last executing test programs: 9.301807004s ago: executing program 0 (id=4522): fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000020"], 0xfe44, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400000fb7030000000007008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f0000000480)={&(0x7f00000003c0), &(0x7f0000000400)=""/62, 0x3e}) setsockopt$inet_tcp_int(r7, 0x6, 0x7, &(0x7f00000000c0)=0x7a, 0x4) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, 0x0, 0x0) ptrace$getenv(0x4201, r2, 0x1, &(0x7f0000000000)) r8 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x480, 0x0) ioctl$RTC_AIE_ON(r8, 0x7001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r9 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r9, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[], 0xfe44, 0x0) 8.365980551s ago: executing program 0 (id=4525): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) 5.345886949s ago: executing program 0 (id=4530): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001500)={0xffffffffffffffff, &(0x7f0000000500)="f4970e2c0873301b0f5d46eec8427fabe7ea068c0face18b6d966eed077db6af4d14ff9cf780147ce1313cb9674a364a5c247b04a8e21dce3550dd959e7dcd0759ce15a61dd85d12ebc2d3ee0b60ebec8828045c122a5d3095bd1a09ff31c753c3ff6e67eb7ee8b6"}, 0x20) syz_usb_connect(0x0, 0x2d, &(0x7f0000000540)=ANY=[@ANYBLOB="1201000074020440fd07010099480102030109021b0001000000000904000001c5b3e30009050b"], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b81000085"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="a40000001000010400"/20, @ANYRES32=r4, @ANYBLOB="00000000000000007c0012800e00010069703665727370616e0000006800028006000300060000000600020009000000050016001100000004001200080015008af50f00050008000100000014000600fc010000000000000000000000000001050016000200000014000700fc00000000000000000000000000000005000b000800000008000300", @ANYRES32=r4], 0xa4}}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008180000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000002c7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r8}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r11 = dup(r10) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r9, @ANYBLOB=',wfdno=', @ANYRESHEX=r11, @ANYBLOB=',afid=0x0000000000000009,nodevmap,fowner=', @ANYRESDEC=0x0, @ANYBLOB="2c657569643d3b97e299a0312c91a10bc5eb93c2e4c1a17376ea9f5c69882a12db521b6b4958a14bb85d6e010eab99a90ca9814ee3dddc0fd04c9e8843e5b5e4304dc982f10337aa2bf8927cbd51e58f3d4aa2cf94fb99875c59b23615b1f09b8d0bd30910737e6765d540af0032a92f0c09a2cb5171b1679863ee2fcd6c3d99fb4832f7c0faffffffec45ea50cb4e507966988321ff05ee119a29afb57d6b4982de6fd8e78ecc179ab69db8f9cb41454997474c186b3f4e5cbb0cf8d2b75ec1f64c088c484f", @ANYRESDEC=0x0, @ANYBLOB="2c6f626a5f747970653d97d6000000000000002c00"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000400)=[@text32={0x20, &(0x7f0000000300)="c4c3516fc0edb9a50900000f3266b8bf008ec0f40f01dfc4e14d564e0066660f38825f0b66b85a000f00d8f3360f22d4f30f09", 0x33}], 0x1, 0x2, &(0x7f0000000480), 0x0) ioctl$KVM_CHECK_EXTENSION(r11, 0xae03, 0x0) utimes(&(0x7f0000000280)='./file0\x00', 0x0) 3.876826441s ago: executing program 3 (id=4535): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001500)={0xffffffffffffffff, &(0x7f0000000500)="f4970e2c0873301b0f5d46eec8427fabe7ea068c0face18b6d966eed077db6af4d14ff9cf780147ce1313cb9674a364a5c247b04a8e21dce3550dd959e7dcd0759ce15a61dd85d12ebc2d3ee0b60ebec8828045c122a5d3095bd1a09ff31c753c3ff6e67eb7ee8b6"}, 0x20) syz_usb_connect(0x0, 0x2d, &(0x7f0000000540)=ANY=[@ANYBLOB="1201000074020440fd07010099480102030109021b0001000000000904000001c5b3e30009050b"], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b81000085"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="a40000001000010400"/20, @ANYRES32=r4, @ANYBLOB="00000000000000007c0012800e00010069703665727370616e0000006800028006000300060000000600020009000000050016001100000004001200080015008af50f00050008000100000014000600fc010000000000000000000000000001050016000200000014000700fc00000000000000000000000000000005000b000800000008000300", @ANYRES32=r4], 