last executing test programs: 4.504651977s ago: executing program 2 (id=1673): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="640000001000010428bd70000000000000030000", @ANYRES32=0x0, @ANYBLOB="0000000000040000300012800b00010067656e65766500002000028008000100ffffff0014000700000000000000000000000000000000161400030067656e65766531"], 0x64}}, 0x800) 4.504359243s ago: executing program 0 (id=1674): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f00000011c0)={0x1000e, 0xc21, 0xa5c}) 4.228922844s ago: executing program 2 (id=1678): setuid(0xee01) keyctl$session_to_parent(0x12) 4.116721125s ago: executing program 0 (id=1680): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) accept4(r0, 0x0, 0x0, 0x800) 3.863257129s ago: executing program 2 (id=1683): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x42400) 3.850549074s ago: executing program 0 (id=1684): r0 = syz_mount_image$btrfs(&(0x7f0000000200), &(0x7f0000005600)='./file0\x00', 0x800, &(0x7f0000000240), 0x0, 0x559e, &(0x7f0000005680)="$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") ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000080)) 3.704263793s ago: executing program 5 (id=1686): r0 = socket$nl_route(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f0000000280), 0xc) 3.568036291s ago: executing program 2 (id=1688): r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x800001, &(0x7f000000ac40), 0x0, 0x559e, &(0x7f0000005680)="$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") ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000180)={{0x0, 0x6, 0x100000001, 0x2, 0x1, 0x0, 0x10001, 0xfff, 0x1ffc, 0x8, 0x45c6ca03, 0x0, 0x6, 0x1}, 0x20, [0x0, 0x0, 0x0, 0x0]}) 3.403752412s ago: executing program 5 (id=1690): r0 = syz_open_dev$I2C(&(0x7f00000001c0), 0x0, 0x40080) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000200)={&(0x7f0000000180)=[{0x2, 0xb401, 0x59, &(0x7f00000000c0)="0cb474bb3ac0628c23a93a377e79eeba392feebcb8063652cddf208504b88e753dd78371fef693e4646ceee602fb2318d59de5d4f2de385df009477d7cd8017074299609da2767151e1bea4034c283b5e5394428a7fae13c2a"}, {0x2, 0x801, 0x42, &(0x7f0000000340)="604050c8bd3eeea371d4e60d701df9cb355cfe5e18d85c70a6d34a1a7c4596a50eb45cd8f2e8b71c252b45e57a850e9e52774abc5bb036ef36f741a6394b62fda449"}, {0x4, 0x1400, 0x0, 0x0}], 0x3}) 3.112686412s ago: executing program 5 (id=1693): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newtaction={0x74, 0x30, 0xb, 0x5, 0x0, {}, [{0x60, 0x1, [@m_ct={0x5c, 0x1, 0x0, 0x0, {{0x7}, {0x34, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @private=0xa010102}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x8890}, 0x40) 2.754020362s ago: executing program 5 (id=1697): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000226aa140070ad0001310010203010902240001000000000904000002bd22f00009050303000000000009058aff"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000005c0)={0x14, 0x0, &(0x7f0000000580)={0x0, 0x3, 0x1a, {0x3}}}, 0x0) 2.595775239s ago: executing program 3 (id=1700): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000600000004000000000000010400000001040000000000000000000d040000000000000000000010040000000400000000000008030000000000000061"], 0x0, 0x52}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x2, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x50) 2.328713245s ago: executing program 1 (id=1702): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000feffffff0000000003000000850000003600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r0, 0x0, 0xe, 0x2f, &(0x7f0000000080)="87fc5d85da21530562070095c108", 0x0, 0x8011, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x40}, 0x19) 2.328461666s ago: executing program 3 (id=1703): r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, &(0x7f0000000140)) 2.108771912s ago: executing program 1 (id=1704): r0 = gettid() tkill(r0, 0x11) 2.08832844s ago: executing program 4 (id=1705): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r0, 0x4, 0x5000) 2.040743373s ago: executing program 3 (id=1706): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) syz_mount_image$udf(&(0x7f00000005c0), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5af, &(0x7f0000000680)="$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") 1.885632281s ago: executing program 4 (id=1707): r0 = socket$nl_route(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="240000005800410f9c00f4f90085b3a85c91fddf080001000501009f0800028001000000", 0x24) 1.577322101s ago: executing program 4 (id=1708): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x101000, 0x0) ioctl$COMEDI_CMD(r0, 0x80506409, &(0x7f0000000180)={0x1, 0x1, 0x80, 0xd, 0x10, 0x3e8, 0x2, 0x0, 0x20, 0x4, 0x20, 0xffffffff, &(0x7f0000000600)=[0x7], 0x1, 0x0}) 1.480606925s ago: executing program 1 (id=1709): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet(r0, &(0x7f0000002c80)=[{{&(0x7f0000000940)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000380)="00dd41dc115d27cf850a782da28375b561df298712d56b", 0x2}], 0x1}}, {{&(0x7f0000000c40)={0x2, 0x4e20, @local}, 0x10, 0x0, 0x0, &(0x7f0000000d80), 0x30}}], 0x2, 0x41) 1.360115485s ago: executing program 0 (id=1710): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="54000000020601020040000000000000000000050c00078005001500010000000500010006000000050005000a00000005000400010000000900020073797a32000000000d000300686173683a6d6163"], 0x54}, 0x1, 0x0, 0x0, 0x20048080}, 0x0) 1.151518207s ago: executing program 2 (id=1711): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x0, &(0x7f0000000000)={[{@usrquota}, {@nojournal_checksum}]}, 0x21, 0x4bd, &(0x7f00000006c0)="$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") truncate(&(0x7f0000000180)='./file1\x00', 0x6) 1.098852654s ago: executing program 4 (id=1712): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x20043, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000240)={'pcmda12\x00', [0x0, 0x0, 0xa1a, 0x2, 0x6, 0x800afa3, 0xfffffff7, 0x4, 0x5854, 0x2, 0x7, 0x9, 0x4, 0x9, 0x6, 0x2, 0x6f48, 0x4, 0x2, 0xa, 0x5, 0xcaa2, 0x1003, 0x20041e5b, 0x0, 0xe6a, 0x2, 0x4, 0x4086, 0x0, 0x2f5]}) 1.092978962s ago: executing program 1 (id=1713): r0 = socket(0x2, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000240)={'wg1\x00', &(0x7f0000000540)=@ethtool_per_queue_op={0x4b, 0xe, [0x6, 0xfffffffa, 0x9, 0x9, 0xc, 0x8, 0x0, 0x7, 0x1, 0x2, 0xa, 0x2, 0xe5ff, 0x1800, 0xc37, 0x7fffffff, 0x6, 0x42, 0x5, 0xb8c4, 0x2, 0x0, 0xda, 0x8001, 0x3, 0x8000, 0x9, 0xfffffffb, 0x9, 0x8001, 0x42ef, 0x19c, 0x2, 0x6, 0x4, 0x4, 0xd981, 0x7, 0x3026, 0xd45, 0x7de7, 0x0, 0x8, 0x459, 0x0, 0x543d3885, 0xa10, 0xfff00, 0x9, 0x0, 0xfffffffc, 0x31, 0x6, 0x3, 0xc41, 0x3, 0x1, 0x16c, 0x2, 0x0, 0x7fff, 0x5, 0x8, 0xffff0000, 0x8, 0xffffffff, 0x10, 0xfffff11d, 0x80000001, 0x8e, 0x5c2, 0x4, 0xdbb7, 0xf712, 0x1, 0x1, 0x7fd, 0x4, 0x101, 0x24a7, 0xfffffff7, 0x0, 0x5, 0xfffffffd, 0x401, 0x0, 0x5, 0x1, 0x2, 0x6, 0x2, 0x5, 0x5, 0x80000001, 0x7, 0x5, 0x8001, 0x7fffffff, 0x3ff, 0x4, 0xffffffff, 0x40, 0xfe63, 0x9, 0x5, 0xffffffff, 0x401, 0x4, 0x7, 0x7ff, 0x3, 0x2, 0x46b8a39f, 0x3ff, 0x7ff, 0x5, 0xfffffffd, 0x9, 0x31b, 0x7, 0x9, 0x3, 0x1932, 0x80, 0x8, 0x6, 0x9, 0xffffffff]}}) 1.070360381s ago: executing program 3 (id=1714): r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x0, 0x1, 0x105, 0x0, 0x0}) 772.22971ms ago: executing program 3 (id=1715): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000040)=@ipv4_newroute={0x1c, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}, 0x1c}}, 0x0) 755.266969ms ago: executing program 1 (id=1716): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x30, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0xf, 0x0, 0x0, @uid}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 679.472026ms ago: executing program 4 (id=1717): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000800)) 436.729664ms ago: executing program 5 (id=1718): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x88000) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000940)={{}, {0x20}, 0x0, 0x4}) 436.393077ms ago: executing program 0 (id=1719): sigaltstack(&(0x7f0000000000)={0x0, 0x80000001, 0xfffffffffffffe7f}, 0x0) sigaltstack(&(0x7f0000000300)={0x0, 0xc0000000}, 0x0) 400.671825ms ago: executing program 3 (id=1720): syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000640)='./file1\x00', 0x1008000, &(0x7f0000000180)=ANY=[], 0x0, 0x5f2, &(0x7f0000000680)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) 385.391524ms ago: executing program 2 (id=1721): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@ipv6_delroute={0x30, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xfe, 0x2, 0xc8, 0x0, 0x1500}, [@RTA_GATEWAY={0x14, 0x5, @loopback}]}, 0x30}}, 0x0) 320.732779ms ago: executing program 1 (id=1722): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) 155.534726ms ago: executing program 4 (id=1723): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, 0x0) 63.785756ms ago: executing program 5 (id=1724): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0x3, 0x0, 0x2, 0xd, 0x0, 0x4070bd2c, 0x25dfdbfc, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x9, 0xc, 0x80000000}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xa}}}, @sadb_key={0x3, 0x8, 0x80, 0x0, "5630f6e8902e42edce8053fcc1ffae92"}]}, 0x68}, 0x1, 0x7}, 0x0) 0s ago: executing program 0 (id=1725): setreuid(0xee01, 0xee01) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) kernel console output (not intermixed with test programs): tree [ 117.457551][ T10] usb 6-1: SerialNumber: syz [ 117.540771][ T6363] xt_connbytes: Forcing CT accounting to be enabled [ 117.751505][ T6295] BTRFS info (device loop3): balance: start -f [ 117.785894][ T10] usb 6-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 117.810470][ T6295] BTRFS info (device loop3): balance: ended with status: 0 [ 117.820338][ T10] usb 6-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 117.864051][ T10] usb 6-1: Handspring Visor / Palm OS: Number of ports: 2 [ 118.002235][ T10] usb 6-1: palm_os_3_probe - error -71 getting bytes available request [ 118.010618][ T10] visor 6-1:1.0: Handspring Visor / Palm OS converter detected [ 118.105724][ T5823] BTRFS info (device loop3): last unmount of filesystem 9ddd59ee-693a-4e6c-ba41-6e0ecf64a847 [ 118.117586][ T10] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 118.231631][ T10] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 118.274630][ T10] usb 6-1: USB disconnect, device number 2 [ 118.357772][ T6376] loop4: detected capacity change from 0 to 64 [ 118.381052][ T6378] netlink: 8 bytes leftover after parsing attributes in process `syz.2.181'. [ 118.392596][ T10] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 118.433979][ T10] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 118.500889][ T10] visor 6-1:1.0: device disconnected [ 118.852236][ T5936] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 118.882306][ T6389] netlink: 224 bytes leftover after parsing attributes in process `syz.4.193'. [ 119.017647][ T5936] usb 4-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 119.059298][ T5936] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 119.123703][ T5936] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 119.142150][ T5936] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 119.163568][ T6398] loop2: detected capacity change from 0 to 8 [ 119.233183][ T5936] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 119.260481][ T5936] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 119.289701][ T5936] usb 4-1: SerialNumber: syz [ 119.525799][ T5936] cdc_acm 4-1:1.0: probe with driver cdc_acm failed with error -12 [ 119.543504][ T10] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 119.585837][ T5936] usb 4-1: USB disconnect, device number 2 [ 119.661216][ T6412] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 119.712968][ T6003] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 119.748001][ T6412] Cannot find del_set index 4 as target [ 119.748962][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 119.771284][ T10] usb 2-1: not running at top speed; connect to a high speed hub [ 119.793273][ T10] usb 2-1: config 197 has an invalid interface number: 211 but max is 0 [ 119.808484][ T10] usb 2-1: config 197 has no interface number 0 [ 119.816510][ T10] usb 2-1: config 197 interface 211 has no altsetting 0 [ 119.829374][ T10] usb 2-1: New USB device found, idVendor=064b, idProduct=7825, bcdDevice=3f.c6 [ 119.850133][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.868224][ T10] usb 2-1: Product: syz [ 119.881772][ T10] usb 2-1: Manufacturer: syz [ 119.893860][ T10] usb 2-1: SerialNumber: syz [ 119.922201][ T6003] usb 6-1: Using ep0 maxpacket: 32 [ 119.935958][ T6003] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 119.954864][ T6003] usb 6-1: config 0 has no interface number 0 [ 119.961197][ T6003] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 119.997725][ T6003] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 120.012414][ T6003] usb 6-1: config 0 interface 85 has no altsetting 0 [ 120.030382][ T6003] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 120.072686][ T6003] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.085887][ T6003] usb 6-1: Product: syz [ 120.090171][ T6003] usb 6-1: Manufacturer: syz [ 120.100234][ T6003] usb 6-1: SerialNumber: syz [ 120.159420][ T10] upd78f0730 2-1:197.211: upd78f0730 converter detected [ 120.175940][ T6003] usb 6-1: config 0 descriptor?? [ 120.256988][ T10] usb 2-1: upd78f0730 converter now attached to ttyUSB0 [ 120.277109][ T10] usb 2-1: USB disconnect, device number 4 [ 120.332785][ T10] upd78f0730 ttyUSB0: upd78f0730 converter now disconnected from ttyUSB0 [ 120.391057][ T10] upd78f0730 2-1:197.211: device disconnected [ 120.570063][ T6429] : entered promiscuous mode [ 120.656794][ T6003] appletouch 6-1:0.85: Failed to request geyser raw mode [ 120.672466][ T6003] appletouch 6-1:0.85: probe with driver appletouch failed with error -5 [ 120.715960][ T6003] usb 6-1: USB disconnect, device number 3 [ 120.778605][ T30] audit: type=1326 audit(1776176217.760:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6434 comm="syz.3.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f438379c819 code=0x7ffc0000 [ 120.996102][ T30] audit: type=1326 audit(1776176217.770:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6434 comm="syz.3.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f438379c819 code=0x7ffc0000 [ 121.107475][ T30] audit: type=1326 audit(1776176217.780:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6434 comm="syz.3.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f438379c819 code=0x7ffc0000 [ 121.196966][ T30] audit: type=1326 audit(1776176217.780:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6434 comm="syz.3.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f438379c819 code=0x7ffc0000 [ 121.315330][ T30] audit: type=1326 audit(1776176217.780:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6434 comm="syz.3.