last executing test programs: 8m1.728598771s ago: executing program 2 (id=752): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x100, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'y)\x00'}, 0x0, 0x1, {0x0}, 0x2ea}) 7m59.085057354s ago: executing program 2 (id=760): syz_mount_image$jfs(&(0x7f0000000400), &(0x7f0000000140)='./file0\x00', 0x1000080, &(0x7f0000000f80)=ANY=[], 0x11, 0x5fea, &(0x7f00000090c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) symlinkat(&(0x7f00000001c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file6\x00') 7m52.458073979s ago: executing program 2 (id=794): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000380)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f00000000c0)='O', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000d00)='\t', 0x1}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) 7m44.653682799s ago: executing program 2 (id=829): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="6e6c733d63703836302c6465636f6d706f73652c747970653de7d1b73f2c666f7263652c6e6f626172726965722c6e6f6465636f6d706f73652c009b6040155c7209e54a134e5e27fc0b97987830ddc20ac1835cc4bf44129f88db"], 0x23, 0x6e6, &(0x7f0000000600)="$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") r0 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') pread64(r0, &(0x7f0000002240)=""/237, 0xed, 0x4eb) 7m41.199140848s ago: executing program 2 (id=843): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x12, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x0, &(0x7f0000000080)=0x1, 0x0, 0x4) 7m37.592000089s ago: executing program 2 (id=861): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0xfff3}}}, 0x24}}, 0x0) 7m22.381181967s ago: executing program 32 (id=861): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0xfff3}}}, 0x24}}, 0x0) 1.561340643s ago: executing program 3 (id=5675): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r0, r0, 0x0, 0x200000) 1.370452759s ago: executing program 1 (id=5677): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b173818016fb5baa562fffd0000b0", 0x10) 1.3563227s ago: executing program 4 (id=5678): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb8, 0xb8, 0x2, [@enum={0x0, 0xa, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @struct={0x0, 0x3, 0x0, 0x4, 0x0, 0x0, [{}, {}, {0x0, 0x1}]}]}}, 0x0, 0xd2}, 0x20) r0 = syz_open_dev$midi(&(0x7f0000000000), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000180)) 1.216873981s ago: executing program 1 (id=5680): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x2000082, &(0x7f0000000f40)={[{@utf8no}, {@utf8}, {@shortname_win95}, {@uni_xlateno}, {@utf8no}, {@shortname_mixed}, {@fat=@uid}, {@shortname_mixed}, {@fat=@errors_remount}, {@uni_xlateno}, {@shortname_winnt}, {@uni_xlate}, {@shortname_win95}, {@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'cp1251'}}]}, 0x25, 0x35d, &(0x7f0000001100)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 1.177479015s ago: executing program 3 (id=5681): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000000)) 1.125428279s ago: executing program 4 (id=5682): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)={0x14, r1, 0xc8036ab6d6cbef07, 0x70bd28, 0xfffffffc}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x45080) 1.025174127s ago: executing program 4 (id=5684): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, &(0x7f0000000080)) 985.62713ms ago: executing program 3 (id=5685): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000100)=@raw={'raw\x00', 0xc01, 0x3, 0x1230, 0x10e8, 0x5002004a, 0xa, 0x10e8, 0x0, 0x1208, 0x3c8, 0x3c8, 0x1208, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @loopback, 0x0, 0x0, 'syzkaller0\x00', 'syzkaller0\x00'}, 0x60, 0x10a0, 0x10e8, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x0, {@ipv6=@private0, 'wg2\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "53f99237f41c832fc8969da1f2b7a86ddedeb7587f1590839a7a3acebc0f"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x1290) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000003440), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x3a}) 871.036049ms ago: executing program 4 (id=5687): io_setup(0x8, &(0x7f00000001c0)=0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk', 0x1, 0x0) io_submit(r0, 0x1, &(0x7f0000000400)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000300)="8799", 0x2, 0x4}]) 750.30129ms ago: executing program 0 (id=5688): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000480)=@delqdisc={0x84, 0x25, 0x100, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0x0, 0xffe5}, {0x10, 0xd}}, [@TCA_STAB={0x50, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x0, 0x0, 0x80, 0x2, 0xbaa, 0x2, 0x3}}, {0xa, 0x2, [0x6, 0x3, 0x5]}}, {{0x1c, 0x1, {0x8, 0xa4, 0x730e, 0x9, 0x2, 0x4, 0x9, 0x1}}, {0x6, 0x2, [0x2]}}]}, @TCA_RATE={0x6, 0x5, {0x8, 0x6}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xfffff9c7}]}, 0x84}, 0x1, 0x0, 0x0, 0x40004}, 0x4004) r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB='8\x00'], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0) 748.911949ms ago: executing program 3 (id=5696): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x200000, &(0x7f00000023c0)=ANY=[], 0x13, 0x70a, &(0x7f0000000740)="$eJzs3U1sHGcZAOB31uv12kDqtGlSUKRajVQQFokd44K5EBACHypUlQPnVeI0ljdOZW+REyHi8HPn0APiVA65VRxQuUeCM1UlVImTDxwqIfVATz4gLZrZmd21d727jh3bheexZuab+X7nnZ2Z/ZE1AfzfWp6N8pNIYnn29a10fecf/25mWtn1iKhERCmi3FpEsp5X/eLluJEuv5xuzLclB/Xz7urSmx9/tvNJa62cT1n5ZFC9Piq9m7bzKWYiYixf9qge1OIH+7vf097Ng9obWWcP04BdyZcRvz9Sq3BkzR7b7bz3/57NB1U/zHkLnFFJ677ZYzpiKr91TkRxV2y9Efhc2z7tAQAAAMBhTR6+ynO7sRtbce5ZDAcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+V+XP/0/yqVSkZyIpnv9fybdFnj6Dhj8I8aOJ1vLJsx8MAAAAAAAAADxzL+/GbmzFuWK9mWS/+b/S9Rv/F+Kd2IyV2IirsRW1aEQjNmI+Iqa7Gqps1RqNjfmsZsSFATWvx4fdNSsR0WhsXD94jDeOe6cBAAAAAAAA4GyrDslfG+/d9stY7vz+DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAZ0ESMdZaZNOFIj0dpXJEVIty2xEfRkTldEd7KEm/jU9OfhwAAABwJNW9q0l1hDrPPYzd2IpzxXozyT7zX8w+L1fjnViPRqxGI+qxErfyz9Dpp/7SzuOF+s7jhbvp1Nvu9z491NCzFqP13UP/nl/KSkzG7VjNtlyNm5FEM1PKW3lp5/FCurzbf1yP0jEl380NGM1YV/pWOrv0QZb+7d5vEcqH2sWnVDowZzrLHW9HZC4fW1rjfBGB/pEYenTKA3uaj1L7m58Lg3vqH/NHfboc7ySn9pXq+83NqdgfietRah+hi4MjEfHVP7//0zv19bU7tzdnz84u9fVwaIl2JL5ZXGY6kbg0ciQmj3vgx2h8xHJz2b6/2F5fjh/GT2I2Pp14IzZiNX4WtWjEykyRX8tfz+l8enCkPprqXntj2EjSc3Kmff3qN6aZ2DOmmIkfZKlavJId03OxGknci4iVeC37ux7z7atB5wi/OMJZXxrhStvlyteyRTtMMeC18cfRmjwuaVzPd8W1+5o7neV1b+lE6fm+USrudb3Xxurwm0r5K3kibeFXA+8PJ21/JOa7IvHCQa+XVkj/0Eznm/X1tY07tbdH7O/VfJmeR785U3eJSjyK56Oa79z5bJ5k59RcdvRfaB/nvfGq5L+4tJT25/3od+16rTP1x3Evbu05U78Vi7EYS1lLF7PS4z13rDTvUrul7ryFLC99p1Vu/7DT/X7rXtRb74cAONumvj5VmfzX5N8m35v89eSdyder35/49sTlSoz/dfw75bmxV0uXkz/Fe/GLzud/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg6W3ef7BWq9dXNvonSv2zksG1avVm8SCxAWX2JJL8UTkjFE427z9oDm1wcGIiH94hav3nsH09jJEKF49RG1h4Ih6s1WaOtMuDE8n2/uNVHX4siqc8jdBF0hPwtPJTj7noubNl/JmE5WiJmeNrsHjBdmWN/ur955dalZtJn+M1FhH9ag25cLSecXWWn+MHDHGtcffta5v3H3xj9W7trZW3VtbHFxeX5pYWX1u4dnu1vjLXmndVOJGH3wInofvtRFslIl4eXtfNHwAAAAAAAAAAAE7HSfwvxGnvIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPD5tjwb5SeRxPzc1bl0fefxQj2dinSnZDkiShGR/Dwi+UvEjWhNMd3VXHJQP++uLr358Wc7n3TaKsdYq3wpYvvAeqPZzqeYiUibzZbH1d7N4e1VOsmJPtlJOzJpwK4UgYPT9t8AAAD//ydr7i4=") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.current\x00', 0x275a, 0x0) rename(&(0x7f0000000240)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 659.345816ms ago: executing program 1 (id=5689): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, 'xfrm0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x4, @local, 'pimreg0\x00'}}) 658.607387ms ago: executing program 0 (id=5690): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x24, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xb0}}, 0x0) 625.460909ms ago: executing program 4 (id=5691): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000200)={[{@errors_remount}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x10}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@nojournal_checksum}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406441, &(0x7f0000000280)={0x34, 0x0, 0x3, 0xffffffffffffff91, 0x0, 0x0, 0x0, 0xfffffffffffffcb3, 0x0}) 452.763933ms ago: executing program 1 (id=5692): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r1, 0x1, 0x6, @local}, 0x10) 452.013473ms ago: executing program 0 (id=5701): r0 = getpgrp(0x0) r1 = syz_pidfd_open(r0, 0x0) pidfd_send_signal(r1, 0x0, &(0x7f0000000140)={0x0, 0x0, 0xfffffffb}, 0x0) 392.975098ms ago: executing program 3 (id=5693): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r0, &(0x7f0000000580)=ANY=[], 0x8) 391.776678ms ago: executing program 0 (id=5694): syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) close(r0) 236.045411ms ago: executing program 1 (id=5695): syz_mount_image$hfs(&(0x7f0000002c80), &(0x7f00000003c0)='./bus\x00', 0x4680, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYRESHEX], 0xfd, 0x2a1, &(0x7f0000000100)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) 227.840001ms ago: executing program 4 (id=5697): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0x7c}}, 0x8050) 125.28993ms ago: executing program 0 (id=5698): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x1c, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x17}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x324}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 125.17396ms ago: executing program 3 (id=5699): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=@base={0x12, 0x2, 0x8, 0x2}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@map=r0, 0x7, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 3.23069ms ago: executing program 0 (id=5700): syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x804008, &(0x7f0000000100)=ANY=[], 0x5a, 0x212, &(0x7f0000000440)="$eJzs3D1v00Acx/Gf40BIQTyKBzFVQkIsJNBWqrLRhY03gMRQtaGqcKE0LI2QoG+CnZWJl8A7YWVoBzYmDp19AcdJ8cUhcYS/H6mNY9/P/3Pbs32NEgGorEfx90Bn3HNjzLtlSU+fSKqV2jUAM2bc408DoHpChj5QUScbYXz9/xJIX7+/3Tp2X+c87x9ONpJJgp0/HKfyzdMCzzL5oyB+vF0fzi9JOj8Sro/ev3xM8ncz9S/49t/VX8rkG9755Pjv3RnOX5R0SdJlSVckXZV0TYp3e11uQ6r+dqb+rWTzkWc3AAAAAAD4Kzv7bA2e+E76s/mWT8sHY9fa2fPz3ag7fquHWpJ/6NV49ADPuvorBcsP8quZPuVyL7g2XL619SraLtgHoKhaevznGxlA/uNfY/+dFU45/utx/kPBNFBtvcP+i80o6h7MbUGaNGUvlcWLNgcL33Ibf7IL+pG8MjL7n8bgZGrXLPukAtd4br8v5bd5n9OmqYOe8djP3BdeP07u3mZQwl6U0mv60+4wyI7T+tAg+pz6Q4oiE/b2/8Fx2R2a8PeJIizj7ARgltpv9vbbvcP+/d29zZ3uTvfl2nqns762utJpx7fl7akm5wAW2Z+Lftk9AQAAAAAAAAAAAAAARd2QdHPy2Kkf7wEAAABgcU3+xqDGxG8nKvsYAQAAAAAAAAAAAAD43/0KAAD//3hpPUA=") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r0, 0x0, 0x0) 0s ago: executing program 1 (id=5702): io_setup(0x8, &(0x7f00000001c0)=0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk', 0x1, 0x0) io_submit(r0, 0x1, &(0x7f0000000400)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000300)="8799", 0x2, 0x4}]) kernel console output (not intermixed with test programs): arsing failed [ 566.298826][ T5856] hid-steam 0003:28DE:1142.004B: steam_probe:parse of hid interface failed [ 566.320904][ T5856] hid-steam: probe of 0003:28DE:1142.004B failed with error -22 [ 566.425254][ T5856] usb 2-1: USB disconnect, device number 32 [ 567.487133][T16832] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4562'. [ 567.872770][T16836] loop3: detected capacity change from 0 to 4096 [ 567.919739][T16836] NILFS (loop3): invalid segment: Checksum error in segment payload [ 567.965446][T16836] NILFS (loop3): trying rollback from an earlier position [ 568.046076][T16836] NILFS (loop3): recovery complete [ 568.084861][T16841] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 568.581994][T16857] loop3: detected capacity change from 0 to 512 [ 568.614753][T16857] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 568.658701][T16861] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4574'. [ 568.730600][T16857] EXT4-fs (loop3): 1 truncate cleaned up [ 568.797586][T16857] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 568.975214][T16865] loop1: detected capacity change from 0 to 4096 [ 569.040096][T16865] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 569.080299][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 569.278806][T16872] loop4: detected capacity change from 0 to 4096 [ 569.296247][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 569.300502][T16872] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 569.417980][T16872] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 569.425232][T16872] ntfs3: loop4: Failed to load $Extend (-22). [ 569.450214][T16872] ntfs3: loop4: Failed to initialize $Extend. [ 569.507470][ T28] audit: type=1800 audit(1755789157.996:157): pid=16872 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4588" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=33 res=0 errno=0 [ 569.549611][ C1] vkms_vblank_simulate: vblank timer overrun [ 569.990701][T16896] loop3: detected capacity change from 0 to 256 [ 570.265563][T16908] process 'syz.3.4597' launched 'éq‰Y’3aK' with NULL argv: empty string added [ 570.677062][T16925] loop1: detected capacity change from 0 to 1024 [ 570.707222][T16925] EXT4-fs: Ignoring removed nobh option [ 570.712841][T16925] EXT4-fs: Ignoring removed bh option [ 570.766074][T16925] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 570.850288][T16925] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 571.012062][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 571.159843][T16944] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4612'. [ 571.187221][T16944] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4612'. [ 571.340521][T16950] loop1: detected capacity change from 0 to 512 [ 571.354867][T16950] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 571.388866][T16950] EXT4-fs (loop1): 1 truncate cleaned up [ 571.395698][T16950] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 571.563446][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 571.620619][ T7857] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 571.700266][T16940] loop4: detected capacity change from 0 to 40427 [ 571.731692][T16940] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x35f7 [ 571.747581][T16940] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x7ffff [ 571.769483][T16940] F2FS-fs (loop4): Image doesn't support compression [ 571.780565][T16940] F2FS-fs (loop4): invalid crc value [ 571.806488][T16940] F2FS-fs (loop4): Found nat_bits in checkpoint [ 571.832068][T16955] loop1: detected capacity change from 0 to 4096 [ 571.848713][ T7857] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 571.866432][T16955] NILFS (loop1): invalid segment: Checksum error in segment payload [ 571.874457][T16955] NILFS (loop1): trying rollback from an earlier position [ 571.886639][ T7857] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 571.926287][ T7857] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 571.942443][T16955] NILFS (loop1): recovery complete [ 571.964554][T16957] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 571.970285][T16940] F2FS-fs (loop4): Start checkpoint disabled! [ 571.986026][ T7857] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.001754][ T7857] usb 4-1: config 0 descriptor?? [ 572.018960][T16940] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 572.129865][T16940] syz.4.4611: attempt to access beyond end of device [ 572.129865][T16940] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 572.145823][ T28] audit: type=1800 audit(1755789160.616:158): pid=16940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4611" name="bus" dev="loop4" ino=10 res=0 errno=0 [ 572.296662][T16959] loop1: detected capacity change from 0 to 512 [ 572.327292][T16959] EXT4-fs: Ignoring removed orlov option [ 572.332604][T16961] bridge0: port 2(bridge_slave_1) entered disabled state [ 572.358612][T16959] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 