0xa4}}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008180000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000002c7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00'}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',afid=0x0000000000000009,nodevmap,fowner=', @ANYRESDEC=0x0, @ANYBLOB="2c657569643d3b97e299a0312c91a10bc5eb93c2e4c1a17376ea9f5c69882a12db521b6b4958a14bb85d6e010eab99a90ca9814ee3dddc0fd04c9e8843e5b5e4304dc982f10337aa2bf8927cbd51e58f3d4aa2cf94fb99875c59b23615b1f09b8d0bd30910737e6765d540af0032a92f0c09a2cb5171b1679863ee2fcd6c3d99fb4832f7c0faffffffec45ea50cb4e507966988321ff05ee119a29afb57d6b4982de6fd8e78ecc179ab69db8f9cb41454997474c186b3f4e5cbb0cf8d2b75ec1f64c088c484f", @ANYRESDEC=0x0, @ANYBLOB="2c6f626a5f747970653d97d6000000000000002c00"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000400)=[@text32={0x20, &(0x7f0000000300)="c4c3516fc0edb9a50900000f3266b8bf008ec0f40f01dfc4e14d564e0066660f38825f0b66b85a000f00d8f3360f22d4f30f09", 0x33}], 0x1, 0x2, &(0x7f0000000480), 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x0) utimes(&(0x7f0000000280)='./file0\x00', 0x0) 2.736743324s ago: executing program 0 (id=4543): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000380)={[{@test_dummy_encryption}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@stripe={'stripe', 0x3d, 0x7}}, {@commit={'commit', 0x3d, 0x5}}, {@orlov}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@max_batch_time}, {@data_err_abort}]}, 0xd, 0x5d8, &(0x7f0000001200)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) chdir(&(0x7f0000001180)='./bus\x00') bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x25, 0x0, @void}, 0x10) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x8000c61) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) 2.630031743s ago: executing program 0 (id=4544): syz_usb_connect(0x0, 0x2d, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000066930108205050088000002030109021b000100000000090402000191baf205"], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f00000003c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) 2.629823413s ago: executing program 2 (id=4545): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = gettid() pause() tkill(r1, 0x7) 2.574708388s ago: executing program 2 (id=4546): socket$inet_udplite(0x2, 0x2, 0x88) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x4) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000340)={0x2, 0x0, 0x0, @dev}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000500)=[{0x0}], 0x1) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00'}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x141141, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 2.221839657s ago: executing program 4 (id=4552): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x3, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f00000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000440)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000340)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f0000000100)) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, 0xffffffffffffffff, 0x0) write$selinux_user(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB='system_u:object_r:insmod_exec_t:i0 root\x00'], 0x28) syz_mount_image$fuse(&(0x7f0000000000), 0x0, 0x100000, &(0x7f0000000440)=ANY=[], 0x1, 0x0, 0x0) rmdir(&(0x7f0000001100)='./file1\x00') 2.221434127s ago: executing program 1 (id=4554): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r3], 0x18}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) close(r4) 1.880441735s ago: executing program 3 (id=4555): syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000000)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x2, 0x376, &(0x7f0000000900)="$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") 1.879714205s ago: executing program 1 (id=4556): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x8, &(0x7f00000001c0)=ANY=[], 0x1, 0x550d, &(0x7f00000079c0)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22}, 0x48) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, 0x0, &(0x7f0000000080)=@tcp=r1}, 0x20) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@jqfmt_vfsold}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@bsdgroups}, {@resuid}, {@dioread_nolock}, {@usrjquota}, {@discard}, {@jqfmt_vfsv1}]}, 0x1, 0x564, &(0x7f0000002bc0)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TUNSETDEBUG(r2, 0x400454c9, &(0x7f0000000300)=0x7f) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000440)={@cgroup, 0x24, 0x1, 