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f438379c819 code=0x7ffc0000 [ 121.408920][ T6003] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 121.573187][ T6003] usb 4-1: Using ep0 maxpacket: 16 [ 121.588464][ T6003] usb 4-1: unable to get BOS descriptor or descriptor too short [ 121.642745][ T6003] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 121.644531][ T6452] loop5: detected capacity change from 0 to 256 [ 121.682300][ T6003] usb 4-1: config 1 interface 1 has no altsetting 0 [ 121.701834][ T6003] usb 4-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 121.745835][ T6003] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.758326][ T6456] loop1: detected capacity change from 0 to 16 [ 121.792656][ T6003] usb 4-1: Product: syz [ 121.807558][ T6003] usb 4-1: Manufacturer: syz [ 121.814684][ T6456] erofs (device loop1): mounted with root inode @ nid 36. [ 121.828357][ T6003] usb 4-1: SerialNumber: syz [ 121.940528][ T6456] cifs: Unknown parameter 'cache_strategy' [ 121.981392][ T6459] netlink: 8 bytes leftover after parsing attributes in process `syz.2.227'. [ 122.053504][ T6463] capability: warning: `syz.5.229' uses deprecated v2 capabilities in a way that may be insecure [ 122.117952][ T6003] snd-ua101 4-1:1.1: invalid format type [ 122.145627][ T6003] snd-ua101 4-1:1.0: invalid num_altsetting [ 122.151965][ T6003] usb 4-1: selecting invalid altsetting 0 [ 122.215145][ T6003] usb 4-1: selecting invalid altsetting 0 [ 122.251928][ T6003] usbtest 4-1:1.1: probe with driver usbtest failed with error -22 [ 122.269429][ T6003] usb 4-1: selecting invalid altsetting 0 [ 122.296229][ T6003] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 122.323604][ T6003] usb 4-1: selecting invalid altsetting 0 [ 122.351277][ T6003] snd-ua101 4-1:1.1: probe with driver snd-ua101 failed with error -22 [ 122.437804][ T6003] usb 4-1: USB disconnect, device number 3 [ 122.673025][ T6475] random: crng reseeded on system resumption [ 122.747360][ T6478] m1: entered promiscuous mode [ 123.030196][ T6486] SET target dimension over the limit! [ 123.307654][ T6496] netlink: zone id is out of range [ 123.322830][ T6496] netlink: zone id is out of range [ 123.343890][ T6496] netlink: zone id is out of range [ 123.349106][ T6496] netlink: zone id is out of range [ 123.410739][ T6496] netlink: zone id is out of range [ 123.437197][ T6496] netlink: zone id is out of range [ 123.485259][ T6496] netlink: zone id is out of range [ 123.523506][ T6496] netlink: zone id is out of range [ 123.528732][ T6496] netlink: zone id is out of range [ 123.594901][ T6496] netlink: zone id is out of range [ 123.625844][ T6506] netlink: 12 bytes leftover after parsing attributes in process `syz.4.250'. [ 123.695948][ T6513] xt_hashlimit: overflow, try lower: 3/0 [ 124.502265][ T976] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 124.543657][ T6543] loop4: detected capacity change from 0 to 128 [ 124.622647][ T6543] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 124.672198][ T976] usb 3-1: Using ep0 maxpacket: 8 [ 124.689014][ T976] usb 3-1: unable to get BOS descriptor or descriptor too short [ 124.701273][ T6543] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 124.735142][ T976] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 124.782258][ T976] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 124.826294][ T976] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 124.838191][ T6550] capability: warning: `syz.5.271' uses 32-bit capabilities (legacy support in use) [ 124.866550][ T976] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1 [ 124.918208][ T976] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 124.946636][ T6552] netlink: 'syz.3.270': attribute type 1 has an invalid length. [ 124.976786][ T976] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 166 [ 125.019655][ T6548] loop0: detected capacity change from 0 to 4096 [ 125.023415][ T976] usb 3-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 125.052239][ T6548] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 125.053380][ T976] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.092681][ T976] usb 3-1: Product: syz [ 125.096946][ T976] usb 3-1: Manufacturer: syz [ 125.124280][ T976] usb 3-1: SerialNumber: syz [ 125.183840][ T976] usb 3-1: config 0 descriptor?? [ 125.217551][ T6532] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 125.231261][ T6548] ntfs3(loop0): ino=19, mi_enum_attr [ 125.237708][ T6532] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 125.291640][ T976] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 126.146571][ T6581] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 126.231258][ T6587] netlink: 28 bytes leftover after parsing attributes in process `syz.0.286'. [ 126.279754][ T6587] netlink: 28 bytes leftover after parsing attributes in process `syz.0.286'. [ 127.106217][ T6615] loop4: detected capacity change from 0 to 2048 [ 127.184912][ T5934] usb 3-1: USB disconnect, device number 2 [ 127.194641][ T6615] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 127.345374][ T30] audit: type=1800 audit(1776176374.392:8): pid=6615 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.299" name="file1" dev="loop4" ino=1367 res=0 errno=0 [ 127.738979][ T30] audit: type=1400 audit(1776176374.803:9): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3AAE86AD47AA0D9495E6D80F7BDE2D18FFB36CF152AED2D408FB58E305FC8E2F2F7D91F81B621CC4214D4A27E1614FBEE0BEAC8F4A045070B770212D46D4A2DF096B791F2A4BA218E12CB76AA24945B70A7C9DD5EDEAC52B5A876F73CFBE66371A72F11F3D9544D6B59B4A5541DCEF5CBF11FFFF37DFD147CCA3E5098A207BE806EA7167101F8C1B5C8FE41E170FD0C775DBC5BE0B6D3AB625AB702E5B1DC15F9C4B3D09BE812F340E681E0694F5BADF640DA3FDFC2F929B4C2BEB9A592C577287B6021BFEEC24146C7F95608BB60A736207A09D9F47E89C4044EADDE57CDEFD15F25B822D2EAF2205DF0D6B71B63EE0B63CB598F26509AF36983578F6F4198A0843CC1B1BD780015007AB9709CC6211E3B5C685B972B5C5E95F054A7A9FE149282F679C8466B9734E3850EC98419DD0C887715902F9E7802842085BC606F30C2654869E9E3701FD0FC69137FE165592689465EEBD5CAFAD7C29DE2ADADEC42A818D8EE389CA1FE33A1EF23617C89116A3A458B56612E4C36C43A9150D5331ADBB0BEB01A062B1F1349FC2ECEA76CB7C40CDFE378185F3099B1D71414D0FDA5A47F8593260CC0BD723A4CCA81435F0413 [ 127.937170][ T6644] netlink: 32 bytes leftover after parsing attributes in process `syz.5.312'. [ 127.960448][ T6639] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 128.112618][ T6639] block device autoloading is deprecated and will be removed. [ 128.584440][ T6660] netlink: 'syz.2.321': attribute type 1 has an invalid length. [ 128.629230][ T6663] loop3: detected capacity change from 0 to 64 [ 129.415640][ T6687] netlink: 12 bytes leftover after parsing attributes in process `syz.1.335'. [ 130.012691][ T5934] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 130.177871][ T5934] usb 5-1: New USB device found, idVendor=13d8, idProduct=0011, bcdDevice=d0.62 [ 130.223296][ T5934] usb 5-1: New USB device strings: Mfr=1, Product=6, SerialNumber=3 [ 130.261701][ T5934] usb 5-1: Product: syz [ 130.265949][ T5934] usb 5-1: Manufacturer: syz [ 130.289296][ T5934] usb 5-1: SerialNumber: syz [ 130.321505][ T5934] usb 5-1: config 0 descriptor?? [ 130.387476][ T5934] usb 5-1: selecting invalid altsetting 1 [ 130.426865][ T5934] comedi comedi5: could not switch to alternate setting 1 [ 130.455880][ T5934] usbduxfast 5-1:0.0: driver 'usbduxfast' failed to auto-configure device. [ 130.641067][ T5936] usb 5-1: USB disconnect, device number 3 [ 130.873964][ T6691] loop5: detected capacity change from 0 to 32768 [ 130.904023][ T6729] loop0: detected capacity change from 0 to 64 [ 130.965629][ T6691] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 131.358661][ T6691] XFS (loop5): Ending clean mount [ 131.432908][ T6691] XFS (loop5): Quotacheck needed: Please wait. [ 131.510175][ T6691] XFS (loop5): Quotacheck: Done. [ 131.751507][ T976] hid (null): report_id 2445601295 is invalid [ 131.759306][ T976] hid (null): report_id 0 is invalid [ 131.800596][ T976] hid (null): global environment stack underflow [ 131.817376][ T976] hid (null): unknown global tag 0xe [ 131.858081][ T976] hid-generic 2BD5:3849DFF5:F76C68F0.0001: report_id 2445601295 is invalid [ 131.884781][ T976] hid-generic 2BD5:3849DFF5:F76C68F0.0001: item 0 4 1 8 parsing failed [ 131.906163][ T5824] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 131.941248][ T976] hid-generic 2BD5:3849DFF5:F76C68F0.0001: probe with driver hid-generic failed with error -22 [ 132.034698][ T6767] loop1: detected capacity change from 0 to 8 [ 132.043190][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.049808][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.210545][ T6772] net_ratelimit: 389 callbacks suppressed [ 132.210572][ T6772] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 132.795964][ T24] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 132.887078][ T6787] loop5: detected capacity change from 0 to 2048 [ 132.952640][ T6787] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 132.982807][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 133.007131][ T24] usb 3-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 133.019487][ T6791] tmpfs: Bad value for 'mpol' [ 133.035356][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.069348][ T6787] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 133.081755][ T24] usb 3-1: Product: syz [ 133.121516][ T24] usb 3-1: Manufacturer: syz [ 133.126191][ T24] usb 3-1: SerialNumber: syz [ 133.176607][ T24] usb 3-1: config 0 descriptor?? [ 133.465301][ T24] RobotFuzz Open Source InterFace, OSIF 3-1:0.0: failure sending bit rate [ 133.514874][ T24] RobotFuzz Open Source InterFace, OSIF 3-1:0.0: probe with driver RobotFuzz Open Source InterFace, OSIF failed with error -71 [ 133.554066][ T6800] netlink: 28 bytes leftover after parsing attributes in process `syz.0.387'. [ 133.587407][ T24] usb 3-1: USB disconnect, device number 3 [ 133.593691][ T6800] netlink: 28 bytes leftover after parsing attributes in process `syz.0.387'. [ 133.703725][ T6783] loop1: detected capacity change from 0 to 32768 [ 133.770501][ T6783] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.376 (6783) [ 133.840366][ T6783] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 133.895775][ T6783] BTRFS info (device loop1): using sha256 checksum algorithm [ 134.062912][ T976] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 134.114677][ T6783] BTRFS info (device loop1): enabling ssd optimizations [ 134.161166][ T6783] BTRFS info (device loop1): turning on async discard [ 134.168144][ T6783] BTRFS info (device loop1): enabling free space tree [ 134.239908][ T976] usb 6-1: Using ep0 maxpacket: 16 [ 134.298190][ T976] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 134.329893][ T976] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 134.365073][ T976] usb 6-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 134.392838][ T976] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.410690][ T6834] loop0: detected capacity change from 0 to 256 [ 134.419917][ T6835] comedi comedi4: commands at RT priority not supported in this driver [ 134.428642][ T6831] loop3: detected capacity change from 0 to 1024 [ 134.436238][ T976] usb 6-1: Product: syz [ 134.440547][ T976] usb 6-1: Manufacturer: syz [ 134.457483][ T5831] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 134.458279][ T976] usb 6-1: SerialNumber: syz [ 134.500659][ T6831] hfsplus: failed to load extents file [ 134.520729][ T976] usb 6-1: config 0 descriptor?? [ 134.586558][ T976] hub 6-1:0.0: bad descriptor, ignoring hub [ 134.593226][ T976] hub 6-1:0.0: probe with driver hub failed with error -5 [ 134.676595][ T976] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 135.128397][ T976] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 135.175096][ T6842] loop0: detected capacity change from 0 to 1764 [ 135.193889][ T976] usb 6-1: USB disconnect, device number 4 [ 135.286753][ T6846] binder: 6845:6846 ioctl c0046209 0 returned -22 [ 135.298725][ T6842] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 135.374377][ T6060] udevd[6060]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 135.577234][ T6851] comedi comedi2: dt2814: I/O port conflict (0x105c22,2) [ 135.874366][ T6829] loop4: detected capacity change from 0 to 32768 [ 135.978419][ T6861] netlink: 'syz.5.407': attribute type 6 has an invalid length. [ 136.058091][ T6829] ERROR: (device loop4): dtSearch: DT_GETPAGE: dtree page corrupt [ 136.058091][ T6829] [ 136.148293][ T6829] ERROR: (device loop4): remounting filesystem as read-only [ 136.188907][ T6829] jfs_lookup: dtSearch returned -5 [ 136.353411][ T6869] netlink: 'syz.1.412': attribute type 1 has an invalid length. [ 136.385969][ T6869] netlink: 224 bytes leftover after parsing attributes in process `syz.1.412'. [ 136.415832][ T6873] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 136.494247][ T6876] netlink: 12 bytes leftover after parsing attributes in process `syz.0.416'. [ 137.054537][ T976] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 137.263724][ T976] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 137.284908][ T976] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.338918][ T976] usb 2-1: config 0 descriptor?? [ 137.392210][ T976] cp210x 2-1:0.0: cp210x converter detected [ 137.426313][ T6902] vlan0: entered promiscuous mode [ 137.630654][ T6906] netlink: 8 bytes leftover after parsing attributes in process `syz.3.430'. [ 137.752736][ T6914] netlink: 20 bytes leftover after parsing attributes in process `syz.5.434'. [ 137.804361][ T976] usb 2-1: cp210x converter now attached to ttyUSB0 [ 137.835423][ T976] usb 2-1: USB disconnect, device number 5 [ 137.867549][ T976] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 137.912896][ T976] cp210x 2-1:0.0: device disconnected [ 137.920576][ T6917] xt_connbytes: Forcing CT accounting to be enabled [ 137.951864][ T5936] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 138.084652][ T6922] team0: entered promiscuous mode [ 138.100544][ T6922] team_slave_0: entered promiscuous mode [ 138.106558][ T6922] team_slave_1: entered promiscuous mode [ 138.131609][ T5936] usb 5-1: Using ep0 maxpacket: 32 [ 138.157679][ T5936] usb 5-1: unable to get BOS descriptor or descriptor too short [ 138.171771][ T5936] usb 5-1: config 7 has an invalid interface number: 187 but max is 0 [ 138.198790][ T5936] usb 5-1: config 7 has no interface number 0 [ 138.227697][ T5936] usb 5-1: config 7 interface 187 altsetting 6 endpoint 0x3 has invalid wMaxPacketSize 0 [ 138.250859][ T5936] usb 5-1: config 7 interface 187 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 0 [ 138.277390][ T5936] usb 5-1: config 7 interface 187 has no altsetting 0 [ 138.290185][ T5936] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 138.335114][ T5936] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.361592][ T5936] usb 5-1: Product: syz [ 138.365855][ T5936] usb 5-1: Manufacturer: syz [ 138.371618][ T5936] usb 5-1: SerialNumber: syz [ 138.445324][ T6930] loop2: detected capacity change from 0 to 256 [ 138.486014][ T6930] exfat: Deprecated parameter 'utf8' [ 138.501573][ T6930] exfat: Deprecated parameter 'utf8' [ 138.515083][ T6930] exfat: Deprecated parameter 'namecase' [ 138.520946][ T6930] exfat: Deprecated parameter 'namecase' [ 138.609470][ T6930] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 138.635276][ T5936] usb 5-1: Unknown endpoint type found, address 0x07 [ 138.642064][ T5936] usb 5-1: Not enough endpoints found in device, aborting! [ 138.836312][ T6943] loop0: detected capacity change from 0 to 1764 [ 138.929379][ T5936] usb 5-1: USB disconnect, device number 4 [ 139.360760][ T6959] netlink: 'syz.3.456': attribute type 1 has an invalid length. [ 139.406916][ T6959] netlink: 'syz.3.456': attribute type 2 has an invalid length. [ 139.441987][ T6961] netlink: 148 bytes leftover after parsing attributes in process `syz.2.457'. [ 139.492684][ T6961] netlink: 56 bytes leftover after parsing attributes in process `syz.2.457'. [ 139.525375][ T6961] netlink: 'syz.2.457': attribute