 [ 229.775242][ T9373] do_mkdirat+0x1dc/0x450 [ 229.780106][ T9373] __x64_sys_mkdirat+0x89/0xa0 [ 229.785409][ T9373] do_syscall_64+0x55/0xa0 [ 229.790359][ T9373] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 229.796795][ T9373] [ 229.796795][ T9373] -> #3 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 229.805328][ T9373] down_read+0x46/0x2e0 [ 229.810026][ T9373] ocfs2_start_trans+0x3a8/0x6f0 [ 229.815594][ T9373] __ocfs2_flush_truncate_log+0x499/0x1130 [ 229.821937][ T9373] ocfs2_flush_truncate_log+0x4f/0x60 [ 229.827869][ T9373] ocfs2_sync_fs+0x11d/0x330 [ 229.832992][ T9373] sync_filesystem+0x1c2/0x220 [ 229.838353][ T9373] ocfs2_remount+0x119/0xb80 [ 229.843485][ T9373] reconfigure_super+0x21e/0x8a0 [ 229.848964][ T9373] vfs_fsconfig_locked+0x16c/0x320 [ 229.854619][ T9373] __se_sys_fsconfig+0x70d/0x850 [ 229.860111][ T9373] do_syscall_64+0x55/0xa0 [ 229.865068][ T9373] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 229.871498][ T9373] [ 229.871498][ T9373] -> #2 (sb_internal#3){.+.+}-{0:0}: [ 229.879045][ T9373] ocfs2_start_trans+0x2a9/0x6f0 [ 229.884541][ T9373] __ocfs2_flush_truncate_log+0x499/0x1130 [ 229.890885][ T9373] ocfs2_flush_truncate_log+0x4f/0x60 [ 229.896788][ T9373] ocfs2_sync_fs+0x11d/0x330 [ 229.901916][ T9373] sync_filesystem+0x1c2/0x220 [ 229.907305][ T9373] ocfs2_remount+0x119/0xb80 [ 229.912400][ T9373] reconfigure_super+0x21e/0x8a0 [ 229.917844][ T9373] vfs_fsconfig_locked+0x16c/0x320 [ 229.923573][ T9373] __se_sys_fsconfig+0x70d/0x850 [ 229.929049][ T9373] do_syscall_64+0x55/0xa0 [ 229.933979][ T9373] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 229.940382][ T9373] [ 229.940382][ T9373] -> #1 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}: [ 229.950893][ T9373] down_write+0x97/0x200 [ 229.955674][ T9373] __ocfs2_flush_truncate_log+0x352/0x1130 [ 229.961985][ T9373] ocfs2_flush_truncate_log+0x4f/0x60 [ 229.967879][ T9373] ocfs2_sync_fs+0x11d/0x330 [ 229.973011][ T9373] sync_filesystem+0x1c2/0x220 [ 229.978333][ T9373] ocfs2_remount+0x119/0xb80 [ 229.983474][ T9373] reconfigure_super+0x21e/0x8a0 [ 229.988943][ T9373] vfs_fsconfig_locked+0x16c/0x320 [ 229.994564][ T9373] __se_sys_fsconfig+0x70d/0x850 [ 230.000009][ T9373] do_syscall_64+0x55/0xa0 [ 230.004940][ T9373] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 230.011343][ T9373] [ 230.011343][ T9373] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2){+.+.}-{3:3}: [ 230.021945][ T9373] __lock_acquire+0x2df1/0x7d40 [ 230.027378][ T9373] lock_acquire+0x19e/0x420 [ 230.032383][ T9373] down_write+0x97/0x200 [ 230.037138][ T9373] ocfs2_xattr_set+0xba4/0x13e0 [ 230.042494][ T9373] __vfs_setxattr+0x431/0x470 [ 230.047675][ T9373] __vfs_setxattr_noperm+0x12d/0x5e0 [ 230.053471][ T9373] vfs_setxattr+0x16b/0x2f0 [ 230.058558][ T9373] path_setxattr+0x3f3/0x5d0 [ 230.063651][ T9373] __x64_sys_setxattr+0xbb/0xd0 [ 230.069006][ T9373] do_syscall_64+0x55/0xa0 [ 230.073921][ T9373] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 230.080314][ T9373] [ 230.080314][ T9373] other info that might help us debug this: [ 230.080314][ T9373] [ 230.090517][ T9373] Chain exists of: [ 230.090517][ T9373] &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2 --> &journal->j_trans_barrier --> &oi->ip_xattr_sem [ 230.090517][ T9373] [ 230.107441][ T9373] Possible unsafe locking scenario: [ 230.107441][ T9373] [ 230.114875][ T9373] CPU0 CPU1 [ 230.120223][ T9373] ---- ---- [ 230.125569][ T9373] lock(&oi->ip_xattr_sem); [ 230.130140][ T9373] lock(&journal->j_trans_barrier); [ 230.137920][ T9373] lock(&oi->ip_xattr_sem); [ 230.145007][ T9373] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2); [ 230.152268][ T9373] [ 230.152268][ T9373] *** DEADLOCK *** [ 230.152268][ T9373] [ 230.160485][ T9373] 3 locks held by syz.2.1286/9373: [ 230.165571][ T9373] #0: ffff88807874c418 (sb_writers#20){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 230.174779][ T9373] #1: ffff88805ad65118 (&sb->s_type->i_mutex_key#28){+.