0x3, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socket$inet6(0xa, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) write$cgroup_pid(r2, &(0x7f0000000000), 0x2a979d) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0\x00', &(0x7f0000000380), 0x0, 0x0, 0x0) 1.737606857s ago: executing program 3 (id=4557): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000b705000085000000170000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x5, 0xc0, &(0x7f00000020c0)=""/192}, 0x80) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'veth0\x00', 0x0}) r8 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r5, r7, 0x25, 0x0, @val=@tcx={@prog_fd}}, 0x40) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000001800000008000000000000006e14000095"], &(0x7f0000000040)='syzkaller\x00', 0x5, 0xc0, &(0x7f00000020c0)=""/192}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000140)={r8, r9}, 0x5) close_range(r4, 0xffffffffffffffff, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x14c}}, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000003c0)='./bus\x00', 0x4400, &(0x7f0000000640), 0x1, 0x75e, &(0x7f0000001100)="$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") chdir(&(0x7f0000000080)='./file0\x00') r11 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r11, 0x40806685, &(0x7f00000002c0)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) 1.492246177s ago: executing program 2 (id=4558): getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000440)={0x0, @loopback, @initdev}, &(0x7f0000000480)=0xc) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000004c0)=0xffffffffffffffff, 0x4) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000780)='cgroup.kill\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f332460916e6e893f1eeb0b723043c47c896ce0bce66a245ad99b8173d98cd824498949714ffaaca9f39817beb2de45406fb6db714e4b94bdae214fa68a0157eb3c00000000b6fc89398f2b9000f224891060017cfa6fa26fa7a34700458c60897d4a6148a1c11428607c40de60beac671e8e8fdecb03598aa623fa71f31bf0f871ab5c2ff88afc6002084e5b52710aee410e3e554d090d95983826fb8579c1fb47d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed00000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0xe}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x5}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r2, &(0x7f0000003240), &(0x7f0000000100)=@tcp6=r3, 0x2}, 0x20) pipe(&(0x7f0000000500)) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{0x1}, &(0x7f0000000540), &(0x7f0000000580)='%pK \x00'}, 0x20) bpf$ITER_CREATE(0x21, &(0x7f0000000600), 0x8) 1.447838221s ago: executing program 2 (id=4559): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000000)=0x8, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="10", 0x1, 0x0, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.367443117s ago: executing program 4 (id=4560): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000001980)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000280)=@framed={{}, [@call, @ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x28, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.366994257s ago: executing program 4 (id=4561): sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$inet(0x2, 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r5], &(0x7f0000000600)='GPL\x00', 0x10001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r6}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r7, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000003c0)='i2c_result\x00', r8}, 0x10) rt_sigpending(0x0, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000008c0)=@dellinkprop={0x24, 0x2e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_PROP_LIST={0x4}]}, 0x24}}, 0x0) 1.319334451s ago: executing program 2 (id=4562): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x80, &(0x7f0000000240), 0x1, 0x50d, &(0x7f0000000980)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0xfffffffffffffffd, 0x8}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r3}, 0x10) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000280)=0x3, 0x4) r4 = creat(&(0x7f0000000540)='./bus\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x1000f4) 751.321628ms ago: executing program 1 (id=4563): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="800037bbfa", 0x5, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r0, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) syz_emit_ethernet(0x66, &(0x7f00000003c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x30, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "00641a", 