type 1 has an invalid length. [ 139.902129][ T6977] netlink: 28 bytes leftover after parsing attributes in process `syz.0.465'. [ 139.927007][ T6977] netlink: 24 bytes leftover after parsing attributes in process `syz.0.465'. [ 140.715378][ T7005] loop3: detected capacity change from 0 to 512 [ 140.829648][ T7009] loop1: detected capacity change from 0 to 2048 [ 140.881138][ T7016] loop5: detected capacity change from 0 to 64 [ 140.899132][ T7005] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.920023][ T7009] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=27485, location=27485 [ 140.938917][ T7018] loop2: detected capacity change from 0 to 64 [ 140.962666][ T7005] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.988975][ T7009] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 141.314727][ T5823] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.725863][ T5840] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 141.936196][ T5840] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 141.977572][ T5840] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 142.058138][ T5840] usb 5-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=ec.c1 [ 142.087930][ T5840] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.125284][ T5840] usb 5-1: Product: syz [ 142.146556][ T5840] usb 5-1: Manufacturer: syz [ 142.168634][ T5840] usb 5-1: SerialNumber: syz [ 142.202439][ T5840] usb 5-1: config 0 descriptor?? [ 142.433406][ T7054] netlink: 'syz.1.502': attribute type 21 has an invalid length. [ 142.482296][ T7054] netlink: 156 bytes leftover after parsing attributes in process `syz.1.502'. [ 142.505582][ T5840] input: Griffin PowerMate as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input9 [ 142.598862][ C1] powermate: config urb returned -71 [ 142.604937][ C1] powermate: config urb returned -71 [ 142.610525][ C1] powermate: config urb returned -71 [ 142.616183][ C1] powermate: config urb returned -71 [ 142.663982][ C1] powermate 5-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 142.685678][ T5840] usb 5-1: USB disconnect, device number 5 [ 142.814145][ T7060] netlink: 8 bytes leftover after parsing attributes in process `syz.3.505'. [ 142.989756][ T7065] loop1: detected capacity change from 0 to 256 [ 143.058213][ T7065] exfat: Deprecated parameter 'namecase' [ 143.127469][ T7065] exfat: Deprecated parameter 'namecase' [ 143.224195][ T7065] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 143.483662][ T7044] loop0: detected capacity change from 0 to 32768 [ 143.672338][ T7079] netlink: 'syz.5.514': attribute type 4 has an invalid length. [ 144.082661][ T7090] netlink: 'syz.1.520': attribute type 1 has an invalid length. [ 144.164100][ T7096] openvswitch: netlink: IPv4 tunnel dst address is zero [ 144.648951][ T7106] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 144.687262][ T5936] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 144.797423][ T7110] loop1: detected capacity change from 0 to 2048 [ 144.841251][ T7110] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 144.874821][ T5936] usb 6-1: unable to get BOS descriptor or descriptor too short [ 144.887773][ T5936] usb 6-1: not running at top speed; connect to a high speed hub [ 144.914914][ T7110] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 144.937469][ T5936] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 144.978903][ T5936] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 145.033545][ T5936] usb 6-1: too many endpoints for config 1 interface 1 altsetting 23: 170, using maximum allowed: 30 [ 145.093713][ T5936] usb 6-1: config 1 interface 1 altsetting 23 has 0 endpoint descriptors, different from the interface descriptor's value: 170 [ 145.137504][ T5936] usb 6-1: config 1 interface 1 has no altsetting 0 [ 145.161989][ T5936] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 145.171570][ T5936] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 145.204291][ T5936] usb 6-1: Product: syz [ 145.208580][ T5936] usb 6-1: Manufacturer: syz [ 145.242038][ T5936] usb 6-1: SerialNumber: syz [ 145.260571][ T7101] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 145.402928][ T7120] netlink: 756 bytes leftover after parsing attributes in process `syz.2.535'. [ 145.439089][ T7122] netlink: 32 bytes leftover after parsing attributes in process `syz.4.533'. [ 145.494756][ T7086] loop3: detected capacity change from 0 to 32768 [ 145.517155][ T5936] cdc_acm 6-1:1.0: probe with driver cdc_acm failed with error -22 [ 145.623984][ T7086] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 145.661117][ T5936] usb 6-1: USB disconnect, device number 5 [ 145.671990][ T7124] loop0: detected capacity change from 0 to 4096 [ 145.690021][ T7124] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 145.830874][ T7086] XFS (loop3): Ending clean mount [ 145.873370][ T7124] ntfs3(loop0): ino=19, mi_enum_attr [ 146.104041][ T7136] bond1 (unregistering): Released all slaves [ 146.168687][ T7141] netlink: 180 bytes leftover after parsing attributes in process `syz.1.540'. [ 146.199214][ T5823] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 146.499006][ T7147] loop0: detected capacity change from 0 to 512 [ 146.592246][ T7147] EXT4-fs: Ignoring removed nomblk_io_submit option [ 146.624553][ T7152] xt_TPROXY: Can be used only with -p tcp or -p udp [ 146.701651][ T7147] EXT4-fs error (device loop0): ext4_do_update_inode:5604: inode #15: comm syz.0.541: corrupted inode contents [ 146.734549][ T7147] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 146.737858][ T7147] EXT4-fs (loop0): Remounting filesystem read-only [ 146.747210][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 146.747267][ C0] EXT4-fs (loop0): initial error at time 1776176394: ext4_do_update_inode:5604: inode 15 [ 146.747323][ C0] EXT4-fs (loop0): last error at time 1776176394: ext4_do_update_inode:5604: inode 15 [ 146.783616][ T7147] EXT4-fs (loop0): 1 orphan inode deleted [ 146.831537][ T7147] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.831947][ T7156] loop2: detected capacity change from 0 to 8 [ 146.917257][ T7156] SQUASHFS error: Failed to read block 0x26067d: -5 [ 146.965458][ T7156] SQUASHFS error: Unable to read metadata cache entry [26067d] [ 147.007746][ T7156] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 147.183733][ T7166] netlink: 'syz.3.551': attribute type 2 has an invalid length. [ 147.326824][ T5832] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.015993][ T5830] Bluetooth: hci0: unexpected subevent 0x18 length: 25 > 19 [ 148.023735][ T5830] Bluetooth: hci0: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00 [ 148.812511][ T7219] xt_policy: output policy not valid in PREROUTING and INPUT [ 148.920727][ T7221] netlink: 36 bytes leftover after parsing attributes in process `syz.1.579'. [ 149.142741][ T7227] loop4: detected capacity change from 0 to 764 [ 149.247043][ T7229] loop0: detected capacity change from 0 to 1764 [ 150.083834][ T7257] syz.2.596 uses obsolete (PF_INET,SOCK_PACKET) [ 150.140916][ T7260] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 150.813950][ T7280] binder: 7279:7280 ioctl 400c620e 200000000080 returned -22 [ 150.840266][ T7282] netlink: 'syz.3.608': attribute type 10 has an invalid length. [ 150.871608][ T7282] netlink: 40 bytes leftover after parsing attributes in process `syz.3.608'. [ 150.924157][ T7282] vlan1: entered promiscuous mode [ 150.986147][ T7282] batman_adv: batadv0: Adding interface: vlan1 [ 151.003694][ T7282] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 151.054042][ T7287] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 151.095482][ T7282] batman_adv: batadv0: Interface activated: vlan1 [ 151.104187][ T7246] loop1: detected capacity change from 0 to 32768 [ 151.508261][ T7299] netlink: 'syz.3.616': attribute type 2 has an invalid length. [ 152.007928][ T7306] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.287376][ T7323] netlink: 'syz.5.628': attribute type 3 has an invalid length. [ 152.313594][ T7323] netlink: 666 bytes leftover after parsing attributes in process `syz.5.628'. [ 152.388654][ T30] audit: type=1326 audit(1776176399.783:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7325 comm="syz.0.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc29179c819 code=0x7ffc0000 [ 152.491003][ T30] audit: type=1326 audit(1776176399.783:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7325 comm="syz.0.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc29179c819 code=0x7ffc0000 [ 152.594310][ T30] audit: type=1326 audit(1776176399.853:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7325 comm="syz.0.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7fc29179c819 code=0x7ffc0000 [ 152.711403][ T30] audit: type=1326 audit(1776176399.853:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7325 comm="syz.0.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc29179c819 code=0x7ffc0000 [ 152.795973][ T7339] netlink: 'syz.1.635': attribute type 3 has an invalid length. [ 152.831903][ T30] audit: type=1326 audit(1776176399.853:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7325 comm="syz.0.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc29179c819 code=0x7ffc0000 [ 152.852830][ T7339] netlink: 'syz.1.635': attribute type 1 has an invalid length. [ 152.926096][ T7339] netlink: 220 bytes leftover after parsing attributes in process `syz.1.635'. [ 152.978825][ T7344] netlink: 260 bytes leftover after parsing attributes in process `syz.2.639'. [ 153.263493][ T7352] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 153.436029][ T7362] loop5: detected capacity change from 0 to 64 [ 153.905351][ T10] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 154.118413][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 154.161906][ T10] usb 2-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55 [ 154.203851][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.224206][ T10] usb 2-1: Product: syz [ 154.228667][ T10] usb 2-1: Manufacturer: syz [ 154.243682][ T10] usb 2-1: SerialNumber: syz [ 154.253676][ T7389] netlink: 8 bytes leftover after parsing attributes in process `syz.0.662'. [ 154.293506][ T7389] netlink: 4 bytes leftover after parsing attributes in process `syz.0.662'. [ 154.296847][ T10] usb 2-1: config 0 descriptor?? [ 154.501055][ T7395] loop2: detected capacity change from 0 to 256 [ 154.546093][ T30] audit: type=1400 audit(1776176401.953:15): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="#(%#{//&@\)//&" pid=7398 comm="syz.3.665" [ 154.598189][ T10] cdc_subset 2-1:0.0: probe with driver cdc_subset failed with error -22 [ 154.918118][ T10] usb 2-1: USB disconnect, device number 6 [ 155.222057][ T10] hid (null): report_id 2445601295 is invalid [ 155.228314][ T10] hid (null): report_id 0 is invalid [ 155.247519][ T10] hid (null): global environment stack underflow [ 155.265760][ T10] hid (null): unknown global tag 0xe [ 155.297084][ T10] hid-generic 2BD5:3849DFF5:F76C68F0.0002: report_id 2445601295 is invalid [ 155.332957][ T10] hid-generic 2BD5:3849DFF5:F76C68F0.0002: item 0 4 1 8 parsing failed [ 155.380076][ T10] hid-generic 2BD5:3849DFF5:F76C68F0.0002: probe with driver hid-generic failed with error -22 [ 155.496514][ T7424] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 155.789538][ T7431] loop2: detected capacity change from 0 to 1024 [ 155.825929][ T7431] hfsplus: failed to load extents file [ 156.141609][ T7409] loop4: detected capacity change from 0 to 32768 [ 156.188849][ T7409] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.670 (7409) [ 156.206550][ T7444] loop5: detected capacity change from 0 to 256 [ 156.214143][ T7444] exfat: Deprecated parameter 'utf8' [ 156.252998][ T7444] exfat: Deprecated parameter 'utf8' [ 156.293310][ T7409] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 156.305553][ T7446] kernel profiling enabled (shift: 25) [ 156.345547][ T7409] BTRFS info (device loop4): using crc32c checksum algorithm [ 156.370870][ T7444] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 156.596368][ T7409] BTRFS info (device loop4): setting nodatasum [ 156.645565][ T7409] BTRFS info (device loop4): allowing degraded mounts [ 156.702994][ T7409] BTRFS info (device loop4): disabling tree log [ 156.709315][ T7409] BTRFS info (device loop4): turning on async discard [ 156.746659][ T7409] BTRFS info (device loop4): enabling free space tree [ 156.954564][ T7472] loop2: detected capacity change from 0 to 256 [ 157.074146][ T5833] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 157.177049][ T7472] FAT-fs (loop2): Directory bread(block 64) failed [ 157.192369][ T7472] FAT-fs (loop2): Directory bread(block 65) failed [ 157.240404][ T7472] FAT-fs (loop2): Directory bread(block 66) failed [ 157.270779][ T7472] FAT-fs (loop2): Directory bread(block 67) failed [ 157.319247][ T7472] FAT-fs (loop2): Directory bread(block 68) failed [ 157.361203][ T7472] FAT-fs (loop2): Directory bread(block 69) failed [ 157.368000][ T7472] FAT-fs (loop2): Directory bread(block 70) failed [ 157.429946][ T5936] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 157.445763][ T7472] FAT-fs (loop2): Directory bread(block 71) failed [ 157.489793][ T7472] FAT-fs (loop2): Directory bread(block 72) failed [ 157.507183][ T7472] FAT-fs (loop2): Directory bread(block 73) failed [ 157.534998][ T7438] loop0: detected capacity change from 0 to 32768 [ 157.621545][ T5936] usb 6-1: unable to get BOS descriptor or descriptor too short [ 157.631965][ T5936] usb 6-1: not running at top speed; connect to a high speed hub [ 157.657891][ T5936] usb 6-1: config 197 has an invalid interface number: 211 but max is 0 [ 157.673311][ T5936] usb 6-1: config 197 has no interface number 0 [ 157.680925][ T7438] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 157.689236][ T5936] usb 6-1: config 197 interface 211 has no altsetting 0 [ 157.722506][ T5936] usb 6-1: New USB device found, idVendor=064b, idProduct=7825, bcdDevice=3f.c6 [ 157.750505][ T5936] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.778598][ T5936] usb 6-1: Product: syz [ 157.783508][ T5936] usb 6-1: Manufacturer: syz [ 157.788145][ T5936] usb 6-1: SerialNumber: syz [ 158.022973][ T7438] XFS (loop0): Ending clean mount [ 158.048692][ T5936] upd78f0730 6-1:197.211: upd78f0730 converter detected [ 158.055183][ T7438] XFS (loop0): Quotacheck needed: Please wait. [ 158.107816][ T5936] usb 6-1: upd78f0730 converter now attached to ttyUSB0 [ 158.124502][ T5936] usb 6-1: USB disconnect, device number 6 [ 158.172494][ T7448] loop1: detected capacity change from 0 to 32768 [ 158.216087][ T5936] upd78f0730 ttyUSB0: upd78f0730 converter now disconnected from ttyUSB0 [ 158.225648][ T5936] upd78f0730 6-1:197.211: device disconnected [ 158.227502][ T7438] XFS (loop0): Quotacheck: Done. [ 158.545067][ T7503] netlink: 'syz.2.702': attribute type 1 has an invalid length. [ 158.588271][ T5832] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 158.610344][ T7503] netlink: 60 bytes leftover after parsing attributes in process `syz.2.702'. [ 158.691336][ T7503] netlink: 4104 bytes leftover after parsing attributes in process `syz.2.702'. [ 159.167658][ T7511] ipvlan0: entered promiscuous mode [ 159.216966][ T7511] ipvlan0: entered allmulticast mode [ 159.222321][ T7511] veth0_vlan: entered allmulticast mode [ 159.682588][ T7523] netlink: 24 bytes leftover after parsing attributes in process `syz.1.713'. [ 159.821169][ T7519] loop5: detected capacity change from 0 to 4096 [ 159.914835][ T7519] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 160.023252][ T7519] ntfs3(loop5): Failed to load $Extend (-22). [ 160.050735][ T7519] ntfs3(loop5): Failed to initialize $Extend. [ 160.150252][ T7505] loop4: detected capacity change from 0 to 32768 [ 160.182971][ T7505] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.707 (7505) [ 160.252938][ T7505] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 160.338199][ T7505] BTRFS info (device loop4): using sha256 checksum algorithm [ 160.588216][ T7507] loop3: detected capacity change from 0 to 40427 [ 160.647680][ T7505] BTRFS info (device loop4): enabling ssd optimizations [ 160.682833][ T7507] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 160.697684][ T7505] BTRFS info (device loop4): turning on async discard [ 160.705293][ T7507] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 160.708662][ T7505] BTRFS info (device loop4): enabling free space tree [ 160.826812][ T7507] F2FS-fs (loop3): invalid crc value [ 160.834792][ T7558] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.723'. [ 161.075583][ T5833] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 161.351620][ T7507] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 161.542195][ T7507] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 161.576879][ T7507] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 161.796855][ T7578] netlink: 68 bytes leftover after parsing attributes in process `syz.5.732'. [ 161.851150][ T7578] netlink: 68 bytes leftover after parsing attributes in process `syz.5.732'. [ 162.424665][ T7588] loop0: detected capacity change from 0 to 2048 [ 162.492943][ T7588] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 162.822460][ T6003] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 162.838814][ T7567] loop2: detected capacity change from 0 to 40427 [ 162.896066][ T7567] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 162.926150][ T7567] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 162.981630][ T7567] F2FS-fs (loop2): invalid crc value [ 163.027410][ T6003] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 163.046801][ T6003] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 163.083078][ T6003] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 163.103739][ T6003] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 163.136337][ T6003] usb 6-1: config 1 has no interface number 0 [ 163.161350][ T6003] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 163.193533][ T6003] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.279182][ T6003] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 163.398350][ T7607] netlink: 'syz.1.745': attribute type 6 has an invalid length. [ 163.438890][ T7567] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 163.514294][ T6003] snd_usb_pod 6-1:1.1: endpoint not available, using fallback values [ 163.544283][ T6003] snd_usb_pod 6-1:1.1: invalid control EP [ 163.549966][ T7567] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 163.560358][ T6003] snd_usb_pod 6-1:1.1: cannot start listening: -22 [ 163.577045][ T6003] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 163.594969][ T7567] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 163.596854][ T6003] snd_usb_pod 6-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 163.713681][ T7614] loop0: detected capacity change from 0 to 512 [ 163.802145][ T7614] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 163.821490][ T10] usb 6-1: USB disconnect, device number 7 [ 163.870855][ T7614] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 163.944068][ T7614] System zones: 0-1, 15-15, 18-18, 34-34 [ 163.956212][ T7614] EXT4-fs (loop0): orphan cleanup on readonly fs [ 163.973704][ T7614] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0 [ 164.007961][ T7614] EXT4-fs warning (device loop0): ext4_enable_quotas:7259: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 164.025144][ T7614] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 164.036217][ T7614] EXT4-fs (loop0): 1 truncate cleaned up [ 164.062240][ T7614] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 164.064078][ T7598] loop4: detected capacity change from 0 to 32768 [ 164.120580][ T7598] BTRFS warning: excessive commit interval 65536, use with care [ 164.164082][ T7614] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 164.170251][ T7598] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.742 (7598) [ 164.191100][ T7614] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 164.252951][ T7598] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 164.298571][ T7598] BTRFS info (device loop4): using sha256 checksum algorithm [ 164.554948][ T5832] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.619059][ T7598] BTRFS info (device loop4): enabling ssd optimizations [ 164.626111][ T7598] BTRFS info (device loop4): turning on async discard [ 164.702104][ T7598] BTRFS info (device loop4): enabling free space tree [ 164.883518][ T7648] loop1: detected capacity change from 0 to 16 [ 164.917159][ T7649] netlink: 16 bytes leftover after parsing attributes in process `syz.5.757'. [ 164.920904][ T7651] loop0: detected capacity change from 0 to 64 [ 164.948596][ T7649] netlink: 12 bytes leftover after parsing attributes in process `syz.5.757'. [ 164.977486][ T7648] erofs (device loop1): mounted with root inode @ nid 36. [ 165.077707][ T7648] erofs (device loop1): readahead error at folio 3 @ nid 89 [ 165.120463][ T5833] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 165.125954][ T7648] erofs (device loop1): readahead error at folio 2 @ nid 89 [ 165.210201][ T7648] erofs (device loop1): readahead error at folio 1 @ nid 89 [ 165.250608][ T7648] erofs (device loop1): readahead error at folio 0 @ nid 89 [ 165.278201][ T7648] erofs (device loop1): read error -22 @ 0 of nid 89 [ 165.309176][ T30] audit: type=1800 audit(1776176412.720:16): pid=7648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.758" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 165.715724][ T30] audit: type=1326 audit(1776176413.161:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7662 comm="syz.1.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa716b9c819 code=0x7ffc0000 [ 165.814962][ T30] audit: type=1326 audit(1776176413.181:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7662 comm="syz.1.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa716b9c819 code=0x7ffc0000 [ 165.924770][ T30] audit: type=1326 audit(1776176413.181:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7662 comm="syz.1.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7fa716b9c819 code=0x7ffc0000 [ 166.041775][ T30] audit: type=1326 audit(1776176413.181:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7662 comm="syz.1.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa716b9c819 code=0x7ffc0000 [ 166.203979][ T30] audit: type=1326 audit(1776176413.181:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7662 comm="syz.1.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa716b9c819 code=0x7ffc0000 [ 166.345198][ T7643] loop3: detected capacity change from 0 to 32768 [ 166.425339][ T7643] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.756 (7643) [ 166.533021][ T7643] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 166.592531][ T7643] BTRFS info (device loop3): using sha256 checksum algorithm [ 166.918249][ T7643] BTRFS info (device loop3): rebuilding free space tree [ 166.994732][ T7705] loop4: detected capacity change from 0 to 16 [ 167.059855][ T7707] netlink: 12 bytes leftover after parsing attributes in process `syz.0.779'. [ 167.070582][ T7643] BTRFS info (device loop3): enabling ssd optimizations [ 167.076969][ T7705] erofs (device loop4): mounted with root inode @ nid 36. [ 167.106217][ T7643] BTRFS info (device loop3): using spread ssd allocation scheme [ 167.149646][ T7643] BTRFS info (device loop3): turning on async discard [ 167.170071][ T5830] erofs (device loop4): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 9000 [ 167.199127][ T7643] BTRFS info (device loop3): enabling free space tree [ 167.207176][ T7705] erofs (device loop4): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 9000 [ 167.229232][ T7643] BTRFS info (device loop3): force clearing of disk cache [ 167.241626][ T7705] erofs (device loop4): read error -117 @ 2 of nid 89 [ 167.301675][ T30] audit: type=1800 audit(1776176414.744:22): pid=7705 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.775" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 167.413736][ T7714] netlink: 'syz.5.781': attribute type 1 has an invalid length. [ 167.450628][ T7714] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.781'. [ 167.683268][ T5823] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 167.958207][ T7725] openvswitch: netlink: Tunnel attr 3 has unexpected len 0 expected 1 [ 167.987932][ T7728] 9p: Unknown Cache mode or invalid value fscach [ 168.381239][ T24] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 168.560719][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 168.586588][ T24] usb 4-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 168.619095][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.651709][ T7749] loop1: detected capacity change from 0 to 64 [ 168.660717][ T5840] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 168.669193][ T24] usb 4-1: Product: syz [ 168.673389][ T24] usb 4-1: Manufacturer: syz [ 168.678257][ T24] usb 4-1: SerialNumber: syz [ 168.850849][ T5840] usb 3-1: config 2 has an invalid interface number: 19 but max is 0 [ 168.876730][ T5840] usb 3-1: config 2 has no interface number 0 [ 168.900800][ T5840] usb 3-1: config 2 interface 19 has no altsetting 0 [ 168.934809][ T5840] usb 3-1: New USB device found, idVendor=05ac, idProduct=fdc3, bcdDevice=2f.a6 [ 168.955765][ T5840] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.987655][ T5840] usb 3-1: Product: syz [ 168.995370][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 169.004894][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 169.026594][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 169.035511][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 169.043472][ T5840] usb 3-1: Manufacturer: syz [ 169.048126][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 169.065653][ T5840] usb 3-1: SerialNumber: syz [ 169.078431][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 169.089326][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 169.333174][ T5840] ipheth 3-1:2.19: Unable to find alternate settings interface [ 169.383295][ T7760] netlink: 'syz.5.802': attribute type 16 has an invalid length. [ 169.387939][ T5840] usb 3-1: USB disconnect, device number 4 [ 169.409669][ T24] usb 4-1: USB disconnect, device number 4 [ 169.422009][ T7760] netlink: 156 bytes leftover after parsing attributes in process `syz.5.802'. [ 170.264508][ T7752] loop4: detected capacity change from 0 to 32768 [ 170.311892][ T7752] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.798 (7752) [ 170.387192][ T7752] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 170.435037][ T7752] BTRFS info (device loop4): using sha256 checksum algorithm [ 170.459972][ T7776] bridge1: entered promiscuous mode [ 170.477536][ T7776] bridge1: entered allmulticast mode [ 170.781881][ T7752] BTRFS info (device loop4): rebuilding free space tree [ 170.808214][ T7799] netlink: 'syz.5.817': attribute type 1 has an invalid length. [ 170.906530][ T7752] BTRFS info (device loop4): enabling ssd optimizations [ 170.964505][ T7752] BTRFS info (device loop4): using spread ssd allocation scheme [ 170.979507][ T24] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 170.994902][ T7752] BTRFS info (device loop4): turning on async discard [ 171.024889][ T7752] BTRFS info (device loop4): enabling free space tree [ 171.054864][ T7752] BTRFS info (device loop4): force clearing of disk cache [ 171.157256][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 171.185324][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 171.197133][ T24] usb 1-1: config 1 has an invalid interface number: 151 but max is 0 [ 171.226440][ T24] usb 1-1: config 1 has no interface number 0 [ 171.252641][ T24] usb 1-1: config 1 interface 151 has no altsetting 0 [ 171.314825][ T24] usb 1-1: string descriptor 0 read error: -22 [ 171.321258][ T24] usb 1-1: New USB device found, idVendor=093a, idProduct=260e, bcdDevice=18.85 [ 171.346487][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.400770][ T5833] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 171.485941][ T24] gspca_main: pac7311-2.14.0 probing 093a:260e [ 171.868878][ T24] gspca_pac7311: reg_w() failed index 0x78, value 0x40, error -71 [ 171.904588][ T24] pac7311 1-1:1.151: probe with driver pac7311 failed with error -71 [ 171.983375][ T24] usb 1-1: USB disconnect, device number 3 [ 172.109348][ T7775] loop2: detected capacity change from 0 to 32768 [ 172.135913][ T7828] openvswitch: netlink: Key type 31 is not supported [ 172.474669][ T24] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 172.662352][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 172.713271][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 172.760464][ T24] usb 5-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 172.782155][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.828060][ T24] usb 5-1: Product: syz [ 172.862676][ T24] usb 5-1: Manufacturer: syz [ 172.867449][ T24] usb 5-1: SerialNumber: syz [ 172.914981][ T24] usb 5-1: config 0 descriptor?? [ 172.955921][ T24] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 found [ 173.176765][ T24] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 now disconnected [ 173.205710][ T24] snd_usb_toneport 5-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 173.257446][ T7858] loop5: detected capacity change from 0 to 128 [ 173.354268][ T6003] usb 5-1: USB disconnect, device number 6 [ 173.727050][ T7869] loop3: detected capacity change from 0 to 128 [ 173.800361][ T7869] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 173.922678][ T7869] ext4 filesystem being mounted at /146/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 174.216145][ T5823] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 174.374380][ T7889] netlink: 'syz.5.857': attribute type 10 has an invalid length. [ 174.496015][ T7893] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 174.513501][ T7894] mmap: syz.3.858 (7894) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 174.837170][ T7901] loop2: detected capacity change from 0 to 1024 [ 174.929751][ T7901] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.959606][ T7901] ext4 filesystem being mounted at /138/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.191379][ T7915] xfrm0: entered allmulticast mode [ 175.297461][ T5836] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 175.336619][ T7919] netlink: 16 bytes leftover after parsing attributes in process `syz.3.871'. [ 176.037973][ T5840] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 176.229361][ T7947] loop2: detected capacity change from 0 to 1024 [ 176.255370][ T5840] usb 4-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 176.258163][ T7947] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 176.280371][ T7950] loop4: detected capacity change from 0 to 512 [ 176.296916][ T5840] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.313106][ T7947] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 176.319987][ T5840] usb 4-1: Product: syz [ 176.339247][ T7950] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 