+.}-{3:3}, at: vfs_setxattr+0x144/0x2f0 [ 230.185284][ T9373] #2: ffff88805ad64e38 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x476/0x13e0 [ 230.195174][ T9373] [ 230.195174][ T9373] stack backtrace: [ 230.201141][ T9373] CPU: 0 PID: 9373 Comm: syz.2.1286 Not tainted syzkaller #0 [ 230.208582][ T9373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 230.218635][ T9373] Call Trace: [ 230.221906][ T9373] [ 230.224821][ T9373] dump_stack_lvl+0x18c/0x250 [ 230.229497][ T9373] ? load_image+0x400/0x400 [ 230.233984][ T9373] ? show_regs_print_info+0x20/0x20 [ 230.239163][ T9373] ? print_circular_bug+0x12b/0x1a0 [ 230.244354][ T9373] check_noncircular+0x2fc/0x400 [ 230.249357][ T9373] ? look_up_lock_class+0x75/0x140 [ 230.254459][ T9373] ? print_deadlock_bug+0x5d0/0x5d0 [ 230.259646][ T9373] ? lockdep_lock+0xf5/0x230 [ 230.264218][ T9373] ? lockdep_unlock+0x146/0x2e0 [ 230.269149][ T9373] ? _find_first_zero_bit+0xd3/0x100 [ 230.274432][ T9373] __lock_acquire+0x2df1/0x7d40 [ 230.279275][ T9373] ? ocfs2_inode_lock_full_nested+0xcdf/0x1b70 [ 230.285425][ T9373] ? _raw_spin_unlock+0x40/0x40 [ 230.290262][ T9373] ? verify_lock_unused+0x140/0x140 [ 230.295441][ T9373] ? stack_trace_save+0xaa/0x100 [ 230.300365][ T9373] lock_acquire+0x19e/0x420 [ 230.304856][ T9373] ? ocfs2_xattr_set+0xba4/0x13e0 [ 230.309967][ T9373] ? __might_sleep+0xe0/0xe0 [ 230.314544][ T9373] ? read_lock_is_recursive+0x20/0x20 [ 230.319900][ T9373] ? _raw_spin_unlock+0x28/0x40 [ 230.324735][ T9373] ? ocfs2_inode_lock_tracker+0x437/0x700 [ 230.330438][ T9373] ? ocfs2_xattr_block_find+0x15b/0x4d0 [ 230.336066][ T9373] down_write+0x97/0x200 [ 230.340314][ T9373] ? ocfs2_xattr_set+0xba4/0x13e0 [ 230.345397][ T9373] ? down_read_killable+0x340/0x340 [ 230.350579][ T9373] ? ocfs2_xattr_ibody_find+0xcb/0x7c0 [ 230.356040][ T9373] ocfs2_xattr_set+0xba4/0x13e0 [ 230.360889][ T9373] ? __ocfs2_xattr_set_handle+0xf40/0xf40 [ 230.366598][ T9373] ? __lock_acquire+0x1347/0x7d40 [ 230.371614][ T9373] ? verify_lock_unused+0x140/0x140 [ 230.376886][ T9373] ? aa_get_newest_label+0xfd/0x5c0 [ 230.382069][ T9373] ? end_current_label_crit_section+0x170/0x170 [ 230.388343][ T9373] ? evm_protected_xattr_common+0x170/0x190 [ 230.394223][ T9373] ? ocfs2_xattr_security_get+0x40/0x40 [ 230.399755][ T9373] __vfs_setxattr+0x431/0x470 [ 230.404419][ T9373] __vfs_setxattr_noperm+0x12d/0x5e0 [ 230.409682][ T9373] vfs_setxattr+0x16b/0x2f0 [ 230.414181][ T9373] ? xattr_permission+0x470/0x470 [ 230.419194][ T9373] ? __mnt_want_write+0x223/0x2a0 [ 230.424203][ T9373] ? path_setxattr+0x3a1/0x5d0 [ 230.428950][ T9373] path_setxattr+0x3f3/0x5d0 [ 230.433523][ T9373] ? simple_xattrs_free+0x150/0x150 [ 230.438737][ T9373] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 230.444700][ T9373] ? lock_chain_count+0x20/0x20 [ 230.449531][ T9373] __x64_sys_setxattr+0xbb/0xd0 [ 230.454366][ T9373] do_syscall_64+0x55/0xa0 [ 230.458760][ T9373] ? clear_bhb_loop+0x40/0x90 [ 230.463417][ T9373] ? clear_bhb_loop+0x40/0x90 [ 230.468085][ T9373] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 230.473961][ T9373] RIP: 0033:0x7fccadf9acb9 [ 230.478368][ T9373] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 230.498043][ T9373] RSP: 002b:00007fccaee82028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 230.506437][ T9373] RAX: ffffffffffffffda RBX: 00007fccae215fa0 RCX: 00007fccadf9acb9 [ 230.514414][ T9373] RDX: 00002000000013c0 RSI: 0000200000000140 RDI: 0000200000000100 [ 230.522482][ T9373] RBP: 00007fccae008bf7 R08: 0000000000000000 R09: 0000000000000000 [ 230.530453][ T9373] R10: 0000000000000700 R11: 0000000000000246 R12: 0000000000000000 [ 230.538406][ T9373] R13: 00007fccae216038 R14: 00007fccae215fa0 R15: 00007ffeba26baa8 [ 230.546366][ T9373] [ 230.896108][ T5768] Bluetooth: hci0: command