572.404854][T16959] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 572.421812][T16959] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2244: inode #15: comm syz.1.4619: corrupted in-inode xattr: e_value size too large [ 572.438130][ T2945] F2FS-fs (loop4): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_write+0x516/0x19c0 [ 572.453613][ T2945] F2FS-fs (loop4): invalid blkaddr: 4097, type: 6, run fsck to fix. [ 572.461880][T16959] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.4619: couldn't read orphan inode 15 (err -117) [ 572.477161][ T7857] hid (null): report_id 0 is invalid [ 572.487566][ T2945] kworker/u4:8: attempt to access beyond end of device [ 572.487566][ T2945] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 572.505099][ T7857] hid-steam 0003:28DE:1142.004C: report_id 0 is invalid [ 572.512310][ T7857] hid-steam 0003:28DE:1142.004C: item 0 1 1 8 parsing failed [ 572.521060][ T7857] hid-steam 0003:28DE:1142.004C: steam_probe:parse of hid interface failed [ 572.530024][ T2945] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 572.537362][ T7857] hid-steam: probe of 0003:28DE:1142.004C failed with error -22 [ 572.553835][T16959] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 572.569895][ T2945] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 572.730747][ T5856] usb 4-1: USB disconnect, device number 32 [ 572.821962][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 573.554840][T16986] loop4: detected capacity change from 0 to 4096 [ 573.575767][T16988] loop3: detected capacity change from 0 to 512 [ 573.584902][T16988] EXT4-fs: Ignoring removed orlov option [ 573.602472][T16988] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 573.603174][T16986] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 573.629399][T16988] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 573.639834][T16988] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2244: inode #15: comm syz.3.4633: corrupted in-inode xattr: e_value size too large [ 573.672044][T16988] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.4633: couldn't read orphan inode 15 (err -117) [ 573.725311][ T23] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 573.751372][T16988] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 573.865485][ T8059] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 573.913774][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 573.945492][ T23] usb 1-1: too many endpoints for config 0 interface 0 altsetting 144: 127, using maximum allowed: 30 [ 573.986208][ T23] usb 1-1: config 0 interface 0 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 574.016964][ T23] usb 1-1: config 0 interface 0 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0 [ 574.054961][ T23] usb 1-1: config 0 interface 0 altsetting 144 has 1 endpoint descriptor, different from the interface descriptor's value: 127 [ 574.096222][ T23] usb 1-1: config 0 interface 0 has no altsetting 0 [ 574.113162][ T23] usb 1-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 574.132967][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.173121][ T23] usb 1-1: config 0 descriptor?? [ 574.706122][ T9] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 574.812296][ T23] usb 1-1: string descriptor 0 read error: -71 [ 574.825135][ T23] uclogic 0003:5543:004D.004D: failed retrieving string descriptor #200: -71 [ 574.837758][ T23] uclogic 0003:5543:004D.004D: failed retrieving pen parameters: -71 [ 574.845903][ T23] uclogic 0003:5543:004D.004D: failed probing pen v2 parameters: -71 [ 574.854326][ T23] uclogic 0003:5543:004D.004D: failed probing parameters: -71 [ 574.866696][ T23] uclogic: probe of 0003:5543:004D.004D failed with error -71 [ 574.890133][ T23] usb 1-1: USB disconnect, device number 39 [ 574.898133][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 574.914169][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 574.924511][ T9] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 574.939959][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.951582][ T9] usb 5-1: config 0 descriptor?? [ 575.323106][T17008] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4650'. [ 575.398928][ T9] hid (null): report_id 0 is invalid [ 575.418728][ T9] hid-steam 0003:28DE:1142.004E: report_id 0 is invalid [ 575.425720][ T9] hid-steam 0003:28DE:1142.004E: item 0 1 1 8 parsing failed [ 575.457353][ T9] hid-steam 0003:28DE:1142.004E: steam_probe:parse of hid interface failed [ 575.476416][ T9] hid-steam: probe of 0003:28DE:1142.004E failed with error -22 [ 575.628292][T17014] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4646'. [ 575.645310][ T23] usb 5-1: USB disconnect, device number 24 [ 575.656225][T17014] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4646'. [ 576.102782][T17030] loop1: detected capacity change from 0 to 256 [ 576.744916][T17048] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4662'. [ 576.933772][T17054] loop4: detected capacity change from 0 to 256 [ 577.121735][T17056] loop1: detected capacity change from 0 to 47 [ 577.175295][T17056] MINIX-fs: deleted inode referenced: 9 [ 577.204235][T17056] MINIX-fs: deleted inode referenced: 9 [ 577.222693][T17056] MINIX-fs: deleted inode referenced: 9 [ 577.245489][T17056] MINIX-fs: deleted inode referenced: 9 [ 577.401853][T17060] loop1: detected capacity change from 0 to 512 [ 577.468522][T17060] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 577.527841][T17060] EXT4-fs error (device loop1): ext4_validate_block_bitmap:430: comm syz.1.4667: bg 0: block 5: invalid block bitmap [ 577.616241][T17060] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6642: Corrupt filesystem [ 577.647447][T17060] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.4667: invalid indirect mapped block 3 (level 2) [ 577.677487][T17060] EXT4-fs (loop1): 2 truncates cleaned up [ 577.684484][T17060] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 577.732993][T17060] EXT4-fs warning (device loop1): ext4_empty_dir:3147: inode #2: comm syz.1.4667: directory missing '.' [ 577.791228][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 578.934200][T17082] loop1: detected capacity change from 0 to 40427 [ 578.959561][T17082] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x35f7 [ 578.988138][T17082] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x7ffff [ 579.015365][T17082] F2FS-fs (loop1): Image doesn't support compression [ 579.037707][T17082] F2FS-fs (loop1): invalid crc value [ 579.061176][T17082] F2FS-fs (loop1): Found nat_bits in checkpoint [ 579.179036][T17082] F2FS-fs (loop1): Start checkpoint disabled! [ 579.201297][T17082] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 579.310266][ T28] audit: type=1800 audit(1755789167.796:159): pid=17082 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4678" name="bus" dev="loop1" ino=10 res=0 errno=0 [ 579.312610][T17082] syz.1.4678: attempt to access beyond end of device [ 579.312610][T17082] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 579.484904][ T3472] F2FS-fs (loop1): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_write+0x516/0x19c0 [ 579.506092][ T7857] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 579.535367][ T3472] F2FS-fs (loop1): invalid blkaddr: 4097, type: 6, run fsck to fix. [ 579.553428][ T3472] kworker/u4:11: attempt to access beyond end of device [ 579.553428][ T3472] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 579.573015][ T3472] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 579.581546][ T3472] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 579.709920][ T7857] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 579.737919][ T7857] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 579.753435][ T7857] usb 1-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 579.768113][ T7857] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.779227][T17108] bridge0: port 2(bridge_slave_1) entered disabled state [ 579.804220][ T7857] usb 1-1: config 0 descriptor?? [ 579.931056][T17112] loop4: detected capacity change from 0 to 24 [ 579.951409][T17112] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 579.985452][T17112] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 580.236264][ T7857] cypress 0003:04B4:DE61.004F: unknown main item tag 0x0 [ 580.248553][ T7857] cypress 0003:04B4:DE61.004F: unknown main item tag 0x0 [ 580.257900][ T7857] cypress 0003:04B4:DE61.004F: unknown main item tag 0x0 [ 580.265054][ T7857] cypress 0003:04B4:DE61.004F: unknown main item tag 0x0 [ 580.291980][ T7857] cypress 0003:04B4:DE61.004F: unknown main item tag 0x0 [ 580.318760][ T7857] cypress 0003:04B4:DE61.004F: unknown main item tag 0x0 [ 580.349506][ T7857] cypress 0003:04B4:DE61.004F: unknown main item tag 0x0 [ 580.363587][ T7857] cypress 0003:04B4:DE61.004F: hidraw0: USB HID v0.00 Device [HID 04b4:de61] on usb-dummy_hcd.0-1/input0 [ 580.489137][ T7857] usb 1-1: USB disconnect, device number 40 [ 580.520967][T17126] fido_id[17126]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 580.614680][T17132] loop4: detected capacity change from 0 to 512 [ 580.624678][T17132] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 580.647711][T17132] EXT4-fs error (device loop4): ext4_validate_block_bitmap:430: comm syz.4.4699: bg 0: block 5: invalid block bitmap [ 580.661691][T17132] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6642: Corrupt filesystem [ 580.672016][T17132] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.4699: invalid indirect mapped block 3 (level 2) [ 580.686477][T17132] EXT4-fs (loop4): 2 truncates cleaned up [ 580.692998][T17132] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 580.730296][T17132] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #2: comm syz.4.4699: directory missing '.' [ 580.786787][ T8059] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 581.245606][T17149] loop3: detected capacity change from 0 to 64 [ 581.262803][T17149] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 581.620955][T17160] loop3: detected capacity change from 0 to 164 [ 581.650914][T17139] loop4: detected capacity change from 0 to 40427 [ 581.654638][T17160] rock: directory entry would overflow storage [ 581.678684][T17139] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 581.680562][T17160] rock: sig=0x66, size=4, remaining=3 [ 581.716851][T17139] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 581.744218][T17139] F2FS-fs (loop4): invalid crc value [ 581.787953][T17139] F2FS-fs (loop4): Found nat_bits in checkpoint [ 581.790333][T17160] rock: directory entry would overflow storage [ 581.840571][T17160] rock: sig=0x66, size=4, remaining=3 [ 581.872508][T17160] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 581.880539][T17139] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 581.895278][T17139] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 582.359158][T17184] loop4: detected capacity change from 0 to 2048 [ 582.379898][T17184] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 582.468695][ T28] audit: type=1800 audit(1755789170.956:160): pid=17184 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4719" name="file1" dev="loop4" ino=1367 res=0 errno=0 [ 582.675788][T17195] loop4: detected capacity change from 0 to 164 [ 582.689251][T17195] rock: directory entry would overflow storage [ 582.710649][T17195] rock: sig=0x66, size=4, remaining=3 [ 582.755372][T17195] rock: directory entry would overflow storage [ 582.769114][T17195] rock: sig=0x66, size=4, remaining=3 [ 582.774810][T17195] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 582.912252][T17203] loop4: detected capacity change from 0 to 64 [ 582.929034][T17203] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing [ 583.186861][T17209] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 583.243935][T17213] loop1: detected capacity change from 0 to 2048 [ 583.277265][T17213] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 583.377999][ T28] audit: type=1800 audit(1755789171.856:161): pid=17213 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4736" name="file1" dev="loop1" ino=1367 res=0 errno=0 [ 583.847643][T17233] loop1: detected capacity change from 0 to 64 [ 583.862075][T17233] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing [ 584.094801][T17218] loop3: detected capacity change from 0 to 40427 [ 584.133141][T17218] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x35f7 [ 584.165404][T17218] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x7ffff [ 584.226409][T17218] F2FS-fs (loop3): Image doesn't support compression [ 584.268386][T17218] F2FS-fs (loop3): invalid crc value [ 584.303102][T17218] F2FS-fs (loop3): Found nat_bits in checkpoint [ 584.337566][T17249] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 584.390414][T17218] F2FS-fs (loop3): Start checkpoint disabled! [ 584.427305][T17218] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 584.527580][ T28] audit: type=1800 audit(1755789173.016:162): pid=17218 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4739" name="bus" dev="loop3" ino=10 res=0 errno=0 [ 584.576460][T17218] syz.3.4739: attempt to access beyond end of device [ 584.576460][T17218] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 584.823455][ T2981] F2FS-fs (loop3): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_write+0x516/0x19c0 [ 584.834969][ T2981] F2FS-fs (loop3): invalid blkaddr: 4097, type: 6, run fsck to fix. [ 584.848167][ T2981] kworker/u4:9: attempt to access beyond end of device [ 584.848167][ T2981] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 584.868452][ T2981] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 584.876664][ T2981] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 585.142105][T17274] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 585.455357][T17283] loop3: detected capacity change from 0 to 64 [ 585.464286][T17283] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 586.013550][T17307] loop4: detected capacity change from 0 to 512 [ 586.052324][T17307] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 586.340064][ T28] audit: type=1326 audit(1755789174.826:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17315 comm="syz.1.4784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f885198ebe9 code=0x7ffc0000 [ 586.396094][ T28] audit: type=1326 audit(1755789174.826:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17315 comm="syz.1.4784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f885198ebe9 code=0x7ffc0000 [ 586.455737][ T28] audit: type=1326 audit(1755789174.856:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17315 comm="syz.1.4784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f885198ebe9 code=0x7ffc0000 [ 586.516279][ T28] audit: type=1326 audit(1755789174.856:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17315 comm="syz.1.4784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f885198ebe9 code=0x7ffc0000 [ 586.561194][ T28] audit: type=1326 audit(1755789174.856:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17315 comm="syz.1.4784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f885198ebe9 code=0x7ffc0000 [ 586.604336][ T28] audit: type=1326 audit(1755789174.866:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17315 comm="syz.1.4784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f885198ebe9 code=0x7ffc0000 [ 586.646876][ T28] audit: type=1326 audit(1755789174.866:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17315 comm="syz.1.4784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f885198ebe9 code=0x7ffc0000 [ 586.690264][ T28] audit: type=1326 audit(1755789174.866:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17315 comm="syz.1.4784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f885198ebe9 code=0x7ffc0000 [ 587.141016][T17319] loop3: detected capacity change from 0 to 32768 [ 587.189731][T17319] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.4787 (17319) [ 587.223032][T17319] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 587.252136][T17319] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 587.296237][T17319] BTRFS info (device loop3): setting nodatacow, compression disabled [ 587.304403][T17319] BTRFS info (device loop3): max_inline at 0 [ 587.362425][T17319] BTRFS info (device loop3): enabling disk space caching [ 587.370561][T17319] BTRFS info (device loop3): turning off barriers [ 587.394471][T17319] BTRFS info (device loop3): turning on flush-on-commit [ 587.417152][T17319] BTRFS info (device loop3): doing ref verification [ 587.424587][T17319] BTRFS info (device loop3): force clearing of disk cache [ 587.451613][T17319] BTRFS info (device loop3): enabling ssd optimizations [ 587.466190][T17319] BTRFS info (device loop3): max_inline at 4096 [ 587.481172][T17319] BTRFS info (device loop3): disk space caching is enabled [ 587.637147][T17319] BTRFS info (device loop3): auto enabling async discard [ 587.674211][T17319] BTRFS info (device loop3): rebuilding free space tree [ 587.722127][T17319] BTRFS info (device loop3): disabling free space tree [ 587.738711][T17319] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 587.765059][T17319] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 588.066113][ T5855] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 588.074893][ T5785] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 588.289717][ T5855] usb 1-1: Using ep0 maxpacket: 32 [ 588.311511][T17384] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4811'. [ 588.326404][ T5855] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 588.354931][ T5855] usb 1-1: config 0 has no interface number 0 [ 588.398926][ T5855] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 588.436138][ T5855] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.444859][ T5855] usb 1-1: Product: syz [ 588.478949][ T5855] usb 1-1: Manufacturer: syz [ 588.483593][ T5855] usb 1-1: SerialNumber: syz [ 588.521143][ T5855] usb 1-1: config 0 descriptor?? [ 588.557494][ T5855] smsc95xx v2.0.0 [ 588.930774][T17377] loop1: detected capacity change from 0 to 40427 [ 589.001700][T17377] F2FS-fs (loop1): Found nat_bits in checkpoint [ 589.136539][T17377] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 589.161139][ T5855] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 589.173361][ T5855] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 589.186150][ T5855] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 589.205113][ T5855] smsc95xx: probe of 1-1:0.67 failed with error -71 [ 589.216332][T17377] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 589.227090][ T5855] usb 1-1: USB disconnect, device number 41 [ 589.247765][T17407] loop3: detected capacity change from 0 to 512 [ 589.262009][T17407] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 589.351422][ T5786] syz-executor: attempt to access beyond end of device [ 589.351422][ T5786] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 589.373943][ T5786] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 589.523371][ T28] audit: type=1326 audit(1755789178.006:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17409 comm="syz.3.4822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ffdb8ebe9 code=0x7ffc0000 [ 589.560274][ T28] audit: type=1326 audit(1755789178.006:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17409 comm="syz.3.4822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ffdb8ebe9 code=0x7ffc0000 [ 589.584984][ T28] audit: type=1326 audit(1755789178.046:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17409 comm="syz.3.4822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f5ffdb8ebe9 code=0x7ffc0000 [ 589.607827][ T28] audit: type=1326 audit(1755789178.046:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17409 comm="syz.3.4822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ffdb8ebe9 code=0x7ffc0000 [ 589.632440][ T28] audit: type=1326 audit(1755789178.046:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17409 comm="syz.3.4822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ffdb8ebe9 code=0x7ffc0000 [ 589.655198][ T28] audit: type=1326 audit(1755789178.066:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17409 comm="syz.3.4822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f5ffdb8ebe9 code=0x7ffc0000 [ 589.744858][ T28] audit: type=1326 audit(1755789178.066:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17409 comm="syz.3.4822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ffdb8ebe9 code=0x7ffc0000 [ 589.848025][ T28] audit: type=1326 audit(1755789178.066:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17409 comm="syz.3.4822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ffdb8ebe9 code=0x7ffc0000 [ 590.057342][T17423] loop1: detected capacity change from 0 to 512 [ 590.065707][T17423] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 590.160269][ T9] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 590.226344][ T5856] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 590.367859][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 590.380057][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 590.391754][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.429125][ T9] usb 4-1: config 0 descriptor?? [ 590.439058][ T5856] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 590.462056][ T5856] usb 5-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 590.482889][T17433] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4834'. [ 590.486154][ T5856] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.520342][ T5856] usb 5-1: config 0 descriptor?? [ 590.848050][ T9] logitech 0003:046D:C295.0050: unbalanced delimiter at end of report description [ 590.858655][ T9] logitech 0003:046D:C295.0050: parse failed [ 590.864888][ T9] logitech: probe of 0003:046D:C295.0050 failed with error -22 [ 590.951758][ T5856] hid_mf 0003:0079:1846.0051: hidraw0: USB HID v0.00 Device [HID 0079:1846] on usb-dummy_hcd.4-1/input0 [ 590.976050][ T5856] hid_mf 0003:0079:1846.0051: Force feedback for HJZ Mayflash game controller adapters by Marcel Hasler [ 591.106236][ T7857] usb 4-1: USB disconnect, device number 33 [ 591.223373][ T5855] usb 5-1: USB disconnect, device number 25 [ 591.675073][T17461] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4845'. [ 591.820405][T17463] loop3: detected capacity change from 0 to 2048 [ 591.874647][T17463] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 592.887579][T17460] loop1: detected capacity change from 0 to 32768 [ 592.928340][T17460] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.4846 (17460) [ 592.986136][ T9] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 593.033503][T17460] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 593.088348][T17460] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 593.116044][T17460] BTRFS info (device loop1): setting nodatacow, compression disabled [ 593.136055][T17460] BTRFS info (device loop1): max_inline at 0 [ 593.142088][T17460] BTRFS info (device loop1): enabling disk space caching [ 593.186372][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 593.187020][T17460] BTRFS info (device loop1): turning off barriers [ 593.220249][T17460] BTRFS info (device loop1): turning on flush-on-commit [ 593.226627][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 593.246156][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 593.250175][T17460] BTRFS info (device loop1): doing ref verification [ 593.284245][T17460] BTRFS info (device loop1): force clearing of disk cache [ 593.286471][ T9] usb 4-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00 [ 593.314298][T17460] BTRFS info (device loop1): enabling ssd optimizations [ 593.334628][T17460] BTRFS info (device loop1): max_inline at 4096 [ 593.336258][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.354855][T17460] BTRFS info (device loop1): disk space caching is enabled [ 593.379204][ T9] usb 4-1: config 0 descriptor?? [ 593.665098][T17460] BTRFS info (device loop1): auto enabling async discard [ 593.724748][T17460] BTRFS info (device loop1): rebuilding free space tree [ 593.806302][ T9] lenovo 0003:17EF:6009.0052: hidraw0: USB HID v0.00 Device [HID 17ef:6009] on usb-dummy_hcd.3-1/input0 [ 593.822170][T17460] BTRFS info (device loop1): disabling free space tree [ 593.842302][T17460] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 593.880812][T17460] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 594.004867][ T9] usb 4-1: USB disconnect, device number 34 [ 594.360378][ T5786] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 594.375524][T17509] netlink: 'syz.4.4861': attribute type 1 has an invalid length. [ 594.689476][T17514] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4864'. [ 595.266175][ T23] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 595.456111][ T23] usb 1-1: Using ep0 maxpacket: 16 [ 595.468474][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 595.490610][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 595.516449][ T23] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 595.576037][ T23] usb 1-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 595.606762][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.631125][ T23] usb 1-1: config 0 descriptor?? [ 595.812742][T17542] overlayfs: missing 'lowerdir' [ 596.090980][ T23] ryos 0003:1E7D:31CE.0053: unbalanced collection at end of report description [ 596.116842][ T23] ryos 0003:1E7D:31CE.0053: parse failed [ 596.140638][ T23] ryos: probe of 0003:1E7D:31CE.0053 failed with error -22 [ 596.351608][T13540] usb 1-1: USB disconnect, device number 42 [ 596.656138][ T9] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 596.860222][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 596.871570][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 596.885414][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.900656][ T9] usb 2-1: config 0 descriptor?? [ 597.317612][ T9] logitech 0003:046D:C295.0054: unbalanced delimiter at end of report description [ 597.327461][ T9] logitech 0003:046D:C295.0054: parse failed [ 597.333527][ T9] logitech: probe of 0003:046D:C295.0054 failed with error -22 [ 597.532288][ T23] usb 2-1: USB disconnect, device number 33 [ 598.416372][ T9] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 598.510329][T17584] overlayfs: missing 'lowerdir' [ 598.610923][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 598.625514][T17589] netlink: 'syz.0.4900': attribute type 1 has an invalid length. [ 598.634061][ T9] usb 4-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 598.652753][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.673895][ T9] usb 4-1: config 0 descriptor?? [ 599.024069][T17582] loop1: detected capacity change from 0 to 32768 [ 599.137203][ T9] hid_mf 0003:0079:1846.0055: hidraw0: USB HID v0.00 Device [HID 0079:1846] on usb-dummy_hcd.3-1/input0 [ 599.172583][ T9] hid_mf 0003:0079:1846.0055: Force feedback for HJZ Mayflash game controller adapters by Marcel Hasler [ 599.332803][T17595] loop4: detected capacity change from 0 to 32768 [ 599.383269][ T9] usb 4-1: USB disconnect, device number 35 [ 599.397593][T17595] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 599.613946][ T8059] ocfs2: Unmounting device (7,4) on (node local) [ 599.711387][T17608] overlayfs: missing 'lowerdir' [ 600.546264][ T5856] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 600.650050][T17640] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4922'. [ 600.777856][ T5856] usb 2-1: Using ep0 maxpacket: 32 [ 600.791869][ T5856] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 600.801689][ T5856] usb 2-1: config 0 has no interface number 0 [ 600.818315][ T5856] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 600.830736][ T5856] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.855773][ T5856] usb 2-1: Product: syz [ 600.866069][ T5856] usb 2-1: Manufacturer: syz [ 600.870707][ T5856] usb 2-1: SerialNumber: syz [ 600.893014][ T5856] usb 2-1: config 0 descriptor?? [ 600.918299][ T5856] smsc95xx v2.0.0 [ 601.143597][T17660] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4934'. [ 601.552654][ T5856] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 601.587791][ T5856] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 601.616663][ T5856] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 601.636247][ T5856] smsc95xx: probe of 2-1:0.67 failed with error -71 [ 601.657689][ T5856] usb 2-1: USB disconnect, device number 34 [ 601.993106][T17675] loop3: detected capacity change from 0 to 32768 [ 602.075698][T17675] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 602.178798][T17677] loop4: detected capacity change from 0 to 32768 [ 602.198367][T17677] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.4940 (17677) [ 602.236745][T17677] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 602.258440][T17677] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 602.288157][T17677] BTRFS info (device loop4): metadata ratio 2 [ 602.294293][T17677] BTRFS info (device loop4): allowing degraded mounts [ 602.336155][T17677] BTRFS info (device loop4): force zlib compression, level 3 [ 602.343610][T17677] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 602.377334][T17677] BTRFS info (device loop4): use zstd compression, level 3 [ 602.384771][T17677] BTRFS info (device loop4): force clearing of disk cache [ 602.394489][T17677] BTRFS info (device loop4): max_inline at 0 [ 602.402747][T17677] BTRFS info (device loop4): using free space tree [ 602.403428][ T5785] ocfs2: Unmounting device (7,3) on (node local) [ 602.643509][T17677] BTRFS info (device loop4): enabling ssd optimizations [ 602.751054][T17677] BTRFS info (device loop4): rebuilding free space tree [ 602.938020][ T8059] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 603.410112][T17720] loop1: detected capacity change from 0 to 4096 [ 603.444860][T17720] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 603.535299][T17720] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 603.566525][T17720] ntfs3: loop1: ino=1f, "file2" failed to open parent directory r=5 to update [ 603.633035][ T3486] ntfs3: loop1: ino=1f, failed to open parent directory r=5 to update [ 603.897710][T17730] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4954'. [ 603.903699][T17723] loop3: detected capacity change from 0 to 32768 [ 605.316143][ T23] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 605.496653][ T23] usb 5-1: Using ep0 maxpacket: 8 [ 605.505642][ T23] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 605.514864][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.523016][ T23] usb 5-1: Product: syz [ 605.527941][ T23] usb 5-1: Manufacturer: syz [ 605.532552][ T23] usb 5-1: SerialNumber: syz [ 605.539861][ T23] usb 5-1: config 0 descriptor?? [ 605.550530][ T23] gspca_main: se401-2.14.0 probing 047d:5003 [ 606.351837][T17783] loop3: detected capacity change from 0 to 32768 [ 606.375337][T17783] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.4982 (17783) [ 606.409921][T17783] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 606.432973][T17783] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 606.444189][T17783] BTRFS info (device loop3): metadata ratio 2 [ 606.452429][T17783] BTRFS info (device loop3): allowing degraded mounts [ 606.467747][ T23] usb 5-1: reset high-speed USB device number 26 using dummy_hcd [ 606.468298][T17783] BTRFS info (device loop3): force zlib compression, level 3 [ 606.484598][T17783] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 606.499902][T17783] BTRFS info (device loop3): use zstd compression, level 3 [ 