0x0, 0x3a, 0x0, @mcast1, @mcast1}}}}}}}, 0x0) 577.493552ms ago: executing program 3 (id=4564): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000b705000085000000170000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x5, 0xc0, &(0x7f00000020c0)=""/192}, 0x80) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0\x00', 0x0}) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r0, r2, 0x25, 0x0, @val=@tcx={@prog_fd}}, 0x40) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000001800000008000000000000006e14000095"], &(0x7f0000000040)='syzkaller\x00', 0x5, 0xc0, &(0x7f00000020c0)=""/192}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000280)={r3, r4}, 0x10) 566.215343ms ago: executing program 4 (id=4565): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000001980)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000280)=@framed={{}, [@call, @ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x14, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 546.064195ms ago: executing program 4 (id=4566): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) close(r1) 413.918286ms ago: executing program 3 (id=4567): rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x20013, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_REAPURB(r2, 0x4008550c, &(0x7f0000002680)) ioctl$USBDEVFS_FREE_STREAMS(r2, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002302230102090500000010000020d3"]) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{&(0x7f0000000280)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000300)=""/42, 0x2a}, {&(0x7f0000000340)=""/2, 0x2}, {&(0x7f0000000480)=""/236, 0xec}, {&(0x7f0000000580)=""/18, 0x12}, {&(0x7f00000005c0)=""/55, 0x37}, {&(0x7f0000000600)=""/24, 0x18}, {&(0x7f0000000640)=""/32, 0x20}, {&(0x7f0000000680)=""/245, 0xf5}, {&(0x7f0000000780)=""/154, 0x9a}, {&(0x7f0000000840)=""/67, 0x43}], 0xa, &(0x7f0000000980)=""/155, 0x9b}, 0x8001}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000002a80)=""/73, 0x49}, {&(0x7f0000000ac0)=""/225, 0xe1}, {&(0x7f0000000bc0)=""/148, 0x94}], 0x3}, 0x3}, {{&(0x7f0000000cc0)=@alg, 0x80, &(0x7f0000001140)=[{&(0x7f0000000d40)=""/208, 0xd0}, {&(0x7f0000000e40)=""/204, 0xcc}, {&(0x7f0000000f40)=""/223, 0xdf}, {&(0x7f0000001040)=""/204, 0xcc}], 0x4}, 0x7}, {{&(0x7f0000001180)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x80, &(0x7f0000002440)=[{&(0x7f0000001200)=""/124, 0x7c}, {&(0x7f0000001280)=""/109, 0x6d}, {&(0x7f0000001300)=""/81, 0x51}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/173, 0xad}], 0x5, &(0x7f00000024c0)=""/144, 0x90}, 0xfff}, {{0x0, 0x0, &(0x7f0000002880)=[{&(0x7f0000002580)=""/74, 0x4a}, {&(0x7f00000026c0)=""/184, 0xb8}, {&(0x7f0000002600)=""/31, 0x1f}, {&(0x7f0000002640)=""/39, 0x27}, {&(0x7f0000002780)=""/211, 0xd3}], 0x5, &(0x7f0000002900)=""/55, 0x37}, 0xffff7fff}], 0x5, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'vlan0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) 224.485551ms ago: executing program 2 (id=4568): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f0000001540)={[{@nouser_xattr}, {@four_active_logs}, {@four_active_logs}, {@noquota}, {@noflush_merge}, {@io_bits={'io_bits', 0x3d, 0x97}}, {@prjjquota={'prjjquota', 0x3d, '\x9b\x9c\a\xbb\x00(\x94\x87\xf6\xb1\x90,\xa3aLpJ\xf6n'}}, {@jqfmt_vfsv1}, {@extent_cache}, {@background_gc_off}]}, 0x1, 0x5500, &(0x7f0000003040)="$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") 217.788832ms ago: executing program 0 (id=4569): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000fcffffff181100", @ANYBLOB], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b00000000001b000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000006ffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r5, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) unshare(0x8000400) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) 206.705183ms ago: executing program 4 (id=4570): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) pause() 128.444399ms ago: executing program 1 (id=4571): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000180)=[{0x6}]}, 0x10) close(r1) 116.94595ms ago: executing program 1 (id=4572): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) close(r1) 