tx timeout [ 231.349125][ T1088] team0 (unregistering): Port device team_slave_1 removed [ 231.400198][ T1088] team0 (unregistering): Port device team_slave_0 removed [ 231.443996][ T1088] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 231.453918][ T1088] bond_slave_1 (unregistering): left promiscuous mode [ 231.501781][ T1088] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 231.511852][ T1088] bond_slave_0 (unregistering): left promiscuous mode [ 231.854163][ T1088] bond0 (unregistering): Released all slaves [ 232.340498][ T9373] ocfs2: Unmounting device (7,2) on (node local) [ 232.584369][ T1088] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 232.594858][ T1088] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.634173][ T1088] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 232.644291][ T1088] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.680444][ T1088] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 232.690555][ T1088] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.740588][ T1088] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 232.751087][ T1088] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.892942][ T1088] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 232.903866][ T1088] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.959633][ T1088] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 232.969772][ T1088] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.034060][ T1088] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 233.045830][ T1088] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.138550][ T1088] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 233.150753][ T1088] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.243907][ T1088] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 233.254804][ T1088] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.289198][ T1088] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 233.299115][ T1088] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.338966][ T1088] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 233.352141][ T1088] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.419416][ T1088] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 233.430779][ T1088] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.569565][ T1088] tipc: Disabling bearer [ 233.587551][ T1088] tipc: Left network mode [ 234.446298][ T1088] IPVS: stopping backup sync thread 6832 ... [ 234.890333][ T1088] bridge_slave_1: left allmulticast mode [ 234.896517][ T1088] bridge_slave_1: left promiscuous mode [ 234.902290][ T1088] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.915271][ T1088] bridge_slave_0: left allmulticast mode [ 234.921072][ T1088] bridge_slave_0: left promiscuous mode [ 234.930674][ T1088] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.940126][ T1088] bond0: left promiscuous mode [ 234.947464][ T1088] bond_slave_0: left promiscuous mode [ 234.953007][ T1088] bond_slave_1: left promiscuous mode [ 234.959722][ T1088] dummy0: left promiscuous mode [ 234.969622][ T1088] hsr_slave_0: left promiscuous mode [ 234.979535][ T1088] hsr_slave_1: left promiscuous mode [ 234.987167][ T1088] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 234.994692][ T1088] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 235.002827][ T1088] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 235.011233][ T1088] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 235.019253][ T1088] bridge_slave_1: left allmulticast mode [ 235.026377][ T1088] bridge_slave_1: left promiscuous mode [ 235.032085][ T1088] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.041191][ T1088] bridge_slave_0: left allmulticast mode [ 235.048395][ T1088] bridge_slave_0: left promiscuous mode [ 235.054118][ T1088] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.067395][ T1088] bond0: left promiscuous