606.508008][T17783] BTRFS info (device loop3): force clearing of disk cache [ 606.515207][T17783] BTRFS info (device loop3): max_inline at 0 [ 606.521406][T17783] BTRFS info (device loop3): using free space tree [ 606.674083][T17783] BTRFS info (device loop3): enabling ssd optimizations [ 606.710918][T17783] BTRFS info (device loop3): rebuilding free space tree [ 606.785052][T17824] loop1: detected capacity change from 0 to 65 [ 606.818557][T17824] BFS-fs: bfs_fill_super(): NOTE: filesystem loop1 was created with 512 inodes, the real maximum is 511, mounting anyway [ 606.877188][ T23] gspca_se401: read req failed req 0x06 error -71 [ 606.897213][ T23] se401: probe of 5-1:0.0 failed with error -71 [ 606.932984][ T23] usb 5-1: USB disconnect, device number 26 [ 607.056219][ T5785] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 607.446611][ T785] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 607.667843][ T785] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 607.686192][ T785] usb 1-1: config 27 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 607.707972][ T785] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 607.717547][ T785] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.741047][ T785] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 607.746583][ T9] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 607.761843][ T785] usb 1-1: invalid MIDI out EP 0 [ 607.879933][ T785] snd-usb-audio: probe of 1-1:27.0 failed with error -22 [ 607.950145][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 607.972027][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 607.987412][ T785] usb 1-1: USB disconnect, device number 43 [ 608.008918][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 608.034399][ T9] usb 2-1: New USB device found, idVendor=056a, idProduct=005d, bcdDevice= 0.00 [ 608.050392][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.062960][ T9] usb 2-1: config 0 descriptor?? [ 608.300390][T17863] loop3: detected capacity change from 0 to 512 [ 608.352997][T17863] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 608.372282][T17863] ext4 filesystem being mounted at /1246/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 608.396724][T17863] EXT4-fs warning (device loop3): ext4_resize_fs:2025: can't read last block, resize aborted [ 608.453173][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 608.507565][ T9] wacom 0003:056A:005D.0056: unbalanced collection at end of report description [ 608.532025][ T9] wacom 0003:056A:005D.0056: parse failed [ 608.540239][ T9] wacom: probe of 0003:056A:005D.0056 failed with error -22 [ 608.693667][ T9] usb 2-1: USB disconnect, device number 35 [ 608.849165][T17878] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5016'. [ 609.320765][T17895] sg_write: process 2588 (syz.3.5023) changed security contexts after opening file descriptor, this is not allowed. [ 609.842019][T17911] loop4: detected capacity change from 0 to 256 [ 609.870482][T17911] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 609.900037][T17911] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 609.931317][T17911] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 609.952235][T17911] UDF-fs: Scanning with blocksize 512 failed [ 609.978522][T17911] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 609.994194][T17911] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 610.215365][T17922] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5040'. [ 610.690112][T17928] loop1: detected capacity change from 0 to 32768 [ 610.708635][T17928] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.5041 (17928) [ 610.732561][T17928] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 610.743507][T17928] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 610.752415][T17928] BTRFS info (device loop1): metadata ratio 2 [ 610.758690][T17928] BTRFS info (device loop1): allowing degraded mounts [ 610.766342][T17928] BTRFS info (device loop1): force zlib compression, level 3 [ 610.773757][T17928] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 610.783580][T17928] BTRFS info (device loop1): use zstd compression, level 3 [ 610.790884][T17928] BTRFS info (device loop1): force clearing of disk cache [ 610.798195][T17928] BTRFS info (device loop1): max_inline at 0 [ 610.804225][T17928] BTRFS info (device loop1): using free space tree [ 610.848707][T17928] BTRFS info (device loop1): enabling ssd optimizations [ 610.860926][T17928] BTRFS info (device loop1): rebuilding free space tree [ 610.958899][ T5786] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 611.505621][T17967] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5050'. [ 611.957089][ T9] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 612.126619][T13540] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 612.143540][ T5856] usb 1-1: new full-speed USB device number 44 using dummy_hcd [ 612.156150][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 612.172396][ T9] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 612.192833][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.216517][ T9] usb 2-1: Product: syz [ 612.220727][ T9] usb 2-1: Manufacturer: syz [ 612.231520][ T9] usb 2-1: SerialNumber: syz [ 612.240569][ T9] usb 2-1: config 0 descriptor?? [ 612.249899][ T9] gspca_main: se401-2.14.0 probing 047d:5003 [ 612.339242][T13540] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 612.358415][ T5856] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 612.372572][T13540] usb 5-1: config 27 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 612.383465][ T5856] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 612.395676][T13540] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 612.415731][ T5856] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 612.436087][T13540] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.452129][ T5856] usb 1-1: New USB device found, idVendor=056a, idProduct=005d, bcdDevice= 0.00 [ 612.469059][T13540] usb 5-1: Quirk or no altest; falling back to MIDI 1.0 [ 612.480836][ T5856] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.490244][T13540] usb 5-1: invalid MIDI out EP 0 [ 612.503683][ T5856] usb 1-1: config 0 descriptor?? [ 612.602890][T13540] snd-usb-audio: probe of 5-1:27.0 failed with error -22 [ 612.636369][ T23] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 612.789317][T13540] usb 5-1: USB disconnect, device number 27 [ 612.866081][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 612.877125][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 612.907773][ T23] usb 4-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 612.919736][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.937089][ T23] usb 4-1: config 0 descriptor?? [ 612.953583][ T5856] wacom 0003:056A:005D.0057: unbalanced collection at end of report description [ 612.964606][ T5856] wacom 0003:056A:005D.0057: parse failed [ 612.983430][ T5856] wacom: probe of 0003:056A:005D.0057 failed with error -22 [ 613.146183][ T9] usb 2-1: reset high-speed USB device number 36 using dummy_hcd [ 613.187993][ T5856] usb 1-1: USB disconnect, device number 44 [ 613.382163][ T23] mcp2200 0003:04D8:00DF.0058: USB HID v0.00 Device [HID 04d8:00df] on usb-dummy_hcd.3-1/input0 [ 613.580363][ T5856] usb 4-1: USB disconnect, device number 36 [ 613.601937][ T9] gspca_se401: read req failed req 0x06 error -71 [ 613.616828][ T9] se401: probe of 2-1:0.0 failed with error -71 [ 613.633090][ T9] usb 2-1: USB disconnect, device number 36 [ 614.506132][ T5856] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 614.701696][ T5856] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 614.734084][ T5856] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 614.749937][ T5856] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 614.764086][ T5856] usb 4-1: New USB device found, idVendor=056a, idProduct=005d, bcdDevice= 0.00 [ 614.773662][ T5856] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.788890][ T5856] usb 4-1: config 0 descriptor?? [ 615.156438][ T9] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 615.222471][ T5856] wacom 0003:056A:005D.0059: unbalanced collection at end of report description [ 615.249818][ T5856] wacom 0003:056A:005D.0059: parse failed [ 615.261981][ T5856] wacom: probe of 0003:056A:005D.0059 failed with error -22 [ 615.356246][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 615.370537][ T9] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 615.384011][T18079] loop1: detected capacity change from 0 to 32768 [ 615.386975][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.413166][ T9] usb 1-1: Product: syz [ 615.418964][ T9] usb 1-1: Manufacturer: syz [ 615.425008][ T9] usb 1-1: SerialNumber: syz [ 615.448624][ T9] usb 1-1: config 0 descriptor?? [ 615.468331][ T9] gspca_main: se401-2.14.0 probing 047d:5003 [ 615.485528][ T5856] usb 4-1: USB disconnect, device number 37 [ 615.517434][ T23] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 615.717851][ T23] usb 5-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 615.740705][ T23] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 615.753790][ T23] usb 5-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 615.779697][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.797082][ T23] usb 5-1: Product: syz [ 615.801488][ T23] usb 5-1: Manufacturer: syz [ 615.806836][ T23] usb 5-1: SerialNumber: syz [ 615.822502][ T23] usb 5-1: config 0 descriptor?? [ 616.027634][T18091] loop1: detected capacity change from 0 to 32768 [ 616.056245][ T23] mos7840 5-1:0.0: required endpoints missing [ 616.058120][T18091] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.5100 (18091) [ 616.149293][T18091] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 616.160425][T18091] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 616.169611][T18091] BTRFS info (device loop1): turning on async discard [ 616.178271][T18091] BTRFS info (device loop1): using free space tree [ 616.257719][T18091] BTRFS info (device loop1): enabling ssd optimizations [ 616.266209][ T23] usb 5-1: USB disconnect, device number 28 [ 616.346138][ T9] usb 1-1: reset high-speed USB device number 45 using dummy_hcd [ 616.487133][T18091] BTRFS info (device loop1): balance: start -susage=12884901897,drange=145..0 [ 616.541488][T18091] BTRFS info (device loop1): relocating block group 1048576 flags system [ 616.680808][T18093] loop3: detected capacity change from 0 to 32768 [ 616.759915][T18091] BTRFS info (device loop1): balance: ended with status: 0 [ 616.774615][ T9] gspca_se401: read req failed req 0x06 error -71 [ 616.786150][ T9] se401: probe of 1-1:0.0 failed with error -71 [ 616.796506][ T9] usb 1-1: USB disconnect, device number 45 [ 616.905058][ T5786] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 617.193117][T18118] loop3: detected capacity change from 0 to 256 [ 617.233816][T18118] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 617.263613][T18118] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 617.294210][T18118] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 617.302452][T18118] UDF-fs: Scanning with blocksize 512 failed [ 617.346523][T18118] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 617.385469][T18118] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 617.806063][ T7857] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 618.018128][ T7857] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 618.039533][ T7857] usb 2-1: config 27 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 618.066202][ T7857] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 618.085527][ T7857] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.118758][ T7857] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 618.140244][ T7857] usb 2-1: invalid MIDI out EP 0 [ 618.305372][ T7857] snd-usb-audio: probe of 2-1:27.0 failed with error -22 [ 618.356302][ T7857] usb 2-1: USB disconnect, device number 37 [ 618.406878][T18135] loop3: detected capacity change from 0 to 32768 [ 618.426128][T18135] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.5111 (18135) [ 618.458361][T18135] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 618.469293][T18135] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 618.478472][T18135] BTRFS info (device loop3): turning on async discard [ 618.485360][T18135] BTRFS info (device loop3): using free space tree [ 618.556190][T18135] BTRFS info (device loop3): enabling ssd optimizations [ 618.630787][T18135] BTRFS info (device loop3): balance: start -susage=12884901897,drange=145..0 [ 618.642464][T18135] BTRFS info (device loop3): relocating block group 1048576 flags system [ 618.710149][T18135] BTRFS info (device loop3): balance: ended with status: 0 [ 618.823875][ T5785] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 619.129839][T18171] loop4: detected capacity change from 0 to 164 [ 619.155122][T18171] Unable to read rock-ridge attributes [ 619.205487][T18171] Unable to read rock-ridge attributes [ 619.346811][ T5792] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 619.536222][ T5792] usb 1-1: Using ep0 maxpacket: 32 [ 619.555641][ T5792] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 619.571137][ T5856] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 619.576809][T18185] loop1: detected capacity change from 0 to 2048 [ 619.586194][ T5792] usb 1-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 619.605479][ T5792] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.636937][T18185] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 619.641468][ T5792] usb 1-1: config 0 descriptor?? [ 619.776084][ T5856] usb 4-1: Using ep0 maxpacket: 8 [ 619.791716][ T5856] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 619.816053][ T5856] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.839856][ T5856] usb 4-1: Product: syz [ 619.846187][ T5856] usb 4-1: Manufacturer: syz [ 619.850849][ T5856] usb 4-1: SerialNumber: syz [ 619.887597][ T5856] usb 4-1: config 0 descriptor?? [ 619.899670][ T5856] gspca_main: se401-2.14.0 probing 047d:5003 [ 620.066190][T18187] loop4: detected capacity change from 0 to 32768 [ 620.089052][T18187] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.5128 (18187) [ 620.093621][ T5792] mcp2200 0003:04D8:00DF.005A: USB HID v0.00 Device [HID 04d8:00df] on usb-dummy_hcd.0-1/input0 [ 620.140938][T18187] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 620.151849][T18187] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 620.161033][T18187] BTRFS info (device loop4): turning on async discard [ 620.173647][T18187] BTRFS info (device loop4): using free space tree [ 620.228887][T18187] BTRFS info (device loop4): enabling ssd optimizations [ 620.341618][ T23] usb 1-1: USB disconnect, device number 46 [ 620.367415][T18187] BTRFS info (device loop4): balance: start -susage=12884901897,drange=145..0 [ 620.385542][T18187] BTRFS info (device loop4): relocating block group 1048576 flags system [ 620.456643][T18187] BTRFS info (device loop4): balance: ended with status: 0 [ 620.547289][ T8059] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 620.796344][ T5856] usb 4-1: reset high-speed USB device number 38 using dummy_hcd [ 620.924378][T18211] loop1: detected capacity change from 0 to 164 [ 620.937699][T18211] Unable to read rock-ridge attributes [ 620.960755][T18211] Unable to read rock-ridge attributes [ 621.200393][ T5856] gspca_se401: read req failed req 0x06 error -71 [ 621.213742][ T5856] se401: probe of 4-1:0.0 failed with error -71 [ 621.231751][ T5856] usb 4-1: USB disconnect, device number 38 [ 621.269421][T18225] loop4: detected capacity change from 0 to 1024 [ 621.324804][T18225] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 621.337636][T18225] ext4 filesystem being mounted at /1128/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 