176.340166][ T7947] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 176.364462][ T5840] usb 4-1: Manufacturer: syz [ 176.382311][ T5840] usb 4-1: SerialNumber: syz [ 176.406582][ T5840] usb 4-1: config 0 descriptor?? [ 176.439240][ T7947] EXT4-fs error (device loop2): ext4_ext_check_inode:521: inode #3: comm syz.2.885: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 176.500113][ T5830] Bluetooth: hci6: urb ffff888036ac3500 submission failed (2) [ 176.563320][ T7950] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 176.587408][ T7947] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 176.595906][ T7947] EXT4-fs (loop2): no journal found [ 176.605279][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 176.605310][ C0] EXT4-fs (loop2): initial error at time 1776176424: ext4_ext_check_inode:521: inode 3 [ 176.605364][ C0] EXT4-fs (loop2): last error at time 1776176424: ext4_ext_check_inode:521: inode 3 [ 176.655179][ T7947] EXT4-fs (loop2): can't get journal size [ 176.790553][ T5936] usb 4-1: USB disconnect, device number 5 [ 176.825300][ T7947] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 177.194852][ T5836] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.238372][ T7970] loop5: detected capacity change from 0 to 4096 [ 177.261628][ T7970] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 177.393456][ T7978] netlink: 96 bytes leftover after parsing attributes in process `syz.1.901'. [ 177.417211][ T7970] ntfs3(loop5): ino=1a, mi_enum_attr [ 177.422687][ T7970] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 177.490250][ T7970] ntfs3(loop5): ino=1a, mi_enum_attr [ 177.546520][ T7970] ntfs3(loop5): Failed to initialize $Extend/$Reparse. [ 177.755166][ T7986] loop3: detected capacity change from 0 to 64 [ 178.225748][ T8002] netlink: 20 bytes leftover after parsing attributes in process `syz.2.913'. [ 178.832940][ T8022] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 178.894632][ T30] audit: type=1326 audit(1776176426.351:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8025 comm="syz.0.924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc29179c819 code=0x7ffc0000 [ 178.894998][ T30] audit: type=1326 audit(1776176426.351:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8025 comm="syz.0.924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc29179c819 code=0x7ffc0000 [ 178.899475][ T30] audit: type=1326 audit(1776176426.361:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8025 comm="syz.0.924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc29179c819 code=0x7ffc0000 [ 178.899790][ T30] audit: type=1326 audit(1776176426.361:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8025 comm="syz.0.924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7fc29179c819 code=0x7ffc0000 [ 178.900131][ T30] audit: type=1326 audit(1776176426.361:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8025 comm="syz.0.924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc29179c819 code=0x7ffc0000 [ 178.900496][ T30] audit: type=1326 audit(1776176426.361:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8025 comm="syz.0.924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc29179c819 code=0x7ffc0000 [ 178.901253][ T30] audit: type=1326 audit(1776176426.361:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8025 comm="syz.0.924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc29179c819 code=0x7ffc0000 [ 178.901481][ T30] audit: type=1326 audit(1776176426.361:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8025 comm="syz.0.924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fc29179c819 code=0x7ffc0000 [ 178.901882][ T30] audit: type=1326 audit(1776176426.361:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8025 comm="syz.0.924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fc29179c819 code=0x7ffc0000 [ 179.464155][ T8042] loop0: detected capacity change from 0 to 256 [ 179.840170][ T8044] loop3: detected capacity change from 0 to 4096 [ 179.844943][ T8044] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 180.133384][ T8056] loop1: detected capacity change from 0 to 128 [ 180.348741][ T8064] netlink: 8 bytes leftover after parsing attributes in process `syz.0.943'. [ 180.383058][ T8064] netlink: 'syz.0.943': attribute type 1 has an invalid length. [ 180.415688][ T8064] netlink: 'syz.0.943': attribute type 2 has an invalid length. [ 180.459958][ T8064] netlink: 112 bytes leftover after parsing attributes in process `syz.0.943'. [ 180.760049][ T8075] openvswitch: netlink: IP tunnel dst address not specified [ 180.874629][ T8080] netlink: 4 bytes leftover after parsing attributes in process `syz.2.951'. [ 182.291134][ T8123] loop3: detected capacity change from 0 to 764 [ 182.648186][ T8092] loop2: detected capacity change from 0 to 32768 [ 182.760746][ T8092] jfs_strtoUCS: char2uni returned -22. [ 182.777309][ T8092] charset = iso8859-6, char = 0xfc [ 183.147554][ T8110] loop5: detected capacity change from 0 to 32768 [ 183.214178][ T8110] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.965 (8110) [ 183.302094][ T8110] BTRFS info (device loop5): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 183.353390][ T8110] BTRFS info (device loop5): using sha256 checksum algorithm [ 183.555381][ T8120] loop4: detected capacity change from 0 to 32768 [ 183.636935][ T8110] BTRFS info (device loop5): turning off barriers [ 183.668752][ T8110] BTRFS info (device loop5): enabling free space tree [ 183.773066][ T8120] (syz.4.971,8120,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 183.881309][ T8120] (syz.4.971,8120,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 183.918223][ T8110] BTRFS warning (device loop5): can't clear the mixed_groups,compress_lzo,incompat:5,extended_iref,raid56,skinny_metadata,no_holes,raid1c34,zoned,incompat:13,incompat:15,simple_quota,incompat:18,incompat:23,incompat:25,incompat:30,incompat:31,incompat:32,incompat:33,incompat:36,incompat:37,incompat:39,incompat:41,incompat:43,incompat:46,incompat:48,incompat:49,incompat:50,incompat:54,incompat:60,incompat:62,incompat:63 feature bits while mounted [ 184.027789][ T8172] loop2: detected capacity change from 0 to 512 [ 184.093564][ T8120] JBD2: Ignoring recovery information on journal [ 184.148556][ T8172] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 184.495055][ T30] audit: type=1326 audit(1776176431.965:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8173 comm="syz.0.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc29179c819 code=0x7ffc0000 [ 184.541871][ T5824] BTRFS info (device loop5): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 184.663776][ T30] audit: type=1326 audit(1776176431.965:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8173 comm="syz.0.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc29179c819 code=0x7ffc0000 [ 184.715231][ T8120] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 184.820761][ T30] audit: type=1326 audit(1776176431.965:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8173 comm="syz.0.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fc29179c819 code=0x7ffc0000 [ 184.893518][ T8178] Cannot find del_set index 6 as target [ 184.937994][ T30] audit: type=1326 audit(1776176431.965:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8173 comm="syz.0.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fc29179c819 code=0x7ffc0000 [ 185.440246][ T8188] loop2: detected capacity change from 0 to 512 [ 185.533300][ T8188] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 185.568337][ T5833] ocfs2: Unmounting device (7,4) on (node local) [ 185.642075][ T8188] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 185.736073][ T8197] IPVS: length: 228 != 24 [ 185.776052][ T8188] ext4 filesystem being mounted at /158/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.903286][ T8188] Quota error (device loop2): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 185.979661][ T8188] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 186.038663][ T8188] EXT4-fs error (device loop2): ext4_acquire_dquot:7026: comm syz.2.996: Failed to acquire dquot type 0 [ 186.330131][ T8205] xfrm0: entered allmulticast mode [ 186.336961][ T5836] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 186.352953][ T8204] loop0: detected capacity change from 0 to 1024 [ 186.514296][ T8209] loop4: detected capacity change from 0 to 64 [ 186.577859][ T8209] syz.4.998: attempt to access beyond end of device [ 186.577859][ T8209] loop4: rw=0, sector=16777216, nr_sectors = 2 limit=64 [ 186.675161][ T8209] Buffer I/O error on dev loop4, logical block 8388608, async page read [ 186.714700][ T8209] syz.4.998: attempt to access beyond end of device [ 186.714700][ T8209] loop4: rw=0, sector=16777216, nr_sectors = 2 limit=64 [ 186.730474][ T8213] netlink: 'syz.5.1007': attribute type 2 has an invalid length. [ 186.795539][ T8209] Buffer I/O error on dev loop4, logical block 8388608, async page read [ 187.138769][ T10] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 187.314483][ T8222] loop3: detected capacity change from 0 to 4096 [ 187.324210][ T8228] netlink: 'syz.0.1014': attribute type 3 has an invalid length. [ 187.330947][ T10] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 187.359511][ T8222] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 187.362425][ T8228] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1014'. [ 187.369288][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.453750][ T10] usb 3-1: config 0 descriptor?? [ 187.569395][ T8222] ntfs3(loop3): ino=1a, mi_enum_attr [ 187.574958][ T8222] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 187.655439][ T8222] ntfs3(loop3): ino=1a, mi_enum_attr [ 187.664977][ T8222] ntfs3(loop3): Failed to initialize $Extend/$Reparse. [ 187.929576][ T10] ath6kl: Failed to submit usb control message: -71 [ 187.966768][ T10] ath6kl: unable to send the bmi data to the device: -71 [ 187.997088][ T10] ath6kl: Unable to send get target info: -71 [ 188.028331][ T10] ath6kl: Failed to init ath6kl core: -71 [ 188.067347][ T10] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 188.090191][ T8242] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 188.144488][ T10] usb 3-1: USB disconnect, device number 5 [ 188.617550][ T8257] loop3: detected capacity change from 0 to 256 [ 188.663258][ T8257] exfat: Deprecated parameter 'namecase' [ 188.688162][ T8257] exfat: Deprecated parameter 'utf8' [ 188.794514][ T8257] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 188.870166][ T8167] syz.1.987 (8167): drop_caches: 3 [ 188.965973][ T8265] loop2: detected capacity change from 0 to 4096 [ 189.088105][ T24] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 189.273424][ T24] usb 6-1: unable to get BOS descriptor or descriptor too short [ 189.320456][ T24] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 189.362461][ T24] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 189.399175][ T24] usb 6-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 189.438593][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.467654][ T24] usb 6-1: Product: syz [ 189.471899][ T24] usb 6-1: Manufacturer: syz [ 189.494389][ T24] usb 6-1: SerialNumber: syz [ 189.611427][ T24] usb 6-1: selecting invalid altsetting 1 [ 189.619734][ T24] usb 6-1: unit 6 not found! [ 189.629119][ T8278] loop1: detected capacity change from 0 to 512 [ 189.932253][ T24] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 190.021574][ T24] usb 6-1: USB disconnect, device number 8 [ 190.111157][ T8296] overlay: Bad value for 'workdir' [ 190.160367][ T5843] udevd[5843]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 190.287575][ T8294] loop1: detected capacity change from 0 to 4096 [ 190.409198][ T8301] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 190.423773][ T8298] kAFS: unable to lookup cell '' [ 190.856061][ T8310] loop1: detected capacity change from 0 to 16 [ 190.906381][ T8310] erofs (device loop1): mounted with root inode @ nid 36. [ 190.949992][ T5830] erofs (device loop1): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 9000 [ 191.008296][ T8310] erofs (device loop1): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 9000 [ 191.047252][ T8310] erofs (device loop1): read error -117 @ 2 of nid 89 [ 191.096788][ T30] audit: type=1800 audit(1776176438.559:36): pid=8310 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1048" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 191.191299][ T8316] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 191.359183][ T8322] loop5: detected capacity change from 0 to 22 [ 191.399034][ T8322] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 191.453124][ T8322] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 191.616531][ T8295] loop4: detected capacity change from 0 to 32768 [ 191.638014][ T8295] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1043 (8295) [ 191.780906][ T8295] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 191.836401][ T8295] BTRFS info (device loop4): using sha256 checksum algorithm [ 191.859703][ T8331] netlink: 'syz.3.1060': attribute type 2 has an invalid length. [ 191.887365][ T8329] loop2: detected capacity change from 0 to 4096 [ 191.925594][ T8329] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 192.063831][ T8295] BTRFS info (device loop4): enabling ssd optimizations [ 192.072723][ T8295] BTRFS info (device loop4): turning on async discard [ 192.080615][ T8295] BTRFS info (device loop4): enabling free space tree [ 192.137544][ T8329] ntfs3(loop2): ino=1a, mi_enum_attr [ 192.167481][ T8329] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 192.208100][ T8329] ntfs3(loop2): ino=1a, mi_enum_attr [ 192.233858][ T8329] ntfs3(loop2): Failed to initialize $Extend/$Reparse. [ 192.281203][ T8350] loop3: detected capacity change from 0 to 256 [ 192.444409][ T8350] FAT-fs (loop3): Directory bread(block 64) failed [ 192.506296][ T8350] FAT-fs (loop3): Directory bread(block 65) failed [ 192.513220][ T8350] FAT-fs (loop3): Directory bread(block 66) failed [ 192.563269][ T5833] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 192.573857][ T8350] FAT-fs (loop3): Directory bread(block 67) failed [ 192.598501][ T8350] FAT-fs (loop3): Directory bread(block 68) failed [ 192.605096][ T8350] FAT-fs (loop3): Directory bread(block 69) failed [ 192.651816][ T8356] loop0: detected capacity change from 0 to 8 [ 192.663814][ T8350] FAT-fs (loop3): Directory bread(block 70) failed [ 192.700243][ T8350] FAT-fs (loop3): Directory bread(block 71) failed [ 192.730275][ T8350] FAT-fs (loop3): Directory bread(block 72) failed [ 192.758154][ T8350] FAT-fs (loop3): Directory bread(block 73) failed [ 192.993186][ T8350] syz.3.1063: attempt to access beyond end of device [ 192.993186][ T8350] loop3: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 193.168382][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.174756][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.276124][ T8368] netlink: 9 bytes leftover after parsing attributes in process `syz.5.1071'. [ 193.916091][ T8385] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 194.078073][ T8391] loop5: detected capacity change from 0 to 1024 [ 194.117519][ T8393] loop3: detected capacity change from 0 to 512 [ 194.281823][ T30] audit: type=1326 audit(1776176441.750:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8395 comm="syz.2.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbffaf9c819 code=0x7ffc0000 [ 194.345641][ T30] audit: type=1326 audit(1776176441.800:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8395 comm="syz.2.