105.215811ms ago: executing program 3 (id=4573): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) sched_setscheduler(r0, 0x0, &(0x7f0000000000)=0xffffffff) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000003c0)=0x70, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000900)=[{0x6, 0x0, 0x0, 0xec}]}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4) sendto$inet(r5, &(0x7f0000000700)="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", 0xfe6a, 0x40040, 0x0, 0xfffffffffffffe93) 0s ago: executing program 1 (id=4574): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ptrace(0x8, r0) tgkill(r0, r0, 0x1a) waitid(0x2, 0x0, 0x0, 0x4, 0x0) kernel console output (not intermixed with test programs): 5836][T17990] erofs: Unknown parameter '0xffffffffffffffff]#[8+KW䶓?҇98 7' [ 1419.907823][ T9531] usbhid 2-1:0.0: can't add hid device: -71 [ 1419.923237][ T9531] usbhid: probe of 2-1:0.0 failed with error -71 [ 1419.936142][ T9531] usb 2-1: USB disconnect, device number 82 [ 1419.977760][ T316] usb 5-1: Using ep0 maxpacket: 32 [ 1420.117646][T17996] loop0: detected capacity change from 0 to 128 [ 1420.127119][T17996] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1420.169231][T17996] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1420.359181][ T3292] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1420.397822][ T316] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1420.408870][ T316] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1420.418510][ T316] usb 5-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 1420.427534][ T316] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1420.436182][ T316] usb 5-1: config 0 descriptor?? [ 1420.727800][ T3292] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1420.738721][ T3292] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1420.750592][ T3292] usb 3-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 1420.759613][ T3292] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1420.770076][ T3292] usb 3-1: config 0 descriptor?? [ 1421.158124][T14153] usb 4-1: USB disconnect, device number 99 [ 1421.158739][ T316] hid-rmi 0003:0461:4E72.002E: unknown main item tag 0x0 [ 1421.177658][ T316] hid-rmi 0003:0461:4E72.002E: unknown main item tag 0x0 [ 1421.184942][ T316] hid-rmi 0003:0461:4E72.002E: unknown main item tag 0x0 [ 1421.192099][ T316] hid-rmi 0003:0461:4E72.002E: unknown main item tag 0x0 [ 1421.199769][ T316] hid-rmi 0003:0461:4E72.002E: unknown main item tag 0x0 [ 1421.210586][ T316] hid-rmi 0003:0461:4E72.002E: hidraw0: USB HID v0.00 Device [HID 0461:4e72] on usb-dummy_hcd.4-1/input0 [ 1421.329305][ T9531] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1421.370538][ T316] usb 5-1: USB disconnect, device number 90 [ 1421.709094][ T3292] logitech-djreceiver 0003:046D:C71B.002F: item fetching failed at offset 5/7 [ 1421.724988][ T3292] logitech-djreceiver 0003:046D:C71B.002F: logi_dj_probe: parse failed [ 1421.728278][T18015] loop0: detected capacity change from 0 to 512 [ 1421.733560][ T3292] logitech-djreceiver: probe of 0003:046D:C71B.002F failed with error -22 [ 1421.759380][T18015] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #16: comm syz.0.4303: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 3630(4), depth 0(0) [ 1421.777118][T18015] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz.0.4303: couldn't read orphan inode 16 (err -117) [ 1421.777771][ T9531] usb 2-1: Using ep0 maxpacket: 32 [ 1421.789431][T18015] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1421.802734][T18015] ext4 filesystem being mounted at /283/file1 supports timestamps until 2038 (0x7fffffff) [ 1421.967101][T18020] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4303'. [ 1421.982566][T18020] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1422.909608][T14153] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 1422.911613][T12528] EXT4-fs (loop0): unmounting filesystem. [ 1423.168060][ T9531] usb 2-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 1423.205934][ T9531] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1423.329718][ T9531] usb 2-1: Product: syz [ 1423.344276][ T9531] usb 2-1: Manufacturer: syz [ 1423.351733][ T9531] usb 2-1: SerialNumber: syz [ 1423.354683][T18033] loop2: detected capacity change from 0 to 512 [ 1423.357605][ T380] usb 3-1: USB disconnect, device