621.384540][T18225] EXT4-fs (loop4): Online resizing not supported with bigalloc [ 621.422641][ T8059] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 621.496268][ T5792] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 621.702307][ T5792] usb 1-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 621.715830][ T5792] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 621.757296][ T5792] usb 1-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 621.786498][ T5792] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.794536][ T5792] usb 1-1: Product: syz [ 621.814471][ T5792] usb 1-1: Manufacturer: syz [ 621.824312][ T5792] usb 1-1: SerialNumber: syz [ 621.838139][ T5792] usb 1-1: config 0 descriptor?? [ 621.868075][T18245] loop3: detected capacity change from 0 to 164 [ 621.900990][T18245] Unable to read rock-ridge attributes [ 621.964887][T18245] Unable to read rock-ridge attributes [ 622.095750][ T5792] mos7840 1-1:0.0: required endpoints missing [ 622.149384][T18249] loop1: detected capacity change from 0 to 1024 [ 622.222824][T18249] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 622.237334][T18249] ext4 filesystem being mounted at /1293/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 622.261654][T18249] EXT4-fs (loop1): Online resizing not supported with bigalloc [ 622.293454][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 622.319412][ T9] usb 1-1: USB disconnect, device number 47 [ 622.426212][ T5792] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 622.610023][ T5792] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 622.621067][ T5792] usb 4-1: config 27 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 622.631847][ T5792] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 622.641116][ T5792] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.660339][ T5792] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 622.668486][ T5792] usb 4-1: invalid MIDI out EP 0 [ 622.716475][ T8096] udevd[8096]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 622.729372][ T5792] snd-usb-audio: probe of 4-1:27.0 failed with error -22 [ 622.999859][ T7857] usb 4-1: USB disconnect, device number 39 [ 623.083610][T18265] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5155'. [ 623.196791][T18271] netlink: 'syz.4.5159': attribute type 29 has an invalid length. [ 623.726113][ T5792] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 623.907850][ T5792] usb 2-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 623.917058][ T9] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 623.931038][ T5792] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 623.944168][ T5792] usb 2-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 623.958371][ T5792] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.969687][ T5792] usb 2-1: Product: syz [ 623.973957][ T5792] usb 2-1: Manufacturer: syz [ 623.983063][ T5792] usb 2-1: SerialNumber: syz [ 623.992519][ T5792] usb 2-1: config 0 descriptor?? [ 624.126322][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 624.134399][ T9] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 624.146096][ T9] usb 4-1: config 0 has no interface number 0 [ 624.169833][ T9] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 624.189562][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.220345][ T9] usb 4-1: Product: syz [ 624.229198][ T5792] mos7840 2-1:0.0: required endpoints missing [ 624.235487][ T9] usb 4-1: Manufacturer: syz [ 624.246267][ T9] usb 4-1: SerialNumber: syz [ 624.266928][ T9] usb 4-1: config 0 descriptor?? [ 624.287014][ T9] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 624.443687][ T5856] usb 2-1: USB disconnect, device number 38 [ 624.490728][ T9] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 624.510831][ T9] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 624.580802][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.596467][ T5792] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 624.694454][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - status message too short [ 624.810118][ T5792] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 624.821884][ T5792] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 624.832015][ T5792] usb 5-1: New USB device found, idVendor=05f6, idProduct=3201, bcdDevice= 0.00 [ 624.841451][ T5792] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.856950][ T5792] usb 5-1: config 0 descriptor?? [ 624.895308][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 624.907188][ T5856] usb 4-1: USB disconnect, device number 40 [ 624.931535][ T5856] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 624.951977][ T5856] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 624.968169][ T5856] quatech2 4-1:0.51: device disconnected [ 625.165814][T18317] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5180'. [ 625.293216][ T5792] hid-generic 0003:05F6:3201.005B: hidraw0: USB HID v1.01 Device [HID 05f6:3201] on usb-dummy_hcd.4-1/input0 [ 625.485613][ T5792] usb 5-1: USB disconnect, device number 29 [ 625.613032][T18328] loop1: detected capacity change from 0 to 1024 [ 625.725909][ T2945] hfsplus: b-tree write err: -5, ino 4 [ 625.935195][T18342] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5191'. [ 626.017797][T18346] loop1: detected capacity change from 0 to 2048 [ 626.046190][ T7857] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 626.057736][T18346] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 626.139706][T18349] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5203'. [ 626.256376][ T7857] usb 4-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 626.275814][ T7857] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 626.298368][ T7857] usb 4-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 626.318174][ T7857] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.338804][ T7857] usb 4-1: Product: syz [ 626.343019][ T7857] usb 4-1: Manufacturer: syz [ 626.363792][ T7857] usb 4-1: SerialNumber: syz [ 626.379374][ T7857] usb 4-1: config 0 descriptor?? [ 626.471457][T18356] loop1: detected capacity change from 0 to 8192 [ 626.487155][T18356] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 626.599778][ T7857] mos7840 4-1:0.0: required endpoints missing [ 626.784134][T18350] loop4: detected capacity change from 0 to 40427 [ 626.797296][T18350] F2FS-fs (loop4): heap/no_heap options were deprecated [ 626.817535][ T7857] usb 4-1: USB disconnect, device number 41 [ 626.822755][T18350] F2FS-fs (loop4): invalid crc value [ 626.843308][T18350] F2FS-fs (loop4): Found nat_bits in checkpoint [ 626.894941][T18350] F2FS-fs (loop4): Start checkpoint disabled! [ 626.902693][T18350] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 627.079115][ T12] kworker/u4:1: attempt to access beyond end of device [ 627.079115][ T12] loop4: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 627.095661][ T12] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 627.104226][ T12] kworker/u4:1: attempt to access beyond end of device [ 627.104226][ T12] loop4: rw=2049, sector=40976, nr_sectors = 8 limit=40427 [ 627.118487][ T12] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 627.678237][T18380] loop3: detected capacity change from 0 to 2048 [ 627.700969][T18380] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 627.916557][ T5792] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 628.126086][ T5792] usb 2-1: Using ep0 maxpacket: 32 [ 628.132194][ T5792] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 628.132219][ T5792] usb 2-1: config 0 has no interface number 0 [ 628.136831][ T5792] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 628.136858][ T5792] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.136876][ T5792] usb 2-1: Product: syz [ 628.136890][ T5792] usb 2-1: Manufacturer: syz [ 628.136903][ T5792] usb 2-1: SerialNumber: syz [ 628.139169][ T5792] usb 2-1: config 0 descriptor?? [ 628.149777][ T5792] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 628.363896][ T5792] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 628.405906][ T5792] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 628.623700][T18405] loop4: detected capacity change from 0 to 2048 [ 628.630244][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - status message too short [ 628.676026][T18405] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 628.829513][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 628.829790][ T7857] usb 2-1: USB disconnect, device number 39 [ 628.883736][ T7857] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 628.924043][ T7857] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 628.950002][ T7857] quatech2 2-1:0.51: device disconnected [ 629.084919][T18413] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5226'. [ 629.294686][T18419] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5229'. [ 629.734116][T18435] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5237'. [ 630.115824][T18443] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5240'. [ 630.232263][T18433] loop1: detected capacity change from 0 to 32768 [ 630.253371][T18433] XFS (loop1): Cannot mount filesystem with identical rtdev and ddev/logdev. [ 630.463282][ T8096] udevd[8096]: incorrect xfs checksum on /dev/loop1 [ 630.982621][T18441] loop3: detected capacity change from 0 to 40427 [ 631.021215][T18441] F2FS-fs (loop3): heap/no_heap options were deprecated [ 631.042226][T18441] F2FS-fs (loop3): invalid crc value [ 631.063699][T18441] F2FS-fs (loop3): Found nat_bits in checkpoint [ 631.124600][T18467] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5250'. [ 631.166245][T18441] F2FS-fs (loop3): Start checkpoint disabled! [ 631.185861][T18441] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 631.221960][T18465] loop4: detected capacity change from 0 to 4096 [ 631.257550][T18465] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [ 631.585308][ T3486] kworker/u4:12: attempt to access beyond end of device [ 631.585308][ T3486] loop3: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 631.616493][ T3486] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 631.634101][ T3486] kworker/u4:12: attempt to access beyond end of device [ 631.634101][ T3486] loop3: rw=2049, sector=40976, nr_sectors = 8 limit=40427 [ 631.684503][ T3486] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 632.611118][T18497] loop3: detected capacity change from 0 to 4096 [ 632.640181][T18497] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 633.032076][T18493] loop4: detected capacity change from 0 to 32768 [ 633.039820][T18493] XFS (loop4): Cannot mount filesystem with identical rtdev and ddev/logdev. [ 633.216489][ T8096] udevd[8096]: incorrect xfs checksum on /dev/loop4 [ 634.103105][T18539] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5292'. [ 634.122796][T18539] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5292'. [ 634.147694][T18538] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5292'. [ 634.956174][ T5792] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 635.180011][ T5792] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 635.197655][ T5792] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 635.208250][ T5792] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 635.236862][ T5792] usb 5-1: config 0 descriptor?? [ 635.264307][ T5792] pwc: Askey VC010 type 2 USB webcam detected. [ 635.594107][T18589] loop1: detected capacity change from 0 to 4096 [ 635.680523][T18589] ntfs3: loop1: failed to convert "0000" to iso8859-13 [ 635.689229][T18589] ntfs3: loop1: failed to convert name for inode 1e. [ 635.766217][ T9] usb 1-1: new full-speed USB device number 48 using dummy_hcd [ 635.889280][ T5792] pwc: recv_control_msg error -71 req 02 val 2700 [ 635.907171][ T5792] pwc: recv_control_msg error -71 req 02 val 2c00 [ 635.916880][ T5792] pwc: recv_control_msg error -71 req 04 val 1000 [ 635.927123][ T5792] pwc: recv_control_msg error -71 req 04 val 1300 [ 635.946378][ T5792] pwc: recv_control_msg error -71 req 04 val 1400 [ 635.960884][ T5792] pwc: recv_control_msg error -71 req 02 val 2000 [ 635.976281][ T5792] pwc: recv_control_msg error -71 req 02 val 2100 [ 635.983925][ T5792] pwc: recv_control_msg error -71 req 04 val 1500 [ 635.992490][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 636.006450][ T5792] pwc: recv_control_msg error -71 req 02 val 2500 [ 636.026365][ T5792] pwc: recv_control_msg error -71 req 02 val 2400 [ 636.033016][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 636.046696][ T5792] pwc: recv_control_msg error -71 req 02 val 2600 [ 636.053354][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 636.078998][ T5792] pwc: recv_control_msg error -71 req 02 val 2900 [ 636.090546][ T9] usb 1-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 636.103490][ T5792] pwc: recv_control_msg error -71 req 02 val 2800 [ 636.113317][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.126421][ T5792] pwc: recv_control_msg error -71 req 04 val 1100 [ 636.146274][ T5792] pwc: recv_control_msg error -71 req 04 val 1200 [ 636.160195][ T9] usb 1-1: config 0 descriptor?? [ 636.176699][T18587] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 636.182957][ T5792] pwc: Registered as video103. [ 636.202413][ T5792] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input12 [ 636.300093][ T5792] usb 5-1: USB disconnect, device number 30 [ 636.345743][ T8205] udevd[8205]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 636.598630][ T9] aureal 0003:0755:2626.005C: fixing Aureal Cy se W-01RN USB_V3.1 report descriptor. [ 636.619556][ T9] aureal 0003:0755:2626.005C: unknown main item tag 0x6 [ 636.633605][ T9] aureal 0003:0755:2626.005C: report_id 29495 is invalid [ 636.651226][ T9] aureal 0003:0755:2626.005C: item 0 2 1 8 parsing failed [ 636.667144][ T9] aureal: probe of 0003:0755:2626.005C failed with error -22 [ 636.814765][ T9] usb 1-1: USB disconnect, device number 48 [ 636.922693][T18614] loop4: detected capacity change from 0 to 4096 [ 636.983198][T18607] loop1: detected capacity change from 0 to 32768 [ 637.030729][T18607] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 637.069670][T18614] ntfs3: loop4: failed to convert "0000" to iso8859-13 [ 637.091213][T18614] ntfs3: loop4: failed to convert name for inode 1e. [ 637.228907][T18607] XFS (loop1): Ending clean mount [ 637.242315][T18607] XFS (loop1): Quotacheck needed: Please wait. [ 637.321102][T18607] XFS (loop1): Quotacheck: Done. [ 637.638694][ T5786] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 637.761409][T18640] loop4: detected capacity change from 0 to 256 [ 637.781828][T18640] exfat: Deprecated parameter 'namecase' [ 637.830048][T18640] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 637.882500][ T5792] usb 4-1: new full-speed USB device number 42 using dummy_hcd [ 638.088513][ T5792] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 638.108025][ T5792] usb 4-1: config 0 has no interface number 0 [ 638.114177][ T5792] usb 4-1: config 0 interface 132 altsetting 4 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 638.133211][ T5792] usb 4-1: config 0 interface 132 altsetting 4 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 638.145549][ T5792] usb 4-1: config 0 interface 132 has no altsetting 0 [ 638.155683][ T5792] usb 4-1: New USB device found, idVendor=0525, idProduct=9901, bcdDevice=ff.75 [ 638.172715][ T5792] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.186385][ T5792] usb 4-1: Product: syz [ 638.190574][ T5792] usb 4-1: Manufacturer: syz [ 638.195336][ T5792] usb 4-1: SerialNumber: syz [ 638.230512][ T5792] usb 4-1: config 0 descriptor?? [ 638.237490][T18634] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 638.256666][T18634] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 