last executing test programs: 5m25.641979869s ago: executing program 3 (id=4): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00'}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000180)=ANY=[@ANYBLOB="736563757269747900000000000000000000000000d800000000000000"], &(0x7f0000000580)=0x2c) openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x187042, 0x1d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) ptrace$pokeuser(0x6, r1, 0xecf, 0xcfd00000000) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, 0x0) ioctl$sock_inet6_SIOCDELRT(r5, 0x890c, &(0x7f00000000c0)={@remote, @private0, @empty, 0x40003, 0x40, 0x5, 0x100, 0x0, 0x590043}) clock_nanosleep(0x2, 0xf079bb0900000000, &(0x7f0000000040)={0x0, 0x989680}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f0000000040)=""/155, 0x1000000, 0x9b, 0x1}, 0x20) 5m23.45422852s ago: executing program 3 (id=8): syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000040)='./file0\x00', 0x2000800, &(0x7f0000000340)=ANY=[@ANYRES64=0x0, @ANYRESOCT, @ANYRESHEX], 0x1, 0x296, &(0x7f0000000740)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x132) llistxattr(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) 5m19.048708755s ago: executing program 3 (id=13): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0xc1) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000356ffc)=0xffbfff40, 0x4) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) add_key$fscrypt_v1(0x0, &(0x7f0000000200)={'fscrypt:', @auto=[0x37, 0x21, 0x33, 0x65, 0x61, 0x32, 0x33, 0x64, 0x37, 0x33, 0x31, 0x66, 0x36, 0xfc733b9242449f42, 0x37, 0x38]}, 0x0, 0x0, 0xfffffffffffffffc) 5m3.816910412s ago: executing program 32 (id=13): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0xc1) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000356ffc)=0xffbfff40, 0x4) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) add_key$fscrypt_v1(0x0, &(0x7f0000000200)={'fscrypt:', @auto=[0x37, 0x21, 0x33, 0x65, 0x61, 0x32, 0x33, 0x64, 0x37, 0x33, 0x31, 0x66, 0x36, 0xfc733b9242449f42, 0x37, 0x38]}, 0x0, 0x0, 0xfffffffffffffffc) 18.168337944s ago: executing program 1 (id=698): socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="1800"/11], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) r3 = dup(r2) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000240)={0x80, 0x6, 0x103, 0x0, 0xe0, 0x0, 0x0}) 16.723270708s ago: executing program 2 (id=705): syz_clone(0x443c8200, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000180)='[\vx\'\xa5)\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\x01\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc0\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x99\x83\xcd\b\xd1\x02R\xae\x80z8Z\xd2}\xf5\xe4\x9f5\x9b7\xaf\xb7o\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd', 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 16.696200569s ago: executing program 1 (id=706): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/unix\x00') pread64(r0, &(0x7f0000000300)=""/178, 0xb2, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0x9]}, 0x8, 0x80800) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000000)=0x6, 0x4) ioctl$KDGETMODE(r2, 0x4b3b, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) r3 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3}) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x9, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, &(0x7f0000000100)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x9c}, 0x10) io_uring_setup(0x6831, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x8, 0x3bd}) 15.973676817s ago: executing program 1 (id=709): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(0xffffffffffffffff, 0x0, 0x80) openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/fib_trie\x00') read$FUSE(r5, &(0x7f0000002f40)={0x2020}, 0x2020) preadv(r5, 0x0, 0x0, 0x6, 0x4) ptrace$setregs(0xd, r0, 0xd, &(0x7f0000000100)="8e85fc") r6 = dup(r4) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x1f0}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r3) 15.631353474s ago: executing program 2 (id=712): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x0, 0x4}) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r1, 0x40026f34, &(0x7f0000000040)=0x1) close_range(r0, 0xffffffffffffffff, 0x0) 14.768836238s ago: executing program 1 (id=713): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000107e05192000000000000109022d00010000000009040000050300150009210500000122050009058103"], 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r3, 0x80085665, &(0x7f00000000c0)={0x3, 0x1ff, 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video4linux(0x0, 0x3, 0x3cf281) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={0x0}, 0x1, 0x0, 0x0, 0x4075}, 0xc800) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) getpid() syz_80211_join_ibss(&(0x7f0000000200)='wlan0\x00', &(0x7f00000002c0)=@default_ap_ssid, 0x6, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d00"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(r5, 0x1, 0x1, &(0x7f0000000380)=0xfffff272, 0x4) ptrace$ARCH_SET_GS(0x1e, 0x0, &(0x7f0000000340), 0x1001) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="000ff3000000f3"], 0x0, 0x0, 0x0}, 0x0) 13.55775057s ago: executing program 2 (id=716): socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="1800"/11], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) r3 = dup(r2) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000240)={0x80, 0x6, 0x103, 0x0, 0xe0, 0x0, 0x0}) 13.529696141s ago: executing program 5 (id=718): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) ioctl$VIDIOC_QBUF(r3, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, "8000"}, 0x0, 0x2, {}, 0x20800}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001173a6140f415"], 0x0) 12.595305759s ago: executing program 0 (id=721): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000003c0)={r3, &(0x7f0000000600), &(0x7f0000000080)=""/61}, 0x20) r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x8101, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x3, 0xfffffffe, 0x0, "0062ba7d82000000000000000000f7fffeff00"}) r5 = syz_open_pts(r4, 0x8182) r6 = dup3(r5, r4, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) tgkill(0x0, 0x0, 0x21) ioctl$HCIINQUIRY(r0, 0x400448ca, 0x0) syz_clone3(&(0x7f0000000440)={0x8200800, &(0x7f00000000c0), &(0x7f0000000100), 0x0, {0x13}, 0x0, 0x0, &(0x7f0000000300)=""/135, 0x0, 0x0, {r6}}, 0x58) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) 11.678170405s ago: executing program 0 (id=724): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000a00), 0x0) socket$inet_sctp(0x2, 0x1, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @loopback}, {0x2, 0x0, @local}, {0x2, 0x4e23, @local}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x6}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 11.287085326s ago: executing program 0 (id=725): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f0, 0x128, 0x111, 0x4b4, 0x128, 0xd4feffff, 0x220, 0x20a, 0x278, 0x220, 0x278, 0x3, 0x0, {[{{@ipv6={@private2, @loopback, [], [], 'bond_slave_1\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0x100, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0x5}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(0xffffffffffffffff, 0x0, 0x80) openat$cgroup_procs(r4, 0x0, 0x2, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/fib_trie\x00') read$FUSE(r5, &(0x7f0000002f40)={0x2020}, 0x2020) getpid() socket$nl_netfilter(0x10, 0x3, 0xc) memfd_create(0x0, 0x2) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file2\x00', 0x40040, 0x6ab858183a7ef682) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 9.648066011s ago: executing program 0 (id=726): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_DEBUGREGS(r2, 0x8080aea1, &(0x7f00000001c0)) 9.574366865s ago: executing program 5 (id=728): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x0, 0x4}) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r1, 0x40026f34, &(0x7f0000000040)=0x1) close_range(r0, 0xffffffffffffffff, 0x0) 9.439167432s ago: executing program 5 (id=729): ioctl$HIDIOCSFLAG(0xffffffffffffffff, 0x4004480f, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@file={0x0, './file7\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) 9.315025318s ago: executing program 0 (id=730): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000107e05192000000000000109022d00010000000009040000050300150009210500000122050009058103"], 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r3, 0x80085665, &(0x7f00000000c0)={0x3, 0x1ff, 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video4linux(0x0, 0x3, 0x3cf281) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={0x0}, 0x1, 0x0, 0x0, 0x4075}, 0xc800) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) getpid() syz_80211_join_ibss(&(0x7f0000000200)='wlan0\x00', &(0x7f00000002c0)=@default_ap_ssid, 0x6, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d00"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(r5, 0x1, 0x1, &(0x7f0000000380)=0xfffff272, 0x4) ptrace$ARCH_SET_GS(0x1e, 0x0, &(0x7f0000000340), 0x1001) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="000ff3000000f3"], 0x0, 0x0, 0x0}, 0x0) 6.455096456s ago: executing program 1 (id=734): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="1800"/11], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) r4 = dup(r3) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000240)={0x80, 0x6, 0x103, 0x0, 0xe0, 0x0, 0x0}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x48) r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) socket(0x10, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000016c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r6, 0x0, 0x0, 0x109, 0x0, &(0x7f0000000cc0)=""/265, 0xcb95, 0x0, 0x103, 0x17b, &(0x7f0000000980)="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", &(0x7f00000007c0)="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", 0x2, 0x0, 0x3ff}, 0x50) 6.406242469s ago: executing program 2 (id=735): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(0xffffffffffffffff, 0x0, 0x80) openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/fib_trie\x00') read$FUSE(r4, &(0x7f0000002f40)={0x2020}, 0x2020) preadv(r4, 0x0, 0x0, 0x6, 0x4) ptrace$setregs(0xd, r0, 0xd, &(0x7f0000000100)="8e85fc") r5 = dup(r3) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x1f0}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r2) 6.390973609s ago: executing program 4 (id=736): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/unix\x00') pread64(r0, &(0x7f0000000300)=""/178, 0xb2, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0x9]}, 0x8, 0x80800) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000000)=0x6, 0x4) ioctl$KDGETMODE(r2, 0x4b3b, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) r3 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3}) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x9, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, &(0x7f0000000100)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x9c}, 0x10) io_uring_setup(0x6831, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x8, 0x3bd}) 6.360685661s ago: executing program 5 (id=737): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x2800000, &(0x7f0000000000)={[{@nobh}, {@delalloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}, {@quota}, {@errors_continue}, {@debug}, {@nodelalloc}, {@barrier}]}, 0x21, 0xbd4, &(0x7f0000001500)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000580)='./file0\x00', 0x50007a2) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000140), 0x8, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 5.952328273s ago: executing program 4 (id=738): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x80) openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/fib_trie\x00') read$FUSE(r3, &(0x7f0000002f40)={0x2020}, 0x2020) preadv(r3, 0x0, 0x0, 0x6, 0x4) ptrace$setregs(0xd, r0, 0xd, &(0x7f0000000100)="8e85fc") r4 = dup(r2) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x1f0}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r1) 5.728721024s ago: executing program 4 (id=739): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x0, 0x4}) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r1, 0x40026f34, &(0x7f0000000040)=0x1) close_range(r0, 0xffffffffffffffff, 0x0) 5.511961085s ago: executing program 4 (id=740): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0) connect$unix(r2, &(0x7f00000008c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f00000001c0)) 4.770724044s ago: executing program 2 (id=741): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, 0x0) r0 = inotify_init1(0x80000) r1 = dup(r0) read$FUSE(r1, &(0x7f0000001280)={0x2020}, 0x2020) 4.603011502s ago: executing program 5 (id=742): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='system.posix_acl_access\x00', &(0x7f0000000000)=ANY=[@ANYBLOB], 0x24, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x141091, 0x0) rmdir(&(0x7f0000000380)='./file0/../file0\x00') syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x1f, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x1, 0x5553, &(0x7f000000b3c0)="$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") socket$can_raw(0x1d, 0x3, 0x1) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000300)={[{@test_dummy_encryption}, {@init_itable_val={'init_itable', 0x3d, 0x2}}, {@minixdf}, {@jqfmt_vfsv1}, {@sysvgroups}, {@noauto_da_alloc}, {@barrier_val={'barrier', 0x3d, 0xb}}, {@errors_remount}, {@auto_da_alloc}, {@test_dummy_encryption}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@sb={'sb', 0x3d, 0xffffffffffffffff}}, {@nobh}, {@dax}], [{@fowner_gt}, {@subj_user={'subj_user', 0x3d, 'sb'}}]}, 0xdf, 0x475, &(0x7f0000000780)="$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") 4.218125822s ago: executing program 4 (id=743): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) 966.179211ms ago: executing program 4 (id=744): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000107e05192000000000000109022d00010000000009040000050300150009210500000122050009058103"], 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r3, 0x80085665, &(0x7f00000000c0)={0x3, 0x1ff, 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video4linux(0x0, 0x3, 0x3cf281) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={0x0}, 0x1, 0x0, 0x0, 0x4075}, 0xc800) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) getpid() syz_80211_join_ibss(&(0x7f0000000200)='wlan0\x00', &(0x7f00000002c0)=@default_ap_ssid, 0x6, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d00"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(r5, 0x1, 0x1, &(0x7f0000000380)=0xfffff272, 0x4) ptrace$ARCH_SET_GS(0x1e, 0x0, &(0x7f0000000340), 0x1001) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="000ff3000000f3"], 0x0, 0x0, 0x0}, 0x0) 193.877441ms ago: executing program 5 (id=745): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"/300], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(0xffffffffffffffff, 0x6) listen(r0, 0x9) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x2, 0xfffffffc, @empty, 0x80000001}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000000200)=0x6, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r2 = dup(r1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x3, 0x2}, 0x10) sendmsg$NL80211_CMD_DEL_INTERFACE(r2, 0x0, 0x40040) sendto$packet(r2, &(0x7f0000000400), 0xfffffd23, 0x24005010, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000009c0)='net/tcp6\x00') read$FUSE(r3, &(0x7f0000012400)={0x2020}, 0x2020) 139.327593ms ago: executing program 2 (id=746): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) 138.783984ms ago: executing program 1 (id=747): ioctl$HIDIOCSFLAG(0xffffffffffffffff, 0x4004480f, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@file={0x0, './file7\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) 0s ago: executing program 0 (id=748): syz_open_dev$media(0x0, 0x1, 0x400002) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$6lowpan_control(0xffffffffffffffff, 0x0, 0x0) sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r3, &(0x7f0000000180)={0x0, 0x0, 0x3, 0x1}, 0x8) kernel console output (not intermixed with test programs): T13] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 177.671360][ T13] usb 6-1: Using ep0 maxpacket: 16 [ 177.791446][ T13] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 177.826617][ T13] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.838002][ T13] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.860389][ T13] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 177.878860][ T13] usb 6-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 177.898545][ T13] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.918494][ T13] usb 6-1: config 0 descriptor?? [ 178.300514][ T5545] loop4: detected capacity change from 0 to 512 [ 178.340728][ T5511] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.348833][ T5511] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.423905][ T5545] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e018, mo2=0002] [ 178.436960][ T5545] System zones: 1-12 [ 178.465799][ T5545] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #12: comm