last executing test programs: 54.99994495s ago: executing program 0 (id=660): r0 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi1\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$ttyS3(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x8400, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r2, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x271c, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000}, 0x38) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x20000080) bpf$ITER_CREATE(0xb, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x140800, 0x0) epoll_create1(0x80000) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000001c0)=0x3) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4001, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c) open(&(0x7f0000000240)='./cgroup.cpu/cgroup.procs\x00', 0x60000, 0x80) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000000)={'8255\x00', [0xf000, 0x6, 0x2, 0xc, 0x90000, 0x9, 0x40000, 0x88f, 0x280ffa, 0xfffffdfc, 0x5, 0x8, 0x1030, 0x1000008, 0x30, 0x40000009, 0xfff7ffa6, 0x3fb, 0x912, 0xfffffffe, 0x3, 0x9, 0xc, 0x8001, 0x1, 0x200, 0xffff, 0x400018, 0x82, 0x2000006, 0x5]}) 54.57497937s ago: executing program 0 (id=664): socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x20004080) mmap$IORING_OFF_SQ_RING(0x0, 0xc, 0x2000002, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000300000000000000fcf142525f0000"], 0x0}, 0x94) r1 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) r3 = msgget$private(0x0, 0x3ac) msgrcv(r3, 0x0, 0x0, 0x2, 0x2000) msgsnd(r3, &(0x7f0000000300)={0x2}, 0x8, 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000400), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000480)=0x6) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1544010001800000240012800b0001006d616373656300001400028005000c0001000000080005000400000008000500", @ANYRES32=r0], 0x54}}, 0x0) 52.836015412s ago: executing program 0 (id=668): sched_setscheduler(0x0, 0x1, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sysvipc/msg\x00', 0x0, 0x0) read$char_usb(r0, &(0x7f0000000240)=""/159, 0x9f) 52.49516528s ago: executing program 0 (id=671): socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x81) sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000600), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000640), 0x10106, 0x2, 0x0) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000680)='.\x00', 0x8000004d) mkdir(&(0x7f00000006c0)='./bus\x00', 0x0) chown(&(0x7f0000000700)='./bus\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x10008, &(0x7f00000007c0)={[{@nombcache}, {@nogrpid}]}, 0xfe, 0x4ab, &(0x7f0000000800)="$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") r4 = syz_open_dev$loop(&(0x7f0000000100), 0x10, 0x1ac902) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e68080b8785d960001000000000000000000007efff100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd5992861ac00", "f4bd0000009f190900000000000171250000000000017000", [0x7, 0xffffffff9673e35d]}}) 51.247444829s ago: executing program 0 (id=676): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/wireless\x00') read$FUSE(r1, &(0x7f0000004100)={0x2020}, 0x2020) read$FUSE(r1, &(0x7f00000020c0)={0x2020}, 0x2020) 49.10647895s ago: executing program 0 (id=682): socket$kcm(0x10, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='.\x00', &(0x7f0000000240)='gfs2\x00', 0x100801f, 0x0) add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f0000000040)={'fscrypt:', @desc2}, &(0x7f0000000100)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff) r1 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, 0x0) 48.521081134s ago: executing program 32 (id=682): socket$kcm(0x10, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='.\x00', &(0x7f0000000240)='gfs2\x00', 0x100801f, 0x0) add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f0000000040)={'fscrypt:', @desc2}, &(0x7f0000000100)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff) r1 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, 0x0) 17.827905435s ago: executing program 3 (id=749): syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0xc2, 0x43, 0x79, 0x10, 0x5a9, 0x2641, 0x597b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x5, 0x3, 0x80, 0x7, "", [{{0x9, 0x4, 0xca, 0x0, 0x1, 0xe, 0x1, 0x0, 0xa5, [], [{{0x9, 0x5, 0xc, 0x3, 0x10, 0x0, 0x0, 0x4}}]}}]}}]}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 16.374487179s ago: executing program 4 (id=753): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000100)=ANY=[@ANYBLOB="0000f500"], 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 14.935892004s ago: executing program 3 (id=755): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f00000004c0)={[{@nomblk_io_submit}, {@jqfmt_vfsv0}, {@min_batch_time={'min_batch_time', 0x3d, 0x200003ff}}, {@noload}, {@grpjquota_path={'grpjquota', 0x3d, '.\x02'}}, {@noblock_validity}, {@resgid}, {@nobarrier}, {@errors_continue}]}, 0xfa, 0x4a9, &(0x7f0000000580)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001100)={0xffffffffffffffff, 0x2000000, 0xe, 0x0, &(0x7f0000001180)="0000000002000000000000000000", 0x0, 0x3000002, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 14.360507608s ago: executing program 3 (id=757): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x20120) syz_open_dev$usbfs(&(0x7f0000000000), 0x6, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000100)="8907040400", 0x5) 14.187895282s ago: executing program 5 (id=683): sched_setscheduler(0x0, 0x1, 0x0) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$char_usb(r0, &(0x7f0000000240)=""/159, 0x9f) 13.981065296s ago: executing program 4 (id=759): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x2200000, &(0x7f0000000540)={[{@discard}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@grpquota}, {@stripe={'stripe', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@inlinecrypt}, {@noauto_da_alloc}, {@dioread_nolock}]}, 0xb, 0x57b, &(0x7f0000001300)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000018c0)='./file1\x00', 0x143042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000001900)='./file1\x00', 0x48042, 0x8c) fallocate(r1, 0x0, 0x0, 0x8010007) pwritev2(r0, &(0x7f0000001940)=[{&(0x7f0000001980)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./file1\x00', 0x46042, 0x179) preadv2(r2, &(0x7f0000001140)=[{&(0x7f0000001180)=""/249, 0xf9}], 0x1, 0x8e1, 0x1, 0x8) 13.945240597s ago: executing program 5 (id=760): socket$inet_udp(0x2, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) write$UHID_INPUT(r0, &(0x7f0000002b40)={0xe, {"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", 0x942}}, 0x1006) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, r4) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) r6 = inotify_init1(0x0) r7 = inotify_add_watch(r6, &(0x7f0000000440)='.\x00', 0x20000000) write$binfmt_elf32(r5, &(0x7f0000005640)=ANY=[@ANYRES16=r7], 0x69) close(r5) execve(&(0x7f0000010340)='./file0\x00', 0x0, 0x0) 13.101662277s ago: executing program 3 (id=761): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000bc0)='./file1\x00', 0x22040, &(0x7f0000000200)={[{@jqfmt_vfsold}], [{@seclabel}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@dont_appraise}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@subj_type={'subj_type', 0x3d, '%!'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@appraise}]}, 0x1, 0xbb3, &(0x7f0000020400)="$eJzs3c9vVNUeAPDvvZ3+oOW9lpe3eLyYUOMCEsO0BRQkLsClujCRBF1h7Q/SMIDSmlhCYtmZuFGDK1eu1ESXujTEqHHhwuiK/8CQNKbwB9TcO3fK0M60FGZ6tXw+ye2cM2eG872TfOecO/dcbgCPrdHsTxqxPyI+TCKGi+fTiOjLSwMRS/XX3V25NpVtSayuvvpnEklE3Fm5NtX4t5LicSj7U8nfGb99H/Gfno39zi9evTBZq81cKepjCxffGptfvHp47uLk+ZnzM5eOPDt+dOK5YyeeOXbvTQOPtq+Lx9MPfn3xhS9unPv0l69PPPF+Eqdib9HWvB+dMhqja59Js0pEvN7pzkrSU+xPq/28X9+OxAMAwObSpjnc/hiOnrxUNxzVuVKDAwAAADrivYhYBQAAAHa5xPE/AAAA7HKNdQB3Vq5NNbZyVyQAO2X5dESM1PO/cX1/vaUSS/njQPRGxODdpOnKoPr13iMd6H80Ir765PiBbIsuXYcPtLZ0PSL+12r8T/L8Hyn+0431+Z9GxHgH+h9dV5f/sHNa5X/9uGDr/D/Vgf7lPwAAAAAAAHTOzdP1E/kbz/+na+t/osX5v54W5+4extbn/9LbHegGaGH5dMTzTff2uduU/4WRnqL2r3w9QG8yO1ebGY+If0fEoejtz+oTm/Tx+Tcnf2/X1rz+L9uy/htrAYs4blf673/P9OTC5KPsM1C3fD3i/5VW+Z+sjf/JuvG/r1j/+8oD9vHj2e9m27Vtnf9At6x+FnGw5fh/745uyeb35xvL5wNjjVnBRmef/OHLdv3LfyhPNv4Pbp7/I0nz/Trnt9/H+ODh8+3aHnb+35ecye8q2rir5LuTCwtXJiL6kpc3Pn9k+zHDbtTIh0a+ZPl/6KnWx//t5v9R/P73RvEtkUbEZPGY1d9c12f/uZ8+aheP8R/Ks/x2xPS2xv/tFz5+beVMu/4fbPw/lo/ph4pn/P4Hm3vQBC07TgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPg7SSNibyRpda2cptVqxFBE/DcG09rl+YWnZy+/c2k6a4sYid50dq42Mx4Rw/V6ktUn8vK9+pF19aMRsS8ibgzvyevVqcu16bJ3HgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDVDEbE3krQaEWleTtNqtd72x3DZ0QEAAAAdM1J2AAAAAEDXOf4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4BHtO3DzVhIRSyf35Fumr2jrLTUyoNvSiPi57CCAUvSUHQBQmkrZAQClcYwPJFu0D7RtMYMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeJwc3H/zVhIRSyf35Fumr2jrLTUyoNvS7by4v3txADuvp+wAgNJUyg4AKE3bY/xvh3Y2EKA0yRbtA21bWswgTCoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdq35xasXJmu1mSsKmxYqEdHdLgYiYkd256W07A9T4R9QKPubCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgN3srwAAAP//YnT9VA==") mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1e6) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x3f) syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x1808e2) openat$sysfs(0xffffffffffffff9c, 0x0, 0x20001, 0x18b) r0 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000200)=0xfffeffff, 0x4) sendmsg$AUDIT_SIGNAL_INFO(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x3f2, 0x1, 0x70bd2c, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x84}, 0x4004c081) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x7, &(0x7f0000000000/0x400000)=nil) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000001c0)=0x20000088) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x399446c, 0x0, 0x1, 0x0, &(0x7f0000000080)) 13.00123374s ago: executing program 1 (id=762): openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000680)='/dev/comedi0\x00', 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="280000000c060101000000000000000000000004050001009ec9a59322fe10d8dbb2def971540f991096f56aa22e9fd63fc945bfa6225fa333790959afccdac0b7f08fefe66c"], 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100088b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) listen(0xffffffffffffffff, 0x5) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x50) r1 = socket$inet(0x2, 0x2, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xd) sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0x1c}}, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0x28) 12.362540075s ago: executing program 3 (id=763): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000180), 0x2, 0x79a, &(0x7f0000000380)="$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") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x20120) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000100)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000280)='erspan0\x00', 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000300)='xfrm0\x00', 0x10) connect$inet(r3, &(0x7f0000000c80)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r3, &(0x7f0000000cc0)=[{{&(0x7f0000000d00)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) 11.949606065s ago: executing program 4 (id=764): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="00dc6b"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41b}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42c}}, 0x0, 0x0, 0x0}, 0x0) 11.900317526s ago: executing program 5 (id=765): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000002c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000300), 0x10106, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000580)="e0c2", 0x2}], 0x1) setns(0xc9, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000006c0)={'wlan0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) r4 = add_key$user(&(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000580), 0x14b, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f00000005c0)={r4, r4, r4}, 0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={'streebog256\x00'}}) 11.777452169s ago: executing program 1 (id=766): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0xb, "0fc1cd79"}]}}, 0x0}, 0x0) syz_usb_control_io$uac2(0xffffffffffffffff, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000540)={0x0, 0x16, 0xaf, "bcdfa16dbdbbccbc0cd6374e2aa86a5b8b573a38fa1e2ab0c9b2776edd3bf2cfd2b55e1d0cd3698127d610c13e5f8ab231f09d4452b18e79d876dad6dbae0521d396865297ac2658f1b0bb3b11b2648ee3eba6babe51117fac88bb7cf9f97e79e3b42529d2f159ffb06ff6beb991958db6a2a757403637b2ecf34a40c2846afce5a47a0923c0807f4ae47821ccf01cef3d70fdacba5c9459ad9fb2efc1e78c3d93787845a0a5ba99474d85ddd27f0e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r0, 0x81, 0xf8, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d70") 11.31547734s ago: executing program 2 (id=767): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000008c0)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000900)={'syzkaller0\x00', 0x1}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r2, &(0x7f0000000940), 0x12) listen(r2, 0x1) write$tun(r0, &(0x7f0000000980)=ANY=[@ANYBLOB="00000805000001"], 0x88) accept(r2, 0x0, 0x0) 10.115396579s ago: executing program 2 (id=768): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f00000004c0)={[{@nomblk_io_submit}, {@jqfmt_vfsv0}, {@min_batch_time={'min_batch_time', 0x3d, 0x200003ff}}, {@noload}, {@grpjquota_path={'grpjquota', 0x3d, '.\x02'}}, {@noblock_validity}, {@resgid}, {@nobarrier}, {@errors_continue}]}, 0xfa, 0x4a9, &(0x7f0000000580)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x6, 0xc, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f00000010c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001100)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000001180)="0000000002000000000000000000", 0x0, 0x3000002, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 9.575994201s ago: executing program 2 (id=769): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000440)={0xfffe, 0x41aa, 0x6, 0x0, 0x8, 0x90, 0x8}, 0xc) bind$bt_l2cap(r0, &(0x7f0000000480)={0x1f, 0x0, @any, 0xfff8}, 0xe) connect$bt_l2cap(r0, &(0x7f00000004c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmmsg$inet(r0, &(0x7f0000001c80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f00000005c0)="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", 0x377}], 0x1}}], 0x2, 0x2400c8c4) 9.390393226s ago: executing program 2 (id=770): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000100)=ANY=[@ANYBLOB="0000f5000000"], 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 9.378097196s ago: executing program 5 (id=771): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000200)=0x81) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r3, &(0x7f000000bc00)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, 0x0, 0x2004c884) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000300)={0x40000000, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r5, &(0x7f00000003c0)={0x2, 0x0, @local}, 0x16) connect$inet(r5, &(0x7f0000000400)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r5, &(0x7f0000000540), 0x800001d, 0x1c) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000024d40)=0x100000001, 0x4) connect$inet6(r4, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000024dc0), 0x3) 7.53253334s ago: executing program 5 (id=772): ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000080)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f00000000c0)={@hyper}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(0xffffffffffffffff, 0x7b1, &(0x7f0000001780)={0x0, 0x5, 0x0, 0x25}) 7.171951749s ago: executing program 1 (id=773): socket$kcm(0x10, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000500), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='.