638.470554][T18634] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 638.506194][T18634] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 638.560809][ T5792] cdc_subset 4-1:0.132 usb0: register 'cdc_subset' at usb-dummy_hcd.3-1, Belkin, eTEK, or compatible, 8a:8c:86:ce:10:78 [ 638.562804][T18660] tipc: Enabled bearer , priority 10 [ 638.733321][ T5792] usb 4-1: USB disconnect, device number 42 [ 638.750145][ T5792] cdc_subset 4-1:0.132 usb0: unregister 'cdc_subset' usb-dummy_hcd.3-1, Belkin, eTEK, or compatible [ 638.800407][ T23] IPVS: starting estimator thread 0... [ 638.928593][T18665] IPVS: using max 17 ests per chain, 40800 per kthread [ 639.396293][ T23] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 639.405326][T18684] loop3: detected capacity change from 0 to 256 [ 639.438342][T18684] exfat: Deprecated parameter 'namecase' [ 639.459180][T18684] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 639.598813][ T23] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 639.616009][ T23] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 639.676117][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.701903][ T23] usb 2-1: config 0 descriptor?? [ 639.759129][ T23] pwc: Askey VC010 type 2 USB webcam detected. [ 639.869550][ T9] IPVS: starting estimator thread 0... [ 640.006858][T18702] IPVS: using max 18 ests per chain, 43200 per kthread [ 640.037546][T18707] tipc: Enabled bearer , priority 10 [ 640.428549][ T23] pwc: recv_control_msg error -71 req 02 val 2700 [ 640.455440][ T23] pwc: recv_control_msg error -71 req 02 val 2c00 [ 640.477283][ T23] pwc: recv_control_msg error -71 req 04 val 1000 [ 640.495420][ T23] pwc: recv_control_msg error -71 req 04 val 1300 [ 640.517538][ T23] pwc: recv_control_msg error -71 req 04 val 1400 [ 640.541448][ T23] pwc: recv_control_msg error -71 req 02 val 2000 [ 640.562309][ T23] pwc: recv_control_msg error -71 req 02 val 2100 [ 640.576865][ T23] pwc: recv_control_msg error -71 req 04 val 1500 [ 640.588357][ T23] pwc: recv_control_msg error -71 req 02 val 2500 [ 640.605536][ T23] pwc: recv_control_msg error -71 req 02 val 2400 [ 640.615659][ T23] pwc: recv_control_msg error -71 req 02 val 2600 [ 640.629098][ T23] pwc: recv_control_msg error -71 req 02 val 2900 [ 640.640081][ T23] pwc: recv_control_msg error -71 req 02 val 2800 [ 640.656656][ T23] pwc: recv_control_msg error -71 req 04 val 1100 [ 640.676129][ T23] pwc: recv_control_msg error -71 req 04 val 1200 [ 640.701492][ T23] pwc: Registered as video103. [ 640.724869][ T23] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input13 [ 640.766507][ T7857] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 640.785730][ T23] usb 2-1: USB disconnect, device number 40 [ 640.941388][T18711] loop4: detected capacity change from 0 to 32768 [ 640.974624][T18711] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 640.991976][ T7857] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 641.036569][ T7857] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 641.074867][ T7857] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 641.131569][ T7857] usb 4-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 641.145617][ T7857] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.168192][ T7857] usb 4-1: config 0 descriptor?? [ 641.181321][T18726] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 641.182257][T18711] XFS (loop4): Ending clean mount [ 641.229903][T18711] XFS (loop4): Quotacheck needed: Please wait. [ 641.342024][T18711] XFS (loop4): Quotacheck: Done. [ 641.423525][ T8059] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 641.637961][ T7857] aureal 0003:0755:2626.005D: fixing Aureal Cy se W-01RN USB_V3.1 report descriptor. [ 641.656883][ T7857] aureal 0003:0755:2626.005D: unknown main item tag 0x6 [ 641.674151][ T7857] aureal 0003:0755:2626.005D: report_id 29495 is invalid [ 641.684246][ T7857] aureal 0003:0755:2626.005D: item 0 2 1 8 parsing failed [ 641.710144][ T7857] aureal: probe of 0003:0755:2626.005D failed with error -22 [ 641.755187][T18755] tipc: Enabled bearer , priority 10 [ 641.899455][ T9] usb 4-1: USB disconnect, device number 43 [ 642.149589][T18768] loop1: detected capacity change from 0 to 256 [ 642.833699][T18792] loop1: detected capacity change from 0 to 64 [ 643.208598][T18784] loop3: detected capacity change from 0 to 32768 [ 643.272181][T18784] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 643.574994][T18784] XFS (loop3): Ending clean mount [ 643.586500][T18821] loop4: detected capacity change from 0 to 512 [ 643.615120][T18784] XFS (loop3): Quotacheck needed: Please wait. [ 643.632098][T18821] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2244: inode #15: comm syz.4.5396: corrupted in-inode xattr: invalid ea_ino [ 643.662745][T18821] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.5396: couldn't read orphan inode 15 (err -117) [ 643.709756][T18821] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 643.751001][T18784] XFS (loop3): Quotacheck: Done. [ 643.955079][ T8059] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 643.970569][ T5785] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 644.544325][ T28] audit: type=1326 audit(1755789233.021:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18847 comm="syz.0.5409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f501638ebe9 code=0x7ffc0000 [ 644.606085][ T28] audit: type=1326 audit(1755789233.051:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18847 comm="syz.0.5409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f501638ebe9 code=0x7ffc0000 [ 644.628066][T18850] loop4: detected capacity change from 0 to 256 [ 644.666681][ T28] audit: type=1326 audit(1755789233.051:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18847 comm="syz.0.5409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f501638d550 code=0x7ffc0000 [ 644.715265][ T28] audit: type=1326 audit(1755789233.051:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18847 comm="syz.0.5409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f501638d550 code=0x7ffc0000 [ 644.739078][ T7857] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 644.751831][ T28] audit: type=1326 audit(1755789233.051:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18847 comm="syz.0.5409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f501638ebe9 code=0x7ffc0000 [ 644.789550][ T28] audit: type=1326 audit(1755789233.051:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18847 comm="syz.0.5409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f501638ebe9 code=0x7ffc0000 [ 644.850149][ T28] audit: type=1326 audit(1755789233.051:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18847 comm="syz.0.5409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=267 compat=0 ip=0x7f501638ebe9 code=0x7ffc0000 [ 644.900506][ T28] audit: type=1326 audit(1755789233.051:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18847 comm="syz.0.5409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f501638ebe9 code=0x7ffc0000 [ 644.945430][ T28] audit: type=1326 audit(1755789233.051:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18847 comm="syz.0.5409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f501638ebe9 code=0x7ffc0000 [ 644.979297][ T7857] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 644.989528][ T7857] usb 2-1: config 0 has no interface number 0 [ 644.995668][ T7857] usb 2-1: config 0 interface 132 altsetting 4 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 645.030685][ T7857] usb 2-1: config 0 interface 132 altsetting 4 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 645.042931][ T7857] usb 2-1: config 0 interface 132 has no altsetting 0 [ 645.058999][ T7857] usb 2-1: New USB device found, idVendor=0525, idProduct=9901, bcdDevice=ff.75 [ 645.068889][ T7857] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.086826][ T7857] usb 2-1: Product: syz [ 645.100765][ T7857] usb 2-1: Manufacturer: syz [ 645.105478][ T7857] usb 2-1: SerialNumber: syz [ 645.121128][ T7857] usb 2-1: config 0 descriptor?? [ 645.129678][T18842] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 645.146655][T18842] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 645.391380][T18842] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 645.397303][T18858] loop4: detected capacity change from 0 to 32768 [ 645.406737][T18842] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 645.446127][ T7857] cdc_subset 2-1:0.132 usb0: register 'cdc_subset' at usb-dummy_hcd.1-1, Belkin, eTEK, or compatible, 42:39:fc:2c:0c:38 [ 645.455760][T18858] JBD2: Ignoring recovery information on journal [ 645.628064][T18858] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 645.736111][ T5792] usb 2-1: USB disconnect, device number 41 [ 645.748034][ T5792] cdc_subset 2-1:0.132 usb0: unregister 'cdc_subset' usb-dummy_hcd.1-1, Belkin, eTEK, or compatible [ 646.060455][ T8059] ocfs2: Unmounting device (7,4) on (node local) [ 646.450601][T18891] loop3: detected capacity change from 0 to 512 [ 646.471256][T18891] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2244: inode #15: comm syz.3.5420: corrupted in-inode xattr: invalid ea_ino [ 646.495546][T18891] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.5420: couldn't read orphan inode 15 (err -117) [ 646.518465][T18891] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 646.715328][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 646.842026][T18900] loop3: detected capacity change from 0 to 256 [ 647.086225][ T7857] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 647.300654][ T7857] usb 2-1: Using ep0 maxpacket: 32 [ 647.319182][ T7857] usb 2-1: too many configurations: 17, using maximum allowed: 8 [ 647.349682][ T7857] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 647.376281][ T7857] usb 2-1: config 0 has no interface number 0 [ 647.390882][ T7857] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 647.409155][ T7857] usb 2-1: config 0 has no interface number 0 [ 647.417804][ T7857] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 647.436324][ T7857] usb 2-1: config 0 has no interface number 0 [ 647.444497][ T7857] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 647.453637][ T7857] usb 2-1: config 0 has no interface number 0 [ 647.477021][ T7857] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 647.495405][ T7857] usb 2-1: config 0 has no interface number 0 [ 647.503333][ T7857] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 647.516506][ T7857] usb 2-1: config 0 has no interface number 0 [ 647.528345][ T7857] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 647.536635][ T7857] usb 2-1: config 0 has no interface number 0 [ 647.544095][ T7857] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 647.556043][ T7857] usb 2-1: config 0 has no interface number 0 [ 647.564766][ T7857] usb 2-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 647.576494][ T7857] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.594786][ T7857] usb 2-1: Product: syz [ 647.615049][ T7857] usb 2-1: Manufacturer: syz [ 647.619872][ T7857] usb 2-1: SerialNumber: syz [ 647.636936][ T7857] usb 2-1: config 0 descriptor?? [ 647.656664][ T7857] etas_es58x 2-1:0.2: Starting syz syz (Serial Number syz) [ 647.860571][T18908] loop3: detected capacity change from 0 to 32768 [ 647.899037][ T7857] etas_es58x 2-1:0.2: could not parse product info: '' [ 647.929273][T18908] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 648.014280][T18908] XFS (loop3): Ending clean mount [ 648.031113][T18908] XFS (loop3): Quotacheck needed: Please wait. [ 648.147595][T18908] XFS (loop3): Quotacheck: Done. [ 648.222799][ T5785] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 649.004994][T18945] loop4: detected capacity change from 0 to 32768 [ 649.050234][T18945] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 649.136005][ C1] etas_es58x 2-1:0.2: es58x_check_rx_urb: Expected sequence 0xFECA for start of frame but got 0x015D. [ 649.147313][ C1] etas_es58x 2-1:0.2: es58x_check_crc: Bad CRC, urb_len: 9 [ 649.154830][ C1] etas_es58x 2-1:0.2: es58x_split_urb_try_recovery: Recovery failed [ 649.155782][T18945] XFS (loop4): Ending clean mount [ 649.162827][ C1] etas_es58x 2-1:0.2: es58x_split_urb() returned error -EBADMSG [ 649.164625][ T5457] etas_es58x 2-1:0.2 can0: bit-timing not yet defined [ 649.257284][T18949] loop3: detected capacity change from 0 to 32768 [ 649.260043][T18945] XFS (loop4): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair. [ 649.279759][T18949] JBD2: Ignoring recovery information on journal [ 649.345170][T18949] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 649.368567][ C1] etas_es58x 2-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 649.377420][T13540] usb 2-1: USB disconnect, device number 42 [ 649.377809][ C1] etas_es58x 2-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 649.393165][ C1] etas_es58x 2-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 649.402457][ C1] etas_es58x 2-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 649.411711][ C1] etas_es58x 2-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 649.420967][ C1] etas_es58x 2-1:0.2 can0: es58x_write_bulk_callback: error -ESHUTDOWN [ 649.433757][T13540] etas_es58x 2-1:0.2: Disconnecting syz syz [ 649.437357][ C1] dummy_hcd dummy_hcd.1: timer fired with no URBs pending? [ 649.498119][ T5457] etas_es58x 2-1:0.2 can0: es58x_open: Could not open the network device: -EINVAL [ 649.559851][ T8059] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 649.576635][ T5785] ocfs2: Unmounting device (7,3) on (node local) [ 650.678504][T19004] hugetlbfs: Bad value 'x' for mount option 'size' [ 650.678504][T19004] [ 650.855914][T19011] loop3: detected capacity change from 0 to 512 [ 650.910943][T19011] EXT4-fs: Ignoring removed nomblk_io_submit option [ 650.918733][T19011] EXT4-fs: Ignoring removed bh option [ 650.959598][T19011] EXT4-fs error (device loop3): mb_free_blocks:1943: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 651.056420][T19011] EXT4-fs error (device loop3): ext4_do_update_inode:5230: inode #11: comm syz.3.5444: corrupted inode contents [ 651.117812][T19011] EXT4-fs error (device loop3): ext4_dirty_inode:6106: inode #11: comm syz.3.5444: mark_inode_dirty error [ 651.141583][T19011] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.5444: invalid indirect mapped block 1 (level 1) [ 651.183654][T19011] EXT4-fs error (device loop3): ext4_do_update_inode:5230: inode #11: comm syz.3.5444: corrupted inode contents [ 651.245632][T19011] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 651.266726][T19011] EXT4-fs error (device loop3): ext4_do_update_inode:5230: inode #11: comm syz.3.5444: corrupted inode contents [ 651.312328][T19011] EXT4-fs error (device loop3): ext4_truncate:4288: inode #11: comm syz.3.5444: mark_inode_dirty error [ 651.339703][T19011] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 651.354141][T19011] EXT4-fs (loop3): 1 truncate cleaned up [ 651.368866][T19011] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 651.539785][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 651.566435][T13540] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 651.779993][T13540] usb 1-1: Using ep0 maxpacket: 32 [ 651.803183][T13540] usb 1-1: too many configurations: 17, using maximum allowed: 8 [ 651.837157][T13540] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 651.845198][T13540] usb 1-1: config 0 has no interface number 0 [ 651.872869][T13540] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 651.889408][T13540] usb 1-1: config 0 has no interface number 0 [ 651.897843][T13540] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 651.907748][T19043] team0: Device gtp0 is of different type [ 651.913723][T13540] usb 1-1: config 0 has no interface number 0 [ 651.924247][T13540] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 