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7fbffaf9c819 code=0x7ffc0000 [ 194.370442][ T30] audit: type=1326 audit(1776176441.800:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8395 comm="syz.2.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbffaf9c819 code=0x7ffc0000 [ 194.381577][ T8393] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.400280][ T30] audit: type=1326 audit(1776176441.800:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8395 comm="syz.2.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbffaf9c819 code=0x7ffc0000 [ 194.465620][ T8393] ext4 filesystem being mounted at /187/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 194.475250][ T8401] bridge1: entered promiscuous mode [ 194.490292][ T8401] bridge1: entered allmulticast mode [ 194.818758][ T5823] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.278582][ T8383] loop0: detected capacity change from 0 to 32768 [ 195.304082][ T8383] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1078 (8383) [ 195.399212][ T8383] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 195.430348][ T8383] BTRFS info (device loop0): using sha256 checksum algorithm [ 195.719949][ T8383] BTRFS info (device loop0): rebuilding free space tree [ 195.803384][ T8383] BTRFS info (device loop0): enabling ssd optimizations [ 195.845081][ T8383] BTRFS info (device loop0): using spread ssd allocation scheme [ 195.875212][ T8383] BTRFS info (device loop0): turning on async discard [ 195.882153][ T8383] BTRFS info (device loop0): enabling free space tree [ 195.905812][ T8450] netlink: 'syz.3.1102': attribute type 10 has an invalid length. [ 195.932439][ T8450] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1102'. [ 195.940171][ T8383] BTRFS info (device loop0): force clearing of disk cache [ 196.207977][ T8457] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1105'. [ 196.256379][ T8457] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1105'. [ 196.356846][ T5832] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 196.604014][ T30] audit: type=1326 audit(1776176444.071:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8464 comm="syz.5.1110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe40939c819 code=0x7ffc0000 [ 196.732298][ T8469] loop3: detected capacity change from 0 to 256 [ 196.744858][ T30] audit: type=1326 audit(1776176444.111:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8464 comm="syz.5.1110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe40939c819 code=0x7ffc0000 [ 196.819723][ T8469] exfat: Deprecated parameter 'utf8' [ 196.846269][ T30] audit: type=1326 audit(1776176444.121:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8464 comm="syz.5.1110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7fe40939c819 code=0x7ffc0000 [ 196.880061][ T8469] exfat: Deprecated parameter 'namecase' [ 196.914772][ T8469] exfat: Deprecated parameter 'namecase' [ 196.949590][ T8467] loop4: detected capacity change from 0 to 4096 [ 196.958082][ T30] audit: type=1326 audit(1776176444.121:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8464 comm="syz.5.1110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe40939c819 code=0x7ffc0000 [ 197.004764][ T8467] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 197.052003][ T8469] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 197.105960][ T30] audit: type=1326 audit(1776176444.121:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8464 comm="syz.5.1110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe40939c819 code=0x7ffc0000 [ 197.264681][ T8467] ntfs3(loop4): ino=1a, mi_enum_attr [ 197.323113][ T8467] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 197.365413][ T8438] loop2: detected capacity change from 0 to 32768 [ 197.395230][ T8467] ntfs3(loop4): ino=1a, mi_enum_attr [ 197.429696][ T8438] jfs_strtoUCS: char2uni returned -22. [ 197.439786][ T8467] ntfs3(loop4): Failed to initialize $Extend/$Reparse. [ 197.508041][ T8438] charset = cp949, char = 0xe4 [ 198.384727][ T8500] loop5: detected capacity change from 0 to 128 [ 198.422178][ T8500] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 198.534312][ T8500] ext4 filesystem being mounted at /192/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 198.785205][ T8514] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1132'. [ 198.873734][ T5824] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 199.072145][ T8521] nbd: illegal input index -1495182229 [ 199.933044][ T8508] loop1: detected capacity change from 0 to 32768 [ 199.983040][ T8508] (syz.1.1131,8508,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 200.061033][ T8508] (syz.1.1131,8508,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 200.093759][ T5840] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 200.243880][ T8508] JBD2: Ignoring recovery information on journal [ 200.253774][ T5840] usb 6-1: Using ep0 maxpacket: 8 [ 200.271639][ T5840] usb 6-1: unable to get BOS descriptor or descriptor too short [ 200.294243][ T5840] usb 6-1: config 6 has an invalid interface number: 57 but max is 0 [ 200.305051][ T5840] usb 6-1: config 6 has no interface number 0 [ 200.311209][ T5840] usb 6-1: config 6 interface 57 has no altsetting 0 [ 200.325016][ T5840] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=67.16 [ 200.343879][ T5840] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.347344][ T8554] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1150'. [ 200.352099][ T5840] usb 6-1: Product: syz [ 200.352131][ T5840] usb 6-1: Manufacturer: syz [ 200.399467][ T5840] usb 6-1: SerialNumber: syz [ 200.408353][ T8556] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1151'. [ 200.427871][ T8508] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 200.544645][ T10] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 200.655742][ T5840] legousbtower 6-1:6.57: interrupt endpoints not found [ 200.714317][ T5840] usb 6-1: USB disconnect, device number 9 [ 200.732358][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 200.768549][ T10] usb 4-1: not running at top speed; connect to a high speed hub [ 200.789243][ T10] usb 4-1: config 1 has an invalid descriptor of length 118, skipping remainder of the config [ 200.806575][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 200.828429][ T10] usb 4-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 200.886861][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.923230][ T10] usb 4-1: Product: syz [ 200.937865][ T10] usb 4-1: Manufacturer: syz [ 200.954072][ T10] usb 4-1: SerialNumber: syz [ 201.064420][ T5831] ocfs2: Unmounting device (7,1) on (node local) [ 201.067988][ T8563] loop4: detected capacity change from 0 to 4096 [ 201.110364][ T8563] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 201.233883][ T10] usb 4-1: unit 101 not found! [ 201.292527][ T8563] ntfs3(loop4): ino=3, ntfs_set_state failed, -22. [ 201.461069][ T10] usb 4-1: USB disconnect, device number 6 [ 201.606383][ T36] ntfs3(loop4): ino=3, ntfs3_write_inode failed, -22. [ 201.652934][ T5844] udevd[5844]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 201.677135][ T5833] ntfs3(loop4): ino=3, ntfs_set_state failed, -22. [ 201.692973][ T5833] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 201.721811][ T5833] ntfs3(loop4): ino=3, ntfs_set_state failed, -22. [ 201.751378][ T81] ntfs3(loop4): ino=3, ntfs3_write_inode failed, -22. [ 201.765281][ T8577] xt_CT: You must specify a L4 protocol and not use inversions on it [ 202.503414][ T5936] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 202.663281][ T5936] usb 4-1: Using ep0 maxpacket: 32 [ 202.686453][ T5936] usb 4-1: unable to get BOS descriptor or descriptor too short [ 202.710152][ T5936] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 202.731039][ T5936] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 202.783293][ T5936] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.791481][ T5936] usb 4-1: Product: syz [ 202.811509][ T5936] usb 4-1: Manufacturer: syz [ 202.833350][ T5936] usb 4-1: SerialNumber: syz [ 203.085004][ T5936] usb 4-1: Invalid number of CPorts: 0 [ 203.092248][ T8579] loop1: detected capacity change from 0 to 32768 [ 203.103082][ T5936] es2_ap_driver 4-1:7.0: probe with driver es2_ap_driver failed with error -22 [ 203.170439][ T8585] loop2: detected capacity change from 0 to 32768 [ 203.186766][ T8585] (syz.2.1165,8585,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 203.224184][ T8585] (syz.2.1165,8585,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 203.244520][ T8579] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 203.347168][ T5936] usb 4-1: USB disconnect, device number 7 [ 203.372869][ T8593] loop5: detected capacity change from 0 to 32768 [ 203.382041][ T8593] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1169 (8593) [ 203.405140][ T8579] XFS (loop1): Ending clean mount [ 203.439634][ T8585] JBD2: Ignoring recovery information on journal [ 203.463888][ T8579] XFS (loop1): Quotacheck needed: Please wait. [ 203.503923][ T8593] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 203.563016][ T8593] BTRFS info (device loop5): using crc32c checksum algorithm [ 203.652616][ T8579] XFS (loop1): Quotacheck: Done. [ 203.791158][ T8585] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 203.936385][ T8593] BTRFS info (device loop5): enabling ssd optimizations [ 203.980367][ T5831] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 203.993015][ T8593] BTRFS info (device loop5): turning on flush-on-commit [ 204.000120][ T8593] BTRFS info (device loop5): enabling free space tree [ 204.014262][ T8635] : renamed from virt_wifi0 [ 204.063120][ T8593] BTRFS info (device loop5): enabling auto defrag [ 204.069726][ T8593] BTRFS info (device loop5): use lzo compression, level 1 [ 204.200736][ T8593] BTRFS info (device loop5): max_inline set to 4096 [ 204.511707][ T5836] ocfs2: Unmounting device (7,2) on (node local) [ 204.527051][ T8642] loop0: detected capacity change from 0 to 64 [ 204.748160][ T8642] syz.0.1182: attempt to access beyond end of device [ 204.748160][ T8642] loop0: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 204.893264][ T8642] Buffer I/O error on dev loop0, logical block 512, async page read [ 204.953418][ T8642] syz.0.1182: attempt to access beyond end of device [ 204.953418][ T8642] loop0: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 205.069486][ T8642] Buffer I/O error on dev loop0, logical block 56576, async page read [ 205.094540][ T5824] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 205.633812][ T8661] PM: Enabling pm_trace changes system date and time during resume. [ 205.633812][ T8661] PM: Correct system time has to be restored manually after resume. [ 205.764324][ T8664] loop4: detected capacity change from 0 to 512 [ 206.014701][ T8673] netlink: 'syz.2.1196': attribute type 12 has an invalid length. [ 206.020498][ T8664] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.147581][ T8664] ext4 filesystem being mounted at /180/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 206.394621][ T8680] Driver unsupported XDP return value 0 on prog (id 53) dev N/A, expect packet loss! [ 206.482101][ T5833] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.033713][ T8702] program syz.0.1208 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 207.073347][ T8701] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1209'. [ 207.102870][ T8701] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1209'. [ 207.247276][ T8705] netlink: 'syz.4.1210': attribute type 21 has an invalid length. [ 207.292541][ T8705] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1210'. [ 207.325391][ T8705] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1210'. [ 209.986753][ T8788] loop5: detected capacity change from 0 to 2048 [ 210.067747][ T8788] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 210.190976][ T8799] loop2: detected capacity change from 0 to 512 [ 210.255706][ T8799] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.352088][ T8799] ext4 filesystem being mounted at /197/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 210.806548][ T5836] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.590880][ T8838] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1275'. [ 211.788542][ T8844] loop5: detected capacity change from 0 to 512 [ 211.919657][ T8844] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.995146][ T8852] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1279'. [ 212.013770][ T8844] ext4 filesystem being mounted at /215/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 212.036898][ T8850] netlink: 'syz.0.1280': attribute type 21 has an invalid length. [ 212.092288][ T8850] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1280'. [ 212.348227][ T5824] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.553813][ T8861] loop3: detected capacity change from 0 to 1764 [ 212.881628][ T24] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 213.018534][ T8832] loop4: detected capacity change from 0 to 32768 [ 213.113830][ T24] usb 6-1: unable to get BOS descriptor or descriptor too short [ 213.123808][ T24] usb 6-1: not running at top speed; connect to a high speed hub [ 213.133691][ T24] usb 6-1: config 1 has an invalid descriptor of length 118, skipping remainder of the config [ 213.147691][ T24] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 213.164248][ T24] usb 6-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 213.170997][ T8832] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 213.180085][ T8878] 5n: entered promiscuous mode [ 213.187256][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.195649][ T24] usb 6-1: Product: syz [ 213.200578][ T24] usb 6-1: Manufacturer: syz [ 213.205315][ T24] usb 6-1: SerialNumber: syz [ 213.378446][ T8888] loop3: detected capacity change from 0 to 128 [ 213.395290][ T8832] XFS (loop4): Ending clean mount [ 213.410899][ T8888] FAT-fs (loop3): Directory bread(block 414) failed [ 213.436276][ T24] usb 6-1: unit 101 not found! [ 213.465525][ T8888] FAT-fs (loop3): Directory bread(block 415) failed [ 213.497415][ T8888] FAT-fs (loop3): Directory bread(block 416) failed [ 213.510943][ T8888] FAT-fs (loop3): Directory bread(block 417) failed [ 213.541622][ T8888] FAT-fs (loop3): Directory bread(block 418) failed [ 213.601558][ T8888] FAT-fs (loop3): Directory bread(block 419) failed [ 213.608961][ T8888] FAT-fs (loop3): Directory bread(block 420) failed [ 213.636704][ T8888] FAT-fs (loop3): Directory bread(block 421) failed [ 213.692115][ T24] usb 6-1: USB disconnect, device number 10 [ 213.779090][ T5843] udevd[5843]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 213.814786][ T5833] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 213.830771][ T8888] FAT-fs (loop3): FAT read failed (blocknr 128) [ 213.845028][ T8890] loop2: detected capacity change from 0 to 4096 [ 214.061005][ T8890] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 214.085551][ T8894] loop0: detected capacity change from 0 to 512 [ 214.094451][ T8890] ntfs3(loop2): Failed to load $Extend (-22). [ 214.100644][ T8890] ntfs3(loop2): Failed to initialize $Extend. [ 214.220107][ T8894] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 214.255000][ T8890] ntfs3(loop2): ino=5, "/" indx_read_ra [ 214.281643][ T8894] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 214.290086][ T8894] EXT4-fs (loop0): orphan cleanup on readonly fs [ 