syz.4.246: missing EA_INODE flag [ 178.505064][ T5545] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.246: error while reading EA inode 12 err=-117 [ 178.528125][ T5545] EXT4-fs (loop4): 1 orphan inode deleted [ 178.533986][ T5545] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,nogrpid,,errors=continue. Quota mode: writeback. [ 179.349507][ T5511] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 179.427774][ T5511] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 179.491372][ T13] usbhid 6-1:0.0: can't add hid device: -71 [ 179.507658][ T13] usbhid: probe of 6-1:0.0 failed with error -71 [ 179.528572][ T13] usb 6-1: USB disconnect, device number 11 [ 179.534637][ T5555] loop4: detected capacity change from 0 to 128 [ 179.558903][ T5555] FAT-fs (loop4): bogus number of reserved sectors [ 179.580473][ T5555] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 179.648606][ T5555] FAT-fs (loop4): Can't find a valid FAT filesystem [ 180.604918][ T5558] loop3: detected capacity change from 0 to 7 [ 180.625947][ T4319] Dev loop3: unable to read RDB block 7 [ 180.636418][ T4319] loop3: unable to read partition table [ 180.643469][ T4319] loop3: partition table beyond EOD, truncated [ 180.921379][ T4252] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 181.161571][ T4252] usb 5-1: Using ep0 maxpacket: 8 [ 181.281364][ T4252] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 181.297955][ T4252] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 181.308536][ T4252] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 181.324277][ T4252] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 181.341398][ T4252] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 181.350564][ T4252] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.358809][ T5558] Dev loop3: unable to read RDB block 7 [ 181.364881][ T5558] loop3: unable to read partition table [ 181.370642][ T5558] loop3: partition table beyond EOD, truncated [ 181.396060][ T5558] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 181.661260][ T4252] usb 5-1: GET_CAPABILITIES returned 0 [ 181.672057][ T4252] usbtmc 5-1:16.0: can't read capabilities [ 182.057041][ T5270] usb 5-1: USB disconnect, device number 8 [ 182.400521][ T5511] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.409699][ T5511] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.419001][ T5511] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.428013][ T5511] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.546734][ T5528] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 182.611773][ T5528] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 182.654913][ T5528] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 182.855728][ T5575] loop1: detected capacity change from 0 to 512 [ 182.956109][ T5575] EXT4-fs (loop1): Ignoring removed nobh option [ 182.995310][ T5575] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 183.061570][ T4252] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 183.098145][ T5575] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802e02c, mo2=0002] [ 183.754267][ T5575] EXT4-fs (loop1): orphan cleanup on readonly fs [ 183.787214][ T5575] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #11: comm syz.1.255: attempt to clear invalid blocks 1024 len 1 [ 183.800740][ T4233] libceph: connect (1)[c::]:6789 error -101 [ 183.807722][ T4233] libceph: mon0 (1)[c::]:6789 connect error [ 183.849051][ T5575] EXT4-fs (loop1): Remounting filesystem read-only [ 183.878364][ T5575] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.255: bg 0: block 361: padding at end of block bitmap is not set [ 183.911878][ T5575] EXT4-fs (loop1): Remounting filesystem read-only [ 183.925717][ T5575] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 183.939647][ T5575] EXT4-fs (loop1): Remounting filesystem read-only [ 183.947132][ T5575] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.255: invalid indirect mapped block 1811939328 (level 0) [ 183.972774][ T5575] EXT4-fs (loop1): Remounting filesystem read-only [ 183.979337][ T5575] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.255: invalid indirect mapped block 2185560079 (level 1) [ 183.996603][ T5581] ceph: No mds server is up or the cluster is laggy [ 184.077732][ T5575] EXT4-fs (loop1): Remounting filesystem read-only [ 184.084936][ T5575] EXT4-fs (loop1): 1 truncate cleaned up [ 184.090614][ T5575] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,noblock_validity,nobh,errors=remount-ro,max_dir_size_kb=0x00000000000000ff. Quota mode: none. [ 184.192100][ T5595] loop2: detected capacity change from 0 to 128 [ 184.262314][ T4252] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 184.282028][ T4252] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.290073][ T4252] usb 5-1: Product: syz [ 184.316613][ T4252] usb 5-1: Manufacturer: syz [ 184.327517][ T4252] usb 5-1: SerialNumber: syz [ 184.440192][ T4233] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 184.574485][ T5607] EXT4-fs (loop1): Unrecognized mount option "trans=fd" or missing value [ 185.222155][ T5595] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 185.310477][ T5595] ext4 filesystem being mounted at /41/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 185.322298][ T4233] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 185.344210][ T5611] loop3: detected capacity change from 0 to 7 [ 185.360833][ T5611] Dev loop3: unable to read RDB block 7 [ 185.369826][ T5611] loop3: unable to read partition table [ 185.377683][ T5611] loop3: partition table beyond EOD, truncated [ 185.387142][ T5611] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 185.528425][ T4233] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 185.537972][ T4233] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.563134][ T4252] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 185.565201][ T4233] usb 6-1: config 0 descriptor?? [ 185.623887][ T4233] pwc: Askey VC010 type 2 USB webcam detected. [ 185.641970][ T4252] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 185.679692][ T4252] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 185.709830][ T4252] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 185.740731][ T4252] lan78xx: probe of 5-1:1.0 failed with error -32 [ 185.810409][ T5616] fscrypt (loop2, inode 12): Missing crypto API support for Adiantum (API name: "adiantum(xchacha12,aes)") [ 185.823331][ T5616] fscrypt (loop2, inode 12): Missing crypto API support for Adiantum (API name: "adiantum(xchacha12,aes)") [ 185.837508][ T5622] fscrypt (loop2, inode 12): Missing crypto API support for Adiantum (API name: "adiantum(xchacha12,aes)") [ 186.041778][ T4233] pwc: recv_control_msg error -32 req 02 val 2b00 [ 186.091480][ T4233] pwc: recv_control_msg error -32 req 02 val 2700 [ 186.134620][ T5649] __nla_validate_parse: 68 callbacks suppressed [ 186.134640][ T5649] netlink: 28 bytes leftover after parsing attributes in process `syz.1.263'. [ 186.162809][ T4233] pwc: recv_control_msg error -32 req 02 val 2c00 [ 186.376372][ T4233] pwc: recv_control_msg error -32 req 04 val 1000 [ 186.431390][ T4233] pwc: recv_control_msg error -32 req 04 val 1300 [ 187.111343][ T4233] pwc: recv_control_msg error -32 req 04 val 1400 [ 187.168291][ T5664] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 187.188113][ T5664] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.197025][ T5664] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.261350][ T4233] pwc: recv_control_msg error -32 req 02 val 2000 [ 187.294442][ T4230] usb 5-1: USB disconnect, device number 9 [ 187.311530][ T4233] pwc: recv_control_msg error -32 req 02 val 2100 [ 187.351353][ T4233] pwc: recv_control_msg error -32 req 04 val 1500 [ 187.398331][ T4233] pwc: recv_control_msg error -32 req 02 val 2500 [ 187.452306][ T5664] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 187.636250][ T4233] pwc: recv_control_msg error -32 req 02 val 2400 [ 190.631286][ T4233] pwc: recv_control_msg error -71 req 02 val 2900 [ 190.654662][ T4233] pwc: recv_control_msg error -71 req 02 val 2800 [ 190.675320][ T5684] loop4: detected capacity change from 0 to 16 [ 190.689263][ T4233] pwc: recv_control_msg error -71 req 04 val 1100 [ 190.722232][ T4233] pwc: recv_control_msg error -71 req 04 val 1200 [ 190.743626][ T4233] pwc: Registered as video103. [ 191.652973][ T5684] erofs: (device loop4): mounted with root inode @ nid 36. [ 191.661279][ T4233] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input10 [ 191.786856][ T4233] usb 6-1: USB disconnect, device number 12 [ 192.141132][ T5269] Bluetooth: hci3: command 0x0406 tx timeout [ 192.802125][ T5269] Bluetooth: hci0: command 0x0406 tx timeout [ 192.818645][ T5269] Bluetooth: hci2: command 0x0406 tx timeout [ 192.888667][ T5269] Bluetooth: hci1: command 0x0406 tx timeout [ 193.515815][ T5718] loop2: detected capacity change from 0 to 4096 [ 193.556588][ T5718] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 193.623848][ T5718] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 193.964626][ T5721] o2cb: This node has not been configured. [ 193.970804][ T5721] o2cb: Cluster check failed. Fix errors before retrying. [ 193.978204][ T5721] (syz.2.279,5721,1):user_dlm_register:675 ERROR: status = -22 [ 193.985974][ T5721] (syz.2.279,5721,1):dlmfs_mkdir:430 ERROR: Error -22 could not register domain "file0" [ 194.043489][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.049996][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.639236][ T5724] netlink: 'syz.2.280': attribute type 13 has an invalid length. [ 194.671270][ T5724] netlink: 'syz.2.280': attribute type 17 has an invalid length. [ 194.717798][ T5713] loop5: detected capacity change from 0 to 32768 [ 194.802897][ T5713] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 scanned by syz.5.278 (5713) [ 194.870441][ T5713] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 194.896653][ T5713] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 194.937146][ T5713] BTRFS info (device loop5): use zstd compression, level 3 [ 194.954001][ T5709] loop4: detected capacity change from 0 to 32768 [ 194.966762][ T5713] BTRFS info (device loop5): using free space tree [ 194.976913][ T5713] BTRFS info (device loop5): has skinny extents [ 194.985404][ T5724] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 194.999415][ T5724] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 195.018652][ T5724] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 195.149826][ T5709] XFS (loop4): Mounting V5 Filesystem [ 195.166487][ T5755] loop2: detected capacity change from 0 to 512 [ 195.193676][ T5713] BTRFS info (device loop5): enabling ssd optimizations [ 195.273113][ T26] audit: type=1800 audit(1776403385.360:4): pid=5713 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.278" name="file1" dev="loop5" ino=260 res=0 errno=0 [ 195.385072][ T5755] EXT4-fs (loop2): Ignoring removed nobh option [ 195.401520][ T5755] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 195.413632][ T4233] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 195.498012][ T5755] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802e02c, mo2=0002] [ 195.517664][ T5755] EXT4-fs (loop2): orphan cleanup on readonly fs [ 195.549386][ T5755] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #11: comm syz.2.284: attempt to clear invalid blocks 1024 len 1 [ 195.671389][ T5755] EXT4-fs (loop2): Remounting filesystem read-only [ 195.695623][ T5755] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.284: bg 0: block 361: padding at end of block bitmap is not set [ 195.774152][ T5755] EXT4-fs (loop2): Remounting filesystem read-only [ 195.780805][ T5755] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 195.813005][ T5755] EXT4-fs (loop2): Remounting filesystem read-only [ 195.831682][ T5755] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.284: invalid indirect mapped block 1811939328 (level 0) [ 195.857888][ T4233] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 195.868617][ T5755] EXT4-fs (loop2): Remounting filesystem read-only [ 195.881437][ T4233] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 195.891301][ T5755] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.284: invalid indirect mapped block 2185560079 (level 1) [ 195.911047][ T4233] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.941706][ T5755] EXT4-fs (loop2): Remounting filesystem read-only [ 195.948504][ T5755] EXT4-fs (loop2): 1 truncate cleaned up [ 195.961693][ T5755] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,noblock_validity,nobh,errors=remount-ro,max_dir_size_kb=0x00000000000000ff. Quota mode: none. [ 195.966612][ T4233] usb 2-1: config 0 descriptor?? [ 196.181042][ T4233] pwc: Askey VC010 type 2 USB webcam detected. [ 196.200608][ T5709] XFS (loop4): Ending clean mount [ 196.219538][ T5709] XFS (loop4): Quotacheck needed: Please wait. [ 196.771679][ T4233] pwc: recv_control_msg error -32 req 02 val 2b00 [ 196.831683][ T4233] pwc: recv_control_msg error -32 req 02 val 2700 [ 196.941431][ T4233] pwc: recv_control_msg error -32 req 02 val 2c00 [ 196.982542][ T4233] pwc: recv_control_msg error -32 req 04 val 1000 [ 197.041466][ T4233] pwc: recv_control_msg error -32 req 04 val 1300 [ 197.080953][ T5709] XFS (loop4): Quotacheck: Done. [ 197.113894][ T4233] pwc: recv_control_msg error -32 req 04 val 1400 [ 197.139950][ T4184] XFS (loop4): Unmounting Filesystem [ 197.151606][ T4233] pwc: recv_control_msg error -32 req 02 val 2000 [ 197.201639][ T4233] pwc: recv_control_msg error -32 req 02 val 2100 [ 197.259351][ T5787] hub 8-0:1.0: USB hub found [ 197.265304][ T5787] hub 8-0:1.0: 1 port detected [ 197.371884][ T4233] pwc: recv_control_msg error -32 req 04 val 1500 [ 198.371806][ T4233] pwc: recv_control_msg error -32 req 02 val 2500 [ 198.541816][ T5799] netlink: 'syz.5.294': attribute type 13 has an invalid length. [ 198.549594][ T5799] netlink: 'syz.5.294': attribute type 17 has an invalid length. [ 198.571526][ T4233] pwc: recv_control_msg error -71 req 02 val 2400 [ 198.602942][ T4233] pwc: recv_control_msg error -71 req 02 val 2600 [ 198.631248][ T4233] pwc: recv_control_msg error -71 req 02 val 2900 [ 198.691900][ T4233] pwc: recv_control_msg error -71 req 02 val 2800 [ 198.772983][ T4233] pwc: recv_control_msg error -71 req 04 val 1100 [ 198.855184][ T5808] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 199.864968][ T4233] pwc: recv_control_msg error -71 req 04 val 1200 [ 200.036559][ T4233] pwc: Registered as video103. [ 200.066791][ T4233] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input11 [ 200.282663][ T4233] usb 2-1: USB disconnect, device number 9 [ 200.368648][ T5799] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 200.707953][ T5816] loop0: detected capacity change from 0 to 512 [ 200.739434][ T5799] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 200.858735][ T5816] EXT4-fs (loop0): Ignoring removed nobh option [ 200.919719][ T5816] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 200.953963][ T5816] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802e02c, mo2=0002] [ 200.967013][ T5816] EXT4-fs (loop0): orphan cleanup on readonly fs [ 201.170281][ T5816] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #11: comm syz.0.298: attempt to clear invalid blocks 1024 len 1 [ 201.253909][ T5832] syz.5.300 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 201.267430][ T5832] ubi31: attaching mtd0 [ 201.274022][ T5832] ubi31: scanning is finished [ 201.278732][ T5832] ubi31: empty MTD device detected [ 202.046781][ T5816] EXT4-fs (loop0): Remounting filesystem read-only [ 202.047779][ T5816] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.298: bg 0: block 361: padding at end of block bitmap is not set [ 202.049226][ T5816] EXT4-fs (loop0): Remounting filesystem read-only [ 202.049323][ T5816] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 202.050307][ T5816] EXT4-fs (loop0): Remounting filesystem read-only [ 202.051039][ T5816] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.298: invalid indirect mapped block 1811939328 (level 0) [ 202.057914][ T5816] EXT4-fs (loop0): Remounting filesystem read-only [ 202.058210][ T5816] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.298: invalid indirect mapped block 2185560079 (level 1) [ 202.059107][ T5816] EXT4-fs (loop0): Remounting filesystem read-only [ 202.063604][ T5816] EXT4-fs (loop0): 1 truncate cleaned up [ 202.063665][ T5816] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,noblock_validity,nobh,errors=remount-ro,max_dir_size_kb=0x00000000000000ff. Quota mode: none. [ 202.163956][ T5832] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 203.211349][ T1346] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 203.291266][ T4252] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 204.131373][ T1346] usb 6-1: Using ep0 maxpacket: 16 [ 204.591450][ T1346] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 204.644327][ T4252] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 204.698090][ T1346] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.709657][ T4252] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 204.724125][ T4252] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.734897][ T1346] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 206.327371][ T4252] usb 2-1: config 0 descriptor?? [ 206.346887][ T1346] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 207.371577][ T4252] usb 2-1: can't set config #0, error -71 [ 207.572364][ T4252] usb 2-1: USB disconnect, device number 10 [ 207.591264][ T1346] usb 6-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 207.641439][ T1346] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.691075][ T1346] usb 6-1: config 0 descriptor?? [ 207.746940][ T1346] usb 6-1: can't set config #0, error -71 [ 207.787681][ T1346] usb 6-1: USB disconnect, device number 13 [ 209.085239][ T5878] loop2: detected capacity change from 0 to 1024 [ 210.320202][ T4252] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 210.547296][ T5878] EXT4-fs warning (device loop2): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop2. [ 212.627759][ T5901] netlink: 216 bytes leftover after parsing attributes in process `syz.5.319'. [ 212.637360][ T5901] netlink: 8 bytes leftover after parsing attributes in process `syz.5.319'. [ 213.060024][ T5902] loop4: detected capacity change from 0 to 512 [ 213.391226][ T1346] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 213.552710][ T5902] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 213.630835][ T5902] ext4 filesystem being mounted at /74/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 213.642157][ T1346] usb 3-1: Using ep0 maxpacket: 16 [ 214.511342][ T1346] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 214.529062][ T1346] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.540352][ T1346] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.550370][ T1346] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 214.581116][ T1346] usb 3-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 214.612309][ T1346] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.638974][ T1346] usb 3-1: config 0 descriptor?? [ 215.583616][ T5921] loop1: detected capacity change from 0 to 512 [ 216.340898][ T5921] EXT4-fs (loop1): Ignoring removed nobh option [ 216.368502][ T5921] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 216.867927][ T5921] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802e02c, mo2=0002] [ 216.880208][ T5921] EXT4-fs (loop1): orphan cleanup on readonly fs [ 216.909631][ T5921] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #11: comm syz.1.318: attempt to clear invalid blocks 1024 len 1 [ 216.933161][ T5921] EXT4-fs (loop1): Remounting filesystem read-only [ 216.945766][ T5921] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.318: bg 0: block 361: padding at end of block bitmap is not set [ 217.078653][ T1107] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 217.091911][ T5921] EXT4-fs (loop1): Remounting filesystem read-only [ 217.104082][ T5921] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 217.115270][ T5921] EXT4-fs (loop1): Remounting filesystem read-only [ 217.176742][ T5921] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.318: invalid indirect mapped block 1811939328 (level 0) [ 217.836450][ T5921] EXT4-fs (loop1): Remounting filesystem read-only [ 217.877747][ T5921] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.318: invalid indirect mapped block 2185560079 (level 1) [ 217.899674][ T5921] EXT4-fs (loop1): Remounting filesystem read-only [ 217.914065][ T5921] EXT4-fs (loop1): 1 truncate cleaned up [ 217.919797][ T5921] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,noblock_validity,nobh,errors=remount-ro,max_dir_size_kb=0x00000000000000ff. Quota mode: none. [ 219.670117][ T5944] netlink: 28 bytes leftover after parsing attributes in process `syz.5.330'. [ 219.684613][ T5944] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 219.747158][ T5944] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 219.756112][ T5944] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 219.791623][ T1107] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 219.800749][ T1107] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.352010][ T5946] loop4: detected capacity change from 0 to 4096 [ 220.366807][ T1107] usb 1-1: config 0 descriptor?? [ 220.431456][ T1107] usb 1-1: can't set config #0, error -71 [ 220.438950][ T1107] usb 1-1: USB disconnect, device number 9 [ 220.495297][ T5956] loop5: detected capacity change from 0 to 512 [ 221.037260][ T5956] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 221.061852][ T5956] ext4 filesystem being mounted at /53/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 221.865022][ T5270] Bluetooth: hci5: command 0x0406 tx timeout [ 222.062232][ T1346] usbhid 3-1:0.0: can't add hid device: -32 [ 222.068268][ T1346] usbhid: probe of 3-1:0.0 failed with error -32 [ 224.439593][ T5974] loop0: detected capacity change from 0 to 40427 [ 226.225031][ T5986] netlink: 216 bytes leftover after parsing attributes in process `syz.5.338'. [ 226.234229][ T5986] netlink: 8 bytes leftover after parsing attributes in process `syz.5.338'. [ 226.991905][ T5985] fuse: Bad value for 'fd' [ 227.037344][ T4252] usb 3-1: USB disconnect, device number 9 [ 227.081059][ T5988] loop3: detected capacity change from 0 to 7 [ 227.121334][ T5270] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 227.146017][ T5988] Dev loop3: unable to read RDB block 7 [ 227.178838][ T5988] loop3: unable to read partition table [ 227.185372][ T5988] loop3: partition table beyond EOD, truncated [ 227.200454][ T5988] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 227.441406][ T1346] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 227.533679][ T5998] loop2: detected capacity change from 0 to 512 [ 227.544463][ T4252] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 227.581893][ T5998] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e018, mo2=0002] [ 227.605278][ T5998] System zones: 1-12 [ 227.617950][ T5998] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #12: comm syz.2.346: missing EA_INODE flag [ 227.630576][ T5998] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.346: error while reading EA inode 12 err=-117 [ 227.648906][ T5998] EXT4-fs (loop2): 1 orphan inode deleted [ 227.655364][ T5998] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,nogrpid,,errors=continue. Quota mode: writeback. [ 227.781573][ T1346] usb 2-1: not running at top speed; connect to a high speed hub [ 227.841280][ T4252] usb 6-1: Using ep0 maxpacket: 8 [ 227.871603][ T1346] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 227.882780][ T1346] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 227.893247][ T1346] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 227.981447][ T4252] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 227.993000][ T4252] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 228.002109][ T5270] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 228.003384][ T4252] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 228.021279][ T5270] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.022505][ T4252] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 228.037957][ T5270] usb 1-1: Product: syz [ 228.043628][ T4252] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 228.056636][ T4252] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.057711][ T5270] usb 1-1: Manufacturer: syz [ 228.074675][ T5270] usb 1-1: SerialNumber: syz [ 228.088150][ T1346] usb 2-1: New USB device found, idVendor=0763, idProduct=1031, bcdDevice= 0.40 [ 228.097431][ T1346] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.105736][ T1346] usb 2-1: Product: syz [ 228.110073][ T1346] usb 2-1: Manufacturer: syz [ 228.116297][ T1346] usb 2-1: SerialNumber: syz [ 228.373252][ T4252] usb 6-1: GET_CAPABILITIES returned 0 [ 228.378783][ T4252] usbtmc 6-1:16.0: can't read capabilities [ 228.501544][ T1346] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 228.664842][ T1346] usb 2-1: USB disconnect, device number 12 [ 228.867792][ T4252] usb 6-1: USB disconnect, device number 14 [ 228.905218][ T4319] udevd[4319]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 229.453056][ T6011] loop1: detected capacity change from 0 to 512 [ 229.491838][ T5270] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 229.507576][ T5270] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 229.519876][ T5270] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 229.638351][ T6011] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 229.687604][ T5270] lan78xx: probe of 1-1:1.0 failed with error -32 [ 229.689602][ T6011] ext4 filesystem being mounted at /84/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 230.601141][ T4231] usb 1-1: USB disconnect, device number 10 [ 232.371363][ T6030] netlink: 216 bytes leftover after parsing attributes in process `syz.2.353'. [ 232.380454][ T6030] netlink: 8 bytes leftover after parsing attributes in process `syz.2.353'. [ 232.869775][ T6038] loop2: detected capacity change from 0 to 512 [ 233.062171][ T6038] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e018, mo2=0002] [ 233.167792][ T6044] netlink: 216 bytes leftover after parsing attributes in process `syz.0.354'. [ 233.177389][ T6044] netlink: 8 bytes leftover after parsing attributes in process `syz.0.354'. [ 233.195426][ T6038] System zones: 1-12 [ 233.906610][ T6046] loop4: detected capacity change from 0 to 512 [ 233.913900][ T6038] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #12: comm syz.2.357: missing EA_INODE flag [ 233.989594][ T6055] fuse: Bad value for 'fd' [ 234.001854][ T6038] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.357: error while reading EA inode 12 err=-117 [ 234.025752][ T6046] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e018, mo2=0002] [ 234.093841][ T6046] System zones: 1-12 [ 234.099953][ T6038] EXT4-fs (loop2): 1 orphan inode deleted [ 234.125212][ T6038] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,nogrpid,,errors=continue. Quota mode: writeback. [ 234.178671][ T6046] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #12: comm syz.4.358: missing EA_INODE flag [ 234.318116][ T6046] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.358: error while reading EA inode 12 err=-117 [ 234.371492][ T4231] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 234.454731][ T6046] EXT4-fs (loop4): 1 orphan inode deleted [ 234.515184][ T6046] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,nogrpid,,errors=continue. Quota mode: writeback. [ 234.923370][ T4231] usb 6-1: not running at top speed; connect to a high speed hub [ 235.231444][ T4231] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 235.261425][ T1346] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 235.262875][ T4231] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 235.307399][ T4231] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 235.655857][ T6068] netlink: 216 bytes leftover after parsing attributes in process `syz.2.361'. [ 235.665556][ T6068] netlink: 8 bytes leftover after parsing attributes in process `syz.2.361'. [ 236.581433][ T4231] usb 6-1: New USB device found, idVendor=0763, idProduct=1031, bcdDevice= 0.40 [ 236.607000][ T4231] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.701011][ T4231] usb 6-1: Product: syz [ 236.726827][ T4231] usb 6-1: Manufacturer: syz [ 236.764166][ T4231] usb 6-1: SerialNumber: syz [ 237.279327][ T1346] usb 2-1: Using ep0 maxpacket: 16 [ 237.591342][ T1346] usb 2-1: device descriptor read/all, error -71 [ 237.671593][ T4267] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 239.131376][ T4231] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 239.188303][ T4231] usb 6-1: USB disconnect, device number 15 [ 239.751292][ T6094] netlink: 216 bytes leftover after parsing attributes in process `syz.4.370'. [ 239.762252][ T6094] netlink: 8 bytes leftover after parsing attributes in process `syz.4.370'. [ 241.361303][ T4267] usb 1-1: device descriptor read/all, error -71 [ 242.311552][ T1346] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 242.652272][ T1346] usb 2-1: no configurations [ 242.656975][ T1346] usb 2-1: can't read configurations, error -22 [ 244.451855][ T1346] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 244.487109][ T6120] loop5: detected capacity change from 0 to 512 [ 244.533459][ T6122] fuse: Bad value for 'fd' [ 244.790167][ T6127] loop0: detected capacity change from 0 to 512 [ 244.810799][ T6120] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e018, mo2=0002] [ 244.819775][ T6120] System zones: 1-12 [ 244.839359][ T6120] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #12: comm syz.5.371: missing EA_INODE flag [ 244.915893][ T6131] NILFS (nullb0): couldn't find nilfs on the device [ 245.230779][ T6120] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.371: error while reading EA inode 12 err=-117 [ 245.308652][ T6127] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 245.489729][ T1107] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 245.497419][ T1346] usb 2-1: device descriptor read/64, error -71 [ 245.506592][ T6127] ext4 filesystem being mounted at /65/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 245.518416][ T6120] EXT4-fs (loop5): 1 orphan inode deleted [ 245.524268][ T6120] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug,nogrpid,,errors=continue. Quota mode: writeback. [ 245.708857][ T1346] usb usb2-port1: attempt power cycle [ 247.346097][ T6143] loop4: detected capacity change from 0 to 512 [ 247.647748][ T6141] loop2: detected capacity change from 0 to 40427 [ 247.668706][ T6141] F2FS-fs (loop2): Invalid segment/section count (24 != 24 * 3) [ 247.676566][ T6141] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 247.699247][ T6141] F2FS-fs (loop2): Unrecognized mount option "context=unconf" or missing value [ 247.950711][ T6143] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e018, mo2=0002] [ 248.030548][ T6143] System zones: 1-12 [ 248.307499][ T6143] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #12: comm syz.4.381: missing EA_INODE flag [ 248.315030][ T1107] usb 5-1: device not accepting address 10, error -71 [ 248.348424][ T6143] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.381: error while reading EA inode 12 err=-117 [ 248.441795][ T6143] EXT4-fs (loop4): 1 orphan inode deleted [ 248.447770][ T6143] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,nogrpid,,errors=continue. Quota mode: writeback. [ 252.419967][ T6173] loop4: detected capacity change from 0 to 512 [ 252.498930][ T6173] EXT4-fs (loop4): Ignoring removed nobh option [ 252.611926][ T6173] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 252.676028][ T6173] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802e02c, mo2=0002] [ 252.697690][ T6173] EXT4-fs (loop4): orphan cleanup on readonly fs [ 252.786918][ T6173] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #11: comm syz.4.388: attempt to clear invalid blocks 1024 len 1 [ 252.875240][ T6173] EXT4-fs (loop4): Remounting filesystem read-only [ 252.907560][ T6173] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.388: bg 0: block 361: padding at end of block bitmap is not set [ 252.969154][ T6173] EXT4-fs (loop4): Remounting filesystem read-only [ 252.978096][ T6173] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 252.993446][ T6173] EXT4-fs (loop4): Remounting filesystem read-only [ 253.000243][ T6173] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.388: invalid indirect mapped block 1811939328 (level 0) [ 253.022222][ T6173] EXT4-fs (loop4): Remounting filesystem read-only [ 253.029004][ T6173] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.388: invalid indirect mapped block 2185560079 (level 1) [ 253.048772][ T6173] EXT4-fs (loop4): Remounting filesystem read-only [ 253.055903][ T6173] EXT4-fs (loop4): 1 truncate cleaned up [ 253.067482][ T6173] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,noblock_validity,nobh,errors=remount-ro,max_dir_size_kb=0x00000000000000ff. Quota mode: none. [ 253.161876][ T6185] loop0: detected capacity change from 0 to 512 [ 253.261487][ T1346] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 253.301859][ T2140] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 253.309854][ T5270] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 253.332017][ T6185] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e018, mo2=0002] [ 253.340235][ T6185] System zones: 1-12 [ 253.347673][ T6185] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #12: comm syz.0.393: missing EA_INODE flag [ 253.359626][ T6185] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.393: error while reading EA inode 12 err=-117 [ 253.398249][ T6185] EXT4-fs (loop0): 1 orphan inode deleted [ 253.411580][ T6185] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,nogrpid,,errors=continue. Quota mode: writeback. [ 253.511395][ T5270] usb 6-1: device descriptor read/64, error -71 [ 253.644214][ T2140] usb 3-1: Using ep0 maxpacket: 16 [ 253.819713][ T6192] fuse: Bad value for 'fd' [ 253.841675][ T5270] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 253.891514][ T2140] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 253.907675][ T2140] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 253.919672][ T2140] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 253.935461][ T2140] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 253.949723][ T2140] usb 3-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 253.963665][ T2140] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.988970][ T2140] usb 3-1: config 0 descriptor?? [ 254.051364][ T5270] usb 6-1: device descriptor read/64, error -71 [ 254.242590][ T5270] usb usb6-port1: attempt power cycle [ 254.674271][ T5270] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 254.852007][ T5270] usb 6-1: device descriptor read/8, error -71 [ 255.021344][ T1346] usb 2-1: not running at top speed; connect to a high speed hub [ 255.231475][ T1346] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 255.251774][ T1346] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 255.609554][ T5270] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 255.772225][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.779866][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.058230][ T1346] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 256.102621][ T5270] usb 6-1: device descriptor read/8, error -71 [ 256.193406][ T6209] loop5: detected capacity change from 0 to 512 [ 256.236570][ T5270] usb usb6-port1: unable to enumerate USB device [ 256.252351][ T6209] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e018, mo2=0002] [ 256.261375][ T6209] System zones: 1-12 [ 256.276933][ T6209] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #12: comm syz.5.398: missing EA_INODE flag [ 256.289164][ T6209] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.398: error while reading EA inode 12 err=-117 [ 256.292067][ T1346] usb 2-1: New USB device found, idVendor=0763, idProduct=1031, bcdDevice= 0.40 [ 256.312800][ T6209] EXT4-fs (loop5): 1 orphan inode deleted [ 256.319519][ T1346] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.323022][ T6209] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug,nogrpid,,errors=continue. Quota mode: writeback. [ 256.348590][ T1346] usb 2-1: Product: syz [ 256.391612][ T1346] usb 2-1: Manufacturer: syz [ 256.396327][ T1346] usb 2-1: SerialNumber: syz [ 257.897566][ T1346] usb 2-1: can't set config #1, error -71 [ 257.910357][ T1346] usb 2-1: USB disconnect, device number 18 [ 258.327272][ T6223] netlink: 216 bytes leftover after parsing attributes in process `syz.5.400'. [ 258.336830][ T6223] netlink: 8 bytes leftover after parsing attributes in process `syz.5.400'. [ 260.041338][ T2140] usbhid 3-1:0.0: can't add hid device: -71 [ 260.047364][ T2140] usbhid: probe of 3-1:0.0 failed with error -71 [ 260.201511][ T2140] usb 3-1: USB disconnect, device number 10 [ 260.377033][ T6238] loop2: detected capacity change from 0 to 128 [ 260.995780][ T6238] FAT-fs (loop2): bogus number of reserved sectors [ 261.002762][ T6238] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 261.012154][ T6238] FAT-fs (loop2): Can't find a valid FAT filesystem [ 261.037094][ T6240] loop5: detected capacity change from 0 to 512 [ 261.081599][ T1346] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 261.132926][ T6240] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e018, mo2=0002] [ 261.197570][ T6240] System zones: 1-12 [ 261.269996][ T6240] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #12: comm syz.5.406: missing EA_INODE flag [ 261.387308][ T1346] usb 2-1: no configurations [ 261.397245][ T1346] usb 2-1: can't read configurations, error -22 [ 261.409522][ T6240] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.406: error while reading EA inode 12 err=-117 [ 261.476272][ T6240] EXT4-fs (loop5): 1 orphan inode deleted [ 261.542032][ T6240] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug,nogrpid,,errors=continue. Quota mode: writeback. [ 261.621234][ T1346] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 261.809205][ T6253] loop4: detected capacity change from 0 to 512 [ 261.841437][ T4267] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 262.346173][ T6253] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e018, mo2=0002] [ 262.586626][ T6253] System zones: 1-12 [ 262.610036][ T6253] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #12: comm syz.4.410: missing EA_INODE flag [ 262.621792][ T1346] usb 2-1: no configurations [ 262.621809][ T1346] usb 2-1: can't read configurations, error -22 [ 262.624335][ T1346] usb usb2-port1: attempt power cycle [ 262.630981][ T6253] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.410: error while reading EA inode 12 err=-117 [ 262.653444][ T6253] EXT4-fs (loop4): 1 orphan inode deleted [ 262.659202][ T6253] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,nogrpid,,errors=continue. Quota mode: writeback. [ 262.789871][ T4267] usb 3-1: device descriptor read/64, error -71 [ 263.438601][ T5270] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 263.563649][ T6265] netlink: 216 bytes leftover after parsing attributes in process `syz.1.413'. [ 263.573228][ T6265] netlink: 8 bytes leftover after parsing attributes in process `syz.1.413'. [ 263.764396][ T4233] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 264.042723][ T5270] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 264.190208][ T5270] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.219281][ T6267] netlink: 'syz.4.414': attribute type 13 has an invalid length. [ 264.227269][ T4233] usb 1-1: Using ep0 maxpacket: 32 [ 264.233753][ T5270] usb 6-1: Product: syz [ 264.241525][ T5270] usb 6-1: Manufacturer: syz [ 264.249598][ T6267] netlink: 'syz.4.414': attribute type 17 has an invalid length. [ 264.259961][ T5270] usb 6-1: SerialNumber: syz [ 264.271383][ T6267] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 264.302657][ T6267] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 264.312017][ T4267] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 264.349096][ T6267] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 264.357624][ T6267] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 264.370937][ T6267] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 264.501405][ T4267] usb 3-1: device descriptor read/64, error -71 [ 264.621524][ T4267] usb usb3-port1: attempt power cycle [ 264.672228][ T4233] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 264.682374][ T4233] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.690423][ T4233] usb 1-1: Product: syz [ 264.694664][ T4233] usb 1-1: Manufacturer: syz [ 264.699266][ T4233] usb 1-1: SerialNumber: syz [ 264.720994][ T6283] loop2: detected capacity change from 0 to 128 [ 264.731441][ T4252] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 264.782099][ T4233] usb 1-1: config 0 descriptor?? [ 264.815001][ T6283] FAT-fs (loop2): bogus number of reserved sectors [ 264.821653][ T6283] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 264.830959][ T6283] FAT-fs (loop2): Can't find a valid FAT filesystem [ 264.844718][ T4233] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 264.871498][ T5270] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 264.971293][ T4252] usb 5-1: Using ep0 maxpacket: 16 [ 265.091324][ T4252] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 265.105963][ T4252] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 265.129723][ T4252] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 265.151429][ T4252] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 265.174701][ T4252] usb 5-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 265.195150][ T4252] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.219861][ T4252] usb 5-1: config 0 descriptor?? [ 268.321295][ T4233] gspca_ov534_9: reg_w failed -110 [ 268.459258][ T6293] loop2: detected capacity change from 0 to 40427 [ 269.701300][ T5270] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -71 [ 269.715864][ T5270] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 269.726059][ T5270] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 269.843567][ T5270] lan78xx: probe of 6-1:1.0 failed with error -71 [ 269.871543][ T5270] usb 6-1: USB disconnect, device number 20 [ 269.954552][ T4233] gspca_ov534_9: Unknown sensor 0000 [ 270.611464][ T4233] ov534_9: probe of 1-1:0.0 failed with error -22 [ 270.645859][ T6302] loop0: detected capacity change from 0 to 512 [ 270.651040][ T4233] usb 1-1: USB disconnect, device number 13 [ 270.936427][ T4252] usbhid 5-1:0.0: can't add hid device: -32 [ 271.620579][ T4252] usbhid: probe of 5-1:0.0 failed with error -32 [ 271.634955][ T6302] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e018, mo2=0002] [ 271.811402][ T6302] System zones: 1-12 [ 271.831738][ T6302] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #12: comm syz.0.424: missing EA_INODE flag [ 271.897237][ T6302] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.424: error while reading EA inode 12 err=-117 [ 271.921220][ T4252] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 271.930083][ T6312] netlink: 'syz.2.426': attribute type 13 has an invalid length. [ 271.941345][ T6312] netlink: 'syz.2.426': attribute type 17 has an invalid length. [ 271.966612][ T6312] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 271.985388][ T6302] EXT4-fs (loop0): 1 orphan inode deleted [ 272.020280][ T6312] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 272.037669][ T6302] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,nogrpid,,errors=continue. Quota mode: writeback. [ 272.241659][ T4252] usb 6-1: no configurations [ 272.246351][ T4252] usb 6-1: can't read configurations, error -22 [ 273.176380][ T6326] netlink: 216 bytes leftover after parsing attributes in process `syz.2.428'. [ 273.188480][ T6326] netlink: 8 bytes leftover after parsing attributes in process `syz.2.428'. [ 274.057312][ T1346] usb 5-1: USB disconnect, device number 12 [ 274.111335][ T4252] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 274.161269][ T5775] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 274.171409][ T4230] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 274.301272][ T4252] usb 6-1: device descriptor read/64, error -71 [ 274.421523][ T4252] usb usb6-port1: attempt power cycle [ 274.430095][ T5775] usb 3-1: Using ep0 maxpacket: 8 [ 274.491259][ T1346] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 274.576703][ T5775] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 274.588310][ T5775] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 274.604036][ T5775] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 274.616768][ T5775] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 274.644097][ T5775] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 274.653961][ T5775] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.751415][ T4230] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 274.760904][ T4230] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.780364][ T4230] usb 1-1: Product: syz [ 274.785686][ T4230] usb 1-1: Manufacturer: syz [ 274.790326][ T4230] usb 1-1: SerialNumber: syz [ 274.846114][ T4252] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 274.941357][ T4252] usb 6-1: device descriptor read/8, error -71 [ 274.981454][ T5775] usb 3-1: GET_CAPABILITIES returned 0 [ 274.986996][ T5775] usbtmc 3-1:16.0: can't read capabilities [ 275.011617][ T1346] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 275.020747][ T1346] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.028849][ T1346] usb 5-1: Product: syz [ 275.033090][ T1346] usb 5-1: Manufacturer: syz [ 275.037706][ T1346] usb 5-1: SerialNumber: syz [ 275.045944][ T1346] usb 5-1: config 0 descriptor?? [ 275.121267][ T4267] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 275.211255][ T4252] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 275.281365][ T4230] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 275.301538][ T1346] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 275.309980][ T4252] usb 6-1: device descriptor read/8, error -71 [ 275.347357][ T1107] usb 3-1: USB disconnect, device number 14 [ 275.431435][ T4252] usb usb6-port1: unable to enumerate USB device [ 275.491364][ T4267] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 275.502464][ T4267] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 275.512969][ T4267] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 275.522652][ T4267] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.551606][ T6342] raw-gadget.4 gadget: fail, usb_ep_enable returned -22 [ 275.964532][ T5270] usb 2-1: USB disconnect, device number 22 [ 276.649020][ T1346] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -32 [ 276.830722][ T6353] netlink: 'syz.1.438': attribute type 13 has an invalid length. [ 276.840614][ T6353] netlink: 'syz.1.438': attribute type 17 has an invalid length. [ 276.859749][ T6353] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 276.876043][ T6353] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 277.135372][ T4230] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 277.315367][ T6363] loop2: detected capacity change from 0 to 512 [ 277.474533][ T5773] usb 5-1: USB disconnect, device number 13 [ 277.485015][ T6365] udc-core: couldn't find an available UDC or it's busy [ 277.702160][ T6365] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 277.817215][ T6363] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e018, mo2=0002] [ 277.886365][ T6363] System zones: 1-12 [ 278.106783][ T6363] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #12: comm syz.2.441: missing EA_INODE flag [ 278.303833][ T6363] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.441: error while reading EA inode 12 err=-117 [ 278.331354][ T4230] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -71 [ 278.361380][ T4230] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -71 [ 278.382099][ T6363] EXT4-fs (loop2): 1 orphan inode deleted [ 278.451575][ T6363] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,nogrpid,,errors=continue. Quota mode: writeback. [ 278.551828][ T4230] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -71 [ 278.581349][ T4230] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -71 [ 279.463642][ T6382] netlink: 216 bytes leftover after parsing attributes in process `syz.1.443'. [ 279.474232][ T6382] netlink: 8 bytes leftover after parsing attributes in process `syz.1.443'. [ 279.753856][ T4230] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -71 [ 279.811453][ T4230] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001028. ret = -71 [ 279.906468][ T4267] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 280.193550][ T4267] usb 6-1: Using ep0 maxpacket: 16 [ 280.211391][ T4230] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001030. ret = -71 [ 280.221576][ T1346] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 280.261306][ T4230] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 280.270966][ T4230] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 280.280004][ T4230] lan78xx: probe of 1-1:1.0 failed with error -71 [ 280.292029][ T4230] usb 1-1: USB disconnect, device number 14 [ 280.331875][ T4267] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 280.370856][ T4267] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 280.397220][ T4267] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 280.414001][ T4267] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 280.430606][ T4267] usb 6-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 280.441256][ T1346] usb 2-1: device descriptor read/64, error -71 [ 280.453325][ T4267] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.475220][ T4267] usb 6-1: config 0 descriptor?? [ 280.731349][ T1346] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 280.961234][ T1346] usb 2-1: device descriptor read/64, error -71 [ 281.099777][ T5773] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 281.103531][ T1346] usb usb2-port1: attempt power cycle [ 281.511372][ T1107] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 281.751262][ T1346] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 282.321787][ T1346] usb 2-1: device descriptor read/8, error -71 [ 282.791457][ T1107] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 282.806038][ T1107] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.814849][ T1107] usb 1-1: Product: syz [ 282.819030][ T1107] usb 1-1: Manufacturer: syz [ 282.829487][ T1107] usb 1-1: SerialNumber: syz [ 283.796247][ T1107] usb 1-1: config 0 descriptor?? [ 284.053698][ T6410] loop2: detected capacity change from 0 to 40427 [ 284.781285][ T5773] usb 5-1: device descriptor read/all, error -71 [ 284.801507][ T1107] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 286.415380][ T1107] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -32 [ 286.441527][ T4267] usbhid 6-1:0.0: can't add hid device: -32 [ 286.451430][ T4267] usbhid: probe of 6-1:0.0 failed with error -32 [ 286.468349][ T1107] usb 1-1: USB disconnect, device number 15 [ 286.491430][ T5062] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 286.829838][ T6430] loop0: detected capacity change from 0 to 512 [ 287.700187][ T6430] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e018, mo2=0002] [ 287.721982][ T6430] System zones: 1-12 [ 287.862368][ T6430] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #12: comm syz.0.459: missing EA_INODE flag [ 287.878462][ T6430] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.459: error while reading EA inode 12 err=-117 [ 287.907094][ T6430] EXT4-fs (loop0): 1 orphan inode deleted [ 287.921440][ T6430] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,nogrpid,,errors=continue. Quota mode: writeback. [ 288.051313][ T5062] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 288.105326][ T5062] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.130734][ T5062] usb 3-1: Product: syz [ 288.135268][ T5062] usb 3-1: Manufacturer: syz [ 288.141038][ T5062] usb 3-1: SerialNumber: syz [ 288.355779][ T1107] usb 6-1: USB disconnect, device number 25 [ 288.524137][ T1346] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 288.895651][ T6453] loop5: detected capacity change from 0 to 40427 [ 288.902474][ T5062] net_ratelimit: 2 callbacks suppressed [ 288.902490][ T5062] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 288.982657][ T6459] NILFS (nullb0): couldn't find nilfs on the device [ 289.006382][ T1346] usb 2-1: device descriptor read/64, error -71 [ 289.006419][ T4267] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 289.076234][ T6453] F2FS-fs (loop5): Invalid segment/section count (24 != 24 * 3) [ 289.084086][ T6453] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 289.096295][ T6453] F2FS-fs (loop5): Unrecognized mount option "context=unconf" or missing value [ 289.291830][ T1346] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 289.413072][ T4267] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 289.459889][ T4267] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 289.510329][ T1346] usb 2-1: device descriptor read/64, error -71 [ 289.528772][ T4267] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 289.558778][ T4267] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.611903][ T6452] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 289.642706][ T1346] usb usb2-port1: attempt power cycle [ 289.661788][ T6453] loop5: detected capacity change from 0 to 512 [ 289.775452][ T6453] EXT4-fs (loop5): Test dummy encryption mode enabled [ 289.782784][ T6453] EXT4-fs (loop5): Test dummy encryption mode enabled [ 289.841936][ T6453] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable=0x0000000000000002,minixdf,jqfmt=vfsv1,sysvgroups,noauto_da_alloc,barrier=0x000000000000000b,errors=remount-ro,auto_da_alloc,test_dummy_encryption,min_batch_time=0x0000000000000004,sb=0xffff. Quota mode: none. [ 290.002220][ T4267] usb 1-1: USB disconnect, device number 16 [ 290.091526][ T1346] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 290.121291][ T5773] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 290.211494][ T1346] usb 2-1: device descriptor read/8, error -71 [ 290.228010][ T6466] loop5: detected capacity change from 0 to 128 [ 290.276500][ T6466] FAT-fs (loop5): bogus number of reserved sectors [ 290.283194][ T6466] FAT-fs (loop5): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 290.292570][ T6466] FAT-fs (loop5): Can't find a valid FAT filesystem [ 290.361555][ T5062] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 290.482618][ T1346] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 290.561406][ T5062] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000040. ret = -71 [ 290.591344][ T1346] usb 2-1: device descriptor read/8, error -71 [ 290.611341][ T5062] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -71 [ 290.662581][ T5062] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -71 [ 290.697368][ T5062] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -71 [ 290.722279][ T1346] usb usb2-port1: unable to enumerate USB device [ 290.734004][ T5062] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -71 [ 290.780802][ T5062] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001028. ret = -71 [ 290.821568][ T5773] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 290.830818][ T5773] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.841642][ T5062] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001030. ret = -71 [ 290.851677][ T5773] usb 5-1: Product: syz [ 290.857547][ T5773] usb 5-1: Manufacturer: syz [ 290.864117][ T5773] usb 5-1: SerialNumber: syz [ 290.871402][ T5062] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001018. ret = -71 [ 290.884349][ T5773] usb 5-1: config 0 descriptor?? [ 290.911308][ T5062] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 290.924804][ T5062] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 290.943710][ T5062] lan78xx: probe of 3-1:1.0 failed with error -71 [ 290.963207][ T5062] usb 3-1: USB disconnect, device number 15 [ 291.141392][ T5773] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 292.000424][ T6488] loop1: detected capacity change from 0 to 512 [ 292.332541][ T6488] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e018, mo2=0002] [ 292.348275][ T6488] System zones: 1-12 [ 292.438002][ T6488] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #12: comm syz.1.476: missing EA_INODE flag [ 292.474743][ T6488] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.476: error while reading EA inode 12 err=-117 [ 292.492512][ T6488] EXT4-fs (loop1): 1 orphan inode deleted [ 292.500780][ T6488] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,nogrpid,,errors=continue. Quota mode: writeback. [ 293.301848][ T5773] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -32 [ 294.764026][ T6510] loop5: detected capacity change from 0 to 40427 [ 294.901708][ T5775] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 294.901758][ T4230] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 294.933335][ T6510] F2FS-fs (loop5): Invalid segment/section count (24 != 24 * 3) [ 294.941233][ T6510] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 294.958924][ T6510] F2FS-fs (loop5): Unrecognized mount option "context=unconf" or missing value [ 295.281298][ T5775] usb 2-1: Using ep0 maxpacket: 32 [ 295.302031][ T5773] usb 5-1: USB disconnect, device number 16 [ 295.647992][ T6514] netlink: 216 bytes leftover after parsing attributes in process `syz.4.484'. [ 295.657660][ T6514] netlink: 8 bytes leftover after parsing attributes in process `syz.4.484'. [ 296.426069][ T4267] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 296.508464][ T6520] loop2: detected capacity change from 0 to 512 [ 296.521503][ T4230] usb 1-1: device descriptor read/all, error -71 [ 296.579491][ T6522] loop0: detected capacity change from 0 to 512 [ 296.604778][ T6520] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e018, mo2=0002] [ 296.618248][ T6527] loop5: detected capacity change from 0 to 128 [ 296.625615][ T5775] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 296.631718][ T6520] System zones: 1-12 [ 296.640083][ T6520] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #12: comm syz.2.488: missing EA_INODE flag [ 296.653576][ T5775] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.661536][ T6520] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.488: error while reading EA inode 12 err=-117 [ 296.674393][ T6520] EXT4-fs (loop2): 1 orphan inode deleted [ 296.680150][ T6520] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,nogrpid,,errors=continue. Quota mode: writeback. [ 296.740637][ T6527] FAT-fs (loop5): bogus number of reserved sectors [ 296.747351][ T6527] FAT-fs (loop5): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 296.756706][ T6527] FAT-fs (loop5): Can't find a valid FAT filesystem [ 296.765121][ T1346] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 296.792449][ T6522] EXT4-fs (loop0): Ignoring removed nobh option [ 296.813417][ T6522] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 296.874048][ T5775] usb 2-1: Product: syz [ 296.880588][ T5775] usb 2-1: config 0 descriptor?? [ 296.889890][ T6522] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802e02c, mo2=0002] [ 296.901951][ T5775] usb 2-1: can't set config #0, error -71 [ 296.920168][ T6522] EXT4-fs (loop0): orphan cleanup on readonly fs [ 296.927808][ T6522] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #11: comm syz.0.487: attempt to clear invalid blocks 1024 len 1 [ 296.934997][ T5775] usb 2-1: USB disconnect, device number 31 [ 297.030019][ T6522] EXT4-fs (loop0): Remounting filesystem read-only [ 297.111092][ T6522] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.487: bg 0: block 361: padding at end of block bitmap is not set [ 297.618827][ T6522] EXT4-fs (loop0): Remounting filesystem read-only [ 297.676399][ T6522] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 297.753252][ T6522] EXT4-fs (loop0): Remounting filesystem read-only [ 297.808882][ T1346] usb 5-1: device descriptor read/64, error -71 [ 298.016513][ T6522] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.487: invalid indirect mapped block 1811939328 (level 0) [ 298.016917][ T6522] EXT4-fs (loop0): Remounting filesystem read-only [ 298.016965][ T6522] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.487: invalid indirect mapped block 2185560079 (level 1) [ 298.017267][ T6522] EXT4-fs (loop0): Remounting filesystem read-only [ 298.017462][ T6522] EXT4-fs (loop0): 1 truncate cleaned up [ 298.017482][ T6522] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,noblock_validity,nobh,errors=remount-ro,max_dir_size_kb=0x00000000000000ff. Quota mode: none. [ 298.086797][ T6538] netlink: 216 bytes leftover after parsing attributes in process `syz.5.490'. [ 298.087382][ T6538] netlink: 8 bytes leftover after parsing attributes in process `syz.5.490'. [ 299.177941][ T6541] netlink: 'syz.5.492': attribute type 13 has an invalid length. [ 299.177964][ T6541] netlink: 'syz.5.492': attribute type 17 has an invalid length. [ 299.210501][ T6541] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 299.223112][ T1346] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 299.288655][ T6543] EXT4-fs (loop0): Unrecognized mount option "trans=fd" or missing value [ 300.101432][ T6541] net_ratelimit: 1 callbacks suppressed [ 300.101443][ T6541] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 300.374284][ T1346] usb 5-1: device descriptor read/64, error -71 [ 300.494188][ T1346] usb usb5-port1: attempt power cycle [ 300.657883][ T6557] loop1: detected capacity change from 0 to 512 [ 301.002967][ T6563] netlink: 216 bytes leftover after parsing attributes in process `syz.0.497'. [ 301.014042][ T6563] netlink: 8 bytes leftover after parsing attributes in process `syz.0.497'. [ 301.927495][ T6564] loop5: detected capacity change from 0 to 512 [ 302.110707][ T6564] EXT4-fs (loop5): Test dummy encryption mode enabled [ 302.120010][ T6564] EXT4-fs (loop5): Test dummy encryption mode enabled [ 302.333348][ T6564] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable=0x0000000000000002,minixdf,jqfmt=vfsv1,sysvgroups,noauto_da_alloc,barrier=0x000000000000000b,errors=remount-ro,auto_da_alloc,test_dummy_encryption,min_batch_time=0x0000000000000004,sb=0xffff. Quota mode: none. [ 302.393990][ T6557] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 302.665592][ T6557] ext4 filesystem being mounted at /119/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 303.071600][ T2140] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 303.071655][ T5270] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 303.361294][ T5270] usb 1-1: Using ep0 maxpacket: 32 [ 303.659071][ T5270] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 303.672935][ T5270] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.696083][ T5270] usb 1-1: Product: syz [ 303.711363][ T5270] usb 1-1: Manufacturer: syz [ 303.720534][ T5270] usb 1-1: SerialNumber: syz [ 303.754052][ T5270] usb 1-1: config 0 descriptor?? [ 303.796974][ T2140] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 303.811266][ T2140] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.828718][ T5270] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 303.845154][ T2140] usb 3-1: Product: syz [ 303.856944][ T2140] usb 3-1: Manufacturer: syz [ 303.871235][ T2140] usb 3-1: SerialNumber: syz [ 304.072978][ T1346] usb usb5-port1: Cannot enable. Maybe the USB cable is bad? [ 304.165147][ T2140] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 304.234083][ T1346] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 304.441453][ T2140] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 304.453452][ T2140] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 304.463791][ T2140] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 304.472823][ T2140] lan78xx: probe of 3-1:1.0 failed with error -32 [ 304.489226][ T1346] usb 5-1: not running at top speed; connect to a high speed hub [ 304.571224][ T5062] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 304.581462][ T1346] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 304.592489][ T1346] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 304.602286][ T1346] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 304.771326][ T1346] usb 5-1: New USB device found, idVendor=0763, idProduct=1031, bcdDevice= 0.40 [ 304.780525][ T1346] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.789563][ T1346] usb 5-1: Product: syz [ 304.793969][ T1346] usb 5-1: Manufacturer: syz [ 304.798650][ T1346] usb 5-1: SerialNumber: syz [ 304.811227][ T5062] usb 6-1: Using ep0 maxpacket: 16 [ 304.931354][ T5062] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 304.941773][ T5062] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 304.952819][ T5062] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 304.962646][ T5062] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 304.975524][ T5062] usb 6-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 304.984669][ T5062] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.995788][ T5062] usb 6-1: config 0 descriptor?? [ 305.181401][ T1346] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 305.238837][ T1346] usb 5-1: USB disconnect, device number 20 [ 305.463737][ T4520] udevd[4520]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 305.511253][ T5775] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 305.672798][ T1346] usb 3-1: USB disconnect, device number 17 [ 305.801329][ T5270] gspca_ov534_9: reg_w failed -71 [ 305.842544][ T5775] usb 2-1: Using ep0 maxpacket: 8 [ 306.023060][ T5775] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 306.034421][ T5775] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 306.200007][ T5775] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 306.227392][ T5775] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 306.255239][ T5775] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 306.271210][ T5270] gspca_ov534_9: Unknown sensor 0000 [ 306.271276][ T5270] ov534_9: probe of 1-1:0.0 failed with error -22 [ 306.283891][ T5775] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.304743][ T5270] usb 1-1: USB disconnect, device number 19 [ 306.434548][ T6604] netlink: 28 bytes leftover after parsing attributes in process `syz.5.507'. [ 306.491522][ T5062] usbhid 6-1:0.0: can't add hid device: -71 [ 306.497946][ T5062] usbhid: probe of 6-1:0.0 failed with error -71 [ 306.512559][ T5062] usb 6-1: USB disconnect, device number 26 [ 306.611451][ T5775] usb 2-1: GET_CAPABILITIES returned 0 [ 306.616999][ T5775] usbtmc 2-1:16.0: can't read capabilities [ 306.676512][ T6606] loop2: detected capacity change from 0 to 512 [ 306.858392][ T6606] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e018, mo2=0002] [ 306.876211][ T6606] System zones: 1-12 [ 306.896683][ T6606] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #12: comm syz.2.510: missing EA_INODE flag [ 308.101344][ T6617] netlink: 216 bytes leftover after parsing attributes in process `syz.4.509'. [ 308.110442][ T6617] netlink: 8 bytes leftover after parsing attributes in process `syz.4.509'. [ 308.205593][ T6606] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.510: error while reading EA inode 12 err=-117 [ 308.244695][ T5775] usb 2-1: USB disconnect, device number 32 [ 308.253111][ T6606] EXT4-fs (loop2): 1 orphan inode deleted [ 308.258955][ T6606] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,nogrpid,,errors=continue. Quota mode: writeback. [ 309.305789][ T6623] netlink: 'syz.4.514': attribute type 13 has an invalid length. [ 309.313612][ T6623] netlink: 'syz.4.514': attribute type 17 has an invalid length. [ 309.333095][ T6623] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 309.449805][ T6629] loop0: detected capacity change from 0 to 512 [ 309.541001][ T6629] EXT4-fs (loop0): Test dummy encryption mode enabled [ 309.549205][ T6629] EXT4-fs (loop0): Test dummy encryption mode enabled [ 309.638513][ T6629] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable=0x0000000000000002,minixdf,jqfmt=vfsv1,sysvgroups,noauto_da_alloc,barrier=0x000000000000000b,errors=remount-ro,auto_da_alloc,test_dummy_encryption,min_batch_time=0x0000000000000004,sb=0xffff. Quota mode: none. [ 309.785043][ T6623] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 310.520943][ T6623] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 310.881910][ T5773] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 311.191338][ T2140] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 311.215298][ T5270] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 311.236047][ T4230] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 311.401390][ T5773] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 311.416103][ T5773] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.424760][ T5773] usb 6-1: Product: syz [ 311.429104][ T5773] usb 6-1: Manufacturer: syz [ 311.439218][ T5773] usb 6-1: SerialNumber: syz [ 311.461422][ T2140] usb 5-1: Using ep0 maxpacket: 16 [ 311.491439][ T4230] usb 2-1: Using ep0 maxpacket: 32 [ 311.686434][ T5270] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 311.697972][ T2140] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 311.708904][ T2140] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 311.720710][ T5270] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 311.730973][ T5270] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 311.740267][ T5773] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 311.751863][ T2140] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 311.762301][ T5270] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.770419][ T2140] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 311.795054][ T2140] usb 5-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 311.808089][ T2140] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.816686][ T6645] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 311.942041][ T4230] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 311.992007][ T2140] usb 5-1: config 0 descriptor?? [ 312.040762][ T4230] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.082260][ T5773] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 312.216338][ T5773] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 312.278412][ T4230] usb 2-1: Product: syz [ 312.353629][ T4230] usb 2-1: Manufacturer: syz [ 312.518521][ T5773] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 312.529966][ T4230] usb 2-1: SerialNumber: syz [ 312.613298][ T4230] usb 2-1: config 0 descriptor?? [ 312.635569][ T5773] lan78xx: probe of 6-1:1.0 failed with error -32 [ 312.688760][ T4233] usb 3-1: USB disconnect, device number 18 [ 312.697300][ T4230] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 313.507641][ T5062] usb 6-1: USB disconnect, device number 27 [ 314.111202][ T1107] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 315.001826][ T1107] usb 3-1: Using ep0 maxpacket: 16 [ 316.764377][ T1107] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 316.941597][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.947959][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.111453][ T1107] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 317.161832][ T4230] gspca_ov534_9: reg_r err -71 [ 317.206274][ T1107] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 317.238594][ T1107] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 317.261776][ T1107] usb 3-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 317.270993][ T1107] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.295465][ T1107] usb 3-1: config 0 descriptor?? [ 317.335766][ T1107] usb 3-1: can't set config #0, error -71 [ 317.452622][ T1107] usb 3-1: USB disconnect, device number 19 [ 317.551928][ T2140] usbhid 5-1:0.0: can't add hid device: -32 [ 317.671263][ T4230] gspca_ov534_9: Unknown sensor 0000 [ 317.671810][ T4230] ov534_9: probe of 2-1:0.0 failed with error -22 [ 318.221621][ T2140] usbhid: probe of 5-1:0.0 failed with error -32 [ 318.243526][ T4230] usb 2-1: USB disconnect, device number 33 [ 318.255049][ T6675] loop5: detected capacity change from 0 to 512 [ 318.282217][ T6677] netlink: 24 bytes leftover after parsing attributes in process `syz.1.528'. [ 318.301228][ T1346] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 318.313076][ T6675] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e018, mo2=0002] [ 318.321563][ T6675] System zones: 1-12 [ 318.345098][ T6675] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #12: comm syz.5.527: missing EA_INODE flag [ 318.365089][ T6675] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.527: error while reading EA inode 12 err=-117 [ 318.382051][ T6675] EXT4-fs (loop5): 1 orphan inode deleted [ 318.390389][ T6675] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug,nogrpid,,errors=continue. Quota mode: writeback. [ 318.529959][ T1107] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 318.791508][ T1107] usb 3-1: Using ep0 maxpacket: 8 [ 318.932281][ T1107] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 319.044207][ T1107] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 319.444256][ T6687] netlink: 28 bytes leftover after parsing attributes in process `syz.1.531'. [ 319.461492][ T1346] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 319.470768][ T1346] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.478870][ T26] audit: type=1326 audit(1776403509.560:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6684 comm="syz.5.530" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb038279819 code=0x0 [ 319.510858][ T1107] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 319.531299][ T1346] usb 1-1: Product: syz [ 319.535499][ T1346] usb 1-1: Manufacturer: syz [ 319.540107][ T1346] usb 1-1: SerialNumber: syz [ 319.558024][ T1107] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 319.596347][ T1107] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 319.607134][ T1107] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.636007][ T4230] usb 5-1: USB disconnect, device number 21 [ 319.708016][ T6691] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 319.831328][ T1346] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 319.862765][ T1346] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 319.891292][ T1107] usb 3-1: GET_CAPABILITIES returned 0 [ 319.897168][ T1107] usbtmc 3-1:16.0: can't read capabilities [ 319.903572][ T1346] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 319.940743][ T1346] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 319.958221][ T1346] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 319.968973][ T1346] lan78xx: probe of 1-1:1.0 failed with error -71 [ 319.989207][ T1346] usb 1-1: USB disconnect, device number 20 [ 320.111209][ T4230] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 320.284562][ T1346] usb 3-1: USB disconnect, device number 20 [ 320.601382][ T4230] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 320.612654][ T4230] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 320.622838][ T4230] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 320.632101][ T4230] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.711296][ T2140] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 320.837000][ T6693] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 320.991420][ T2140] usb 6-1: Using ep0 maxpacket: 16 [ 321.122987][ T2140] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 321.362910][ T2140] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 321.437976][ T4230] usb 5-1: USB disconnect, device number 22 [ 321.473803][ T2140] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 321.555780][ T2140] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 321.627079][ T2140] usb 6-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 321.656695][ T2140] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.693894][ T2140] usb 6-1: config 0 descriptor?? [ 323.127893][ T5270] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 323.405763][ T6725] netlink: 12 bytes leftover after parsing attributes in process `syz.0.544'. [ 323.491486][ T5270] usb 3-1: Using ep0 maxpacket: 32 [ 323.621249][ T4230] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 323.871406][ T5270] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 323.887824][ T5270] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.896211][ T5270] usb 3-1: Product: syz [ 323.900545][ T5270] usb 3-1: Manufacturer: syz [ 323.909594][ T5270] usb 3-1: SerialNumber: syz [ 323.927565][ T5270] usb 3-1: config 0 descriptor?? [ 323.951464][ T4230] usb 2-1: Using ep0 maxpacket: 16 [ 323.973752][ T5270] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 324.071730][ T4230] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 324.088612][ T4230] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 324.106409][ T4230] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 324.134778][ T4230] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 324.148610][ T4230] usb 2-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 324.160066][ T4230] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.179180][ T4230] usb 2-1: config 0 descriptor?? [ 324.184427][ T2140] usbhid 6-1:0.0: can't add hid device: -71 [ 324.190643][ T2140] usbhid: probe of 6-1:0.0 failed with error -71 [ 324.207964][ T2140] usb 6-1: USB disconnect, device number 28 [ 325.773880][ T6744] netlink: 216 bytes leftover after parsing attributes in process `syz.5.548'. [ 325.783157][ T6744] netlink: 8 bytes leftover after parsing attributes in process `syz.5.548'. [ 326.447051][ T6749] netlink: 12 bytes leftover after parsing attributes in process `syz.4.551'. [ 326.475351][ T6752] loop5: detected capacity change from 0 to 512 [ 326.531279][ T6752] EXT4-fs (loop5): Ignoring removed nobh option [ 326.559414][ T6752] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 326.601392][ T5270] gspca_ov534_9: reg_w failed -71 [ 326.651724][ T6752] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802e02c, mo2=0002] [ 326.660766][ T6752] EXT4-fs (loop5): orphan cleanup on readonly fs [ 326.823318][ T6752] EXT4-fs error (device loop5): ext4_clear_blocks:883: inode #11: comm syz.5.550: attempt to clear invalid blocks 1024 len 1 [ 328.764141][ T6752] EXT4-fs (loop5): Remounting filesystem read-only [ 329.753637][ T6752] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.550: bg 0: block 361: padding at end of block bitmap is not set [ 329.772537][ T6752] EXT4-fs (loop5): Remounting filesystem read-only [ 329.779434][ T6752] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 329.790387][ T6752] EXT4-fs (loop5): Remounting filesystem read-only [ 329.805560][ T6752] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.550: invalid indirect mapped block 1811939328 (level 0) [ 330.221430][ T4230] usbhid 2-1:0.0: can't add hid device: -32 [ 330.227489][ T4230] usbhid: probe of 2-1:0.0 failed with error -32 [ 330.252600][ T6752] EXT4-fs (loop5): Remounting filesystem read-only [ 330.259233][ T6752] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.550: invalid indirect mapped block 2185560079 (level 1) [ 330.275504][ T5270] gspca_ov534_9: Unknown sensor 0000 [ 330.275569][ T5270] ov534_9: probe of 3-1:0.0 failed with error -22 [ 330.344889][ T5270] usb 3-1: USB disconnect, device number 21 [ 330.421840][ T6752] EXT4-fs (loop5): Remounting filesystem read-only [ 330.428790][ T6752] EXT4-fs (loop5): 1 truncate cleaned up [ 330.453251][ T6752] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsold,noblock_validity,nobh,errors=remount-ro,max_dir_size_kb=0x00000000000000ff. Quota mode: none. [ 330.956760][ T6774] netlink: 216 bytes leftover after parsing attributes in process `syz.4.558'. [ 330.966482][ T6774] netlink: 8 bytes leftover after parsing attributes in process `syz.4.558'. [ 332.798364][ T5062] usb 2-1: USB disconnect, device number 34 [ 333.019659][ T6763] loop2: detected capacity change from 0 to 40427 [ 333.076047][ T6763] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 333.115361][ T6763] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 333.230539][ T6787] netlink: 216 bytes leftover after parsing attributes in process `syz.1.561'. [ 333.240137][ T6787] netlink: 8 bytes leftover after parsing attributes in process `syz.1.561'. [ 333.300694][ T6763] F2FS-fs (loop2): invalid crc value [ 333.387844][ T6763] F2FS-fs (loop2): Failed to start F2FS issue_checkpoint_thread (-12) [ 333.783852][ T13] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 334.031229][ T13] usb 1-1: Using ep0 maxpacket: 32 [ 334.093320][ T6795] netlink: 12 bytes leftover after parsing attributes in process `syz.1.565'. [ 334.244498][ T6801] loop1: detected capacity change from 0 to 512 [ 334.305923][ T6801] EXT4-fs (loop1): Ignoring removed nobh option [ 334.312252][ T13] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 334.312284][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.312316][ T13] usb 1-1: Product: syz [ 334.312332][ T13] usb 1-1: Manufacturer: syz [ 334.312358][ T13] usb 1-1: SerialNumber: syz [ 334.356738][ T6801] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 334.374257][ T13] usb 1-1: config 0 descriptor?? [ 334.406044][ T6801] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802e02c, mo2=0002] [ 334.423415][ T13] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 334.442912][ T6801] EXT4-fs (loop1): orphan cleanup on readonly fs [ 334.460608][ T6801] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #11: comm syz.1.568: attempt to clear invalid blocks 1024 len 1 [ 334.500242][ T6801] EXT4-fs (loop1): Remounting filesystem read-only [ 334.507043][ T5062] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 334.515016][ T6801] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.568: bg 0: block 361: padding at end of block bitmap is not set [ 334.531788][ T6801] EXT4-fs (loop1): Remounting filesystem read-only [ 334.538330][ T6801] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 334.545902][ T6804] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 334.588383][ T6801] EXT4-fs (loop1): Remounting filesystem read-only [ 334.610394][ T6801] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.568: invalid indirect mapped block 1811939328 (level 0) [ 334.641686][ T6801] EXT4-fs (loop1): Remounting filesystem read-only [ 334.648750][ T6801] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.568: invalid indirect mapped block 2185560079 (level 1) [ 334.691228][ T6801] EXT4-fs (loop1): Remounting filesystem read-only [ 334.728084][ T6801] EXT4-fs (loop1): 1 truncate cleaned up [ 334.836547][ T6801] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,noblock_validity,nobh,errors=remount-ro,max_dir_size_kb=0x00000000000000ff. Quota mode: none. [ 335.481203][ T5062] usb 3-1: Using ep0 maxpacket: 16 [ 335.603559][ T5062] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 335.624045][ T5062] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 335.655896][ T5062] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 335.683524][ T5062] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 335.723694][ T5062] usb 3-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 335.757767][ T5062] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.815775][ T6816] loop4: detected capacity change from 0 to 512 [ 335.854867][ T6817] EXT4-fs (loop1): Unrecognized mount option "trans=fd" or missing value [ 336.087870][ T6816] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e018, mo2=0002] [ 336.106396][ T6816] System zones: 1-12 [ 336.123116][ T6816] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #12: comm syz.4.572: missing EA_INODE flag [ 336.189162][ T6816] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.572: error while reading EA inode 12 err=-117 [ 336.258995][ T6816] EXT4-fs (loop4): 1 orphan inode deleted [ 336.270144][ T6816] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,nogrpid,,errors=continue. Quota mode: writeback. [ 336.394436][ T5062] usb 3-1: config 0 descriptor?? [ 336.461222][ T1107] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 338.191233][ T1107] usb 6-1: Using ep0 maxpacket: 16 [ 338.221288][ T13] gspca_ov534_9: reg_w failed -71 [ 338.316645][ T1107] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 338.352465][ T1107] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 338.364353][ T1107] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 338.374514][ T1107] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 338.388454][ T1107] usb 6-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 338.397774][ T1107] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.433680][ T1107] usb 6-1: config 0 descriptor?? [ 338.541335][ T13] gspca_ov534_9: Unknown sensor 0000 [ 338.541400][ T13] ov534_9: probe of 1-1:0.0 failed with error -22 [ 338.561401][ T1346] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 338.602241][ T13] usb 1-1: USB disconnect, device number 21 [ 338.701331][ T1107] usbhid 6-1:0.0: can't add hid device: -71 [ 338.707359][ T1107] usbhid: probe of 6-1:0.0 failed with error -71 [ 339.166698][ T6854] loop0: detected capacity change from 0 to 512 [ 339.240868][ T6854] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e018, mo2=0002] [ 339.266375][ T1107] usb 6-1: USB disconnect, device number 29 [ 339.291782][ T6854] System zones: 1-12 [ 339.301200][ T1346] usb 5-1: Using ep0 maxpacket: 8 [ 339.398833][ T6854] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #12: comm syz.0.584: missing EA_INODE flag [ 339.633398][ T6854] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.584: error while reading EA inode 12 err=-117 [ 339.730024][ T6854] EXT4-fs (loop0): 1 orphan inode deleted [ 339.736703][ T6854] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,nogrpid,,errors=continue. Quota mode: writeback. [ 339.871692][ T1346] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 339.981305][ T1346] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.019869][ T1346] usb 5-1: Product: syz [ 340.040165][ T1346] usb 5-1: Manufacturer: syz [ 340.051923][ T1346] usb 5-1: SerialNumber: syz [ 340.061921][ T1346] usb 5-1: config 0 descriptor?? [ 340.321382][ T1346] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 340.352122][ T5062] usbhid 3-1:0.0: can't add hid device: -71 [ 340.358356][ T5062] usbhid: probe of 3-1:0.0 failed with error -71 [ 340.432783][ T5062] usb 3-1: USB disconnect, device number 22 [ 341.194584][ T6876] o2cb: This node has not been configured. [ 341.200575][ T6876] o2cb: Cluster check failed. Fix errors before retrying. [ 341.207996][ T6876] (syz.1.589,6876,1):user_dlm_register:675 ERROR: status = -22 [ 341.215752][ T6876] (syz.1.589,6876,1):dlmfs_mkdir:430 ERROR: Error -22 could not register domain "file0" [ 341.880245][ T5062] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 341.958640][ T6878] netlink: 12 bytes leftover after parsing attributes in process `syz.1.590'. [ 342.121349][ T5062] usb 3-1: Using ep0 maxpacket: 32 [ 342.151388][ T1346] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71 [ 342.181645][ T1346] usb 5-1: USB disconnect, device number 23 [ 342.364732][ T13] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 342.474347][ T5062] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 342.494412][ T5062] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.518823][ T5062] usb 3-1: Product: syz [ 342.537263][ T5062] usb 3-1: Manufacturer: syz [ 342.553713][ T5062] usb 3-1: SerialNumber: syz [ 342.588355][ T5062] usb 3-1: config 0 descriptor?? [ 342.636181][ T5062] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 342.741451][ T13] usb 2-1: Using ep0 maxpacket: 16 [ 343.733047][ T13] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 343.824075][ T6897] netlink: 216 bytes leftover after parsing attributes in process `syz.4.595'. [ 343.833816][ T6897] netlink: 8 bytes leftover after parsing attributes in process `syz.4.595'. [ 344.310899][ T6896] device syzkaller0 entered promiscuous mode [ 344.330519][ T6896] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 344.454313][ T13] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 344.465411][ T13] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 344.475479][ T13] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 344.488354][ T13] usb 2-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 344.497657][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.516711][ T13] usb 2-1: config 0 descriptor?? [ 344.555510][ T6906] loop5: detected capacity change from 0 to 512 [ 344.846052][ T6906] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e018, mo2=0002] [ 344.955790][ T6906] System zones: 1-12 [ 345.085028][ T6906] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #12: comm syz.5.598: missing EA_INODE flag [ 345.297758][ T6906] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.598: error while reading EA inode 12 err=-117 [ 345.373504][ T6906] EXT4-fs (loop5): 1 orphan inode deleted [ 345.379324][ T6906] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug,nogrpid,,errors=continue. Quota mode: writeback. [ 345.624655][ T6918] netlink: 'syz.0.600': attribute type 13 has an invalid length. [ 345.644156][ T6918] netlink: 'syz.0.600': attribute type 17 has an invalid length. [ 345.710636][ T6918] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 345.761940][ T6918] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 346.489895][ T6918] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 346.545086][ T5062] gspca_ov534_9: reg_w failed -71 [ 346.737494][ T6925] loop2: detected capacity change from 0 to 8192 [ 346.886866][ T6925] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 347.420911][ T6927] loop4: detected capacity change from 0 to 131072 [ 347.496910][ T26] audit: type=1800 audit(1776403537.580:6): pid=6925 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.603" name="file2" dev="loop2" ino=1048596 res=0 errno=0 [ 347.510184][ T6925] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 347.531265][ T5062] gspca_ov534_9: Unknown sensor 0000 [ 347.531333][ T5062] ov534_9: probe of 3-1:0.0 failed with error -22 [ 347.551182][ T6925] FAT-fs (loop2): Filesystem has been set read-only [ 347.564270][ T6927] F2FS-fs (loop4): Unrecognized mount option "errors=continue" or missing value [ 347.571636][ T6925] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 347.616447][ T5062] usb 3-1: USB disconnect, device number 23 [ 347.645181][ T6925] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 347.685087][ T6925] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 347.713053][ T6925] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 347.826735][ T6925] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 347.845991][ T6925] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 347.872471][ T6925] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 347.912402][ T6925] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 347.946120][ T6925] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 350.496390][ T6947] loop0: detected capacity change from 0 to 40427 [ 350.564358][ T6947] F2FS-fs (loop0): Invalid segment/section count (24 != 24 * 3) [ 350.572256][ T6947] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 350.587883][ T6947] F2FS-fs (loop0): Unrecognized mount option "context=unconf" or missing value [ 350.760047][ T6946] device syzkaller0 entered promiscuous mode [ 350.838743][ T6946] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 351.751266][ T13] usbhid 2-1:0.0: can't add hid device: -71 [ 351.757292][ T13] usbhid: probe of 2-1:0.0 failed with error -71 [ 351.787809][ T13] usb 2-1: USB disconnect, device number 35 [ 352.023016][ T6962] netlink: 216 bytes leftover after parsing attributes in process `syz.1.612'. [ 352.023462][ T6962] netlink: 8 bytes leftover after parsing attributes in process `syz.1.612'. [ 354.064153][ T6976] netlink: 216 bytes leftover after parsing attributes in process `syz.2.617'. [ 354.073325][ T6976] netlink: 8 bytes leftover after parsing attributes in process `syz.2.617'. [ 354.368144][ T6984] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 354.517100][ T6989] IPVS: rr: FWM 3 0x00000003 - no destination available [ 355.044215][ T4230] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 356.765602][ T6981] loop1: detected capacity change from 0 to 32768 [ 357.170524][ T6999] loop0: detected capacity change from 0 to 40427 [ 357.391363][ T4230] usb 6-1: Using ep0 maxpacket: 16 [ 357.531714][ T5270] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 357.742685][ T4230] usb 6-1: device descriptor read/all, error -71 [ 357.764319][ T6999] F2FS-fs (loop0): Invalid segment/section count (24 != 24 * 3) [ 357.772596][ T6999] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 357.786563][ T6999] F2FS-fs (loop0): Unrecognized mount option "context=unconf" or missing value [ 357.861355][ T5270] usb 3-1: Using ep0 maxpacket: 16 [ 359.691318][ T7012] netlink: 216 bytes leftover after parsing attributes in process `syz.5.630'. [ 359.700408][ T7012] netlink: 8 bytes leftover after parsing attributes in process `syz.5.630'. [ 360.351390][ T5270] usb 3-1: unable to read config index 0 descriptor/all [ 360.366572][ T5270] usb 3-1: can't read configurations, error -71 [ 360.380736][ T4319] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by udevd (4319) [ 361.629897][ T4231] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 362.801202][ T4231] usb 5-1: Using ep0 maxpacket: 32 [ 364.042019][ T4231] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 364.081138][ T4231] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.155740][ T4231] usb 5-1: Product: syz [ 364.297149][ T4231] usb 5-1: Manufacturer: syz [ 364.483685][ T7063] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 364.729206][ T7064] netlink: 216 bytes leftover after parsing attributes in process `syz.0.644'. [ 364.739967][ T7064] netlink: 8 bytes leftover after parsing attributes in process `syz.0.644'. [ 365.800887][ T4231] usb 5-1: config 0 descriptor?? [ 365.821363][ T4231] usb 5-1: can't set config #0, error -71 [ 365.866536][ T4231] usb 5-1: USB disconnect, device number 24 [ 366.175758][ T7068] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 366.724898][ T7070] binder: 7069:7070 ioctl c0306201 0 returned -14 [ 367.032471][ T13] usb 2-1: new full-speed USB device number 36 using dummy_hcd [ 367.117381][ T7078] loop2: detected capacity change from 0 to 2048 [ 367.216940][ T7078] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 367.501184][ T5773] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 367.851375][ T13] usb 2-1: not running at top speed; connect to a high speed hub [ 367.993180][ T13] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 368.065412][ T13] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 368.180272][ T13] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 368.431900][ T13] usb 2-1: New USB device found, idVendor=0763, idProduct=1031, bcdDevice= 0.40 [ 368.463165][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.837077][ T13] usb 2-1: Product: syz [ 369.885766][ T13] usb 2-1: Manufacturer: syz [ 369.937750][ T13] usb 2-1: SerialNumber: syz [ 370.071258][ T5773] usb 6-1: Using ep0 maxpacket: 32 [ 370.202127][ T7100] loop4: detected capacity change from 0 to 4096 [ 370.223272][ T7100] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 370.281920][ T13] usb 2-1: can't set config #1, error -71 [ 370.419259][ T7100] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 370.563029][ T5773] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 370.589932][ T5773] usb 6-1: can't read configurations, error -71 [ 370.609945][ T13] usb 2-1: USB disconnect, device number 36 [ 370.985294][ T7111] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 373.949526][ T7137] binder: 7136:7137 ioctl c0306201 0 returned -14 [ 374.462338][ T7147] loop0: detected capacity change from 0 to 4096 [ 374.588909][ T7147] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 374.791380][ T13] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 375.092301][ T13] usb 2-1: no configurations [ 375.097508][ T13] usb 2-1: can't read configurations, error -22 [ 375.267196][ T4231] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 375.285401][ T7147] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 375.351356][ T5773] usb 6-1: new full-speed USB device number 34 using dummy_hcd [ 375.454397][ T13] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 375.561993][ T4231] usb 3-1: Using ep0 maxpacket: 32 [ 375.761449][ T5773] usb 6-1: not running at top speed; connect to a high speed hub [ 375.858991][ T5773] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 375.893827][ T5773] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 375.904315][ T4231] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 375.925057][ T4231] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.943680][ T5773] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 375.961289][ T7158] loop4: detected capacity change from 0 to 512 [ 375.967761][ T4231] usb 3-1: Product: syz [ 375.978154][ T4231] usb 3-1: Manufacturer: syz [ 376.008713][ T4231] usb 3-1: SerialNumber: syz [ 376.015435][ T7158] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e018, mo2=0002] [ 376.040208][ T7158] System zones: 1-12 [ 376.051401][ T4231] usb 3-1: config 0 descriptor?? [ 376.059819][ T7158] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #12: comm syz.4.676: missing EA_INODE flag [ 376.078054][ T7158] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.676: error while reading EA inode 12 err=-117 [ 376.091393][ T7158] EXT4-fs (loop4): 1 orphan inode deleted [ 376.097150][ T7158] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,nogrpid,,errors=continue. Quota mode: writeback. [ 376.118329][ T4231] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 376.201475][ T5773] usb 6-1: New USB device found, idVendor=0763, idProduct=1031, bcdDevice= 0.40 [ 376.210564][ T5773] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.239220][ T5773] usb 6-1: Product: syz [ 376.250916][ T5773] usb 6-1: Manufacturer: syz [ 376.257616][ T5773] usb 6-1: SerialNumber: syz [ 376.281613][ T13] usb 2-1: no configurations [ 376.291529][ T13] usb 2-1: can't read configurations, error -22 [ 376.307971][ T13] usb usb2-port1: attempt power cycle [ 376.492582][ T7166] netlink: 216 bytes leftover after parsing attributes in process `syz.4.678'. [ 376.501738][ T7166] netlink: 8 bytes leftover after parsing attributes in process `syz.4.678'. [ 377.393746][ T7171] loop0: detected capacity change from 0 to 512 [ 377.415804][ T7171] EXT4-fs (loop0): Ignoring removed nobh option [ 377.453826][ T7178] netlink: 'syz.4.683': attribute type 13 has an invalid length. [ 377.465088][ T7178] netlink: 'syz.4.683': attribute type 17 has an invalid length. [ 377.556990][ T13] usb usb2-port1: Cannot enable. Maybe the USB cable is bad? [ 377.565544][ T7171] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 377.580377][ T7178] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 377.613217][ T7171] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802e02c, mo2=0002] [ 377.634604][ T7171] EXT4-fs (loop0): orphan cleanup on readonly fs [ 377.644908][ T7178] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 377.669718][ T7171] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #11: comm syz.0.680: attempt to clear invalid blocks 1024 len 1 [ 377.696017][ T7178] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 377.733091][ T13] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 377.745897][ T7171] EXT4-fs (loop0): Remounting filesystem read-only [ 377.778124][ T7171] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.680: bg 0: block 361: padding at end of block bitmap is not set [ 377.880832][ T7171] EXT4-fs (loop0): Remounting filesystem read-only [ 377.888417][ T7171] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 377.908445][ T7171] EXT4-fs (loop0): Remounting filesystem read-only [ 377.915465][ T5773] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 377.926231][ T7171] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.680: invalid indirect mapped block 1811939328 (level 0) [ 377.947005][ T7171] EXT4-fs (loop0): Remounting filesystem read-only [ 377.961493][ T13] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 377.981249][ T13] usb 2-1: config 0 has no interfaces? [ 377.986952][ T7171] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.680: invalid indirect mapped block 2185560079 (level 1) [ 378.005811][ T5773] usb 6-1: USB disconnect, device number 34 [ 378.012726][ T13] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 378.029895][ T7171] EXT4-fs (loop0): Remounting filesystem read-only [ 378.052672][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.079059][ T13] usb 2-1: config 0 descriptor?? [ 378.082295][ T7171] EXT4-fs (loop0): 1 truncate cleaned up [ 378.089757][ T7171] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,noblock_validity,nobh,errors=remount-ro,max_dir_size_kb=0x00000000000000ff. Quota mode: none. [ 378.364310][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.370771][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.390374][ T7190] EXT4-fs (loop0): Unrecognized mount option "trans=fd" or missing value [ 378.402628][ T7192] loop4: detected capacity change from 0 to 4096 [ 378.462334][ T4520] udevd[4520]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 378.516315][ T7192] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 378.542088][ T7192] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 378.707196][ T4231] gspca_ov534_9: reg_w failed -71 [ 379.243724][ T7202] binder: 7201:7202 ioctl c0306201 0 returned -14 [ 379.560079][ T4230] usb 2-1: USB disconnect, device number 40 [ 379.671442][ T5062] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 379.840106][ T4231] gspca_ov534_9: Unknown sensor 0000 [ 379.840179][ T4231] ov534_9: probe of 3-1:0.0 failed with error -22 [ 379.869986][ T4231] usb 3-1: USB disconnect, device number 26 [ 380.178703][ T7219] netlink: 216 bytes leftover after parsing attributes in process `syz.1.695'. [ 380.188425][ T7219] netlink: 8 bytes leftover after parsing attributes in process `syz.1.695'. [ 380.451356][ T4276] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 380.511384][ T5062] usb 1-1: not running at top speed; connect to a high speed hub [ 380.611491][ T5062] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 380.633110][ T5062] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 380.666290][ T5062] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 380.706980][ T7229] loop2: detected capacity change from 0 to 512 [ 380.741474][ T4276] usb 5-1: no configurations [ 380.761486][ T4276] usb 5-1: can't read configurations, error -22 [ 380.781515][ T7229] EXT4-fs (loop2): Ignoring removed nobh option [ 380.789092][ T7229] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 380.881525][ T5062] usb 1-1: New USB device found, idVendor=0763, idProduct=1031, bcdDevice= 0.40 [ 380.916767][ T5062] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.935134][ T4276] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 380.960207][ T5062] usb 1-1: Product: syz [ 380.977542][ T7229] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802e02c, mo2=0002] [ 380.997585][ T5062] usb 1-1: Manufacturer: syz [ 381.006108][ T7229] EXT4-fs (loop2): orphan cleanup on readonly fs [ 381.021358][ T7229] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #11: comm syz.2.700: attempt to clear invalid blocks 1024 len 1 [ 381.026364][ T5062] usb 1-1: SerialNumber: syz [ 381.042034][ T7229] EXT4-fs (loop2): Remounting filesystem read-only [ 381.053626][ T7229] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.700: bg 0: block 361: padding at end of block bitmap is not set [ 381.073074][ T7229] EXT4-fs (loop2): Remounting filesystem read-only [ 381.081524][ T7229] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 381.101583][ T7229] EXT4-fs (loop2): Remounting filesystem read-only [ 381.113170][ T7229] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.700: invalid indirect mapped block 1811939328 (level 0) [ 381.147941][ T7229] EXT4-fs (loop2): Remounting filesystem read-only [ 381.164768][ T7229] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.700: invalid indirect mapped block 2185560079 (level 1) [ 381.189276][ T7229] EXT4-fs (loop2): Remounting filesystem read-only [ 381.209439][ T7229] EXT4-fs (loop2): 1 truncate cleaned up [ 381.220545][ T7229] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,noblock_validity,nobh,errors=remount-ro,max_dir_size_kb=0x00000000000000ff. Quota mode: none. [ 381.232235][ T4276] usb 5-1: no configurations [ 381.251195][ T4276] usb 5-1: can't read configurations, error -22 [ 381.261571][ T4276] usb usb5-port1: attempt power cycle [ 381.471284][ T5062] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 381.530103][ T5062] usb 1-1: USB disconnect, device number 22 [ 381.543229][ T7239] EXT4-fs (loop2): Unrecognized mount option "trans=fd" or missing value [ 381.746077][ T4276] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 381.841478][ T7241] loop5: detected capacity change from 0 to 4096 [ 381.885532][ T7241] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 381.885765][ T4276] usb 5-1: no configurations [ 381.907183][ T4319] udevd[4319]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 381.936622][ T4276] usb 5-1: can't read configurations, error -22 [ 381.972390][ T7241] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 382.101326][ T4276] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 382.251809][ T4276] usb 5-1: no configurations [ 382.256516][ T4276] usb 5-1: can't read configurations, error -22 [ 382.290988][ T4276] usb usb5-port1: unable to enumerate USB device [ 383.184767][ T7267] netlink: 216 bytes leftover after parsing attributes in process `syz.1.709'. [ 383.194133][ T7267] netlink: 8 bytes leftover after parsing attributes in process `syz.1.709'. [ 385.251274][ T5773] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 385.521241][ T5773] usb 2-1: Using ep0 maxpacket: 16 [ 385.671805][ T5773] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 385.693107][ T5773] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 385.719164][ T5773] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 385.737729][ T5773] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 385.762838][ T5773] usb 2-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 385.781802][ T5773] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.800816][ T5773] usb 2-1: config 0 descriptor?? [ 385.951194][ T4276] usb 6-1: new full-speed USB device number 35 using dummy_hcd [ 386.010159][ T7298] netlink: 28 bytes leftover after parsing attributes in process `syz.4.719'. [ 386.265759][ T7303] loop4: detected capacity change from 0 to 4096 [ 386.347959][ T4276] usb 6-1: no configurations [ 386.353197][ T4276] usb 6-1: can't read configurations, error -22 [ 386.432102][ T7303] ntfs3: Unknown parameter 'windows_names' [ 386.511284][ T4276] usb 6-1: new full-speed USB device number 36 using dummy_hcd [ 386.831340][ T4276] usb 6-1: no configurations [ 386.836033][ T4276] usb 6-1: can't read configurations, error -22 [ 386.877687][ T4276] usb usb6-port1: attempt power cycle [ 387.136241][ T7313] netlink: 216 bytes leftover after parsing attributes in process `syz.4.723'. [ 387.145477][ T7313] netlink: 8 bytes leftover after parsing attributes in process `syz.4.723'. [ 387.527472][ T7317] xt_TCPMSS: Only works on TCP SYN packets [ 389.066811][ T4276] usb 6-1: new full-speed USB device number 37 using dummy_hcd [ 389.371588][ T4276] usb 6-1: device not accepting address 37, error -71 [ 389.742623][ T13] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 390.041144][ T13] usb 1-1: Using ep0 maxpacket: 16 [ 391.231399][ T13] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 391.251146][ T13] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 391.291115][ T13] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 391.366242][ T5773] usbhid 2-1:0.0: can't add hid device: -32 [ 391.372914][ T5773] usbhid: probe of 2-1:0.0 failed with error -32 [ 391.421236][ T13] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 392.076639][ T13] usb 1-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 392.086084][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.122172][ T13] usb 1-1: config 0 descriptor?? [ 392.250663][ T2140] usb 2-1: USB disconnect, device number 41 [ 392.853985][ T7352] loop5: detected capacity change from 0 to 4096 [ 392.950564][ T7357] netlink: 216 bytes leftover after parsing attributes in process `syz.4.738'. [ 392.959630][ T7357] netlink: 8 bytes leftover after parsing attributes in process `syz.4.738'. [ 393.260070][ T7352] EXT4-fs (loop5): Ignoring removed nobh option [ 393.275201][ T7364] netlink: 216 bytes leftover after parsing attributes in process `syz.2.735'. [ 393.284435][ T7364] netlink: 8 bytes leftover after parsing attributes in process `syz.2.735'. [ 393.364292][ T7352] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a04ec018, mo2=0003] [ 393.396990][ T7352] System zones: 0-5 [ 393.449949][ T7352] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobh,delalloc,max_dir_size_kb=0x0000000000000002,quota,errors=continue,debug,nodelalloc,barrier,,errors=continue. Quota mode: writeback. [ 395.011199][ T5062] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 396.121379][ T5062] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 396.298761][ T7379] loop5: detected capacity change from 0 to 40427 [ 396.781185][ T5062] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 396.999601][ T7379] F2FS-fs (loop5): Invalid segment/section count (24 != 24 * 3) [ 397.007363][ T7379] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 397.016094][ T7379] F2FS-fs (loop5): Unrecognized mount option "context=unconf" or missing value [ 397.351248][ T13] usbhid 1-1:0.0: can't add hid device: -32 [ 397.357790][ T13] usbhid: probe of 1-1:0.0 failed with error -32 [ 397.788142][ T5062] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.662995][ T5062] usb 5-1: config 0 descriptor?? [ 398.691249][ T5062] usb 5-1: can't set config #0, error -71 [ 398.697991][ T5062] usb 5-1: USB disconnect, device number 29 [ 398.826195][ T1107] usb 1-1: USB disconnect, device number 23 [ 399.109037][ T7393] [ 399.111419][ T7393] ====================================================== [ 399.118452][ T7393] WARNING: possible circular locking dependency detected [ 399.125488][ T7393] syzkaller #0 Not tainted [ 399.130017][ T7393] ------------------------------------------------------ [ 399.137039][ T7393] syz.0.748/7393 is trying to acquire lock: [ 399.142941][ T7393] ffff88807a3e4c28 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xfa/0x210 [ 399.154023][ T7393] [ 399.154023][ T7393] but task is already holding lock: [ 399.161404][ T7393] ffffffff8d6c51a8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x18b/0x560 [ 399.171100][ T7393] [ 399.171100][ T7393] which lock already depends on the new lock. [ 399.171100][ T7393] [ 399.181529][ T7393] [ 399.181529][ T7393] the existing dependency chain (in reverse order) is: [ 399.190567][ T7393] [ 399.190567][ T7393] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 399.198586][ T7393] __mutex_lock_common+0x1e3/0x2400 [ 399.204341][ T7393] mutex_lock_nested+0x17/0x20 [ 399.209643][ T7393] rfkill_register+0x33/0x8a0 [ 399.214862][ T7393] hci_register_dev+0x452/0x970 [ 399.220254][ T7393] vhci_create_device+0x32c/0x5c0 [ 399.225827][ T7393] vhci_write+0x391/0x450 [ 399.230697][ T7393] vfs_write+0x745/0xd60 [ 399.235476][ T7393] ksys_write+0x152/0x260 [ 399.240349][ T7393] do_syscall_64+0x4c/0xa0 [ 399.245296][ T7393] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 399.251736][ T7393] [ 399.251736][ T7393] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 399.259585][ T7393] __mutex_lock_common+0x1e3/0x2400 [ 399.265336][ T7393] mutex_lock_nested+0x17/0x20 [ 399.270638][ T7393] vhci_send_frame+0x88/0x100 [ 399.275855][ T7393] hci_send_frame+0x1a9/0x2e0 [ 399.281072][ T7393] hci_tx_work+0x9f9/0x1710 [ 399.286124][ T7393] process_one_work+0x85f/0x1010 [ 399.291639][ T7393] worker_thread+0xaa6/0x1290 [ 399.296860][ T7393] kthread+0x436/0x520 [ 399.301468][ T7393] ret_from_fork+0x1f/0x30 [ 399.306439][ T7393] [ 399.306439][ T7393] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 399.315665][ T7393] __flush_work+0x116/0x210 [ 399.320714][ T7393] hci_dev_do_close+0x1e7/0x1030 [ 399.326204][ T7393] hci_unregister_dev+0x2d7/0x580 [ 399.331772][ T7393] vhci_release+0x73/0xc0 [ 399.336651][ T7393] __fput+0x234/0x930 [ 399.341201][ T7393] task_work_run+0x125/0x1a0 [ 399.346348][ T7393] do_exit+0x626/0x20c0 [ 399.351045][ T7393] do_group_exit+0x12e/0x300 [ 399.356179][ T7393] get_signal+0x6ca/0x12c0 [ 399.361149][ T7393] arch_do_signal_or_restart+0xe7/0x12c0 [ 399.367350][ T7393] exit_to_user_mode_loop+0x9e/0x130 [ 399.373190][ T7393] exit_to_user_mode_prepare+0xee/0x180 [ 399.379289][ T7393] syscall_exit_to_user_mode+0x16/0x40 [ 399.385300][ T7393] do_syscall_64+0x58/0xa0 [ 399.390255][ T7393] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 399.396690][ T7393] [ 399.396690][ T7393] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 399.404356][ T7393] __mutex_lock_common+0x1e3/0x2400 [ 399.410093][ T7393] mutex_lock_nested+0x17/0x20 [ 399.415395][ T7393] bg_scan_update+0x44/0x3b0 [ 399.420537][ T7393] process_one_work+0x85f/0x1010 [ 399.426013][ T7393] worker_thread+0xaa6/0x1290 [ 399.431257][ T7393] kthread+0x436/0x520 [ 399.435867][ T7393] ret_from_fork+0x1f/0x30 [ 399.440823][ T7393] [ 399.440823][ T7393] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 399.450654][ T7393] __lock_acquire+0x2c42/0x7d10 [ 399.456054][ T7393] lock_acquire+0x19e/0x400 [ 399.461121][ T7393] __flush_work+0x116/0x210 [ 399.466184][ T7393] __cancel_work_timer+0x3f4/0x560 [ 399.471834][ T7393] hci_request_cancel_all+0xcc/0x300 [ 399.477669][ T7393] hci_dev_do_close+0x4e/0x1030 [ 399.483056][ T7393] hci_rfkill_set_block+0x10a/0x190 [ 399.488797][ T7393] rfkill_set_block+0x1c6/0x420 [ 399.494193][ T7393] rfkill_fop_write+0x452/0x560 [ 399.499589][ T7393] vfs_write+0x30b/0xd60 [ 399.504367][ T7393] ksys_write+0x152/0x260 [ 399.509236][ T7393] do_syscall_64+0x4c/0xa0 [ 399.514194][ T7393] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 399.520647][ T7393] [ 399.520647][ T7393] other info that might help us debug this: [ 399.520647][ T7393] [ 399.530887][ T7393] Chain exists of: [ 399.530887][ T7393] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 399.530887][ T7393] [ 399.546775][ T7393] Possible unsafe locking scenario: [ 399.546775][ T7393] [ 399.554261][ T7393] CPU0 CPU1 [ 399.559649][ T7393] ---- ---- [ 399.565033][ T7393] lock(rfkill_global_mutex); [ 399.569829][ T7393] lock(&data->open_mutex); [ 399.576964][ T7393] lock(rfkill_global_mutex); [ 399.584270][ T7393] lock((work_completion)(&hdev->bg_scan_update)); [ 399.590889][ T7393] [ 399.590889][ T7393] *** DEADLOCK *** [ 399.590889][ T7393] [ 399.599053][ T7393] 1 lock held by syz.0.748/7393: [ 399.604004][ T7393] #0: ffffffff8d6c51a8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x18b/0x560 [ 399.614264][ T7393] [ 399.614264][ T7393] stack backtrace: [ 399.620197][ T7393] CPU: 0 PID: 7393 Comm: syz.0.748 Not tainted syzkaller #0 [ 399.627508][ T7393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 399.637595][ T7393] Call Trace: [ 399.640905][ T7393] [ 399.643935][ T7393] dump_stack_lvl+0x188/0x250 [ 399.648657][ T7393] ? load_image+0x400/0x400 [ 399.653198][ T7393] ? show_regs_print_info+0x20/0x20 [ 399.658446][ T7393] ? print_circular_bug+0x12b/0x1a0 [ 399.663685][ T7393] check_noncircular+0x296/0x330 [ 399.668871][ T7393] ? add_chain_block+0x940/0x940 [ 399.673848][ T7393] ? lockdep_lock+0xf1/0x1f0 [ 399.678671][ T7393] ? __lock_acquire+0x12e8/0x7d10 [ 399.683740][ T7393] ? mark_lock+0x94/0x320 [ 399.688176][ T7393] ? _find_first_zero_bit+0xce/0xf0 [ 399.693437][ T7393] __lock_acquire+0x2c42/0x7d10 [ 399.698344][ T7393] ? mark_lock+0x94/0x320 [ 399.702697][ T7393] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 399.708700][ T7393] ? verify_lock_unused+0x140/0x140 [ 399.713945][ T7393] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 399.719621][ T7393] lock_acquire+0x19e/0x400 [ 399.724154][ T7393] ? __flush_work+0xfa/0x210 [ 399.728766][ T7393] ? __lock_acquire+0x7d10/0x7d10 [ 399.733823][ T7393] ? read_lock_is_recursive+0x10/0x10 [ 399.739231][ T7393] ? start_flush_work+0x776/0x820 [ 399.744272][ T7393] __flush_work+0x116/0x210 [ 399.748802][ T7393] ? __flush_work+0xfa/0x210 [ 399.753457][ T7393] ? flush_work+0x20/0x20 [ 399.757810][ T7393] ? try_to_grab_pending+0xfa/0x7f0 [ 399.763012][ T7393] ? mark_lock+0x94/0x320 [ 399.767350][ T7393] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 399.773357][ T7393] ? lock_chain_count+0x20/0x20 [ 399.778247][ T7393] ? mark_lock+0x94/0x320 [ 399.782586][ T7393] ? __cancel_work_timer+0x36a/0x560 [ 399.787882][ T7393] __cancel_work_timer+0x3f4/0x560 [ 399.793193][ T7393] ? cancel_work_sync+0x20/0x20 [ 399.798066][ T7393] ? __cancel_work+0x1f9/0x2e0 [ 399.802855][ T7393] ? lockdep_hardirqs_on+0x94/0x140 [ 399.808076][ T7393] ? __cancel_work+0x27b/0x2e0 [ 399.812860][ T7393] ? cancel_work+0x20/0x20 [ 399.817285][ T7393] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 399.822966][ T7393] hci_request_cancel_all+0xcc/0x300 [ 399.828314][ T7393] hci_dev_do_close+0x4e/0x1030 [ 399.833191][ T7393] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 399.839186][ T7393] ? _raw_spin_unlock+0x40/0x40 [ 399.844141][ T7393] hci_rfkill_set_block+0x10a/0x190 [ 399.849357][ T7393] ? rcu_lock_release+0x20/0x20 [ 399.854233][ T7393] rfkill_set_block+0x1c6/0x420 [ 399.859101][ T7393] rfkill_fop_write+0x452/0x560 [ 399.863968][ T7393] ? rfkill_fop_read+0x4d0/0x4d0 [ 399.868931][ T7393] ? common_file_perm+0x110/0x1c0 [ 399.873988][ T7393] ? fsnotify_perm+0x5d/0x560 [ 399.878687][ T7393] ? security_file_permission+0x75/0xa0 [ 399.884266][ T7393] ? rfkill_fop_read+0x4d0/0x4d0 [ 399.889245][ T7393] vfs_write+0x30b/0xd60 [ 399.893514][ T7393] ? file_end_write+0x250/0x250 [ 399.898393][ T7393] ? __fget_files+0x40f/0x480 [ 399.903090][ T7393] ? __fdget_pos+0x1e2/0x370 [ 399.907699][ T7393] ? ksys_write+0x71/0x260 [ 399.912134][ T7393] ksys_write+0x152/0x260 [ 399.916486][ T7393] ? __ia32_sys_read+0x80/0x80 [ 399.921267][ T7393] ? lockdep_hardirqs_on+0x94/0x140 [ 399.926497][ T7393] do_syscall_64+0x4c/0xa0 [ 399.930933][ T7393] ? clear_bhb_loop+0x30/0x80 [ 399.935648][ T7393] ? clear_bhb_loop+0x30/0x80 [ 399.940341][ T7393] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 399.946257][ T7393] RIP: 0033:0x7f5a198b3819 [ 399.950690][ T7393] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 399.970320][ T7393] RSP: 002b:00007f5a17acb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 399.978758][ T7393] RAX: ffffffffffffffda RBX: 00007f5a19b2d180 RCX: 00007f5a198b3819 [ 399.986740][ T7393] RDX: 0000000000000008 RSI: 0000200000000180 RDI: 0000000000000005 [ 399.994723][ T7393] RBP: 00007f5a19949c91 R08: 0000000000000000 R09: 0000000000000000 [ 400.002706][ T7393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 400.010685][ T7393] R13: 00007f5a19b2d218 R14: 00007f5a19b2d180 R15: 00007ffd2a28ab68 [ 400.018670][ T7393] [ 400.027557][ T5062] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 400.281639][ T5062] usb 5-1: Using ep0 maxpacket: 16 [ 400.401745][ T5062] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 400.412009][ T5062] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 400.423238][ T5062] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 400.434240][ T5062] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 400.447307][ T5062] usb 5-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 400.456594][ T5062] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.466010][ T5062] usb 5-1: config 0 descriptor?? [ 401.088669][ T5062] hid-generic 0003:057E:2019.0002: item fetching failed at offset 0/5 [ 401.100068][ T5062] hid-generic: probe of 0003:057E:2019.0002 failed with error -22 [ 402.386253][ T5773] usb 5-1: USB disconnect, device number 30