651.934026][T13540] usb 1-1: config 0 has no interface number 0 [ 651.941865][T13540] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 651.965905][T13540] usb 1-1: config 0 has no interface number 0 [ 651.978748][T13540] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 651.990591][T13540] usb 1-1: config 0 has no interface number 0 [ 652.000472][T13540] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 652.009667][T13540] usb 1-1: config 0 has no interface number 0 [ 652.018861][T13540] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 652.027595][T13540] usb 1-1: config 0 has no interface number 0 [ 652.038754][T13540] usb 1-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 652.056621][T13540] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 652.074351][T13540] usb 1-1: Product: syz [ 652.079382][T13540] usb 1-1: Manufacturer: syz [ 652.084011][T13540] usb 1-1: SerialNumber: syz [ 652.097833][T13540] usb 1-1: config 0 descriptor?? [ 652.114485][T13540] etas_es58x 1-1:0.2: Starting syz syz (Serial Number syz) [ 652.176699][ T785] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 652.336795][T13540] etas_es58x 1-1:0.2: could not parse product info: '' [ 652.367096][ T785] usb 5-1: Using ep0 maxpacket: 32 [ 652.378232][ T785] usb 5-1: config 4 has an invalid interface number: 128 but max is 0 [ 652.396500][ T785] usb 5-1: config 4 has no interface number 0 [ 652.410739][ T785] usb 5-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 652.443623][ T785] usb 5-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 652.468586][ T785] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 652.491186][ T785] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.523083][ T785] hub 5-1:4.128: USB hub found [ 652.738792][ T785] hub 5-1:4.128: 2 ports detected [ 652.744008][ T785] hub 5-1:4.128: Using single TT (err -22) [ 652.940610][ T785] hub 5-1:4.128: hub_hub_status failed (err = -71) [ 652.972001][ T785] hub 5-1:4.128: config failed, can't get hub status (err -71) [ 653.049677][ T785] usb 5-1: USB disconnect, device number 31 [ 653.058863][T19074] loop1: detected capacity change from 0 to 512 [ 653.079465][T19074] EXT4-fs: Ignoring removed nomblk_io_submit option [ 653.100329][T19074] EXT4-fs: Ignoring removed bh option [ 653.156990][T19074] EXT4-fs error (device loop1): mb_free_blocks:1943: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 653.235441][T19074] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #11: comm syz.1.5458: corrupted inode contents [ 653.253302][T19074] EXT4-fs error (device loop1): ext4_dirty_inode:6106: inode #11: comm syz.1.5458: mark_inode_dirty error [ 653.301064][T19074] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.5458: invalid indirect mapped block 1 (level 1) [ 653.318529][T19074] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #11: comm syz.1.5458: corrupted inode contents [ 653.338749][T19074] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 653.350842][T19074] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #11: comm syz.1.5458: corrupted inode contents [ 653.365027][T19074] EXT4-fs error (device loop1): ext4_truncate:4288: inode #11: comm syz.1.5458: mark_inode_dirty error [ 653.378094][T19074] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 653.387866][T19074] EXT4-fs (loop1): 1 truncate cleaned up [ 653.397344][T19074] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 653.495559][ C0] etas_es58x 1-1:0.2: es58x_check_rx_urb: Expected sequence 0xFECA for start of frame but got 0x015D. [ 653.506580][ C0] etas_es58x 1-1:0.2: es58x_check_crc: Bad CRC, urb_len: 9 [ 653.513813][ C0] etas_es58x 1-1:0.2: es58x_split_urb_try_recovery: Recovery failed [ 653.521831][ C0] etas_es58x 1-1:0.2: es58x_split_urb() returned error -EBADMSG [ 653.552649][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 653.578057][ T5457] etas_es58x 1-1:0.2 can0: bit-timing not yet defined [ 653.743375][ C0] etas_es58x 1-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 653.752634][ C0] etas_es58x 1-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 653.761871][ C0] etas_es58x 1-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 653.771096][ C0] etas_es58x 1-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 653.780315][ C0] etas_es58x 1-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 653.789556][ C0] etas_es58x 1-1:0.2 can0: es58x_write_bulk_callback: error -EPROTO [ 653.826114][ T5457] etas_es58x 1-1:0.2 can0: es58x_open: Could not open the network device: -EINVAL [ 653.853322][ T9] usb 1-1: USB disconnect, device number 49 [ 653.864568][ T9] etas_es58x 1-1:0.2: Disconnecting syz syz [ 654.291149][T19113] team0: Device gtp0 is of different type [ 654.389454][T19117] loop1: detected capacity change from 0 to 64 [ 654.426648][ T785] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 654.654675][ T785] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 654.697670][ T785] usb 4-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 654.734048][ T785] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.759248][ T785] usb 4-1: config 0 descriptor?? [ 654.971085][T19139] loop4: detected capacity change from 0 to 1024 [ 655.098241][ T12] hfsplus: b-tree write err: -5, ino 4 [ 655.225705][ T785] sony 0003:054C:024B.005E: unknown main item tag 0x0 [ 655.248817][ T785] sony 0003:054C:024B.005E: item fetching failed at offset 3/5 [ 655.261515][ T785] sony 0003:054C:024B.005E: parse failed [ 655.267815][ T785] sony: probe of 0003:054C:024B.005E failed with error -22 [ 655.286280][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 655.399599][T19149] team0: Device gtp0 is of different type [ 655.428988][ T785] usb 4-1: USB disconnect, device number 44 [ 655.490255][T19152] loop4: detected capacity change from 0 to 64 [ 656.137851][T19173] loop3: detected capacity change from 0 to 1024 [ 656.196406][T13540] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 656.310215][ T2945] hfsplus: b-tree write err: -5, ino 4 [ 656.386122][T13540] usb 1-1: Using ep0 maxpacket: 8 [ 656.418773][T13540] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 656.451141][T13540] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.492881][T13540] usb 1-1: Product: syz [ 656.506075][T13540] usb 1-1: Manufacturer: syz [ 656.518150][T13540] usb 1-1: SerialNumber: syz [ 656.533076][T13540] usb 1-1: config 0 descriptor?? [ 656.563276][T13540] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 656.601382][T19190] loop1: detected capacity change from 0 to 128 [ 656.609730][T13540] usb 1-1: setting power ON [ 656.615212][T13540] dvb-usb: bulk message failed: -22 (2/0) [ 656.645842][T13540] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 656.718738][T13540] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 656.744380][T13540] usb 1-1: media controller created [ 656.756091][T19190] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 656.817005][T19169] dvb-usb: bulk message failed: -22 (3/0) [ 656.844877][T19190] System zones: 1-3, 19-19, 35-36 [ 656.863201][T13540] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 656.873686][T19190] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 656.896734][T19190] ext4 filesystem being mounted at /1380/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 656.925805][T13540] usb 1-1: selecting invalid altsetting 6 [ 656.956106][T13540] usb 1-1: digital interface selection failed (-22) [ 656.989773][T13540] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 657.027481][T13540] usb 1-1: setting power OFF [ 657.032908][T13540] dvb-usb: bulk message failed: -22 (2/0) [ 657.046867][T13540] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 657.051256][T19206] loop4: detected capacity change from 0 to 1024 [ 657.077129][T13540] (NULL device *): no alternate interface [ 657.132580][ T5786] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 657.191220][T13540] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 657.234468][T13540] usb 1-1: USB disconnect, device number 50 [ 657.635369][T19221] loop1: detected capacity change from 0 to 1024 [ 657.806490][ T2981] hfsplus: b-tree write err: -5, ino 4 [ 657.936705][T19232] loop4: detected capacity change from 0 to 128 [ 657.944187][T19233] loop1: detected capacity change from 0 to 128 [ 657.988888][T19232] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 658.012070][T19232] System zones: 1-3, 19-19, 35-36 [ 658.027623][T19232] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 658.044868][T19233] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 658.068720][T19238] loop3: detected capacity change from 0 to 512 [ 658.087257][T19238] EXT4-fs: Ignoring removed oldalloc option [ 658.124252][T19238] EXT4-fs (loop3): 1 truncate cleaned up [ 658.135300][T19238] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 658.166358][T19232] ext4 filesystem being mounted at /1228/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 658.209948][T19233] ext4 filesystem being mounted at /1383/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 658.245030][T19238] EXT4-fs error (device loop3): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.3.5514: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 658.300201][T19238] EXT4-fs (loop3): Remounting filesystem read-only [ 658.382363][ T5786] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 658.399088][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 658.428205][ T8059] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 658.599228][T19249] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5520'. [ 658.615674][T19249] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5520'. [ 658.631522][T19249] nbd: socks must be embedded in a SOCK_ITEM attr [ 658.649309][T19253] loop3: detected capacity change from 0 to 128 [ 658.682774][T19253] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 658.715590][T19253] System zones: 1-3, 19-19, 35-36 [ 658.746062][T13540] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 658.770330][T19253] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 658.827110][T19253] ext4 filesystem being mounted at /1354/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 658.941303][T13540] usb 2-1: Using ep0 maxpacket: 8 [ 658.954769][T13540] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 658.974249][T13540] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.986764][T13540] usb 2-1: Product: syz [ 658.990958][T13540] usb 2-1: Manufacturer: syz [ 659.006267][T13540] usb 2-1: SerialNumber: syz [ 659.017412][ T5785] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 659.027572][T13540] usb 2-1: config 0 descriptor?? [ 659.049160][T13540] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 659.076107][T13540] usb 2-1: setting power ON [ 659.083199][T13540] dvb-usb: bulk message failed: -22 (2/0) [ 659.093269][T13540] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 659.105299][T13540] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 659.126824][T13540] usb 2-1: media controller created [ 659.168659][T13540] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 659.215757][T13540] usb 2-1: selecting invalid altsetting 6 [ 659.221943][ T9] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 659.236089][T13540] usb 2-1: digital interface selection failed (-22) [ 659.246648][T13540] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 659.270252][T13540] usb 2-1: setting power OFF [ 659.277579][T13540] dvb-usb: bulk message failed: -22 (2/0) [ 659.287568][T19247] dvb-usb: bulk message failed: -22 (3/0) [ 659.293512][T13540] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 659.309026][T13540] (NULL device *): no alternate interface [ 659.337919][T13540] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 659.358270][T13540] usb 2-1: USB disconnect, device number 43 [ 659.417607][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 659.432227][ T9] usb 5-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 659.442655][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.455141][ T9] usb 5-1: config 0 descriptor?? [ 659.482299][T19277] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5532'. [ 659.492253][T19277] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5532'. [ 659.501577][T19277] nbd: socks must be embedded in a SOCK_ITEM attr [ 659.536142][ T785] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 659.726070][ T785] usb 4-1: Using ep0 maxpacket: 32 [ 659.741315][ T785] usb 4-1: too many configurations: 17, using maximum allowed: 8 [ 659.751694][ T785] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 659.759813][ T785] usb 4-1: config 0 has no interface number 0 [ 659.767869][ T785] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 659.775882][ T785] usb 4-1: config 0 has no interface number 0 [ 659.783829][ T785] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 659.792545][ T785] usb 4-1: config 0 has no interface number 0 [ 659.800252][ T785] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 659.808428][ T785] usb 4-1: config 0 has no interface number 0 [ 659.818100][ T785] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 659.827028][ T785] usb 4-1: config 0 has no interface number 0 [ 659.834549][ T785] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 659.842690][ T785] usb 4-1: config 0 has no interface number 0 [ 659.850380][ T785] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 659.860024][ T785] usb 4-1: config 0 has no interface number 0 [ 659.867630][ T785] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 659.875633][ T785] usb 4-1: config 0 has no interface number 0 [ 659.884956][ T785] usb 4-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 659.888021][ T9] sony 0003:054C:024B.005F: unknown main item tag 0x0 [ 659.894856][ T785] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.909858][ T785] usb 4-1: Product: syz [ 659.911420][ T9] sony 0003:054C:024B.005F: item fetching failed at offset 3/5 [ 659.914033][ T785] usb 4-1: Manufacturer: syz [ 659.914048][ T785] usb 4-1: SerialNumber: syz [ 659.937096][ T9] sony 0003:054C:024B.005F: parse failed [ 659.938568][ T785] usb 4-1: config 0 descriptor?? [ 659.946142][ T9] sony: probe of 0003:054C:024B.005F failed with error -22 [ 659.958497][ T785] etas_es58x 4-1:0.2: Starting syz syz (Serial Number syz) [ 660.138130][ T9] usb 5-1: USB disconnect, device number 32 [ 660.178208][ T785] etas_es58x 4-1:0.2: could not parse product info: '' [ 660.582379][ C0] etas_es58x 4-1:0.2: es58x_check_rx_urb: Expected sequence 0xFECA for start of frame but got 0x015D. [ 660.593385][ C0] etas_es58x 4-1:0.2: es58x_check_crc: Bad CRC, urb_len: 9 [ 660.600580][ C0] etas_es58x 4-1:0.2: es58x_split_urb_try_recovery: Recovery failed [ 660.608563][ C0] etas_es58x 4-1:0.2: es58x_split_urb() returned error -EBADMSG [ 660.616483][ T5457] etas_es58x 4-1:0.2 can1: bit-timing not yet defined [ 660.782641][T19304] loop4: detected capacity change from 0 to 128 [ 660.809961][ C0] etas_es58x 4-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 660.819346][ C0] etas_es58x 4-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 660.828611][ C0] etas_es58x 4-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 660.837884][ C0] etas_es58x 4-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 660.847178][ C0] etas_es58x 4-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 660.856455][ C0] etas_es58x 4-1:0.2 can0: es58x_write_bulk_callback: error -EPROTO [ 660.863203][T19306] loop1: detected capacity change from 0 to 1024 [ 660.866926][ T9] usb 4-1: USB disconnect, device number 45 [ 660.871493][ T5457] etas_es58x 4-1:0.2 can1: es58x_open: Could not open the network device: -EINVAL [ 660.877949][ T9] etas_es58x 4-1:0.2: Disconnecting syz syz [ 660.943306][T19304] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 