mode [ 235.072187][ T1088] bond_slave_0: left promiscuous mode [ 235.078101][ T1088] bond_slave_1: left promiscuous mode [ 235.084150][ T1088] dummy0: left promiscuous mode [ 235.092167][ T1088] hsr_slave_0: left promiscuous mode [ 235.098974][ T1088] hsr_slave_1: left promiscuous mode [ 235.104595][ T1088] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 235.112023][ T1088] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 235.119612][ T1088] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 235.127063][ T1088] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 235.134537][ T1088] bridge_slave_1: left allmulticast mode [ 235.140906][ T1088] bridge_slave_1: left promiscuous mode [ 235.146700][ T1088] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.154574][ T1088] bridge_slave_0: left allmulticast mode [ 235.160273][ T1088] bridge_slave_0: left promiscuous mode [ 235.166235][ T1088] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.176876][ T1088] hsr_slave_0: left promiscuous mode [ 235.182534][ T1088] hsr_slave_1: left promiscuous mode [ 235.189268][ T1088] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 235.197338][ T1088] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 235.204835][ T1088] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 235.212330][ T1088] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 235.219936][ T1088] bridge_slave_1: left allmulticast mode [ 235.225612][ T1088] bridge_slave_1: left promiscuous mode [ 235.231263][ T1088] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.239288][ T1088] bridge_slave_0: left allmulticast mode [ 235.244958][ T1088] bridge_slave_0: left promiscuous mode [ 235.250697][ T1088] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.262444][ T1088] veth1_macvtap: left promiscuous mode [ 235.267994][ T1088] veth0_macvtap: left promiscuous mode [ 235.273522][ T1088] veth1_vlan: left promiscuous mode [ 235.279963][ T1088] veth0_vlan: left promiscuous mode [ 235.286669][ T1088] veth1_macvtap: left promiscuous mode [ 235.292164][ T1088] veth0_macvtap: left promiscuous mode [ 235.297844][ T1088] veth1_vlan: left promiscuous mode [ 235.303102][ T1088] veth0_vlan: left promiscuous mode [ 235.309323][ T1088] veth1_macvtap: left promiscuous mode [ 235.314807][ T1088] veth0_macvtap: left promiscuous mode [ 235.320695][ T1088] veth1_vlan: left promiscuous mode [ 235.326300][ T1088] veth0_vlan: left promiscuous mode [ 235.488642][ T1088] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 235.504611][ T1088] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 235.545221][ T1088] bond0 (unregistering): Released all slaves [ 235.729174][ T1088] team0 (unregistering): Port device team_slave_1 removed [ 235.740751][ T1088] team0 (unregistering): Port device team_slave_0 removed [ 235.768324][ T1088] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 235.780861][ T1088] bond_slave_1 (unregistering): left allmulticast mode [ 235.808449][ T1088] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 235.817312][ T1088] bond_slave_0 (unregistering): left allmulticast mode [ 235.882275][ T1088] bond0 (unregistering): Released all slaves [ 236.101675][ T1088] team0 (unregistering): Port device team_slave_1 removed [ 236.132868][ T1088] team0 (unregistering): Port device team_slave_0 removed [ 236.161132][ T1088] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 236.169997][ T1088] bond_slave_1 (unregistering): left allmulticast mode [ 236.203185][ T1088] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 236.212158][ T1088] bond_slave_0 (unregistering): left allmulticast mode [ 236.282182][ T1088] bond0 (unregistering): Released all slaves [ 236.565408][ T1088] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 236.596104][ T1088] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 236.671423][ T1088] bond0 (unregistering): Released all slaves