\x00', &(0x7f0000000240)='gfs2\x00', 0x100801f, 0x0) add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f0000000040)={'fscrypt:', @desc2}, &(0x7f0000000100)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff) r1 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"4772ffacff04856ec9e8776f8ee906be", "2dfad343e15ead11f40c897700", "0000b3f88813da82b4cf00"}, 0x3eaf, 0x4}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f00000001c0)={0x80, 0x0, 0x0, 0x5, 0x4}) 6.987503533s ago: executing program 4 (id=774): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000240)=ANY=[@ANYBLOB="201504000000ab"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000280)={0x2c, &(0x7f00000002c0)={0x20, 0x15, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000440)={0x40, 0xa, 0x4, "b43b29fe"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000540)={0x0, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.648641025s ago: executing program 3 (id=775): set_mempolicy(0x3, &(0x7f0000000300)=0xfffffffffffffff7, 0x9) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000740)={'veth1_virt_wifi\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000c00)=0x3da, 0x4) sendto$packet(r2, &(0x7f0000000c40)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000cc0)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 5.352777712s ago: executing program 2 (id=776): openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000680)='/dev/comedi0\x00', 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="280000000c060101000000000000000000000004050001009ec9a59322fe10d8dbb2def971540f991096f56aa22e9fd63fc945bfa6225fa333790959afccdac0b7f08fefe66c"], 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100088b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) listen(0xffffffffffffffff, 0x5) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x50) r1 = socket$inet(0x2, 0x2, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xd) sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0x1c}}, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0x28) 3.584764414s ago: executing program 1 (id=777): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x42, 0x162) lseek(r0, 0xfffffffffffffff8, 0x4) 3.455995257s ago: executing program 4 (id=778): socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x6, 0x371, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2, 0x0, {}, 0xfe}, 0x18) connect$can_j1939(r1, &(0x7f0000000140)={0x1d, r2, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r1, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 3.183274354s ago: executing program 1 (id=779): r0 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f00000001c0)=0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000280)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x8, @mcast2, 0x2}}}, 0x30) pipe(0x0) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x3) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x80, 0x4) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 207.867324ms ago: executing program 4 (id=780): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f00000004c0)={[{@nomblk_io_submit}, {@jqfmt_vfsv0}, {@min_batch_time={'min_batch_time', 0x3d, 0x200003ff}}, {@noload}, {@grpjquota_path={'grpjquota', 0x3d, '.\x02'}}, {@noblock_validity}, {@resgid}, {@nobarrier}, {@errors_continue}]}, 0xfa, 0x4a9, &(0x7f0000000580)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x6, 0xc, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f00000010c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001100)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000001180)="0000000002000000000000000000", 0x0, 0x3000002, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 203.429235ms ago: executing program 2 (id=781): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000002c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000300), 0x10106, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000580)="e0c2", 0x2}], 0x1) setns(0xc9, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000006c0)={'wlan0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) r4 = add_key$user(&(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000580), 0x14b, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f00000005c0)={r4, r4, r4}, 0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={'streebog256\x00'}}) 0s ago: executing program 1 (id=782): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000065c0)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000006740)='config\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000006600)='./config/target/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000006640)='./config/target/usb_gadget/naa.6001405c935d7912\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000006680)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1\x00', 0x1ff) kernel console output (not intermixed with test programs): arsing attributes in process `syz.0.288'. [ 213.384905][ T5642] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 213.449323][ T5642] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 213.547454][ T4448] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 214.485602][ T5126] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 214.912804][ T5660] loop0: detected capacity change from 0 to 164 [ 214.964967][ T5662] loop2: detected capacity change from 0 to 512 [ 215.020814][ T5662] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 215.042140][ T5126] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 215.062140][ T5126] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.077562][ T5126] usb 4-1: Product: syz [ 215.087899][ T5126] usb 4-1: Manufacturer: syz [ 215.092660][ T5126] usb 4-1: SerialNumber: syz [ 215.098863][ T5662] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.296: invalid indirect mapped block 256 (level 1) [ 215.148464][ T5662] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.296: invalid indirect mapped block 2683928664 (level 1) [ 215.178496][ T5662] EXT4-fs (loop2): 1 truncate cleaned up [ 215.184313][ T5662] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 215.232542][ T5666] loop1: detected capacity change from 0 to 4096 [ 215.278309][ T5666] EXT4-fs: inline encryption not supported [ 215.332270][ T5126] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 215.348286][ T5666] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 215.378351][ T5126] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 215.391764][ T5666] EXT4-fs (loop1): Test dummy encryption mode enabled [ 215.413060][ T5666] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 216.329110][ T5679] netlink: 8 bytes leftover after parsing attributes in process `syz.0.298'. [ 216.387778][ T5126] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -32 [ 216.413109][ T5126] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 216.455952][ T5126] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 216.555243][ T5126] lan78xx: probe of 4-1:1.0 failed with error -32 [ 216.881720][ T4279] EXT4-fs (loop2): unmounting filesystem. [ 217.000159][ T5693] loop2: detected capacity change from 0 to 128 [ 217.015204][ T5693] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 217.034197][ T5692] netlink: 24 bytes leftover after parsing attributes in process `syz.4.300'. [ 217.061248][ T5693] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 217.256682][ T4524] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 218.189120][ T4359] usb 4-1: USB disconnect, device number 10 [ 218.397235][ T4362] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 218.687096][ T5126] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 219.265957][ T4362] usb 3-1: device descriptor read/64, error -71 [ 220.225131][ T5710] loop3: detected capacity change from 0 to 164 [ 220.295730][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 220.308955][ T5126] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 220.321319][ T5126] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 220.345546][ T5126] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.385807][ T5126] usb 5-1: config 0 descriptor?? [ 220.407139][ T4362] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 220.544168][ T5715] loop3: detected capacity change from 0 to 512 [ 220.567190][ T4362] usb 3-1: device descriptor read/64, error -71 [ 220.629334][ T5715] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 220.648600][ T5715] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.310: invalid indirect mapped block 256 (level 1) [ 220.683068][ T5715] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.310: invalid indirect mapped block 2683928664 (level 1) [ 220.698358][ T4362] usb usb3-port1: attempt power cycle [ 220.713669][ T5715] EXT4-fs (loop3): 1 truncate cleaned up [ 220.722907][ T5715] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 220.825184][ T5126] keytouch 0003:0926:3333.0007: fixing up Keytouch IEC report descriptor [ 220.839644][ T5126] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0007/input/input9 [ 220.935338][ T5126] keytouch 0003:0926:3333.0007: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 221.241543][ T4380] usb 5-1: USB disconnect, device number 10 [ 221.553982][ T5729] netlink: 24 bytes leftover after parsing attributes in process `syz.2.312'. [ 221.632232][ T4362] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 221.679069][ T4281] EXT4-fs (loop3): unmounting filesystem. [ 221.696057][ T5723] fido_id[5723]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 221.772147][ T5734] netlink: 8 bytes leftover after parsing attributes in process `syz.1.313'. [ 222.258835][ T4362] usb 3-1: device not accepting address 18, error -71 [ 222.407069][ T5126] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 223.352775][ T5126] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 223.374679][ T5126] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 223.430638][ T5750] syz.2.319: attempt to access beyond end of device [ 223.430638][ T5750] nbd2: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 223.443979][ T5750] gfs2: error 10 reading superblock [ 223.484518][ T5126] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 224.224362][ T5753] loop1: detected capacity change from 0 to 128 [ 224.233773][ T5753] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 224.247328][ T5753] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 224.260455][ T5749] loop4: detected capacity change from 0 to 4096 [ 224.274592][ T5749] EXT4-fs: inline encryption not supported [ 224.275694][ T5126] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.293301][ T5126] usb 1-1: config 0 descriptor?? [ 224.311642][ T5749] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 224.347298][ T5749] EXT4-fs (loop4): Test dummy encryption mode enabled [ 224.404952][ T9] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 224.443530][ T5749] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 224.516809][ T4380] usb 1-1: USB disconnect, device number 14 [ 225.071212][ T5772] netlink: 24 bytes leftover after parsing attributes in process `syz.1.325'. [ 225.107224][ T4380] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 225.302638][ T4380] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 225.327189][ T4380] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 225.377900][ T4380] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 225.416299][ T4380] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.466096][ T4380] usb 1-1: config 0 descriptor?? [ 225.518430][ T5769] fscrypt (loop4): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 225.612643][ T5773] fscrypt (loop4): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 225.625427][ T5787] loop2: detected capacity change from 0 to 512 [ 225.683272][ T5787] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 225.728512][ T5787] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.327: invalid indirect mapped block 256 (level 1) [ 225.835536][ T5787] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.327: invalid indirect mapped block 2683928664 (level 1) [ 225.850786][ T5787] EXT4-fs (loop2): 1 truncate cleaned up [ 225.856624][ T5787] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 226.899241][ T4279] EXT4-fs (loop2): unmounting filesystem. [ 226.912459][ T4362] usb 1-1: USB disconnect, device number 15 [ 227.058932][ T4270] EXT4-fs (loop4): unmounting filesystem. [ 227.179587][ T5806] loop2: detected capacity change from 0 to 2048 [ 227.288479][ T5806] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 227.306343][ T5811] netlink: 8 bytes leftover after parsing attributes in process `syz.4.332'. [ 227.320531][ T5811] device gretap0 entered promiscuous mode [ 227.368314][ T5813] loop0: detected capacity change from 0 to 128 [ 227.389742][ T5813] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 227.431992][ T5813] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 227.683387][ T4525] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 228.300258][ T4279] EXT4-fs (loop2): unmounting filesystem. [ 228.606433][ T5822] netlink: 24 bytes leftover after parsing attributes in process `syz.0.336'. [ 229.681630][ T5126] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 229.892714][ T5126] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 229.903553][ T5126] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 229.915096][ T5126] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 229.928638][ T5126] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.955700][ T5126] usb 4-1: config 0 descriptor?? [ 230.093731][ T5855] loop2: detected capacity change from 0 to 128 [ 230.122310][ T5855] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 230.165777][ T5855] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 230.182055][ T4362] usb 4-1: USB disconnect, device number 11 [ 230.341088][ T4358] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 230.504881][ T5857] loop2: detected capacity change from 0 to 128 [ 230.519291][ T5857] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 230.545036][ T5857] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 230.757351][ T4362] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 231.002914][ T4362] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 231.094765][ T4362] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 231.245581][ T4362] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 231.417267][ T4362] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.537376][ T4279] FAT-fs (loop2): error, invalid access to FAT (entry 0xffff0000) [ 231.545280][ T4279] FAT-fs (loop2): Filesystem has been set read-only [ 231.578312][ T4362] usb 4-1: config 0 descriptor?? [ 231.607526][ T4279] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 231.695111][ T5863] netlink: 24 bytes leftover after parsing attributes in process `syz.1.350'. [ 231.726163][ T5866] FAULT_INJECTION: forcing a failure. [ 231.726163][ T5866] name failslab, interval 1, probability 0, space 0, times 1 [ 231.765270][ T5866] CPU: 0 PID: 5866 Comm: syz.0.351 Not tainted syzkaller #0 [ 231.772662][ T5866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 231.782980][ T5866] Call Trace: [ 231.786306][ T5866] [ 231.789405][ T5866] dump_stack_lvl+0x188/0x24e [ 231.794189][ T5866] ? show_regs_print_info+0x12/0x12 [ 231.799457][ T5866] ? load_image+0x410/0x410 [ 231.804051][ T5866] ? __might_sleep+0xd0/0xd0 [ 231.808700][ T5866] ? __lock_acquire+0x7ea0/0x7ea0 [ 231.813793][ T5866] ? aa_file_perm+0x3ea/0xf00 [ 231.818529][ T5866] should_fail_ex+0x390/0x4c0 [ 231.823279][ T5866] should_failslab+0x5/0x20 [ 231.827838][ T5866] slab_pre_alloc_hook+0x59/0x300 [ 231.832976][ T5866] ? kernfs_fop_write_iter+0x154/0x520 [ 231.838498][ T5866] __kmem_cache_alloc_node+0x4f/0x270 [ 231.843938][ T5866] ? kernfs_fop_write_iter+0x154/0x520 [ 231.849458][ T5866] __kmalloc+0xa3/0x240 [ 231.853683][ T5866] kernfs_fop_write_iter+0x154/0x520 [ 231.857855][ T5869] netlink: 8 bytes leftover after parsing attributes in process `syz.2.349'. [ 231.859024][ T5866] vfs_write+0x482/0x9a0 [ 231.872122][ T5866] ? file_end_write+0x250/0x250 [ 231.877039][ T5866] ? __fget_files+0x3fc/0x460 [ 231.881794][ T5866] ? __fdget_pos+0x2ae/0x360 [ 231.886454][ T5866] ? ksys_write+0x70/0x260 [ 231.890949][ T5866] ksys_write+0x14d/0x260 [ 231.895346][ T5866] ? __ia32_sys_read+0x80/0x80 [ 231.900175][ T5866] ? lockdep_hardirqs_on+0x94/0x140 [ 231.905445][ T5866] do_syscall_64+0x4c/0xa0 [ 231.909973][ T5866] ? clear_bhb_loop+0x60/0xb0 [ 231.914754][ T5866] ? clear_bhb_loop+0x60/0xb0 [ 231.919504][ T5866] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 231.925487][ T5866] RIP: 0033:0x7f4fa679e559 [ 231.929974][ T5866] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 231.949749][ T5866] RSP: 002b:00007f4fa7750028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 231.958250][ T5866] RAX: ffffffffffffffda RBX: 00007f4fa6a25fa0 RCX: 00007f4fa679e559 [ 231.966283][ T5866] RDX: 0000000000000003 RSI: 0000200000000500 RDI: 0000000000000003 [ 231.974350][ T5866] RBP: 00007f4fa68358b0 R08: 0000000000000000 R09: 0000000000000000 [ 231.982376][ T5866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 231.990411][ T5866] R13: 00007f4fa6a26038 R14: 00007f4fa6a25fa0 R15: 00007ffd7f201d08 [ 231.998525][ T5866] [ 232.727158][ T4362] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 233.535939][ T5072] usb 4-1: USB disconnect, device number 12 [ 233.624445][ T5891] program syz.0.359 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 233.684776][ T5896] loop2: detected capacity change from 0 to 128 [ 233.699478][ T5896] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 233.718254][ T4362] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.729676][ T4362] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 233.739444][ T4362] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.750059][ T4362] usb 5-1: config 0 descriptor?? [ 233.758128][ T5897] FAULT_INJECTION: forcing a failure. [ 233.758128][ T5897] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 233.762684][ T5893] loop1: detected capacity change from 0 to 512 [ 233.783808][ T5897] CPU: 0 PID: 5897 Comm: syz.3.358 Not tainted syzkaller #0 [ 233.791193][ T5897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 233.794864][ T5896] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 233.801280][ T5897] Call Trace: [ 233.801295][ T5897] [ 233.801305][ T5897] dump_stack_lvl+0x188/0x24e [ 233.801341][ T5897] ? show_regs_print_info+0x12/0x12 [ 233.801369][ T5897] ? load_image+0x410/0x410 [ 233.801395][ T5897] ? __lock_acquire+0x7ea0/0x7ea0 [ 233.801430][ T5897] should_fail_ex+0x390/0x4c0 [ 233.801466][ T5897] _copy_from_user+0x2c/0x170 [ 233.801495][ T5897] iovec_from_user+0x143/0x360 [ 233.850606][ T5897] __import_iovec+0x6c/0x510 [ 233.855275][ T5897] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 233.861232][ T5897] import_iovec+0x6f/0xa0 [ 233.865668][ T5897] process_vm_rw+0x1ed/0xc00 [ 233.870341][ T5897] ? wake_up_q+0x8c/0xc0 [ 233.874695][ T5897] ? __ia32_sys_process_vm_writev+0xf0/0xf0 [ 233.880658][ T5897] ? futex_wake+0x426/0x4f0 [ 233.885232][ T5897] ? futex_wake_mark+0x150/0x150 [ 233.890242][ T5897] ? __lock_acquire+0x7ea0/0x7ea0 [ 233.895365][ T5897] ? lock_chain_count+0x20/0x20 [ 233.900290][ T5897] __x64_sys_process_vm_writev+0xdc/0xf0 [ 233.905998][ T5897] do_syscall_64+0x4c/0xa0 [ 233.910474][ T5897] ? clear_bhb_loop+0x60/0xb0 [ 233.915211][ T5897] ? clear_bhb_loop+0x60/0xb0 [ 233.919954][ T5897] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 233.925912][ T5897] RIP: 0033:0x7f4c08b9e559 [ 233.930383][ T5897] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.950050][ T5897] RSP: 002b:00007f4c09a40028 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 233.958564][ T5897] RAX: ffffffffffffffda RBX: 00007f4c08e25fa0 RCX: 00007f4c08b9e559 [ 233.966582][ T5897] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 00000000000000d3 [ 233.974609][ T5897] RBP: 00007f4c08c358b0 R08: 000000000000023a R09: 0000000000000000 [ 233.982653][ T5897] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000000 [ 233.990711][ T5897] R13: 00007f4c08e26038 R14: 00007f4c08e25fa0 R15: 00007ffcdca57dc8 [ 233.998806][ T5897] [ 234.034279][ T5893] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 234.071576][ T5893] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.357: invalid indirect mapped block 256 (level 1) [ 234.095444][ T5893] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.357: invalid indirect mapped block 2683928664 (level 1) [ 234.183615][ T4279] FAT-fs (loop2): error, invalid access to FAT (entry 0xffff0000) [ 234.198061][ T5893] EXT4-fs (loop1): 1 truncate cleaned up [ 234.207094][ T5893] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 234.216166][ T4279] FAT-fs (loop2): Filesystem has been set read-only [ 234.225542][ T4362] keytouch 0003:0926:3333.0008: fixing up Keytouch IEC report descriptor [ 234.252995][ T5901] netlink: 24 bytes leftover after parsing attributes in process `syz.3.362'. [ 234.275917][ T4362] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0008/input/input10 [ 234.325683][ T4279] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 234.408100][ T4362] keytouch 0003:0926:3333.0008: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 234.826885][ T4362] usb 5-1: USB disconnect, device number 11 [ 235.574069][ T5920] netlink: 8 bytes leftover after parsing attributes in process `syz.2.366'. [ 235.663932][ T5908] fido_id[5908]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 235.678875][ T5899] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:477: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 238.953816][ T5942] syz.2.371: attempt to access beyond end of device [ 238.953816][ T5942] nbd2: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 239.017181][ T5942] gfs2: error 10 reading superblock [ 239.191953][ T5944] FAULT_INJECTION: forcing a failure. [ 239.191953][ T5944] name fail_futex, interval 1, probability 0, space 0, times 1 [ 239.239641][ T5946] netlink: 24 bytes leftover after parsing attributes in process `syz.0.373'. [ 239.254249][ T5944] CPU: 1 PID: 5944 Comm: syz.4.372 Not tainted syzkaller #0 [ 239.261654][ T5944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 239.272569][ T5944] Call Trace: [ 239.276040][ T5944] [ 239.279044][ T5944] dump_stack_lvl+0x188/0x24e [ 239.284323][ T5944] ? show_regs_print_info+0x12/0x12 [ 239.290606][ T5944] ? load_image+0x410/0x410 [ 239.297271][ T5944] ? cgroup_rstat_updated+0xce/0x350 [ 239.303012][ T5944] ? rcu_read_lock_sched_held+0x86/0x110 [ 239.308733][ T5944] ? sched_slice+0x430/0x430 [ 239.313582][ T5944] should_fail_ex+0x390/0x4c0 [ 239.318343][ T5944] get_futex_key+0x1b1/0x1000 [ 239.323098][ T5944] ? futex_setup_timer+0xc0/0xc0 [ 239.328891][ T5944] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 239.334949][ T5944] ? __lock_acquire+0x7ea0/0x7ea0 [ 239.340047][ T5944] ? lock_chain_count+0x20/0x20 [ 239.345071][ T5944] futex_wait_setup+0xb8/0x270 [ 239.350183][ T5944] ? futex_wait_multiple+0x920/0x920 [ 239.355717][ T5944] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 239.362168][ T5944] ? _raw_spin_unlock+0x40/0x40 [ 239.367440][ T5944] futex_wait+0x1b8/0x5c0 [ 239.371954][ T5944] ? futex_wait_setup+0x270/0x270 [ 239.377094][ T5944] ? file_end_write+0x156/0x250 [ 239.382114][ T5944] ? vfs_write+0x777/0x9a0 [ 239.386616][ T5944] do_futex+0x310/0x320 [ 239.390848][ T5944] ? __ia32_sys_get_robust_list+0x100/0x100 [ 239.397217][ T5944] __se_sys_futex+0x381/0x410 [ 239.402270][ T5944] ? __x64_sys_futex+0xf0/0xf0 [ 239.407218][ T5944] ? __x64_sys_futex+0x1d/0xf0 [ 239.412075][ T5944] do_syscall_64+0x4c/0xa0 [ 239.417066][ T5944] ? clear_bhb_loop+0x60/0xb0 [ 239.421938][ T5944] ? clear_bhb_loop+0x60/0xb0 [ 239.427663][ T5944] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 239.433644][ T5944] RIP: 0033:0x7f1ca219e559 [ 239.438131][ T5944] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.458828][ T5944] RSP: 002b:00007f1ca306e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 239.467411][ T5944] RAX: ffffffffffffffda RBX: 00007f1ca2425fa8 RCX: 00007f1ca219e559 [ 239.475457][ T5944] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f1ca2425fa8 [ 239.483532][ T5944] RBP: 00007f1ca2425fa0 R08: 0000000000000000 R09: 0000000000000000 [ 239.491625][ T5944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 239.499668][ T5944] R13: 00007f1ca2426038 R14: 00007ffec853d1b0 R15: 00007ffec853d298 [ 239.507730][ T5944] [ 240.242366][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 243.589643][ T5983] netlink: 24 bytes leftover after parsing attributes in process `syz.0.385'. [ 244.446012][ T5988] loop2: detected capacity change from 0 to 512 [ 244.593061][ T5988] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 244.602801][ T5988] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.386: invalid indirect mapped block 256 (level 1) [ 244.624192][ T5988] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.386: invalid indirect mapped block 2683928664 (level 1) [ 244.649934][ T5988] EXT4-fs (loop2): 1 truncate cleaned up [ 244.656447][ T5988] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 244.723045][ T5996] loop3: detected capacity change from 0 to 4096 [ 244.755759][ T5996] EXT4-fs: inline encryption not supported [ 244.779082][ T5997] FAULT_INJECTION: forcing a failure. [ 244.779082][ T5997] name fail_futex, interval 1, probability 0, space 0, times 0 [ 244.802615][ T5996] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 244.837122][ T5996] EXT4-fs (loop3): Test dummy encryption mode enabled [ 244.845544][ T5997] CPU: 1 PID: 5997 Comm: syz.0.387 Not tainted syzkaller #0 [ 244.853120][ T5997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 244.864455][ T5997] Call Trace: [ 244.867792][ T5997] [ 244.870856][ T5997] dump_stack_lvl+0x188/0x24e [ 244.875714][ T5997] ? show_regs_print_info+0x12/0x12 [ 244.881078][ T5997] ? load_image+0x410/0x410 [ 244.885885][ T5997] ? cgroup_rstat_updated+0xce/0x350 [ 244.891897][ T5997] ? rcu_read_lock_sched_held+0x86/0x110 [ 244.897982][ T5997] ? sched_slice+0x430/0x430 [ 244.903731][ T5997] should_fail_ex+0x390/0x4c0 [ 244.908585][ T5997] get_futex_key+0x1b1/0x1000 [ 244.914921][ T5997] ? futex_setup_timer+0xc0/0xc0 [ 244.920191][ T5997] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 244.926252][ T5997] ? __lock_acquire+0x7ea0/0x7ea0 [ 244.931589][ T5997] ? lock_chain_count+0x20/0x20 [ 244.936693][ T5997] futex_wait_setup+0xb8/0x270 [ 244.941539][ T5997] ? futex_wait_multiple+0x920/0x920 [ 244.947517][ T5997] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 244.953753][ T5997] ? _raw_spin_unlock+0x40/0x40 [ 244.958691][ T5997] futex_wait+0x1b8/0x5c0 [ 244.963160][ T5997] ? futex_wait_setup+0x270/0x270 [ 244.968359][ T5997] ? file_end_write+0x156/0x250 [ 244.973370][ T5997] ? vfs_write+0x777/0x9a0 [ 244.977873][ T5997] do_futex+0x310/0x320 [ 244.982112][ T5997] ? __ia32_sys_get_robust_list+0x100/0x100 [ 244.988092][ T5997] __se_sys_futex+0x381/0x410 [ 244.992844][ T5997] ? __x64_sys_futex+0xf0/0xf0 [ 244.997670][ T5997] ? __x64_sys_futex+0x1d/0xf0 [ 245.002585][ T5997] do_syscall_64+0x4c/0xa0 [ 245.007109][ T5997] ? clear_bhb_loop+0x60/0xb0 [ 245.011934][ T5997] ? clear_bhb_loop+0x60/0xb0 [ 245.016657][ T5997] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 245.022597][ T5997] RIP: 0033:0x7f4fa679e559 [ 245.027092][ T5997] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 245.047434][ T5997] RSP: 002b:00007f4fa77500e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 245.056163][ T5997] RAX: ffffffffffffffda RBX: 00007f4fa6a25fa8 RCX: 00007f4fa679e559 [ 245.064895][ T5997] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f4fa6a25fa8 [ 245.075017][ T5997] RBP: 00007f4fa6a25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 245.083046][ T5997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 245.091360][ T5997] R13: 00007f4fa6a26038 R14: 00007ffd7f201c20 R15: 00007ffd7f201d08 [ 245.099524][ T5997] [ 245.177517][ T5996] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 246.622240][ T6011] fscrypt (loop3): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 246.641754][ T6015] loop0: detected capacity change from 0 to 1024 [ 246.710871][ T6007] fscrypt (loop3): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 246.847232][ T4726] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 247.042584][ T4726] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 247.068751][ T6015] EXT4-fs: quotafile must be on filesystem root [ 247.087041][ T4726] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 247.144149][ T4726] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 247.339258][ T4726] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.397876][ T4726] usb 5-1: config 0 descriptor?? [ 247.407152][ T6031] 9pnet_fd: Insufficient options for proto=fd [ 248.385993][ T5992] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:477: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 248.641398][ T4726] uclogic 0003:256C:006D.0009: failed retrieving Huion firmware version: -71 [ 248.675314][ T4726] uclogic 0003:256C:006D.0009: failed probing parameters: -71 [ 248.706258][ T4726] uclogic: probe of 0003:256C:006D.0009 failed with error -71 [ 248.757339][ T4726] usb 5-1: USB disconnect, device number 12 [ 248.917320][ T4281] EXT4-fs (loop3): unmounting filesystem. [ 249.119114][ T4279] EXT4-fs (loop2): unmounting filesystem. [ 250.325824][ T6042] netlink: 24 bytes leftover after parsing attributes in process `syz.3.397'. [ 252.572279][ T6075] loop0: detected capacity change from 0 to 128 [ 253.322560][ T4726] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 253.392103][ T6084] netlink: 'syz.0.408': attribute type 4 has an invalid length. [ 253.400016][ T6084] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.408'. [ 253.629489][ T4726] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 253.668962][ T6086] ecryptfs_parse_options: eCryptfs: unrecognized option [³(] [ 253.677212][ T6086] ecryptfs_parse_options: eCryptfs: unrecognized option [{\)] [ 253.685479][ T6086] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 253.699420][ T6086] Error parsing options; rc = [-22] [ 253.727350][ T4726] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.760136][ T4726] usb 5-1: Product: syz [ 253.765000][ T4726] usb 5-1: Manufacturer: syz [ 253.776835][ T4726] usb 5-1: SerialNumber: syz [ 253.900674][ T4726] usb 5-1: config 0 descriptor?? [ 254.135981][ T4726] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 254.177226][ T6094] syz.0.410: attempt to access beyond end of device [ 254.177226][ T6094] nbd0: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 254.190843][ T6094] gfs2: error 10 reading superblock [ 255.117114][ T4359] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 255.253761][ T6100] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.285215][ T6100] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.319510][ T4359] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.362764][ T6102] loop0: detected capacity change from 0 to 1024 [ 255.367664][ T4359] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 255.402410][ T6102] EXT4-fs: quotafile must be on filesystem root [ 255.437178][ T4359] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 255.477832][ T4359] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.660550][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.667431][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.678873][ T4359] usb 4-1: config 0 descriptor?? [ 255.731965][ T6104] 9pnet_fd: Insufficient options for proto=fd [ 257.530503][ T4726] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -32 [ 257.662820][ T4359] uclogic 0003:256C:006D.000A: failed retrieving Huion firmware version: -71 [ 257.682522][ T4359] uclogic 0003:256C:006D.000A: failed probing parameters: -71 [ 257.702677][ T4359] uclogic: probe of 0003:256C:006D.000A failed with error -71 [ 257.724706][ T4359] usb 4-1: USB disconnect, device number 13 [ 259.188742][ T5125] usb 5-1: USB disconnect, device number 13 [ 259.819945][ T6144] syz.2.422: attempt to access beyond end of device [ 259.819945][ T6144] nbd2: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 259.834035][ T6144] gfs2: error 10 reading superblock [ 261.211877][ T6149] ecryptfs_parse_options: eCryptfs: unrecognized option [³(] [ 261.220098][ T6149] ecryptfs_parse_options: eCryptfs: unrecognized option [{\)] [ 261.227764][ T6149] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 261.240955][ T6149] Error parsing options; rc = [-22] [ 261.535343][ T6155] loop4: detected capacity change from 0 to 1024 [ 261.652513][ T6158] loop3: detected capacity change from 0 to 4096 [ 261.664574][ T6155] EXT4-fs: quotafile must be on filesystem root [ 261.828974][ T6158] EXT4-fs: inline encryption not supported [ 261.909487][ T6158] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 261.953317][ T6158] EXT4-fs (loop3): Test dummy encryption mode enabled [ 262.045518][ T6158] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 263.055483][ T6175] fscrypt (loop3): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 263.162574][ T6181] fscrypt (loop3): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 263.207253][ T4393] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 263.398576][ T4393] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 263.445287][ T4393] usb 1-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 263.539390][ T4393] usb 1-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 263.576893][ T4393] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.826018][ T4393] snd-usb-caiaq 1-1:1.0: invalid EPs [ 263.831514][ T4393] usb 1-1: unable to init card! (ret=-22) [ 263.840615][ T4393] snd-usb-caiaq: probe of 1-1:1.0 failed with error -22 [ 263.941172][ T6155] 9pnet_fd: Insufficient options for proto=fd [ 264.089145][ T6196] loop4: detected capacity change from 0 to 16 [ 264.164220][ T6196] erofs: (device loop4): mounted with root inode @ nid 36. [ 264.269898][ T4285] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -38 in[46, 4050] out[9000] [ 264.283379][ T6196] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -38 in[46, 4050] out[8192] [ 264.302613][ T27] audit: type=1800 audit(1792065744.073:6): pid=6196 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.424" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 264.528586][ T4393] usb 1-1: USB disconnect, device number 16 [ 265.063005][ T6206] loop1: detected capacity change from 0 to 128 [ 265.261406][ T6209] netlink: 24 bytes leftover after parsing attributes in process `syz.0.432'. [ 265.607604][ T4281] EXT4-fs (loop3): unmounting filesystem. [ 265.822883][ T6215] netlink: 'syz.1.431': attribute type 4 has an invalid length. [ 265.830716][ T6215] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.431'. [ 265.842575][ T6214] ecryptfs_parse_options: eCryptfs: unrecognized option [³(] [ 265.850158][ T6214] ecryptfs_parse_options: eCryptfs: unrecognized option [{\)] [ 265.857778][ T6214] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 265.871095][ T6214] Error parsing options; rc = [-22] [ 266.389909][ T6228] syz.4.437: attempt to access beyond end of device [ 266.389909][ T6228] nbd4: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 266.403239][ T6228] gfs2: error 10 reading superblock [ 266.611303][ T6227] loop1: detected capacity change from 0 to 512 [ 267.188071][ T6227] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 267.284801][ T6236] loop4: detected capacity change from 0 to 128 [ 267.298461][ T6236] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 267.320846][ T6236] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 267.363432][ T6227] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.438: invalid indirect mapped block 256 (level 1) [ 267.428637][ T6227] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.438: invalid indirect mapped block 2683928664 (level 1) [ 267.493117][ T6227] EXT4-fs (loop1): 1 truncate cleaned up [ 267.515965][ T6227] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 267.887265][ T5123] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 268.226322][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 268.399865][ T5123] usb 5-1: config 2 has an invalid interface number: 69 but max is 0 [ 268.423933][ T5123] usb 5-1: config 2 has no interface number 0 [ 268.444953][ T5123] usb 5-1: config 2 interface 69 altsetting 5 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 268.479559][ T6254] netlink: 24 bytes leftover after parsing attributes in process `syz.3.444'. [ 268.497051][ T5123] usb 5-1: config 2 interface 69 altsetting 5 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 268.537158][ T5123] usb 5-1: config 2 interface 69 has no altsetting 0 [ 268.579635][ T5123] usb 5-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=3e.71 [ 268.652889][ T5123] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.693245][ T5123] usb 5-1: Product: syz [ 268.707045][ T5123] usb 5-1: Manufacturer: syz [ 268.711731][ T5123] usb 5-1: SerialNumber: syz [ 268.880003][ T6244] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 269.170061][ T5123] xbox_remote_probe: Unexpected desc.bNumEndpoints: 2 [ 269.274860][ T5123] usb 5-1: USB disconnect, device number 14 [ 269.497172][ T6261] program syz.3.445 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 269.545767][ T6261] binder_alloc: 6260: binder_alloc_buf, no vma [ 269.571094][ T6265] netlink: 8 bytes leftover after parsing attributes in process `syz.1.446'. [ 269.820425][ T4270] FAT-fs (loop4): error, invalid access to FAT (entry 0xffff0000) [ 269.851867][ T4270] FAT-fs (loop4): Filesystem has been set read-only [ 269.893343][ T4270] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 271.212176][ T6293] loop2: detected capacity change from 0 to 512 [ 271.282538][ T6293] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 271.311169][ T6293] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.453: invalid indirect mapped block 256 (level 1) [ 271.393093][ T6293] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.453: invalid indirect mapped block 2683928664 (level 1) [ 271.408142][ T5123] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 271.427240][ T26] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 271.427888][ T6293] EXT4-fs (loop2): 1 truncate cleaned up [ 271.461353][ T6293] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 271.769770][ T5123] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.786741][ T26] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 272.594590][ T4279] EXT4-fs (loop2): unmounting filesystem. [ 272.640552][ T26] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 272.651136][ T5123] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 272.657972][ T4345] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 272.661450][ T5123] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.676022][ T26] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 272.704010][ T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.732464][ T5123] usb 4-1: config 0 descriptor?? [ 272.745883][ T26] usb 5-1: config 0 descriptor?? [ 272.851847][ T6311] loop2: detected capacity change from 0 to 1024 [ 272.869874][ T6311] EXT4-fs: quotafile must be on filesystem root [ 272.869971][ T4345] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 272.917861][ T4345] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 272.982224][ T4345] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 273.022900][ T4345] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.111691][ T4345] usb 1-1: config 0 descriptor?? [ 273.153354][ T4345] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 273.169365][ T5123] keytouch 0003:0926:3333.000B: fixing up Keytouch IEC report descriptor [ 273.256861][ T6313] 9pnet_fd: Insufficient options for proto=fd [ 273.288729][ T6313] loop2: detected capacity change from 0 to 16 [ 273.404356][ T6313] erofs: (device loop2): mounted with root inode @ nid 36. [ 273.428175][ T4285] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -38 in[46, 4050] out[9000] [ 273.441203][ T6313] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -38 in[46, 4050] out[8192] [ 273.466624][ T6313] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -38 in[46, 4050] out[8192] [ 273.478312][ T6313] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -38 in[46, 4050] out[8192] [ 273.493274][ T27] audit: type=1800 audit(1792065753.233:7): pid=6313 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.457" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 274.002913][ T5123] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.000B/input/input11 [ 274.011160][ T4345] usb 1-1: USB disconnect, device number 17 [ 274.380115][ T5123] keytouch 0003:0926:3333.000B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 274.673292][ T26] uclogic 0003:256C:006D.000C: failed retrieving Huion firmware version: -71 [ 274.687531][ T5123] usb 4-1: USB disconnect, device number 14 [ 274.791903][ T26] uclogic 0003:256C:006D.000C: failed probing parameters: -71 [ 275.012448][ T26] uclogic: probe of 0003:256C:006D.000C failed with error -71 [ 275.098811][ T26] usb 5-1: USB disconnect, device number 15 [ 275.113828][ T6326] netlink: 8 bytes leftover after parsing attributes in process `syz.1.460'. [ 275.297176][ T4345] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 275.353806][ T6332] program syz.0.463 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 275.761458][ T6324] fido_id[6324]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 276.414155][ T6347] loop3: detected capacity change from 0 to 512 [ 276.476091][ T6347] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 276.496165][ T6347] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.467: invalid indirect mapped block 256 (level 1) [ 276.547088][ T6351] loop4: detected capacity change from 0 to 128 [ 276.554390][ T6347] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.467: invalid indirect mapped block 2683928664 (level 1) [ 276.596680][ T6351] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 276.602132][ T6347] EXT4-fs (loop3): 1 truncate cleaned up [ 276.635848][ T6347] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 276.666345][ T6351] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 277.589469][ T4281] EXT4-fs (loop3): unmounting filesystem. [ 277.750476][ T4345] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 277.943320][ T4345] usb 5-1: config 2 has an invalid interface number: 69 but max is 0 [ 277.976603][ T4345] usb 5-1: config 2 has no interface number 0 [ 278.061307][ T4345] usb 5-1: config 2 interface 69 altsetting 5 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 278.169764][ T4345] usb 5-1: config 2 interface 69 altsetting 5 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 278.280318][ T4345] usb 5-1: config 2 interface 69 has no altsetting 0 [ 278.395255][ T4345] usb 5-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=3e.71 [ 278.493788][ T4345] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.575570][ T4345] usb 5-1: Product: syz [ 278.616198][ T4345] usb 5-1: Manufacturer: syz [ 278.645767][ T4345] usb 5-1: SerialNumber: syz [ 278.660271][ T6351] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 278.887482][ T4345] xbox_remote_probe: Unexpected desc.bNumEndpoints: 2 [ 278.911180][ T4345] usb 5-1: USB disconnect, device number 16 [ 278.937231][ T26] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 279.007078][ T4726] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 279.017000][ T6376] netlink: 8 bytes leftover after parsing attributes in process `syz.2.476'. [ 279.128900][ T26] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.144044][ T26] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 279.153371][ T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.167690][ T26] usb 1-1: config 0 descriptor?? [ 279.199269][ T4726] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 279.210051][ T4726] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 279.219748][ T4726] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.241200][ T4726] usb 4-1: config 0 descriptor?? [ 279.251202][ T4726] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 279.416182][ T4270] FAT-fs (loop4): error, invalid access to FAT (entry 0xffff0000) [ 279.424703][ T4270] FAT-fs (loop4): Filesystem has been set read-only [ 279.436279][ T4270] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 279.455529][ T5123] usb 4-1: USB disconnect, device number 15 [ 279.511888][ T6378] program syz.4.477 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 279.583902][ T26] keytouch 0003:0926:3333.000D: fixing up Keytouch IEC report descriptor [ 279.614167][ T26] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.000D/input/input12 [ 279.713579][ T26] keytouch 0003:0926:3333.000D: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 279.812803][ C1] keytouch 0003:0926:3333.000D: Event data for report 0 was too short (8 vs 5) [ 279.984226][ T6388] loop4: detected capacity change from 0 to 512 [ 280.036262][ T26] usb 1-1: USB disconnect, device number 19 [ 280.069219][ T5123] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 280.084891][ T6390] syz.1.480: attempt to access beyond end of device [ 280.084891][ T6390] nbd1: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 280.098466][ T6390] gfs2: error 10 reading superblock [ 280.280756][ T6388] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 280.333184][ T5123] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 280.418182][ T5123] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 280.464742][ T6388] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.481: invalid indirect mapped block 256 (level 1) [ 280.588528][ T5123] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.731994][ T6388] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.481: invalid indirect mapped block 2683928664 (level 1) [ 281.082554][ T5123] usb 4-1: config 0 descriptor?? [ 281.097168][ T6385] fido_id[6385]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 281.115511][ T6388] EXT4-fs (loop4): 1 truncate cleaned up [ 281.121481][ T5123] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 281.157069][ T6388] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 281.835218][ T6405] loop1: detected capacity change from 0 to 128 [ 281.905553][ T6405] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 281.965974][ T6405] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 282.009931][ T4270] EXT4-fs (loop4): unmounting filesystem. [ 282.826480][ T6417] loop4: detected capacity change from 0 to 2048 [ 282.856867][ T5128] usb 4-1: USB disconnect, device number 16 [ 282.929534][ T6417] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 283.555693][ T4726] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 283.965507][ T4270] EXT4-fs (loop4): unmounting filesystem. [ 284.127036][ T4726] usb 3-1: Using ep0 maxpacket: 8 [ 284.136510][ T4726] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 284.166791][ T4726] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 284.196436][ T4726] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.218560][ T4726] usb 3-1: Product: syz [ 284.225942][ T4726] usb 3-1: Manufacturer: syz [ 284.245430][ T4726] usb 3-1: SerialNumber: syz [ 284.274401][ T4726] usb 3-1: config 0 descriptor?? [ 285.649812][ T4518] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 285.747569][ T6443] syz.3.495: attempt to access beyond end of device [ 285.747569][ T6443] nbd3: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 285.760808][ T6443] gfs2: error 10 reading superblock [ 286.594893][ T5123] usb 3-1: USB disconnect, device number 20 [ 286.682282][ T6450] loop1: detected capacity change from 0 to 256 [ 287.571566][ T6454] loop3: detected capacity change from 0 to 1024 [ 287.582278][ T6450] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xa9436649, utbl_chksum : 0xe619d30d) [ 287.617251][ T5123] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 287.656568][ T6454] EXT4-fs: quotafile must be on filesystem root [ 287.982162][ T6462] 9pnet_fd: Insufficient options for proto=fd [ 288.441432][ T5123] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 288.529666][ T5123] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 288.542587][ T5123] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.554037][ T5123] usb 3-1: config 0 descriptor?? [ 288.565214][ T5123] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 289.443100][ T5128] usb 3-1: USB disconnect, device number 21 [ 289.691644][ T6470] netlink: 'syz.1.504': attribute type 4 has an invalid length. [ 289.699408][ T6470] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.504'. [ 289.982249][ T6478] loop3: detected capacity change from 0 to 2048 [ 290.033756][ T6478] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 290.043886][ T5128] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 290.452765][ T5128] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 290.465264][ T5128] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 290.477211][ T5128] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.530359][ T5128] usb 3-1: config 0 descriptor?? [ 290.640757][ T5128] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 291.031127][ T5128] usb 3-1: USB disconnect, device number 22 [ 291.158797][ T4281] EXT4-fs (loop3): unmounting filesystem. [ 291.647115][ T5128] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 291.867282][ T5128] usb 3-1: Using ep0 maxpacket: 8 [ 291.895655][ T5128] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 292.017681][ T5128] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.372475][ T5128] usb 3-1: Product: syz [ 292.408200][ T5128] usb 3-1: Manufacturer: syz [ 292.412882][ T5128] usb 3-1: SerialNumber: syz [ 293.315114][ T5128] usb 3-1: config 0 descriptor?? [ 293.395956][ T5128] gspca_main: se401-2.14.0 probing 047d:5003 [ 294.435591][ T5128] usb 3-1: reset high-speed USB device number 23 using dummy_hcd [ 294.489636][ T6510] loop3: detected capacity change from 0 to 1024 [ 294.518427][ T6510] EXT4-fs: quotafile must be on filesystem root [ 294.790243][ T6516] loop3: detected capacity change from 0 to 16 [ 295.122260][ T6516] erofs: (device loop3): mounted with root inode @ nid 36. [ 295.143652][ T4285] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -38 in[46, 4050] out[9000] [ 295.167345][ T6516] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -38 in[46, 4050] out[8192] [ 295.189529][ T6516] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -38 in[46, 4050] out[8192] [ 295.201245][ T6516] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -38 in[46, 4050] out[8192] [ 295.215910][ T27] audit: type=1800 audit(1792065774.963:8): pid=6516 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.514" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 295.559873][ T5128] gspca_se401: read req failed req 0x06 error -19 [ 295.607405][ T5128] usb 3-1: USB disconnect, device number 23 [ 295.874494][ T6518] loop4: detected capacity change from 0 to 4096 [ 295.889295][ T6518] EXT4-fs: inline encryption not supported [ 295.896464][ T6518] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 295.917234][ T6518] EXT4-fs (loop4): Test dummy encryption mode enabled [ 295.945632][ T6518] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 296.173710][ T6529] loop0: detected capacity change from 0 to 128 [ 296.207410][ T6529] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 296.249575][ T6529] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 296.457079][ T5128] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 296.618899][ T4345] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 296.706078][ T5128] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 296.844600][ T4345] usb 1-1: config 2 has an invalid interface number: 69 but max is 0 [ 296.881065][ T4345] usb 1-1: config 2 has no interface number 0 [ 296.927599][ T4345] usb 1-1: config 2 interface 69 altsetting 5 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 297.009905][ T4345] usb 1-1: config 2 interface 69 altsetting 5 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 297.096131][ T4345] usb 1-1: config 2 interface 69 has no altsetting 0 [ 297.171146][ T4345] usb 1-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=3e.71 [ 297.246233][ T4345] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.347698][ T4345] usb 1-1: Product: syz [ 297.399414][ T4345] usb 1-1: Manufacturer: syz [ 297.454195][ T4345] usb 1-1: SerialNumber: syz [ 297.553268][ T5128] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 297.557578][ T6529] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 297.581322][ T5128] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.599556][ T5128] usb 4-1: config 0 descriptor?? [ 297.609040][ T5128] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 297.787721][ T6535] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 297.813666][ T5128] usb 4-1: USB disconnect, device number 17 [ 297.982571][ T6548] syz.1.524: attempt to access beyond end of device [ 297.982571][ T6548] nbd1: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 297.995936][ T6548] gfs2: error 10 reading superblock [ 298.377284][ T5128] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 298.572989][ T4345] xbox_remote_probe: Unexpected desc.bNumEndpoints: 2 [ 298.631133][ T5128] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 298.732536][ T5128] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 298.800662][ T4345] usb 1-1: USB disconnect, device number 20 [ 298.856223][ T6537] fscrypt (loop4): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 