660.961634][T19304] ext4 filesystem being mounted at /1234/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 661.109338][ T8059] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 661.257666][T19316] loop1: detected capacity change from 0 to 512 [ 661.296439][T19316] EXT4-fs: Ignoring removed oldalloc option [ 661.380383][T19316] EXT4-fs (loop1): 1 truncate cleaned up [ 661.389788][T19316] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 661.508528][T19316] EXT4-fs error (device loop1): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.1.5539: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 661.588672][T19316] EXT4-fs (loop1): Remounting filesystem read-only [ 661.729641][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 661.835528][T19339] overlayfs: lower data-only dirs require metacopy support. [ 661.986661][ T785] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 662.186553][ T785] usb 5-1: Using ep0 maxpacket: 32 [ 662.194202][ T785] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 662.206239][ T785] usb 5-1: config 0 has no interface number 0 [ 662.220392][ T785] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 662.230150][ T785] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.240291][ T785] usb 5-1: Product: syz [ 662.251671][ T785] usb 5-1: Manufacturer: syz [ 662.269085][ T785] usb 5-1: SerialNumber: syz [ 662.287590][ T785] usb 5-1: config 0 descriptor?? [ 662.307614][ T785] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 662.341739][ T785] usb 5-1: selecting invalid altsetting 1 [ 662.353044][ T785] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 662.373839][ T785] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 662.414780][ T785] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 662.430174][ T785] usb 5-1: media controller created [ 662.492265][ T785] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 662.526724][ T5792] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 662.580484][ T785] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 662.601668][ T785] zl10353_read_register: readreg error (reg=127, ret==-71) [ 662.636194][ T785] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 662.728596][ T5792] usb 4-1: Using ep0 maxpacket: 16 [ 662.744556][ T5792] usb 4-1: config 156 has too many interfaces: 43, using maximum allowed: 32 [ 662.755677][ T785] usb 5-1: USB disconnect, device number 33 [ 662.759742][ T5792] usb 4-1: config 156 has an invalid descriptor of length 1, skipping remainder of the config [ 662.813846][ T5792] usb 4-1: config 156 has 0 interfaces, different from the descriptor's value: 43 [ 662.829188][ T5792] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 662.850998][ T5792] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.891815][ T5792] usb 4-1: Product: syz [ 662.906004][ T5792] usb 4-1: Manufacturer: syz [ 662.910658][ T5792] usb 4-1: SerialNumber: syz [ 663.180091][ T5792] usb 4-1: USB disconnect, device number 46 [ 663.656905][T19403] loop1: detected capacity change from 0 to 1024 [ 663.698182][T19403] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 663.736244][ T5792] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 663.746527][T19403] ext4 filesystem being mounted at /1397/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 663.930666][T19403] EXT4-fs (loop1): re-mounted 00000000-0000-0006-0000-000000000000 ro. [ 663.956812][ T5792] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 663.982884][ T5792] usb 5-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 664.002295][ T5792] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.019089][T19418] EXT4-fs (loop1): re-mounted 00000000-0000-0006-0000-000000000000. [ 664.045581][ T5792] usb 5-1: config 0 descriptor?? [ 664.056917][T19393] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 664.177948][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 664.519777][ T5792] belkin 0003:050D:3201.0060: unbalanced collection at end of report description [ 664.540666][ T5792] belkin 0003:050D:3201.0060: parse failed [ 664.548421][ T5792] belkin: probe of 0003:050D:3201.0060 failed with error -22 [ 664.767722][ T5792] usb 5-1: USB disconnect, device number 34 [ 664.885035][T19452] program syz.0.5587 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 665.288780][T19472] loop1: detected capacity change from 0 to 64 [ 665.355684][ T28] audit: type=1800 audit(1755789253.831:188): pid=19472 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5597" name="file1" dev="loop1" ino=18 res=0 errno=0 [ 665.400790][T19472] syz.1.5597: attempt to access beyond end of device [ 665.400790][T19472] loop1: rw=34817, sector=14, nr_sectors = 65 limit=64 [ 665.487335][T19478] loop3: detected capacity change from 0 to 512 [ 665.526198][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 665.546380][T19478] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 665.571680][T19478] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 665.595622][T19478] EXT4-fs (loop3): 1 truncate cleaned up [ 665.613195][T19478] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 665.689952][T19478] EXT4-fs: user quota file already specified [ 665.722488][T19483] loop1: detected capacity change from 0 to 4096 [ 665.789713][T19483] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 665.805766][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 665.880295][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 666.307208][ T785] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 666.496089][ T785] usb 2-1: Using ep0 maxpacket: 32 [ 666.504489][ T785] usb 2-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 666.560760][ T785] usb 2-1: config 0 interface 0 has no altsetting 0 [ 666.576337][ T5108] Bluetooth: hci4: command 0x0406 tx timeout [ 666.586706][ T785] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 666.604339][ T785] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.631930][ T785] usb 2-1: config 0 descriptor?? [ 667.092552][ T785] corsair-psu 0003:1B1C:1C09.0061: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.1-1/input0 [ 667.197356][ T785] corsair-psu 0003:1B1C:1C09.0061: unable to initialize device (-38) [ 667.243667][ T785] corsair-psu: probe of 0003:1B1C:1C09.0061 failed with error -38 [ 667.303064][ T785] usb 2-1: USB disconnect, device number 44 [ 667.741020][T19518] loop4: detected capacity change from 0 to 40427 [ 667.773098][T19518] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 667.781140][T19518] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 667.821308][T19518] F2FS-fs (loop4): Found nat_bits in checkpoint [ 667.894277][T19525] loop3: detected capacity change from 0 to 32768 [ 667.919592][T19518] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 667.938210][T19525] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.5622 (19525) [ 667.948675][T19533] loop1: detected capacity change from 0 to 128 [ 667.954857][T19518] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 668.024528][T19525] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 668.038722][T19533] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 668.056584][T19525] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 668.065430][T19525] BTRFS info (device loop3): setting nodatacow, compression disabled [ 668.084643][T19533] ext4 filesystem being mounted at /1409/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 668.111254][T19518] fscrypt (loop4, inode 3): Error -61 getting encryption context [ 668.145691][T19525] BTRFS info (device loop3): max_inline at 0 [ 668.157925][T19525] BTRFS info (device loop3): enabling disk space caching [ 668.190942][T19525] BTRFS info (device loop3): turning off barriers [ 668.205164][T19525] BTRFS info (device loop3): turning on flush-on-commit [ 668.238191][T19525] BTRFS info (device loop3): doing ref verification [ 668.263043][T19525] BTRFS info (device loop3): force clearing of disk cache [ 668.278729][ T5786] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 668.300678][T19525] BTRFS info (device loop3): enabling ssd optimizations [ 668.318246][T19525] BTRFS info (device loop3): max_inline at 4096 [ 668.351295][T19525] BTRFS info (device loop3): disk space caching is enabled [ 668.534883][T19525] BTRFS info (device loop3): auto enabling async discard [ 668.599087][T19525] BTRFS info (device loop3): rebuilding free space tree [ 668.670017][T19525] BTRFS info (device loop3): disabling free space tree [ 668.711849][T19525] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 668.753014][T19525] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 668.902422][T19567] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 668.935705][T19566] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 669.078815][ T5785] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 669.223611][T19578] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5638'. [ 669.262607][T19576] loop4: detected capacity change from 0 to 4096 [ 669.410295][T19576] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 669.487810][T19576] ntfs3: loop4: failed to convert "0080" to cp936 [ 669.540415][T19576] ntfs3: loop4: failed to convert name for inode 1e. [ 669.934692][T19596] loop4: detected capacity change from 0 to 2048 [ 669.968813][T19600] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 670.356506][T19611] program syz.3.5653 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 670.596566][T19619] netlink: 'syz.3.5657': attribute type 1 has an invalid length. [ 670.626214][T19619] NCSI netlink: No device for ifindex 0 [ 670.647744][T19598] loop1: detected capacity change from 0 to 32768 [ 670.725863][T19598] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 670.982376][T19598] XFS (loop1): Ending clean mount [ 671.147982][ T5786] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 671.915025][T19674] loop1: detected capacity change from 0 to 256 [ 671.946395][T19676] netlink: 'syz.0.5679': attribute type 1 has an invalid length. [ 671.954185][T19676] netlink: 228 bytes leftover after parsing attributes in process `syz.0.5679'. [ 672.071054][T19674] FAT-fs (loop1): Directory bread(block 64) failed [ 672.105293][T19674] FAT-fs (loop1): Directory bread(block 65) failed [ 672.134791][T19674] FAT-fs (loop1): Directory bread(block 66) failed [ 672.158380][T19674] FAT-fs (loop1): Directory bread(block 67) failed [ 672.175203][T19674] FAT-fs (loop1): Directory bread(block 68) failed [ 672.182828][T19686] overlayfs: lower data-only dirs require metacopy support. [ 672.199673][T19674] FAT-fs (loop1): Directory bread(block 69) failed [ 672.210817][T19674] FAT-fs (loop1): Directory bread(block 70) failed [ 672.240915][T19674] FAT-fs (loop1): Directory bread(block 71) failed [ 672.248722][T19674] FAT-fs (loop1): Directory bread(block 72) failed [ 672.255309][T19674] FAT-fs (loop1): Directory bread(block 73) failed [ 672.422231][T19694] loop3: detected capacity change from 0 to 1024 [ 672.602539][T19700] loop4: detected capacity change from 0 to 1024 [ 672.628589][T19700] EXT4-fs: Ignoring removed nobh option [ 672.634197][T19700] EXT4-fs: Ignoring removed bh option [ 672.687433][ T3486] hfsplus: b-tree write err: -5, ino 4 [ 672.750828][T19700] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 672.766535][T19706] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 672.787677][T19703] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 672.884253][ T8059] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 672.968506][T19713] loop1: detected capacity change from 0 to 64 [ 673.117441][ T2945] ------------[ cut here ]------------ [ 673.122994][ T2945] kernel BUG at fs/hfs/inode.c:449! [ 673.150846][ T2945] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 673.156977][ T2945] CPU: 0 PID: 2945 Comm: kworker/u4:8 Not tainted 6.6.102-syzkaller #0 [ 673.165241][ T2945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 673.175401][ T2945] Workqueue: writeback wb_workfn (flush-7:1) [ 673.181439][ T2945] RIP: 0010:hfs_write_inode+0x7c4/0x7d0 [ 673.187005][ T2945] Code: c7 c1 e0 d2 ee 96 80 e1 07 80 c1 03 38 c1 0f 8c 7d fe ff ff 48 c7 c7 e0 d2 ee 96 e8 36 05 86 ff e9 6c fe ff ff e8 1c be 2e ff <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 55 41 57 41 56 41 [ 673.206694][ T2945] RSP: 0018:ffffc9000bf8f360 EFLAGS: 00010293 [ 673.212831][ T2945] RAX: ffffffff8256cd04 RBX: ffff88807baf28a8 RCX: ffff88802c543c00 [ 673.220813][ T2945] RDX: 0000000000000000 RSI: ffffffff8cf38480 RDI: 0000000000000000 [ 673.228991][ T2945] RBP: ffffc9000bf8f4f0 R08: ffff88802c543c00 R09: 0000000000000003 [ 673.236961][ T2945] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000 [ 673.244956][ T2945] R13: 1ffff920017f1e70 R14: ffff88807baf2858 R15: 0000000000000000 [ 673.252934][ T2945] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 673.261867][ T2945] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 673.268446][ T2945] CR2: 00007fab02d84198 CR3: 0000000019afe000 CR4: 00000000003506f0 [ 673.276477][ T2945] Call Trace: [ 673.279740][ T2945] [ 673.282660][ T2945] ? hfs_inode_write_fork+0x1a0/0x1a0 [ 673.288033][ T2945] ? __rwlock_init+0x150/0x150 [ 673.292789][ T2945] __writeback_single_inode+0x705/0xee0 [ 673.298330][ T2945] writeback_sb_inodes+0x77c/0xef0 [ 673.303436][ T2945] ? queue_io+0x560/0x560 [ 673.307799][ T2945] ? rcu_is_watching+0x15/0xb0 [ 673.312555][ T2945] wb_writeback+0x450/0xba0 [ 673.317066][ T2945] ? queue_io+0x331/0x560 [ 673.321387][ T2945] ? percpu_ref_tryget+0x250/0x250 [ 673.326510][ T2945] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 673.332631][ T2945] ? _raw_spin_unlock_irq+0x23/0x50 [ 673.337820][ T2945] wb_workfn+0x3ff/0xe20 [ 673.342065][ T2945] ? inode_wait_for_writeback+0x200/0x200 [ 673.347771][ T2945] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 673.353737][ T2945] ? read_lock_is_recursive+0x20/0x20 [ 673.359183][ T2945] ? _raw_spin_unlock_irq+0x23/0x50 [ 673.364370][ T2945] ? process_scheduled_works+0x957/0x15b0 [ 673.370078][ T2945] ? process_scheduled_works+0x957/0x15b0 [ 673.375797][ T2945] process_scheduled_works+0xa45/0x15b0 [ 673.381345][ T2945] ? assign_work+0x400/0x400 [ 673.385948][ T2945] ? assign_work+0x39e/0x400 [ 673.390540][ T2945] worker_thread+0xa55/0xfc0 [ 673.395144][ T2945] kthread+0x2fa/0x390 [ 673.399199][ T2945] ? pr_cont_work+0x560/0x560 [ 673.403861][ T2945] ? kthread_blkcg+0xd0/0xd0 [ 673.408435][ T2945] ret_from_fork+0x48/0x80 [ 673.413041][ T2945] ? kthread_blkcg+0xd0/0xd0 [ 673.417703][ T2945] ret_from_fork_asm+0x11/0x20 [ 673.422468][ T2945] [ 673.425486][ T2945] Modules linked in: [ 673.436484][ T2945] ---[ end trace 0000000000000000 ]--- [ 673.441988][ T2945] RIP: 0010:hfs_write_inode+0x7c4/0x7d0 [ 673.448970][ T2945] Code: c7 c1 e0 d2 ee 96 80 e1 07 80 c1 03 38 c1 0f 8c 7d fe ff ff 48 c7 c7 e0 d2 ee 96 e8 36 05 86 ff e9 6c fe ff ff e8 1c be 2e ff <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 55 41 57 41 56 41 [ 673.469549][ T2945] RSP: 0018:ffffc9000bf8f360 EFLAGS: 00010293 [ 673.475662][ T2945] RAX: ffffffff8256cd04 RBX: ffff88807baf28a8 RCX: ffff88802c543c00 [ 673.484033][ T2945] RDX: 0000000000000000 RSI: ffffffff8cf38480 RDI: 0000000000000000 [ 673.492160][ T2945] RBP: ffffc9000bf8f4f0 R08: ffff88802c543c00 R09: 0000000000000003 [ 673.500322][ T2945] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000 [ 673.508330][ T2945] R13: 1ffff920017f1e70 R14: ffff88807baf2858 R15: 0000000000000000 [ 673.516648][ T2945] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 673.525623][ T2945] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 673.532468][ T2945] CR2: 00007fab02d84198 CR3: 000000002f0f0000 CR4: 00000000003506f0 [ 673.541687][ T2945] Kernel panic - not syncing: Fatal exception [ 673.548035][ T2945] Kernel Offset: disabled [ 673.552350][ T2945] Rebooting in 86400 seconds..