214.374151][ T8894] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0 [ 214.391966][ T8894] EXT4-fs warning (device loop0): ext4_enable_quotas:7259: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 214.459175][ T8894] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 214.563756][ T8894] EXT4-fs error (device loop0): ext4_validate_block_bitmap:440: comm syz.0.1299: bg 0: block 40: padding at end of block bitmap is not set [ 214.581460][ T5836] ntfs3(loop2): ino=9, ntfs_sync_fs failed, -22. [ 214.660110][ T8894] loop0: lost filesystem error report for type 5 error -117 [ 214.661892][ C1] EXT4-fs (loop0): initial error at time 1776176462: ext4_validate_block_bitmap:440 [ 214.679166][ C1] EXT4-fs (loop0): last error at time 1776176462: ext4_validate_block_bitmap:440 [ 214.714013][ T8894] EXT4-fs (loop0): Remounting filesystem read-only [ 214.736493][ T8894] EXT4-fs (loop0): 1 truncate cleaned up [ 214.750308][ T8894] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 214.825710][ T8868] loop1: detected capacity change from 0 to 40427 [ 214.889598][ T8868] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 214.941422][ T8868] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 214.984424][ T8868] F2FS-fs (loop1): invalid crc value [ 215.036705][ T5832] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.123569][ T8908] netlink: 188 bytes leftover after parsing attributes in process `syz.5.1304'. [ 215.253368][ T8914] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1307'. [ 215.480322][ T8868] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 215.591972][ T8868] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 215.631618][ T8868] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 215.735045][ T5841] Bluetooth: hci1: command 0x0406 tx timeout [ 215.735623][ T5827] Bluetooth: hci5: command 0x0405 tx timeout [ 215.744205][ T5841] Bluetooth: hci2: command 0x0406 tx timeout [ 215.751627][ T5827] Bluetooth: hci3: command 0x0406 tx timeout [ 215.754040][ T5841] Bluetooth: hci4: command 0x0406 tx timeout [ 216.042765][ T5934] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 216.226433][ T5934] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 216.276708][ T5934] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 216.321810][ T5934] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 216.366682][ T5934] usb 5-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 216.399394][ T5934] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.419176][ T5934] usb 5-1: Product: syz [ 216.439637][ T5934] usb 5-1: Manufacturer: syz [ 216.455344][ T5934] usb 5-1: SerialNumber: syz [ 216.518916][ T5934] usb 5-1: config 0 descriptor?? [ 217.733109][ T24] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 217.926855][ T24] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 217.957627][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.007935][ T24] usb 1-1: config 0 descriptor?? [ 218.028362][ T24] cp210x 1-1:0.0: cp210x converter detected [ 218.465944][ T24] cp210x 1-1:0.0: failed to get vendor val 0x370c size 13: -71 [ 218.495074][ T24] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 218.524461][ T24] usb 1-1: cp210x converter now attached to ttyUSB0 [ 218.576865][ T24] usb 1-1: USB disconnect, device number 4 [ 218.634367][ T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 218.693934][ T24] cp210x 1-1:0.0: device disconnected [ 219.099475][ T8994] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 219.288323][ T8996] loop4: detected capacity change from 0 to 1764 [ 219.489657][ T9000] loop0: detected capacity change from 0 to 256 [ 219.734351][ T9000] FAT-fs (loop0): Directory bread(block 64) failed [ 219.770864][ T9000] FAT-fs (loop0): Directory bread(block 65) failed [ 219.811382][ T9000] FAT-fs (loop0): Directory bread(block 66) failed [ 219.820705][ T9004] netlink: 'syz.2.1349': attribute type 11 has an invalid length. [ 219.840058][ T9000] FAT-fs (loop0): Directory bread(block 67) failed [ 219.872514][ T9000] FAT-fs (loop0): Directory bread(block 68) failed [ 219.879196][ T9000] FAT-fs (loop0): Directory bread(block 69) failed [ 219.955957][ T9000] FAT-fs (loop0): Directory bread(block 70) failed [ 219.969148][ T9000] FAT-fs (loop0): Directory bread(block 71) failed [ 220.001332][ T9000] FAT-fs (loop0): Directory bread(block 72) failed [ 220.007968][ T9000] FAT-fs (loop0): Directory bread(block 73) failed [ 220.510561][ T9016] loop5: detected capacity change from 0 to 512 [ 220.567798][ T8992] loop3: detected capacity change from 0 to 32768 [ 220.601137][ T9016] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 220.654189][ T8992] (syz.3.1342,8992,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 220.747155][ T8992] (syz.3.1342,8992,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 220.766724][ T9016] EXT4-fs error (device loop5): ext4_get_branch:178: inode #11: block 4294967295: comm syz.5.1355: invalid block [ 220.786024][ T9016] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 220.790969][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 220.806788][ C0] EXT4-fs (loop5): initial error at time 1776176468: ext4_get_branch:178: inode 11: block 4294967295 [ 220.817925][ C0] EXT4-fs (loop5): last error at time 1776176468: ext4_get_branch:178: inode 11: block 4294967295 [ 220.823319][ T9016] EXT4-fs error (device loop5): ext4_free_branches:1020: inode #11: comm syz.5.1355: invalid indirect mapped block 4294967295 (level 1) [ 220.875814][ T9016] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 220.886554][ T8992] JBD2: Ignoring recovery information on journal [ 220.961057][ T9016] EXT4-fs error (device loop5): ext4_free_branches:1020: inode #11: comm syz.5.1355: invalid indirect mapped block 4294967295 (level 1) [ 220.975939][ T9016] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 220.986195][ T9016] EXT4-fs (loop5): 2 truncates cleaned up [ 221.006364][ T9016] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.289857][ T8992] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 221.510087][ T9039] loop2: detected capacity change from 0 to 256 [ 221.539718][ T5824] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.558640][ T9039] exfat: Deprecated parameter 'namecase' [ 221.638459][ T9039] exfat: Deprecated parameter 'namecase' [ 221.702195][ T9032] loop0: detected capacity change from 0 to 8192 [ 221.724109][ T9039] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 222.424688][ T5823] ocfs2: Unmounting device (7,3) on (node local) [ 222.554228][ T9050] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1373'. [ 222.610907][ T9050] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1373'. [ 223.172822][ T9064] loop0: detected capacity change from 0 to 65 [ 223.227743][ T9064] BFS-fs: bfs_fill_super(): NOTE: filesystem loop0 was created with 512 inodes, the real maximum is 511, mounting anyway [ 224.005988][ T9081] loop5: detected capacity change from 0 to 64 [ 224.790009][ T9093] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048) [ 225.299017][ T9071] loop1: detected capacity change from 0 to 32768 [ 225.324594][ T9105] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1396'. [ 225.326004][ T9104] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1397'. [ 225.361451][ T9105] .70: renamed from hsr0 (while UP) [ 225.387401][ T9071] (syz.1.1381,9071,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 225.416281][ T9104] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1397'. [ 225.449140][ T9071] (syz.1.1381,9071,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 225.451564][ T9105] .70: entered allmulticast mode [ 225.534031][ T9071] JBD2: Ignoring recovery information on journal [ 225.560750][ T9105] hsr_slave_0: entered allmulticast mode [ 225.568200][ T9105] hsr_slave_1: entered allmulticast mode [ 225.589202][ T9105] A link change request failed with some changes committed already. Interface .70 may have been left with an inconsistent configuration, please check. [ 225.825762][ T9071] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 226.592146][ T5831] ocfs2: Unmounting device (7,1) on (node local) [ 226.981526][ T9133] xt_CT: You must specify a L4 protocol and not use inversions on it [ 227.071228][ T5934] iguanair 5-1:0.0: failed to get version [ 227.098799][ T5934] iguanair 5-1:0.0: probe with driver iguanair failed with error -110 [ 227.150110][ T5934] usb 5-1: USB disconnect, device number 7 [ 227.305321][ T9100] loop0: detected capacity change from 0 to 32768 [ 227.394137][ T9141] comedi comedi1: mpc624: I/O port conflict (0x1,16) [ 227.404198][ T9100] jfs_create: dtInsert returned -EIO [ 227.432445][ T9100] ERROR: (device loop0): txAbort: [ 227.432445][ T9100] [ 227.521063][ T5934] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 227.682180][ T5934] usb 5-1: Using ep0 maxpacket: 32 [ 227.722272][ T5934] usb 5-1: config 0 has an invalid interface number: 146 but max is 0 [ 227.730985][ T5934] usb 5-1: config 0 has no interface number 0 [ 227.743252][ T5934] usb 5-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 227.755822][ T5934] usb 5-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 227.769346][ T5934] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 227.781253][ T5934] usb 5-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 227.832194][ T5934] usb 5-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 227.874137][ T5934] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 227.930137][ T5934] usb 5-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 227.976382][ T5934] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 25391, setting to 1024 [ 228.005132][ T5934] usb 5-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 228.025575][ T5934] usb 5-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 228.056100][ T5934] usb 5-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 228.149582][ T5934] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.180078][ T5934] usb 5-1: Product: syz [ 228.192365][ T5934] usb 5-1: Manufacturer: syz [ 228.210010][ T5934] usb 5-1: SerialNumber: syz [ 228.262292][ T5934] usb 5-1: config 0 descriptor?? [ 228.275188][ T9132] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 228.304483][ T9132] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 228.356669][ T5934] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 228.433387][ T5934] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 228.499496][ T5934] scsi host1: microtekX6 [ 228.532744][ T9173] xt_cgroup: invalid path, errno=-2 [ 228.613697][ T9176] netlink: 2120 bytes leftover after parsing attributes in process `syz.0.1429'. [ 228.720187][ T5934] usb 5-1: USB disconnect, device number 8 [ 229.234865][ T9191] kAFS: unable to lookup cell '({FA' [ 229.349684][ T9198] openvswitch: netlink: nsh attr 247 is out of range max 3 [ 229.500754][ T9200] loop1: detected capacity change from 0 to 256 [ 230.094205][ T9214] netlink: 'syz.4.1447': attribute type 11 has an invalid length. [ 230.198685][ T9225] loop5: detected capacity change from 0 to 64 [ 230.346328][ T9225] syz.5.1452: attempt to access beyond end of device [ 230.346328][ T9225] loop5: rw=0, sector=268435468, nr_sectors = 2 limit=64 [ 230.430781][ T9225] Buffer I/O error on dev loop5, logical block 134217734, async page read [ 230.505144][ T9225] Trying to free block not in datazone [ 230.651335][ T9233] loop0: detected capacity change from 0 to 256 [ 230.693748][ T9233] exfat: Deprecated parameter 'namecase' [ 230.699820][ T9233] exfat: Deprecated parameter 'namecase' [ 230.755891][ T9227] loop3: detected capacity change from 0 to 4096 [ 230.831877][ T9233] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 230.853778][ T9227] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 230.955946][ T9227] ntfs3(loop3): Failed to load $Extend (-22). [ 230.982705][ T9227] ntfs3(loop3): Failed to initialize $Extend. [ 231.719420][ T9259] netlink: 9 bytes leftover after parsing attributes in process `syz.5.1469'. [ 231.758049][ T9259] .70: renamed from hsr0 (while UP) [ 231.886588][ T9259] .70: entered allmulticast mode [ 231.916071][ T9259] hsr_slave_0: entered allmulticast mode [ 231.933009][ T9259] hsr_slave_1: entered allmulticast mode [ 231.966780][ T9259] A link change request failed with some changes committed already. Interface .70 may have been left with an inconsistent configuration, please check. [ 232.364522][ T9277] xt_connbytes: Forcing CT accounting to be enabled [ 232.374532][ T9275] loop5: detected capacity change from 0 to 512 [ 232.391462][ T9277] set match dimension is over the limit! [ 232.595044][ T9281] netlink: 'syz.3.1480': attribute type 11 has an invalid length. [ 232.620568][ T9281] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1480'. [ 232.949248][ T9291] loop5: detected capacity change from 0 to 64 [ 232.964685][ T9294] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1485'. [ 233.182950][ T9297] loop1: detected capacity change from 0 to 4096 [ 233.203921][ T5907] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 233.333808][ T9303] loop4: detected capacity change from 0 to 8 [ 233.352274][ T9303] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 233.429887][ T5907] usb 3-1: config 8 has an invalid interface number: 177 but max is 0 [ 233.444811][ T5907] usb 3-1: config 8 has no interface number 0 [ 233.466201][ T9306] nftables ruleset with unbound chain [ 233.475764][ T5907] usb 3-1: config 8 interface 177 altsetting 9 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 233.509794][ T9303] cramfs: Error -3 while decompressing! [ 233.518292][ T5907] usb 3-1: config 8 interface 177 has no altsetting 0 [ 233.536703][ T5844] udevd[5844]: incorrect cramfs checksum on /dev/loop4 [ 233.544081][ T9303] cramfs: ffffffff9b2bf648(26)->ffff888012fa4000(4096) [ 233.570582][ T5907] usb 3-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 233.581625][ T9303] cramfs: Error -3 while decompressing! [ 233.587324][ T9303] cramfs: ffffffff9b2bf662(26)->ffff8880776d7000(4096) [ 233.610824][ T5907] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.620542][ T9303] cramfs: Error -3 while decompressing! [ 233.635285][ T9295] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 233.664444][ T9303] cramfs: ffffffff9b2bf67c(16)->ffff8880776d6000(4096) [ 233.710630][ T9303] cramfs: Error -3 while decompressing! [ 233.762972][ T9303] cramfs: ffffffff9b2bf648(26)->ffff888012fa4000(4096) [ 233.789808][ T5843] udevd[5843]: incorrect cramfs checksum on /dev/loop4 [ 233.838115][ T30] audit: type=1800 audit(1776176481.245:46): pid=9303 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1491" name="file2" dev="loop4" ino=348 res=0 errno=0 [ 233.890175][ T9310] ieee802154 phy0 wpan0: encryption failed: -22 [ 233.927534][ T5907] usb 3-1: string descriptor 0 read error: -71 [ 233.957681][ C1] ir_toy 3-1:8.177: out urb status: -71 [ 234.203393][ T9317] netlink: 'syz.4.1497': attribute type 1 has an invalid length. [ 234.227987][ T9317] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1497'. [ 234.480396][ T5907] ir_toy 3-1:8.177: could not write reset command: -110 [ 234.527291][ T5907] ir_toy 3-1:8.177: probe with driver ir_toy failed with error -110 [ 234.588238][ T5907] usb 3-1: USB disconnect, device number 6 [ 235.050761][ T9337] loop2: detected capacity change from 0 to 512 [ 235.077623][ T9337] EXT4-fs: inline encryption not supported [ 235.115826][ T9337] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 235.162923][ T9337] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 