298.874032][ T5128] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.964368][ T4283] FAT-fs (loop0): error, invalid access to FAT (entry 0xffff0000) [ 298.974765][ T5128] usb 4-1: config 0 descriptor?? [ 299.018748][ T4283] FAT-fs (loop0): Filesystem has been set read-only [ 299.031200][ T5128] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 299.056687][ T4283] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 299.887772][ T4362] usb 4-1: USB disconnect, device number 18 [ 300.757307][ T4362] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 301.243348][ T6564] loop2: detected capacity change from 0 to 1024 [ 301.269750][ T6564] EXT4-fs: quotafile must be on filesystem root [ 301.517078][ T4362] usb 4-1: Using ep0 maxpacket: 8 [ 301.524099][ T4362] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 301.547966][ T4362] usb 4-1: config 0 has no interfaces? [ 301.576739][ T4362] usb 4-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 301.633372][ T6573] loop2: detected capacity change from 0 to 16 [ 301.656603][ T6573] erofs: (device loop2): mounted with root inode @ nid 36. [ 301.768131][ T4285] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -38 in[46, 4050] out[9000] [ 301.781816][ T6573] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -38 in[46, 4050] out[8192] [ 301.799281][ T27] audit: type=1800 audit(1792065781.573:9): pid=6573 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.529" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 301.966908][ T4362] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.128563][ T4362] usb 4-1: Product: syz [ 302.132816][ T4362] usb 4-1: Manufacturer: syz [ 302.175008][ T4362] usb 4-1: SerialNumber: syz [ 302.238283][ T4362] usb 4-1: config 0 descriptor?? [ 302.479634][ T127] usb 4-1: USB disconnect, device number 19 [ 304.460751][ T6580] loop3: detected capacity change from 0 to 2048 [ 304.575162][ T6580] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 304.870421][ T6589] loop1: detected capacity change from 0 to 128 [ 304.902619][ T6589] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 305.032853][ T6589] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 305.194377][ T4270] EXT4-fs (loop4): unmounting filesystem. [ 305.361495][ T6595] loop4: detected capacity change from 0 to 2048 [ 305.440886][ T6595] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 305.757049][ T5123] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 305.954537][ T5123] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 305.974705][ T5123] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.003282][ T5123] usb 3-1: Product: syz [ 306.020536][ T5123] usb 3-1: Manufacturer: syz [ 306.025255][ T5123] usb 3-1: SerialNumber: syz [ 306.262613][ T5123] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 306.295033][ T5123] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 306.334177][ T4281] EXT4-fs (loop3): unmounting filesystem. [ 306.737089][ T5128] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 306.946334][ T5128] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 306.984567][ T5128] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 307.102623][ T5128] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 307.189463][ T5128] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.374127][ T5128] usb 4-1: config 0 descriptor?? [ 307.554347][ T5123] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 307.749831][ T5128] usbhid 4-1:0.0: can't add hid device: -71 [ 307.756071][ T5128] usbhid: probe of 4-1:0.0 failed with error -71 [ 307.834887][ T5123] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000040. ret = -71 [ 307.868225][ T5128] usb 4-1: USB disconnect, device number 20 [ 307.884361][ T4271] FAT-fs (loop1): error, invalid access to FAT (entry 0xffff0000) [ 307.895557][ T4271] FAT-fs (loop1): Filesystem has been set read-only [ 307.915439][ T5123] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -71 [ 307.935071][ T5123] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -71 [ 307.948138][ T4270] EXT4-fs (loop4): unmounting filesystem. [ 307.959060][ T4271] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 307.983660][ T5123] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -71 [ 308.025867][ T5123] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -71 [ 308.045692][ T5123] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001028. ret = -71 [ 308.066080][ T5123] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001030. ret = -71 [ 308.092838][ T5123] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 308.103211][ T5123] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 308.129608][ T5123] lan78xx: probe of 3-1:1.0 failed with error -71 [ 308.180343][ T5123] usb 3-1: USB disconnect, device number 24 [ 308.194848][ T6614] loop4: detected capacity change from 0 to 512 [ 308.246767][ T6614] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 308.260682][ T6615] loop1: detected capacity change from 0 to 4096 [ 308.294967][ T6615] EXT4-fs: inline encryption not supported [ 308.307603][ T6614] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.542: invalid indirect mapped block 256 (level 1) [ 308.341547][ T6615] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 308.358317][ T6615] EXT4-fs (loop1): Test dummy encryption mode enabled [ 308.387172][ T5128] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 308.396687][ T6614] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.542: invalid indirect mapped block 2683928664 (level 1) [ 308.412771][ T6619] netlink: 8 bytes leftover after parsing attributes in process `syz.0.545'. [ 308.446771][ T6615] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 308.457798][ T6614] EXT4-fs (loop4): 1 truncate cleaned up [ 308.489808][ T6614] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 308.578700][ T5128] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 308.627295][ T5128] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 308.668272][ T5128] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 308.709233][ T5128] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.765046][ T5128] usb 4-1: config 0 descriptor?? [ 309.192193][ T5128] keytouch 0003:0926:3333.000E: fixing up Keytouch IEC report descriptor [ 309.233729][ T5128] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.000E/input/input13 [ 309.392210][ T5128] keytouch 0003:0926:3333.000E: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 309.440455][ T6626] fscrypt (loop1): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 309.474226][ T5128] usb 4-1: USB disconnect, device number 21 [ 309.497022][ T6587] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:477: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 309.700987][ T127] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 309.762285][ T6637] fido_id[6637]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 309.897251][ T127] usb 1-1: Using ep0 maxpacket: 8 [ 309.907955][ T127] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 309.947098][ T127] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.965454][ T127] usb 1-1: Product: syz [ 309.985722][ T127] usb 1-1: Manufacturer: syz [ 309.995850][ T127] usb 1-1: SerialNumber: syz [ 310.017620][ T127] usb 1-1: config 0 descriptor?? [ 310.052082][ T127] gspca_main: se401-2.14.0 probing 047d:5003 [ 310.387360][ T127] usb 1-1: reset high-speed USB device number 21 using dummy_hcd [ 311.183049][ T6646] Zero length message leads to an empty skb [ 311.255583][ T4270] EXT4-fs (loop4): unmounting filesystem. [ 311.276384][ T127] gspca_se401: read req failed req 0x06 error -19 [ 311.321094][ T127] usb 1-1: USB disconnect, device number 21 [ 311.350462][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 311.497356][ T6656] loop1: detected capacity change from 0 to 2048 [ 311.560188][ T6656] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 311.857306][ T5128] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 311.895841][ T6664] syz.0.556: attempt to access beyond end of device [ 311.895841][ T6664] nbd0: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 311.910447][ T6664] gfs2: error 10 reading superblock [ 312.175977][ T5128] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 312.261100][ T5128] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 312.377421][ T5128] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 312.490033][ T5128] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.630064][ T5128] usb 5-1: config 0 descriptor?? [ 312.773228][ T4285] Bluetooth: hci4: unexpected event 0x09 length: 6 > 3 [ 313.287634][ T6672] program syz.2.558 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 313.437135][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 314.343266][ T5128] uclogic 0003:256C:006D.000F: failed retrieving Huion firmware version: -71 [ 314.414119][ T5128] uclogic 0003:256C:006D.000F: failed probing parameters: -71 [ 314.432409][ T5128] uclogic: probe of 0003:256C:006D.000F failed with error -71 [ 314.505633][ T5128] usb 5-1: USB disconnect, device number 17 [ 314.579264][ T6683] loop3: detected capacity change from 0 to 2048 [ 314.644078][ T6688] loop0: detected capacity change from 0 to 512 [ 314.646072][ T6683] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 314.688114][ T6688] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 314.744641][ T6692] loop1: detected capacity change from 0 to 4096 [ 314.768312][ T6692] EXT4-fs: inline encryption not supported [ 314.772525][ T6688] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.563: invalid indirect mapped block 256 (level 1) [ 314.797204][ T127] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 314.832297][ T6692] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 314.877135][ T6688] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.563: invalid indirect mapped block 2683928664 (level 1) [ 314.918321][ T6692] EXT4-fs (loop1): Test dummy encryption mode enabled [ 314.978689][ T6688] EXT4-fs (loop0): 1 truncate cleaned up [ 314.984487][ T6688] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 315.007713][ T6692] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 315.885899][ T4281] EXT4-fs (loop3): unmounting filesystem. [ 315.893856][ T6698] syz.4.565: attempt to access beyond end of device [ 315.893856][ T6698] nbd4: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 315.907215][ T6698] gfs2: error 10 reading superblock [ 316.096895][ T127] usb 3-1: Using ep0 maxpacket: 8 [ 316.107595][ T127] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 316.116769][ T127] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.167000][ T127] usb 3-1: Product: syz [ 316.171608][ T127] usb 3-1: Manufacturer: syz [ 316.196994][ T127] usb 3-1: SerialNumber: syz [ 316.204783][ T127] usb 3-1: config 0 descriptor?? [ 316.220697][ T127] gspca_main: se401-2.14.0 probing 047d:5003 [ 316.710439][ T127] usb 3-1: reset high-speed USB device number 25 using dummy_hcd [ 317.103893][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.111881][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.557209][ T6689] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:477: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 317.629627][ T6716] loop2: detected capacity change from 0 to 1024 [ 317.643657][ T6711] fscrypt (loop1): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 317.679259][ T127] gspca_se401: read req failed req 0x06 error -19 [ 317.718856][ T127] usb 3-1: USB disconnect, device number 25 [ 317.727940][ T6716] EXT4-fs: quotafile must be on filesystem root [ 318.259159][ T6724] loop2: detected capacity change from 0 to 16 [ 318.302374][ T6724] erofs: (device loop2): mounted with root inode @ nid 36. [ 318.329927][ T4285] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -38 in[46, 4050] out[9000] [ 318.343618][ T6724] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -38 in[46, 4050] out[8192] [ 318.362395][ T6724] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -38 in[46, 4050] out[8192] [ 318.374288][ T6724] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -38 in[46, 4050] out[8192] [ 318.389364][ T27] audit: type=1800 audit(1792065798.133:10): pid=6724 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.569" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 319.015145][ T6728] program syz.3.571 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 319.107710][ T6728] binder: BINDER_SET_CONTEXT_MGR already set [ 319.134580][ T6728] binder: 6726:6728 ioctl 4018620d 200000004a80 returned -16 [ 320.024663][ T4283] EXT4-fs (loop0): unmounting filesystem. [ 320.972688][ T6741] loop0: detected capacity change from 0 to 4096 [ 321.063134][ T6741] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 321.080154][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 321.279111][ T127] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 321.481729][ T6756] syz.0.581: attempt to access beyond end of device [ 321.481729][ T6756] nbd0: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 321.487538][ T127] usb 4-1: Using ep0 maxpacket: 8 [ 321.500197][ T6756] gfs2: error 10 reading superblock [ 321.517166][ T5532] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 323.249495][ T127] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 323.259873][ T127] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 323.274391][ T127] usb 4-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 323.291011][ T127] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.299501][ T127] usb 4-1: Product: syz [ 323.303740][ T127] usb 4-1: Manufacturer: syz [ 323.308849][ T127] usb 4-1: SerialNumber: syz [ 323.316040][ T127] usb 4-1: config 0 descriptor?? [ 323.432746][ T5532] usb 5-1: Using ep0 maxpacket: 8 [ 323.464047][ T5532] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 323.494290][ T5532] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.514603][ T5532] usb 5-1: Product: syz [ 323.519278][ T5532] usb 5-1: Manufacturer: syz [ 323.523942][ T5532] usb 5-1: SerialNumber: syz [ 323.550746][ T5532] usb 5-1: config 0 descriptor?? [ 323.567949][ T127] usb 4-1: USB disconnect, device number 22 [ 323.579451][ T5532] gspca_main: se401-2.14.0 probing 047d:5003 [ 323.637886][ T6769] loop2: detected capacity change from 0 to 128 [ 323.674206][ T6769] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 323.826047][ T6769] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 323.936175][ T5532] usb 5-1: reset high-speed USB device number 18 using dummy_hcd [ 324.197250][ T5125] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 324.788138][ T5532] gspca_se401: read req failed req 0x06 error -19 [ 324.815791][ T5532] usb 5-1: USB disconnect, device number 18 [ 324.865832][ T5125] usb 3-1: config 2 has an invalid interface number: 69 but max is 0 [ 324.874392][ T5125] usb 3-1: config 2 has no interface number 0 [ 324.880607][ T5125] usb 3-1: config 2 interface 69 altsetting 5 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 324.891595][ T5125] usb 3-1: config 2 interface 69 altsetting 5 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 324.902678][ T5125] usb 3-1: config 2 interface 69 has no altsetting 0 [ 324.918588][ T5125] usb 3-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=3e.71 [ 324.941412][ T5125] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.011354][ T5125] usb 3-1: Product: syz [ 325.029999][ T5125] usb 3-1: Manufacturer: syz [ 325.051714][ T5125] usb 3-1: SerialNumber: syz [ 325.684797][ T6786] loop3: detected capacity change from 0 to 4096 [ 326.625006][ T6786] EXT4-fs: inline encryption not supported [ 326.683255][ T6786] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 326.719375][ T5125] usb 3-1: can't set config #2, error -71 [ 326.725620][ T6786] EXT4-fs (loop3): Test dummy encryption mode enabled [ 326.765475][ T6786] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 326.779837][ T5125] usb 3-1: USB disconnect, device number 26 [ 326.909127][ T4279] FAT-fs (loop2): error, invalid access to FAT (entry 0xffff0000) [ 326.949198][ T4279] FAT-fs (loop2): Filesystem has been set read-only [ 327.014155][ T4279] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 327.554748][ T6798] fscrypt (loop3): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 327.808123][ T4281] EXT4-fs (loop3): unmounting filesystem. [ 327.970159][ T6810] syz.1.594: attempt to access beyond end of device [ 327.970159][ T6810] nbd1: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 327.983542][ T6810] gfs2: error 10 reading superblock [ 328.285707][ T6816] ecryptfs_parse_options: eCryptfs: unrecognized option [³(] [ 328.294394][ T6816] ecryptfs_parse_options: eCryptfs: unrecognized option [{\)] [ 328.301988][ T6816] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 328.315117][ T6816] Error parsing options; rc = [-22] [ 328.607241][ T127] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 328.615762][ T6825] netlink: 8 bytes leftover after parsing attributes in process `syz.3.599'. [ 328.807084][ T127] usb 5-1: Using ep0 maxpacket: 8 [ 328.816572][ T127] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 328.836340][ T127] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.856635][ T127] usb 5-1: Product: syz [ 328.862303][ T127] usb 5-1: Manufacturer: syz [ 328.880494][ T127] usb 5-1: SerialNumber: syz [ 328.887621][ T127] usb 5-1: config 0 descriptor?? [ 328.915289][ T127] gspca_main: se401-2.14.0 probing 047d:5003 [ 328.978351][ T26] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 329.191283][ T26] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 329.210800][ T26] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.236156][ T26] usb 3-1: Product: syz [ 329.247441][ T26] usb 3-1: Manufacturer: syz [ 329.252262][ T26] usb 3-1: SerialNumber: syz [ 329.257074][ T127] usb 5-1: reset high-speed USB device number 19 using dummy_hcd [ 329.397281][ T26] usb 3-1: config 0 descriptor?? [ 329.783158][ T26] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 330.079053][ T127] gspca_se401: read req failed req 0x06 error -19 [ 330.404461][ T127] usb 5-1: USB disconnect, device number 19 [ 330.687597][ T6842] loop3: detected capacity change from 0 to 128 [ 330.766773][ T6842] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 330.820676][ T6842] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 330.962924][ T6845] syz.1.606: attempt to access beyond end of device [ 330.962924][ T6845] nbd1: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 330.976163][ T6845] gfs2: error 10 reading superblock [ 331.325485][ T4393] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 332.200058][ T6859] ecryptfs_parse_options: eCryptfs: unrecognized option [³(] [ 332.207711][ T6859] ecryptfs_parse_options: eCryptfs: unrecognized option [{\)] [ 332.215246][ T6859] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 332.228520][ T6859] Error parsing options; rc = [-22] [ 332.454024][ T6864] syz.0.610: attempt to access beyond end of device [ 332.454024][ T6864] nbd0: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 332.470822][ T6864] gfs2: error 10 reading superblock [ 332.549639][ T4393] usb 4-1: config 2 has an invalid interface number: 69 but max is 0 [ 332.558869][ T26] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -32 [ 332.578926][ T4393] usb 4-1: config 2 has no interface number 0 [ 332.585099][ T4393] usb 4-1: config 2 interface 69 altsetting 5 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 332.627448][ T4393] usb 4-1: config 2 interface 69 altsetting 5 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 332.657134][ T4393] usb 4-1: config 2 interface 69 has no altsetting 0 [ 332.669799][ T4393] usb 4-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=3e.71 [ 332.699982][ T4393] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.728539][ T4393] usb 4-1: Product: syz [ 332.738660][ T4393] usb 4-1: Manufacturer: syz [ 332.757055][ T4393] usb 4-1: SerialNumber: syz [ 332.788467][ T6842] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 333.020313][ T4393] xbox_remote_probe: Unexpected desc.bNumEndpoints: 2 [ 333.064589][ T4393] usb 4-1: USB disconnect, device number 23 [ 333.334338][ T6877] netlink: 28 bytes leftover after parsing attributes in process `syz.1.614'. [ 333.615912][ T4281] FAT-fs (loop3): error, invalid access to FAT (entry 0xffff0000) [ 333.633485][ T4281] FAT-fs (loop3): Filesystem has been set read-only [ 333.747958][ T5125] usb 3-1: USB disconnect, device number 27 [ 333.930339][ T6890] netlink: 8 bytes leftover after parsing attributes in process `syz.2.616'. [ 334.240036][ T4281] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 334.300005][ T6894] X25: received unknown 00 with LCI 000 [ 334.632305][ T6902] syz.1.619: attempt to access beyond end of device [ 334.632305][ T6902] nbd1: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 334.646095][ T6902] gfs2: error 10 reading superblock [ 334.687056][ T4393] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 334.862531][ T6906] netlink: 'syz.2.620': attribute type 10 has an invalid length. [ 334.897248][ T4393] usb 4-1: Using ep0 maxpacket: 8 [ 334.921944][ T6906] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.922975][ T4393] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 334.933836][ T6906] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.976564][ T4393] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.005374][ T4393] usb 4-1: Product: syz [ 335.013981][ T4393] usb 4-1: Manufacturer: syz [ 335.027190][ T4393] usb 4-1: SerialNumber: syz [ 335.043786][ T4393] usb 4-1: config 0 descriptor?? [ 335.062272][ T4393] gspca_main: se401-2.14.0 probing 047d:5003 [ 335.143892][ T6906] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.151196][ T6906] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.160028][ T6906] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.167313][ T6906] bridge0: port 1(bridge_slave_0) entered forwarding state [ 336.005057][ T6906] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 336.047563][ T4393] gspca_se401: Wrong descriptor type [ 336.257463][ T4393] usb 4-1: USB disconnect, device number 24 [ 336.522003][ T6920] ecryptfs_parse_options: eCryptfs: unrecognized option [³(] [ 336.529707][ T6920] ecryptfs_parse_options: eCryptfs: unrecognized option [{\)] [ 336.537597][ T6920] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 336.551271][ T6920] Error parsing options; rc = [-22] [ 336.705641][ T6924] syz.4.624: attempt to access beyond end of device [ 336.705641][ T6924] nbd4: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 336.719260][ T6924] gfs2: error 10 reading superblock [ 336.806849][ T6931] loop2: detected capacity change from 0 to 128 [ 336.894977][ T6931] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 336.999633][ T6931] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 337.387868][ T6940] syz.3.629: attempt to access beyond end of device [ 337.387868][ T6940] nbd3: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 337.414384][ T6940] gfs2: error 10 reading superblock [ 337.427540][ T4393] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 337.655751][ T4393] usb 3-1: config 2 has an invalid interface number: 69 but max is 0 [ 337.669819][ T4393] usb 3-1: config 2 has no interface number 0 [ 337.693176][ T4393] usb 3-1: config 2 interface 69 altsetting 5 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 337.723790][ T4393] usb 3-1: config 2 interface 69 altsetting 5 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 337.746243][ T4393] usb 3-1: config 2 interface 69 has no altsetting 0 [ 337.762541][ T4393] usb 3-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=3e.71 [ 337.780577][ T4393] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.804942][ T4393] usb 3-1: Product: syz [ 337.814830][ T4393] usb 3-1: Manufacturer: syz [ 337.826733][ T4393] usb 3-1: SerialNumber: syz [ 337.875695][ T6931] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 338.105147][ T4393] xbox_remote_probe: Unexpected desc.bNumEndpoints: 2 [ 338.114826][ T6947] netlink: 8 bytes leftover after parsing attributes in process `syz.4.631'. [ 338.142043][ T4393] usb 3-1: USB disconnect, device number 28 [ 338.653360][ T4279] FAT-fs (loop2): error, invalid access to FAT (entry 0xffff0000) [ 338.667685][ T4279] FAT-fs (loop2): Filesystem has been set read-only [ 338.677286][ T4393] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 338.691992][ T4279] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 338.799793][ T6954] X25: received unknown 00 with LCI 000 [ 338.881636][ T4393] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 338.899018][ T4393] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.919413][ T4393] usb 4-1: Product: syz [ 338.923681][ T4393] usb 4-1: Manufacturer: syz [ 338.953403][ T4393] usb 4-1: SerialNumber: syz [ 339.272502][ T4393] net_ratelimit: 2 callbacks suppressed [ 339.272527][ T4393] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 339.294531][ T6960] ecryptfs_parse_options: eCryptfs: unrecognized option [³(] [ 339.302065][ T6960] ecryptfs_parse_options: eCryptfs: unrecognized option [{\)] [ 339.309743][ T6960] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 339.322901][ T6960] Error parsing options; rc = [-22] [ 339.438613][ T4393] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 339.499963][ T6966] syz.4.639: attempt to access beyond end of device [ 339.499963][ T6966] nbd4: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 339.513306][ T6966] gfs2: error 10 reading superblock [ 340.061166][ T6975] syz.4.640: attempt to access beyond end of device [ 340.061166][ T6975] nbd4: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 340.150312][ T6975] gfs2: error 10 reading superblock [ 340.678377][ T4393] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 341.527636][ T4393] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -32 [ 341.583420][ T4393] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -71 [ 341.666911][ T4393] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -71 [ 341.736196][ T4393] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -71 [ 341.786821][ T4393] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -71 [ 341.818230][ T4393] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001028. ret = -71 [ 341.840437][ T4393] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001030. ret = -71 [ 341.867652][ T4393] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 341.892455][ T4393] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 341.913975][ T4393] lan78xx: probe of 4-1:1.0 failed with error -71 [ 341.958509][ T4393] usb 4-1: USB disconnect, device number 25 [ 342.226108][ T4285] Bluetooth: hci4: link tx timeout [ 342.231961][ T4285] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 342.931601][ T7015] ecryptfs_parse_options: eCryptfs: unrecognized option [³(] [ 342.939097][ T7015] ecryptfs_parse_options: eCryptfs: unrecognized option [{\)] [ 342.946575][ T7015] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 342.959720][ T7015] Error parsing options; rc = [-22] [ 342.979688][ T7019] syz.0.650: attempt to access beyond end of device [ 342.979688][ T7019] nbd0: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 342.992903][ T7019] gfs2: error 10 reading superblock [ 343.487092][ T127] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 343.617049][ T4393] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 343.837050][ T127] usb 4-1: Using ep0 maxpacket: 32 [ 343.844204][ T127] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 343.859058][ T4393] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 343.863788][ T127] usb 4-1: config 0 has no interface number 0 [ 343.885973][ T127] usb 4-1: config 0 interface 184 has no altsetting 0 [ 343.896165][ T4393] usb 3-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 343.909896][ T127] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 343.927024][ T127] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.940300][ T4393] usb 3-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 343.945696][ T127] usb 4-1: Product: syz [ 343.955332][ T4393] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.976742][ T127] usb 4-1: Manufacturer: syz [ 343.985523][ T127] usb 4-1: SerialNumber: syz [ 343.996588][ T127] usb 4-1: config 0 descriptor?? [ 344.092239][ T127] smsc75xx v1.0.0 [ 344.160584][ T7038] syz.1.655: attempt to access beyond end of device [ 344.160584][ T7038] nbd1: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 344.181585][ T7038] gfs2: error 10 reading superblock [ 344.297049][ T4285] Bluetooth: hci4: command 0x0406 tx timeout [ 344.851751][ T7051] ecryptfs_parse_options: eCryptfs: unrecognized option [³(] [ 344.859872][ T7051] ecryptfs_parse_options: eCryptfs: unrecognized option [{\)] [ 344.867583][ T7051] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 344.881534][ T7051] Error parsing options; rc = [-22] [ 345.158227][ T7062] netlink: 8 bytes leftover after parsing attributes in process `syz.0.664'. [ 345.497129][ T4393] usb 3-1: unable to init card! (ret=-19) [ 345.516316][ T4393] usb 3-1: USB disconnect, device number 29 [ 346.286853][ T127] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 346.441330][ T127] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 346.595647][ T127] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 346.770321][ T127] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 346.837549][ T127] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 346.895493][ T127] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 346.916206][ T127] smsc75xx: probe of 4-1:0.184 failed with error -71 [ 346.936370][ T7074] syz.2.669: attempt to access beyond end of device [ 346.936370][ T7074] nbd2: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 346.949739][ T7074] gfs2: error 10 reading superblock [ 346.964825][ T127] usb 4-1: USB disconnect, device number 26 [ 347.580015][ T7090] loop0: detected capacity change from 0 to 512 [ 347.874317][ T7090] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #2: comm syz.0.671: missing EA_INODE flag [ 347.977889][ T7090] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.671: error while reading EA inode 2 err=-117 [ 348.004338][ T7090] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: comm syz.0.671: inode #3584: comm syz.0.671: iget: illegal inode # [ 348.038360][ T7090] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.671: error while reading EA inode 3584 err=-117 [ 348.056481][ T7090] EXT4-fs (loop0): 1 orphan inode deleted [ 348.062442][ T7090] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 348.614402][ T7095] ecryptfs_parse_options: eCryptfs: unrecognized option [³(] [ 348.622058][ T7095] ecryptfs_parse_options: eCryptfs: unrecognized option [{\)] [ 348.629656][ T7095] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 348.642872][ T7095] Error parsing options; rc = [-22] [ 348.843756][ T4283] EXT4-fs (loop0): unmounting filesystem. [ 349.017167][ T7102] loop2: detected capacity change from 0 to 2048 [ 349.090019][ T7102] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 349.201772][ T127] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 349.331034][ T7109] netlink: 8 bytes leftover after parsing attributes in process `syz.1.679'. [ 349.400821][ T127] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 349.430570][ T127] usb 4-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 349.465538][ T127] usb 4-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 349.493047][ T127] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.541990][ T4524] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.662092][ T4524] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.767163][ T4359] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 349.802663][ T4524] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.983363][ T4359] usb 5-1: Using ep0 maxpacket: 32 [ 350.003325][ T4359] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 350.022385][ T4359] usb 5-1: config 0 has no interface number 0 [ 350.038515][ T4359] usb 5-1: config 0 interface 184 has no altsetting 0 [ 350.056023][ T4359] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 350.075893][ T4359] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.093055][ T4359] usb 5-1: Product: syz [ 350.129120][ T4359] usb 5-1: Manufacturer: syz [ 350.133823][ T4359] usb 5-1: SerialNumber: syz [ 350.176351][ T4359] usb 5-1: config 0 descriptor?? [ 350.192410][ T4359] smsc75xx v1.0.0 [ 350.203190][ T4524] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.365164][ T7115] loop1: detected capacity change from 0 to 2048 [ 350.479814][ T7115] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 350.937223][ T127] usb 4-1: unable to init card! (ret=-19) [ 350.951589][ T127] usb 4-1: USB disconnect, device number 27 [ 351.625935][ T4279] EXT4-fs (loop2): unmounting filesystem. [ 351.859251][ T7136] loop2: detected capacity change from 0 to 128 [ 351.885315][ T7136] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 351.980999][ T7136] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 351.991618][ T4280] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 352.004403][ T4280] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 352.014200][ T4289] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 352.023613][ T4289] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 352.031776][ T4289] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 352.039142][ T4359] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 352.051085][ T4289] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 352.097747][ T4359] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 352.152493][ T4359] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 352.191958][ T4359] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 352.232695][ T4359] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 352.245834][ T4359] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 352.277170][ T4359] smsc75xx: probe of 5-1:0.184 failed with error -71 [ 352.305145][ T4359] usb 5-1: USB disconnect, device number 20 [ 352.390988][ T7137] rxe_eth0 speed is unknown, defaulting to 1000 [ 352.567672][ T5070] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 352.838962][ T5070] usb 3-1: config 2 has an invalid interface number: 69 but max is 0 [ 352.860382][ T5070] usb 3-1: config 2 has no interface number 0 [ 352.892214][ T5070] usb 3-1: config 2 interface 69 altsetting 5 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 353.055597][ T7147] ecryptfs_parse_options: eCryptfs: unrecognized option [³(] [ 353.063145][ T7147] ecryptfs_parse_options: eCryptfs: unrecognized option [{\)] [ 353.071342][ T7147] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 353.085052][ T7147] Error parsing options; rc = [-22] [ 353.092039][ T5070] usb 3-1: config 2 interface 69 altsetting 5 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 354.137131][ T4285] Bluetooth: hci4: command 0x0409 tx timeout [ 355.345905][ T4279] FAT-fs (loop2): error, invalid access to FAT (entry 0xffff0000) [ 355.405434][ T4279] FAT-fs (loop2): Filesystem has been set read-only [ 355.860208][ T5070] usb 3-1: config 2 interface 69 has no altsetting 0 [ 355.948667][ T5070] usb 3-1: string descriptor 0 read error: -71 [ 355.955246][ T5070] usb 3-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=3e.71 [ 355.964415][ T5070] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.977590][ T5070] usb 3-1: can't set config #2, error -71 [ 355.985206][ T5070] usb 3-1: USB disconnect, device number 30 [ 356.004484][ T4279] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 356.019195][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 356.217182][ T4285] Bluetooth: hci4: command 0x041b tx timeout [ 356.475113][ T7166] syz.4.691: attempt to access beyond end of device [ 356.475113][ T7166] nbd4: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 356.562289][ T7166] gfs2: error 10 reading superblock [ 356.627193][ T5070] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 356.686509][ T7170] netlink: 8 bytes leftover after parsing attributes in process `syz.3.692'. [ 356.848857][ T5070] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 356.883998][ T5070] usb 3-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 356.965649][ T5070] usb 3-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 357.007230][ T5070] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.024815][ T4524] device hsr_slave_0 left promiscuous mode [ 357.034087][ T4524] device hsr_slave_1 left promiscuous mode [ 357.065541][ T4524] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 357.084443][ T4524] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 357.141054][ T4524] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 357.163796][ T4524] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 357.196893][ T4524] device bridge_slave_1 left promiscuous mode [ 357.208037][ T4524] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.230167][ T4524] device bridge_slave_0 left promiscuous mode [ 357.236635][ T4524] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.365552][ T4524] device veth1_macvtap left promiscuous mode [ 357.406079][ T4524] device veth0_macvtap left promiscuous mode [ 357.436947][ T4524] device veth1_vlan left promiscuous mode [ 357.450196][ T4524] device veth0_vlan left promiscuous mode [ 358.297427][ T4289] Bluetooth: hci4: command 0x040f tx timeout [ 359.079643][ T5070] usb 3-1: unable to init card! (ret=-19) [ 359.187894][ T5070] usb 3-1: USB disconnect, device number 31 [ 359.697118][ T5070] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 359.908687][ T5070] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 359.963131][ T5070] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 359.996024][ T5070] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 360.057782][ T5070] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.118479][ T5070] usb 3-1: config 0 descriptor?? [ 360.377052][ T4289] Bluetooth: hci4: command 0x0419 tx timeout [ 361.399945][ T5070] uclogic 0003:256C:006D.0010: interface is invalid, ignoring [ 361.597050][ T7207] ecryptfs_parse_options: eCryptfs: unrecognized option [³(] [ 361.604830][ T7207] ecryptfs_parse_options: eCryptfs: unrecognized option [{\)] [ 361.612447][ T7207] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 361.625793][ T7207] Error parsing options; rc = [-22] [ 362.499551][ T4524] team0 (unregistering): Port device team_slave_1 removed [ 362.839803][ T4380] usb 3-1: USB disconnect, device number 32 [ 362.933841][ T4524] team0 (unregistering): Port device team_slave_0 removed [ 363.082247][ T7226] syz.4.704: attempt to access beyond end of device [ 363.082247][ T7226] nbd4: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 363.144161][ T7230] loop3: detected capacity change from 0 to 2048 [ 363.222650][ T7226] gfs2: error 10 reading superblock [ 363.290911][ T7230] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 363.411349][ T4524] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 364.616674][ T7242] loop1: detected capacity change from 0 to 512 [ 364.641821][ T4524] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 364.668099][ T7242] EXT4-fs: Ignoring removed nomblk_io_submit option [ 364.752777][ T7242] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 364.784016][ T7242] EXT4-fs error (device loop1): ext4_iget_extra_inode:4763: inode #15: comm syz.1.707: corrupted in-inode xattr [ 364.870845][ T7242] EXT4-fs error (device loop1): ext4_orphan_get:1414: comm syz.1.707: couldn't read orphan inode 15 (err -117) [ 364.942276][ T7242] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 365.685293][ T4281] EXT4-fs (loop3): unmounting filesystem. [ 365.806717][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 366.159360][ T7257] ecryptfs_parse_options: eCryptfs: unrecognized option [³(] [ 366.167042][ T7257] ecryptfs_parse_options: eCryptfs: unrecognized option [{\)] [ 366.175036][ T7257] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 366.188786][ T7257] Error parsing options; rc = [-22] [ 367.684772][ T7276] syz.1.714: attempt to access beyond end of device [ 367.684772][ T7276] nbd1: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 367.740335][ T7276] gfs2: error 10 reading superblock [ 367.906119][ T4524] bond0 (unregistering): Released all slaves [ 368.094830][ T7279] loop1: detected capacity change from 0 to 512 [ 368.162143][ T7279] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 368.216534][ T7279] EXT4-fs (loop1): 1 truncate cleaned up [ 368.227258][ T7279] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 368.259007][ T7137] chnl_net:caif_netlink_parms(): no params data found [ 368.412009][ T7137] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.421741][ T7137] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.430626][ T7137] device bridge_slave_0 entered promiscuous mode [ 368.447569][ T7137] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.465084][ T7137] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.494471][ T7137] device bridge_slave_1 entered promiscuous mode [ 368.574102][ T7137] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 368.630153][ T7137] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 368.712328][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 368.748048][ T7137] team0: Port device team_slave_0 added [ 368.778246][ T7137] team0: Port device team_slave_1 added [ 368.827189][ T5125] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 368.845762][ T7294] loop3: detected capacity change from 0 to 2048 [ 368.846745][ T7137] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 368.883904][ T7137] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 368.968508][ T7294] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 368.978822][ T7137] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 368.992214][ T7137] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 368.999401][ T7137] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 369.026545][ T7137] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 369.029213][ T5125] usb 5-1: Using ep0 maxpacket: 8 [ 369.191170][ T7137] device hsr_slave_0 entered promiscuous mode [ 369.204105][ T7302] loop2: detected capacity change from 0 to 2048 [ 369.249495][ T7137] device hsr_slave_1 entered promiscuous mode [ 369.270376][ T5125] usb 5-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 369.279576][ T5125] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.297899][ T7137] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 369.305795][ T5125] usb 5-1: Product: syz [ 369.313916][ T5125] usb 5-1: Manufacturer: syz [ 369.318764][ T7137] Cannot create hsr debugfs directory [ 369.330394][ T7302] loop2: p4 < > [ 369.340812][ T5125] usb 5-1: SerialNumber: syz [ 369.451445][ T5125] usb 5-1: config 0 descriptor?? [ 369.651231][ T7302] syz.2.721: attempt to access beyond end of device [ 369.651231][ T7302] loop2p4: rw=2048, sector=2, nr_sectors = 1 limit=2 [ 369.709716][ T5125] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 369.762262][ T5125] pctv452e: pctv452e_power_ctrl: 1 [ 369.762262][ T5125] [ 369.797373][ T7302] hfsplus: unable to find HFS+ superblock [ 369.823164][ T5125] usb 5-1: selecting invalid altsetting 3 [ 369.857511][ T5125] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 369.857511][ T5125] [ 370.130210][ T5125] dvb-usb: bulk message failed: -22 (5/0) [ 370.144184][ T7309] ecryptfs_parse_options: eCryptfs: unrecognized option [³(] [ 370.151735][ T7309] ecryptfs_parse_options: eCryptfs: unrecognized option [{\)] [ 370.159333][ T7309] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 370.173154][ T7309] Error parsing options; rc = [-22] [ 370.184188][ T5125] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 370.196158][ T5125] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 370.205439][ T5125] usb 5-1: media controller created [ 370.232443][ T5125] dvb-usb: bulk message failed: -22 (8/0) [ 370.240507][ T5125] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 370.249501][ T5125] dvb-usb: MAC address reading failed. [ 370.296234][ T5125] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 370.365310][ T4281] EXT4-fs (loop3): unmounting filesystem. [ 370.485211][ T7317] netlink: 8 bytes leftover after parsing attributes in process `syz.2.724'. [ 370.518586][ T5125] DVB: Unable to find symbol stb0899_attach() [ 370.545104][ T5125] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 370.870481][ T7325] syz.1.725: attempt to access beyond end of device [ 370.870481][ T7325] nbd1: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 370.921684][ T7325] gfs2: error 10 reading superblock [ 371.627054][ T5125] rc_core: IR keymap rc-tt-1500 not found [ 371.632979][ T5125] Registered IR keymap rc-empty [ 371.776123][ T5125] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 371.789506][ T5125] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input14 [ 371.805327][ T5125] dvb-usb: schedule remote query interval to 100 msecs. [ 371.813057][ T5125] pctv452e: pctv452e_power_ctrl: 0 [ 371.813057][ T5125] [ 371.821137][ T5125] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 372.556856][ T5125] usb 5-1: USB disconnect, device number 21 [ 372.598524][ T5128] dvb-usb: bulk message failed: -22 (4/0) [ 372.604735][ T5128] dvb-usb: error -22 while querying for an remote control event. [ 372.917654][ T7340] loop3: detected capacity change from 0 to 32768 [ 372.929659][ T7340] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.727 (7340) [ 372.952793][ T7340] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 372.963095][ T7340] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 372.971943][ T7340] BTRFS info (device loop3): use zlib compression, level 3 [ 372.979359][ T7340] BTRFS info (device loop3): turning on sync discard [ 372.986790][ T7340] BTRFS info (device loop3): using free space tree [ 373.139706][ T5125] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 373.178746][ T7137] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 373.215808][ T7137] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 373.645539][ T7137] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 373.665437][ T7137] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 373.764009][ T7367] loop2: detected capacity change from 0 to 512 [ 373.773841][ T7340] BTRFS info (device loop3): enabling ssd optimizations [ 373.938410][ T7367] EXT4-fs: Ignoring removed nomblk_io_submit option [ 374.050989][ T7367] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 374.064979][ T7137] 8021q: adding VLAN 0 to HW filter on device bond0 [ 374.102610][ T7367] EXT4-fs error (device loop2): ext4_iget_extra_inode:4763: inode #15: comm syz.2.731: corrupted in-inode xattr [ 374.330702][ T27] audit: type=1800 audit(1792065853.953:11): pid=7374 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.727" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 374.796102][ T7137] 8021q: adding VLAN 0 to HW filter on device team0 [ 374.817357][ T7367] EXT4-fs error (device loop2): ext4_orphan_get:1414: comm syz.2.731: couldn't read orphan inode 15 (err -117) [ 374.946293][ T7367] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 375.107151][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 375.115297][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 375.158056][ T4281] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 375.189690][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 375.231167][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 375.252887][ T4279] EXT4-fs (loop2): unmounting filesystem. [ 375.271224][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.278713][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 375.409169][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 375.458561][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 375.515133][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.523683][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 375.640775][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 375.686563][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 375.947007][ T14] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 376.051408][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 376.066408][ T6000] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop3 scanned by udevd (6000) [ 376.319898][ T7391] netlink: 'syz.3.733': attribute type 1 has an invalid length. [ 376.538313][ T7390] ecryptfs_parse_options: eCryptfs: unrecognized option [³(] [ 376.545770][ T7390] ecryptfs_parse_options: eCryptfs: unrecognized option [{\)] [ 376.553451][ T7390] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 376.566563][ T7390] Error parsing options; rc = [-22] [ 376.742820][ T14] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 376.755067][ T14] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 376.764726][ T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.789037][ T14] usb 5-1: config 0 descriptor?? [ 376.810043][ T7391] device bond1 entered promiscuous mode [ 376.825051][ T7391] 8021q: adding VLAN 0 to HW filter on device bond1 [ 376.938471][ T7393] 8021q: adding VLAN 0 to HW filter on device bond1 [ 376.981444][ T7393] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 377.035195][ T7393] bond1: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 377.091726][ T7393] bond1: (slave gre1): making interface the new active one [ 377.150410][ T7393] device gre1 entered promiscuous mode [ 377.174328][ T7393] bond1: (slave gre1): Enslaving as an active interface with an up link [ 377.203978][ T14] keytouch 0003:0926:3333.0011: fixing up Keytouch IEC report descriptor [ 377.233933][ T14] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0011/input/input15 [ 377.258431][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 377.281221][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 377.577750][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 377.619326][ T14] keytouch 0003:0926:3333.0011: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 377.663433][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 377.689834][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 377.727958][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 377.756159][ T4285] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 377.774361][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 377.793183][ T14] usb 5-1: USB disconnect, device number 22 [ 377.812384][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 377.845593][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 377.887736][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 377.920379][ T7137] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 377.981992][ T7410] loop3: detected capacity change from 0 to 512 [ 378.019042][ T7410] EXT4-fs: Ignoring removed nobh option [ 378.076431][ T7410] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.738: invalid indirect mapped block 256 (level 2) [ 378.116857][ T7410] EXT4-fs (loop3): 2 truncates cleaned up [ 378.124331][ T7410] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 378.178039][ T7407] fido_id[7407]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 378.564642][ T7419] fuse: Unknown parameter '00000000000000000000' [ 378.584643][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.601579][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.331942][ T4281] EXT4-fs (loop3): unmounting filesystem. [ 379.985830][ T7433] netlink: 8 bytes leftover after parsing attributes in process `syz.3.743'. [ 380.097682][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 380.121760][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 380.161262][ T7137] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 380.171736][ T7436] loop4: detected capacity change from 0 to 512 [ 380.190503][ T7436] EXT4-fs: Ignoring removed nomblk_io_submit option [ 380.246624][ T7436] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 380.267160][ T7436] EXT4-fs error (device loop4): ext4_iget_extra_inode:4763: inode #15: comm syz.4.744: corrupted in-inode xattr [ 380.298047][ T7436] EXT4-fs error (device loop4): ext4_orphan_get:1414: comm syz.4.744: couldn't read orphan inode 15 (err -117) [ 380.311610][ T7436] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 380.488692][ T4270] EXT4-fs (loop4): unmounting filesystem. [ 381.989160][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 382.001271][ T7464] loop2: detected capacity change from 0 to 1024 [ 382.015082][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 382.056302][ T7464] EXT4-fs: quotafile must be on filesystem root [ 382.214322][ T7] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 382.263934][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 382.336131][ T7469] 9pnet_fd: Insufficient options for proto=fd [ 382.517252][ T7] usb 4-1: Using ep0 maxpacket: 16 [ 382.529150][ T7] usb 4-1: config 5 has an invalid interface number: 202 but max is 0 [ 382.594971][ T7] usb 4-1: config 5 has no interface number 0 [ 382.978654][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 382.997089][ T7] usb 4-1: config 5 interface 202 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 383.021157][ T7137] device veth0_vlan entered promiscuous mode [ 383.043753][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 383.073606][ T7] usb 4-1: New USB device found, idVendor=05a9, idProduct=2641, bcdDevice=59.7b [ 383.099086][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 383.203483][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.230967][ T7137] device veth1_vlan entered promiscuous mode [ 383.257338][ T7] usb 4-1: Product: syz [ 383.271950][ T7] usb 4-1: Manufacturer: syz [ 383.284608][ T7] usb 4-1: SerialNumber: syz [ 383.301258][ T7477] loop2: detected capacity change from 0 to 128 [ 383.308121][ T4285] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 383.343552][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 383.364313][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 383.422377][ T7137] device veth0_macvtap entered promiscuous mode [ 383.472508][ T7137] device veth1_macvtap entered promiscuous mode [ 383.539869][ T7137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 383.563299][ T7] usb 4-1: Found UVC 0.00 device syz (05a9:2641) [ 383.576428][ T7137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.586786][ T7] usb 4-1: No valid video chain found. [ 383.602395][ T7] usb 4-1: USB disconnect, device number 28 [ 383.616047][ T7137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 383.652694][ T7137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.669356][ T14] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 383.685639][ T7137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 383.716187][ T7137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.737317][ T7137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 383.772642][ T7137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.794688][ T7137] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 383.815001][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 383.843623][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 383.862795][ T14] usb 5-1: Using ep0 maxpacket: 8 [ 383.873524][ T14] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 383.884937][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 383.900224][ T14] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.911973][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 383.923590][ T14] usb 5-1: Product: syz [ 383.931121][ T14] usb 5-1: Manufacturer: syz [ 383.936065][ T7137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.946868][ T14] usb 5-1: SerialNumber: syz [ 383.974279][ T14] usb 5-1: config 0 descriptor?? [ 383.982469][ T7137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.018842][ T14] gspca_main: se401-2.14.0 probing 047d:5003 [ 384.034196][ T7137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 384.049844][ T7137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.060309][ T7137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 384.071384][ T7137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.083287][ T7137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 384.094891][ T7137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.112658][ T7137] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 384.551041][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 384.563195][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 384.593467][ T7137] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.610076][ T7137] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.619795][ T7137] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.629360][ T7137] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.761680][ T14] gspca_se401: Wrong descriptor type [ 384.773346][ T7491] loop3: detected capacity change from 0 to 512 [ 384.821564][ T7491] EXT4-fs: Ignoring removed nomblk_io_submit option [ 384.831339][ T7492] netlink: 'syz.2.752': attribute type 4 has an invalid length. [ 384.876124][ T7491] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 384.932083][ T7492] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.752'. [ 384.964356][ T5125] usb 5-1: USB disconnect, device number 23 [ 384.983756][ T7491] EXT4-fs error (device loop3): ext4_iget_extra_inode:4763: inode #15: comm syz.3.755: corrupted in-inode xattr [ 385.057688][ T4503] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 385.067806][ T7491] EXT4-fs error (device loop3): ext4_orphan_get:1414: comm syz.3.755: couldn't read orphan inode 15 (err -117) [ 385.087175][ T4503] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.101395][ T7491] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 385.112775][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 385.187182][ T4503] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 385.215428][ T4503] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.246183][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 385.254103][ T4281] EXT4-fs (loop3): unmounting filesystem. [ 385.697017][ T7509] loop4: detected capacity change from 0 to 1024 [ 385.773291][ T7509] EXT4-fs: inline encryption not supported [ 386.446712][ T7509] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 386.557190][ T7513] process 'syz.5.760' launched './file0' with NULL argv: empty string added [ 386.611118][ T7518] loop3: detected capacity change from 0 to 4096 [ 386.622757][ T7509] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 386.734333][ T5991] I/O error, dev loop3, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 387.690479][ T4270] EXT4-fs (loop4): unmounting filesystem. [ 387.929199][ T7533] loop3: detected capacity change from 0 to 2048 [ 387.988826][ T7533] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 388.407009][ T5128] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 388.619641][ T5128] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 388.640679][ T5128] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 388.671637][ T5128] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 388.706875][ T5128] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.751317][ T5128] usb 5-1: config 0 descriptor?? [ 389.599776][ T7562] loop2: detected capacity change from 0 to 512 [ 389.636139][ T7562] EXT4-fs: Ignoring removed nomblk_io_submit option [ 389.678561][ T7562] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 389.690819][ T7562] EXT4-fs error (device loop2): ext4_iget_extra_inode:4763: inode #15: comm syz.2.768: corrupted in-inode xattr [ 389.753838][ T7562] EXT4-fs error (device loop2): ext4_orphan_get:1414: comm syz.2.768: couldn't read orphan inode 15 (err -117) [ 389.791390][ T5128] uclogic 0003:256C:006D.0012: interface is invalid, ignoring [ 389.831668][ T7562] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 389.994660][ T4279] EXT4-fs (loop2): unmounting filesystem. [ 392.177009][ T7] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 392.386988][ T7] usb 3-1: Using ep0 maxpacket: 8 [ 392.438435][ T7] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 392.493699][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.527137][ T7] usb 3-1: Product: syz [ 392.531381][ T7] usb 3-1: Manufacturer: syz [ 392.536036][ T7] usb 3-1: SerialNumber: syz [ 392.548833][ T7] usb 3-1: config 0 descriptor?? [ 392.579182][ T7] gspca_main: se401-2.14.0 probing 047d:5003 [ 392.592421][ T4393] usb 5-1: USB disconnect, device number 24 [ 392.982798][ T7652] syz.1.773: attempt to access beyond end of device [ 392.982798][ T7652] nbd1: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 392.996772][ T7] gspca_se401: Wrong descriptor type [ 393.320671][ T5532] usb 3-1: USB disconnect, device number 33 [ 393.597122][ T14] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 393.768577][ T7652] gfs2: error 10 reading superblock [ 393.996989][ T14] usb 5-1: Using ep0 maxpacket: 32 [ 394.021984][ T14] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 394.342661][ T14] usb 5-1: config 0 has no interface number 0 [ 394.363715][ T14] usb 5-1: config 0 interface 184 has no altsetting 0 [ 395.656162][ T14] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 398.060160][ T4281] EXT4-fs (loop3): unmounting filesystem. [ 398.686174][ T14] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.278093][ T14] usb 5-1: Product: syz [ 399.426991][ T14] usb 5-1: Manufacturer: syz [ 399.431697][ T14] usb 5-1: SerialNumber: syz [ 399.441032][ T7672] loop4: detected capacity change from 0 to 512 [ 399.464116][ T7672] EXT4-fs: Ignoring removed nomblk_io_submit option [ 399.503610][ T14] usb 5-1: config 0 descriptor?? [ 399.551720][ T14] usb 5-1: can't set config #0, error -71 [ 399.589241][ T7672] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 399.602238][ T7672] EXT4-fs error (device loop4): ext4_iget_extra_inode:4763: inode #15: comm syz.4.780: corrupted in-inode xattr [ 399.617417][ T14] usb 5-1: USB disconnect, device number 25 [ 399.775264][ T7672] EXT4-fs error (device loop4): ext4_orphan_get:1414: comm syz.4.780: couldn't read orphan inode 15 (err -117) [ 399.826233][ T7688] [ 399.828689][ T7688] ====================================================== [ 399.835755][ T7688] WARNING: possible circular locking dependency detected [ 399.842821][ T7688] syzkaller #0 Not tainted [ 399.847260][ T7688] ------------------------------------------------------ [ 399.854838][ T7688] syz.1.782/7688 is trying to acquire lock: [ 399.860751][ T7688] ffff888140c59590 (&sb->s_type->i_mutex_key#25){++++}-{3:3}, at: configfs_depend_item_unlocked+0x14c/0x450 [ 399.872323][ T7688] [ 399.872323][ T7688] but task is already holding lock: [ 399.879736][ T7688] ffffffff8e6067e8 (tpg_instances_lock){+.+.}-{3:3}, at: usbg_make_tpg+0xf5/0x550 [ 399.888995][ T7688] [ 399.888995][ T7688] which lock already depends on the new lock. [ 399.888995][ T7688] [ 399.899411][ T7688] [ 399.899411][ T7688] the existing dependency chain (in reverse order) is: [ 399.908440][ T7688] [ 399.908440][ T7688] -> #3 (tpg_instances_lock){+.+.}-{3:3}: [ 399.916372][ T7688] __mutex_lock+0x12d/0xae0 [ 399.921435][ T7688] tcm_alloc_inst+0x61/0x190 [ 399.926584][ T7688] usb_get_function_instance+0xd9/0x2e0 [ 399.932705][ T7688] function_make+0x118/0x350 [ 399.937934][ T7688] configfs_mkdir+0x511/0x9e0 [ 399.943166][ T7688] vfs_mkdir+0x386/0x570 [ 399.947947][ T7688] do_mkdirat+0x1d8/0x440 [ 399.952824][ T7688] __x64_sys_mkdirat+0x85/0x90 [ 399.958130][ T7688] do_syscall_64+0x4c/0xa0 [ 399.963093][ T7688] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 399.969536][ T7688] [ 399.969536][ T7688] -> #2 (func_lock){+.+.}-{3:3}: [ 399.976691][ T7688] __mutex_lock+0x12d/0xae0 [ 399.981845][ T7688] usb_get_function_instance+0x2a/0x2e0 [ 399.987963][ T7688] function_make+0x118/0x350 [ 399.993105][ T7688] configfs_mkdir+0x511/0x9e0 [ 399.998336][ T7688] vfs_mkdir+0x386/0x570 [ 400.003124][ T7688] do_mkdirat+0x1d8/0x440 [ 400.007998][ T7688] __x64_sys_mkdirat+0x85/0x90 [ 400.013314][ T7688] do_syscall_64+0x4c/0xa0 [ 400.018324][ T7688] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 400.024769][ T7688] [ 400.024769][ T7688] -> #1 (gadget_subsys.su_mutex){+.+.}-{3:3}: [ 400.033049][ T7688] __mutex_lock+0x12d/0xae0 [ 400.038285][ T7688] uvcg_streaming_header_allow_link+0x6d/0x4a0 [ 400.044981][ T7688] configfs_symlink+0x5a4/0x13c0 [ 400.050461][ T7688] vfs_symlink+0x245/0x3d0 [ 400.055423][ T7688] do_symlinkat+0x1b6/0x400 [ 400.060469][ T7688] __x64_sys_symlinkat+0x95/0xa0 [ 400.065956][ T7688] do_syscall_64+0x4c/0xa0 [ 400.070923][ T7688] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 400.077367][ T7688] [ 400.077367][ T7688] -> #0 (&sb->s_type->i_mutex_key#25){++++}-{3:3}: [ 400.086092][ T7688] __lock_acquire+0x3a03/0x7ea0 [ 400.091491][ T7688] lock_acquire+0x1bc/0x4a0 [ 400.096541][ T7688] down_write+0x36/0x60 [ 400.101244][ T7688] configfs_depend_item_unlocked+0x14c/0x450 [ 400.107776][ T7688] usbg_make_tpg+0x1dd/0x550 [ 400.112911][ T7688] target_fabric_make_tpg+0xa0/0x6d0 [ 400.118770][ T7688] configfs_mkdir+0x511/0x9e0 [ 400.124087][ T7688] vfs_mkdir+0x386/0x570 [ 400.128873][ T7688] do_mkdirat+0x1d8/0x440 [ 400.133770][ T7688] __x64_sys_mkdirat+0x85/0x90 [ 400.139083][ T7688] do_syscall_64+0x4c/0xa0 [ 400.144044][ T7688] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 400.150492][ T7688] [ 400.150492][ T7688] other info that might help us debug this: [ 400.150492][ T7688] [ 400.160736][ T7688] Chain exists of: [ 400.160736][ T7688] &sb->s_type->i_mutex_key#25 --> func_lock --> tpg_instances_lock [ 400.160736][ T7688] [ 400.174605][ T7688] Possible unsafe locking scenario: [ 400.174605][ T7688] [ 400.182102][ T7688] CPU0 CPU1 [ 400.187481][ T7688] ---- ---- [ 400.192863][ T7688] lock(tpg_instances_lock); [ 400.197562][ T7688] lock(func_lock); [ 400.203993][ T7688] lock(tpg_instances_lock); [ 400.211222][ T7688] lock(&sb->s_type->i_mutex_key#25); [ 400.216708][ T7688] [ 400.216708][ T7688] *** DEADLOCK *** [ 400.216708][ T7688] [ 400.224864][ T7688] 4 locks held by syz.1.782/7688: [ 400.229927][ T7688] #0: ffff88801bfcc460 (sb_writers#18){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 400.239193][ T7688] #1: ffff88804c45f3f0 (&sb->s_type->i_mutex_key#7/1){+.+.}-{3:3}, at: filename_create+0x20b/0x450 [ 400.250033][ T7688] #2: ffffffff8e2ea510 (&subsys->su_mutex){+.+.}-{3:3}, at: configfs_mkdir+0x4b5/0x9e0 [ 400.259835][ T7688] #3: ffffffff8e6067e8 (tpg_instances_lock){+.+.}-{3:3}, at: usbg_make_tpg+0xf5/0x550 [ 400.269526][ T7688] [ 400.269526][ T7688] stack backtrace: [ 400.275431][ T7688] CPU: 1 PID: 7688 Comm: syz.1.782 Not tainted syzkaller #0 [ 400.282742][ T7688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 400.292921][ T7688] Call Trace: [ 400.296226][ T7688] [ 400.299185][ T7688] dump_stack_lvl+0x188/0x24e [ 400.303894][ T7688] ? load_image+0x410/0x410 [ 400.308422][ T7688] ? show_regs_print_info+0x12/0x12 [ 400.313649][ T7688] ? print_circular_bug+0x12b/0x1a0 [ 400.318879][ T7688] check_noncircular+0x2f8/0x400 [ 400.323853][ T7688] ? print_deadlock_bug+0x5d0/0x5d0 [ 400.329081][ T7688] ? lockdep_lock+0xf1/0x1f0 [ 400.333735][ T7688] ? _find_first_zero_bit+0xd2/0x100 [ 400.339051][ T7688] __lock_acquire+0x3a03/0x7ea0 [ 400.343950][ T7688] ? verify_lock_unused+0x140/0x140 [ 400.349186][ T7688] ? __mutex_trylock_common+0x15c/0x260 [ 400.354760][ T7688] lock_acquire+0x1bc/0x4a0 [ 400.359302][ T7688] ? configfs_depend_item_unlocked+0x14c/0x450 [ 400.365501][ T7688] ? __might_sleep+0xd0/0xd0 [ 400.370115][ T7688] ? read_lock_is_recursive+0x10/0x10 [ 400.375524][ T7688] ? __mutex_trylock_common+0x15c/0x260 [ 400.381123][ T7688] ? usbg_make_tpg+0xf5/0x550 [ 400.385841][ T7688] ? mutex_lock_nested+0x10/0x10 [ 400.390827][ T7688] down_write+0x36/0x60 [ 400.395127][ T7688] ? configfs_depend_item_unlocked+0x14c/0x450 [ 400.401347][ T7688] configfs_depend_item_unlocked+0x14c/0x450 [ 400.407374][ T7688] usbg_make_tpg+0x1dd/0x550 [ 400.412005][ T7688] ? snprintf+0xe5/0x140 [ 400.416296][ T7688] ? usbg_drop_tport+0x20/0x20 [ 400.421092][ T7688] ? vscnprintf+0x80/0x80 [ 400.425454][ T7688] ? __kmem_cache_alloc_node+0x19d/0x270 [ 400.431119][ T7688] target_fabric_make_tpg+0xa0/0x6d0 [ 400.436436][ T7688] ? target_fabric_release_wwn+0xa0/0xa0 [ 400.442093][ T7688] configfs_mkdir+0x511/0x9e0 [ 400.446834][ T7688] vfs_mkdir+0x386/0x570 [ 400.451117][ T7688] do_mkdirat+0x1d8/0x440 [ 400.455475][ T7688] ? vfs_mkdir+0x570/0x570 [ 400.459916][ T7688] __x64_sys_mkdirat+0x85/0x90 [ 400.464707][ T7688] do_syscall_64+0x4c/0xa0 [ 400.469154][ T7688] ? clear_bhb_loop+0x60/0xb0 [ 400.473882][ T7688] ? clear_bhb_loop+0x60/0xb0 [ 400.478587][ T7688] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 400.484510][ T7688] RIP: 0033:0x7f3dd439e559 [ 400.488953][ T7688] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 400.508580][ T7688] RSP: 002b:00007f3dd5301028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 400.517034][ T7688] RAX: ffffffffffffffda RBX: 00007f3dd4625fa0 RCX: 00007f3dd439e559 [ 400.525034][ T7688] RDX: 00000000000001ff RSI: 0000200000006680 RDI: ffffffffffffff9c [ 400.533029][ T7688] RBP: 00007f3dd44358b0 R08: 0000000000000000 R09: 0000000000000000 [ 400.541047][ T7688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 400.549045][ T7688] R13: 00007f3dd4626038 R14: 00007f3dd4625fa0 R15: 00007ffd30034388 [ 400.557132][ T7688] [ 400.669273][ T7672] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 400.866047][ T4270] EXT4-fs (loop4): unmounting filesystem.