235.303134][ T9337] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.1507: inode has both inline data and extents flags [ 235.420342][ T9337] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 235.421015][ T9337] EXT4-fs error (device loop2): ext4_orphan_get:1400: comm syz.2.1507: couldn't read orphan inode 15 (err -117) [ 235.430372][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 235.430414][ C1] EXT4-fs (loop2): initial error at time 1776176482: ext4_orphan_get:1397: inode 15 [ 235.430481][ C1] EXT4-fs (loop2): last error at time 1776176482: ext4_orphan_get:1397: inode 15 [ 235.562835][ T9337] loop2: lost filesystem error report for type 5 error -117 [ 235.565732][ T9337] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 235.590469][ T9356] loop5: detected capacity change from 0 to 512 [ 235.597725][ T9355] netlink: 'syz.3.1515': attribute type 21 has an invalid length. [ 235.641001][ T9355] IPv6: NLM_F_CREATE should be specified when creating new route [ 235.709312][ T9356] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.838474][ T9356] ext4 filesystem being mounted at /258/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 235.880151][ T9356] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.1516: corrupted xattr block 32: overlapping e_value [ 235.943688][ T5836] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.966057][ T9364] comedi comedi4: bad chanlist[1]=0x00000008 chan=8 range length=2 [ 236.381824][ T9373] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1525'. [ 236.453163][ T5824] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.478745][ T9373] .70: renamed from hsr0 (while UP) [ 236.555509][ T9373] .70: entered allmulticast mode [ 236.581300][ T9373] hsr_slave_0: entered allmulticast mode [ 236.623175][ T9373] hsr_slave_1: entered allmulticast mode [ 236.664017][ T9373] A link change request failed with some changes committed already. Interface .70 may have been left with an inconsistent configuration, please check. [ 237.059879][ T9393] loop4: detected capacity change from 0 to 256 [ 237.236911][ T9397] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1535'. [ 237.272532][ T9397] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1535'. [ 238.030021][ T9417] netlink: 'syz.4.1545': attribute type 4 has an invalid length. [ 238.104057][ T9417] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1545'. [ 238.104809][ T9421] netlink: 'syz.5.1547': attribute type 11 has an invalid length. [ 238.175216][ T9417] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 238.374288][ T9391] loop2: detected capacity change from 0 to 32768 [ 238.431842][ T9391] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1532 (9391) [ 238.512910][ T9391] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 238.560341][ T9391] BTRFS info (device loop2): using sha256 checksum algorithm [ 238.611300][ T5936] usb 4-1: new low-speed USB device number 8 using dummy_hcd [ 238.806239][ T9391] BTRFS info (device loop2): rebuilding free space tree [ 238.820687][ T5936] usb 4-1: config 32 has 1 interface, different from the descriptor's value: 2 [ 238.855674][ T5936] usb 4-1: config 32 interface 0 altsetting 0 has an endpoint descriptor with address 0xA2, changing to 0x82 [ 238.883129][ T9391] BTRFS info (device loop2): enabling ssd optimizations [ 238.902933][ T5936] usb 4-1: config 32 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 29399, setting to 8 [ 238.924728][ T9391] BTRFS info (device loop2): using spread ssd allocation scheme [ 238.960267][ T9391] BTRFS info (device loop2): turning on async discard [ 238.967619][ T5936] usb 4-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 238.988783][ T9391] BTRFS info (device loop2): enabling free space tree [ 238.998772][ T5936] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.019964][ T9391] BTRFS info (device loop2): force clearing of disk cache [ 239.054032][ T9427] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 239.239367][ T9458] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.1558'. [ 239.270275][ T9458] openvswitch: netlink: Missing key (keys=40, expected=80) [ 239.278094][ T5936] usb 4-1: string descriptor 0 read error: -71 [ 239.340826][ T5836] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 239.603427][ T9425] loop1: detected capacity change from 0 to 32768 [ 239.622265][ T5936] usb 4-1: USB disconnect, device number 8 [ 239.660503][ T9425] BTRFS info: device /dev/loop1 (7:1) using temp-fsid fc71fbc3-de63-4106-98f4-3934ca03beed [ 239.694735][ T9425] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1549 (9425) [ 239.802387][ T9425] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 239.854203][ T9425] BTRFS info (device loop1): using sha256 checksum algorithm [ 240.129590][ T9425] BTRFS info (device loop1): enabling ssd optimizations [ 240.165279][ T9425] BTRFS info (device loop1): turning on async discard [ 240.237908][ T9425] BTRFS info (device loop1): enabling free space tree [ 240.518183][ T5831] BTRFS info (device loop1): last unmount of filesystem fc71fbc3-de63-4106-98f4-3934ca03beed [ 241.364892][ T9512] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1577'. [ 241.580855][ T5907] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 241.753071][ T10] IPVS: starting estimator thread 0... [ 241.774790][ T5907] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 241.827096][ T5907] usb 3-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 241.861973][ T9523] IPVS: using max 24 ests per chain, 57600 per kthread [ 241.874878][ T5907] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 241.897712][ T5907] usb 3-1: Product: syz [ 241.913969][ T5907] usb 3-1: Manufacturer: syz [ 241.930226][ T5907] usb 3-1: SerialNumber: syz [ 241.957974][ T5907] usb 3-1: config 0 descriptor?? [ 241.964598][ T9527] loop1: detected capacity change from 0 to 512 [ 241.976622][ T5907] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 241.986062][ T9527] EXT4-fs: Ignoring removed bh option [ 242.013982][ T5907] pctv452e: pctv452e_power_ctrl: 1 [ 242.013982][ T5907] [ 242.023884][ T9527] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 242.060959][ T5907] usb 3-1: selecting invalid altsetting 3 [ 242.066803][ T5907] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 242.066803][ T5907] [ 242.078843][ T9527] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 242.117298][ T9529] loop4: detected capacity change from 0 to 256 [ 242.120665][ T5907] dvb-usb: bulk message failed: -22 (5/0) [ 242.151112][ T9527] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 242.238901][ T5907] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 242.262483][ T9527] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 242.291057][ T9527] System zones: 0-2, 18-18, 34-35 [ 242.333329][ T9529] FAT-fs (loop4): Directory bread(block 64) failed [ 242.334789][ T9527] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 242.340024][ T9529] FAT-fs (loop4): Directory bread(block 65) failed [ 242.367858][ T5907] dvb-usb: Technotrend TT Connect S2-3600 error while loading driver (-19) [ 242.393615][ T9529] FAT-fs (loop4): Directory bread(block 66) failed [ 242.410292][ T9529] FAT-fs (loop4): Directory bread(block 67) failed [ 242.417046][ T9529] FAT-fs (loop4): Directory bread(block 68) failed [ 242.428734][ T5907] usb 3-1: USB disconnect, device number 7 [ 242.460320][ T9529] FAT-fs (loop4): Directory bread(block 69) failed [ 242.513124][ T9529] FAT-fs (loop4): Directory bread(block 70) failed [ 242.544668][ T9529] FAT-fs (loop4): Directory bread(block 71) failed [ 242.601402][ T9529] FAT-fs (loop4): Directory bread(block 72) failed [ 242.639213][ T9529] FAT-fs (loop4): Directory bread(block 73) failed [ 242.741688][ T5831] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.004441][ T9543] netlink: 798 bytes leftover after parsing attributes in process `syz.1.1590'. [ 243.548146][ T9563] netlink: 'syz.3.1602': attribute type 62 has an invalid length. [ 243.634553][ T9567] loop1: detected capacity change from 0 to 2048 [ 243.692779][ T9567] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 243.740511][ T9567] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 243.748229][ T9567] UDF-fs: Scanning with blocksize 512 failed [ 243.837484][ T9567] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 243.841593][ T9569] loop2: detected capacity change from 0 to 764 [ 243.930653][ T9569] Symlink component flag not implemented [ 243.980452][ T9569] Symlink component flag not implemented (7) [ 244.177594][ T9577] loop4: detected capacity change from 0 to 256 [ 244.374266][ T9577] FAT-fs (loop4): Directory bread(block 64) failed [ 244.399184][ T9577] FAT-fs (loop4): Directory bread(block 65) failed [ 244.423368][ T9577] FAT-fs (loop4): Directory bread(block 66) failed [ 244.486666][ T9577] FAT-fs (loop4): Directory bread(block 67) failed [ 244.532420][ T9577] FAT-fs (loop4): Directory bread(block 68) failed [ 244.539044][ T9577] FAT-fs (loop4): Directory bread(block 69) failed [ 244.608937][ T9577] FAT-fs (loop4): Directory bread(block 70) failed [ 244.636388][ T9577] FAT-fs (loop4): Directory bread(block 71) failed [ 244.690334][ T9577] FAT-fs (loop4): Directory bread(block 72) failed [ 244.697096][ T9577] FAT-fs (loop4): Directory bread(block 73) failed [ 245.258654][ T9575] loop3: detected capacity change from 0 to 32768 [ 245.281548][ T9605] xt_CT: You must specify a L4 protocol and not use inversions on it [ 245.319426][ T9575] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1607 (9575) [ 245.394566][ T9575] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 245.458012][ T9575] BTRFS info (device loop3): using sha256 checksum algorithm [ 245.682045][ T9575] BTRFS info (device loop3): enabling ssd optimizations [ 245.761035][ T9575] BTRFS info (device loop3): turning on async discard [ 245.767962][ T9575] BTRFS info (device loop3): enabling free space tree [ 245.930495][ T9638] loop0: detected capacity change from 0 to 1024 [ 245.960363][ T9575] BTRFS error: failed to open device for path sW,]/QP@E9 lV:QoIl{Q.$?L^3+~;19=LLb,}z+e;0_Vlor*D2:moIH?ɵIqw8"7su4Sm zi<=˿E2F{%GameuaZu,$\II?P73;b=k:]RZLxd 9яADwgq=fdCf{\Q"2`wdWd]k{8sf_ a4K*AY}YEadcjϴEswZhZ=]%yA\kReOB<_d۳XF0?uSA+M ̂ܯlw 7.7#_-gJzɻjbu 2|ͼS/ԇG|$]IHٜL<`?'tV!R4d6?NK<װ^Pp\&əcF=FwBa 3c 02 00 0f 85 34 02 00 00 48 8b 5b 08 be 08 00 00 00 4c 89 5c [ 253.506151][ T9853] RSP: 0018:ffffc9000529f480 EFLAGS: 00010212 [ 253.512259][ T9853] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc90006c59000 [ 253.520340][ T9853] RDX: 0000000000000001 RSI: ffffffff82f7efa9 RDI: 0000000000000008 [ 253.528337][ T9853] RBP: ffff888020b10000 R08: 0000000000000005 R09: 0000000000000000 [ 253.536340][ T9853] R10: 0000000000000000 R11: ffff88803311a000 R12: ffff8880340be000 [ 253.544434][ T9853] R13: 0000000000000000 R14: 0000000000000000 R15: ffffc9000529f560 [ 253.552437][ T9853] FS: 00007f43846a36c0(0000) GS:ffff88812442c000(0000) knlGS:0000000000000000 [ 253.561413][ T9853] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 253.568068][ T9853] CR2: 00007f43837e9f00 CR3: 0000000027733000 CR4: 0000000000350ef0 [ 253.576156][ T9853] Call Trace: [ 253.579452][ T9853] [ 253.582488][ T9853] ? is_bpf_text_address+0x94/0x1a0 [ 253.587716][ T9853] ? __pfx___hfsplus_setxattr+0x10/0x10 [ 253.593320][ T9853] ? srso_alias_return_thunk+0x5/0xfbef5 [ 253.599038][ T9853] ? srso_alias_return_thunk+0x5/0xfbef5 [ 253.604742][ T9853] ? do_raw_spin_lock+0x128/0x260 [ 253.609835][ T9853] ? find_held_lock+0x2b/0x80 [ 253.614583][ T9853] ? srso_alias_return_thunk+0x5/0xfbef5 [ 253.620262][ T9853] ? mark_held_locks+0x40/0x70 [ 253.625081][ T9853] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 253.630950][ T9853] ? srso_alias_return_thunk+0x5/0xfbef5 [ 253.636777][ T9853] ? srso_alias_return_thunk+0x5/0xfbef5 [ 253.642459][ T9853] hfsplus_setxattr+0x11a/0x2c0 [ 253.647339][ T9853] ? __pfx_hfsplus_trusted_setxattr+0x10/0x10 [ 253.653427][ T9853] __vfs_setxattr+0x175/0x1e0 [ 253.658148][ T9853] ? __pfx___vfs_setxattr+0x10/0x10 [ 253.663384][ T9853] ? apparmor_capable+0x1d7/0x4d0 [ 253.668537][ T9853] __vfs_setxattr_noperm+0x127/0x660 [ 253.673887][ T9853] __vfs_setxattr_locked+0x127/0x2b0 [ 253.679218][ T9853] vfs_setxattr+0x14a/0x390 [ 253.683764][ T9853] ? __pfx_vfs_setxattr+0x10/0x10 [ 253.688836][ T9853] ? mnt_get_write_access+0x52/0x2f0 [ 253.694160][ T9853] ? srso_alias_return_thunk+0x5/0xfbef5 [ 253.699925][ T9853] ? mnt_get_write_access+0x52/0x2f0 [ 253.705344][ T9853] do_setxattr+0x145/0x180 [ 253.709833][ T9853] filename_setxattr+0x167/0x1d0 [ 253.714827][ T9853] ? __pfx_filename_setxattr+0x10/0x10 [ 253.720343][ T9853] ? srso_alias_return_thunk+0x5/0xfbef5 [ 253.726016][ T9853] ? do_getname+0x191/0x390 [ 253.730558][ T9853] path_setxattrat+0x1ff/0x3b0 [ 253.735372][ T9853] ? __pfx_path_setxattrat+0x10/0x10 [ 253.740718][ T9853] ? do_sys_openat2+0x1b4/0x1e0 [ 253.745603][ T9853] ? srso_alias_return_thunk+0x5/0xfbef5 [ 253.751321][ T9853] ? __x64_sys_openat+0x12d/0x210 [ 253.756377][ T9853] ? srso_alias_return_thunk+0x5/0xfbef5 [ 253.762058][ T9853] ? xfd_validate_state+0x129/0x190 [ 253.767420][ T9853] __x64_sys_setxattr+0xc6/0x140 [ 253.772479][ T9853] ? do_syscall_64+0x90/0xf80 [ 253.777201][ T9853] ? srso_alias_return_thunk+0x5/0xfbef5 [ 253.782870][ T9853] ? lockdep_hardirqs_on+0x78/0x100 [ 253.788100][ T9853] do_syscall_64+0x10b/0xf80 [ 253.792720][ T9853] ? irqentry_exit+0x133/0x650 [ 253.797514][ T9853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.803438][ T9853] RIP: 0033:0x7f438379c819 [ 253.807999][ T9853] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 253.827898][ T9853] RSP: 002b:00007f43846a3028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 253.836375][ T9853] RAX: ffffffffffffffda RBX: 00007f4383a15fa0 RCX: 00007f438379c819 [ 253.844383][ T9853] RDX: 0000200000001400 RSI: 00002000000001c0 RDI: 0000200000000380 [ 253.852550][ T9853] RBP: 00007f4383832c91 R08: 0000000000000000 R09: 0000000000000000 [ 253.860567][ T9853] R10: 0000000000000835 R11: 0000000000000246 R12: 0000000000000000 [ 253.868589][ T9853] R13: 00007f4383a16038 R14: 00007f4383a15fa0 R15: 00007fff6ef73428 [ 253.876749][ T9853] [ 253.879780][ T9853] Modules linked in: [ 253.884682][ T9853] ---[ end trace 0000000000000000 ]--- [ 253.920124][ T9853] RIP: 0010:__hfsplus_setxattr+0x2437/0x2ab0 [ 253.933233][ T9853] Code: 30 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 6a 02 00 00 48 8b 5b 30 b8 ff ff 37 00 48 c1 e0 2a 48 8d 7b 08 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 34 02 00 00 48 8b 5b 08 be 08 00 00 00 4c 89 5c [ 253.965064][ T9853] RSP: 0018:ffffc9000529f480 EFLAGS: 00010212 [ 253.973092][ T9853] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc90006c59000 [ 253.990584][ T9853] RDX: 0000000000000001 RSI: ffffffff82f7efa9 RDI: 0000000000000008 [ 254.011603][ T9853] RBP: ffff888020b10000 R08: 0000000000000005 R09: 0000000000000000 [ 254.054544][ T9853] R10: 0000000000000000 R11: ffff88803311a000 R12: ffff8880340be000 [ 254.076478][ T9853] R13: 0000000000000000 R14: 0000000000000000 R15: ffffc9000529f560 [ 254.087414][ T9853] FS: 00007f43846a36c0(0000) GS:ffff88812432c000(0000) knlGS:0000000000000000 [ 254.100430][ T9853] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 254.117446][ T9853] CR2: 00007f5e1ea1d000 CR3: 0000000027733000 CR4: 0000000000350ef0 [ 254.141952][ T9853] Kernel panic - not syncing: Fatal exception [ 254.148822][ T9853] Kernel Offset: disabled [ 254.153198][ T9853] Rebooting in 86400 seconds..