number 102 [ 1423.369473][T14153] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1423.379598][T18033] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #16: comm syz.2.4306: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 3630(4), depth 0(0) [ 1423.383988][ T9531] usb 2-1: config 0 descriptor?? [ 1423.397963][T18033] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.4306: couldn't read orphan inode 16 (err -117) [ 1423.402315][T14153] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1423.414254][T18033] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1423.427490][T14153] usb 4-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 1423.432956][T18033] ext4 filesystem being mounted at /155/file1 supports timestamps until 2038 (0x7fffffff) [ 1423.444490][T14153] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1423.461595][T14153] usb 4-1: config 0 descriptor?? [ 1423.497800][ T316] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 1423.629979][T18037] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4306'. [ 1423.645179][T18037] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1423.737762][ T316] usb 5-1: Using ep0 maxpacket: 32 [ 1424.317987][T13320] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 1424.326211][T15002] EXT4-fs (loop2): unmounting filesystem. [ 1424.327858][ T316] usb 5-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 1424.341096][ T316] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1424.348954][ T316] usb 5-1: Product: syz [ 1424.352987][ T316] usb 5-1: Manufacturer: syz [ 1424.357362][ T316] usb 5-1: SerialNumber: syz [ 1424.362490][ T316] usb 5-1: config 0 descriptor?? [ 1424.367873][ T9531] (unnamed net_device) (uninitialized): Assigned a random MAC address: 8e:7d:31:a0:ce:8a [ 1424.380223][ T9531] rtl8150 2-1:0.0: eth1: rtl8150 is detected [ 1424.387266][ T9531] usb 2-1: USB disconnect, device number 83 [ 1424.687873][T13320] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1424.698638][T13320] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1424.708318][T13320] usb 1-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 1424.717338][T13320] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1424.726334][T13320] usb 1-1: config 0 descriptor?? [ 1424.747072][T13588] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1424.758296][T18051] loop3: detected capacity change from 0 to 16 [ 1424.764641][T18051] erofs: Unknown parameter '0xffffffffffffffff]#[8+KW䶓?҇98 7' [ 1424.817812][T14153] usbhid 4-1:0.0: can't add hid device: -71 [ 1424.823820][T14153] usbhid: probe of 4-1:0.0 failed with error -71 [ 1424.833639][T14153] usb 4-1: USB disconnect, device number 100 [ 1424.969110][T18057] loop3: detected capacity change from 0 to 128 [ 1424.975483][T18057] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1424.991797][T18057] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1425.107816][T13588] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1425.117772][T13588] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1425.126503][T13588] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1425.137867][ T28] audit: type=1326 audit(1723884200.310:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18054 comm="syz.1.4311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f686a179e79 code=0x7fc00000 [ 1425.177758][T13588] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1425.188201][T13588] usb 3-1: config 0 descriptor?? [ 1425.583189][T18058] loop1: detected capacity change from 0 to 131072 [ 1425.592318][T18058] F2FS-fs (loop1): Segment count (31) mismatch with total segments from devices (0) [ 1425.602245][T18058] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1425.614058][T18058] F2FS-fs (loop1): invalid crc value [ 1425.636849][T18058] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1425.637989][ T316] (unnamed net_device) (uninitialized): Assigned a random MAC address: 52:1d:af:1b:8e:34 [ 1425.672726][ T316] rtl8150 5-1:0.0: eth1: rtl8150 is detected [ 1425.679808][ T316] usb 5-1: USB disconnect, device number 91 [ 1425.694468][T18058] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1425.701465][T18058] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 1425.869046][ T28] audit: type=1326 audit(1723884201.050:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18054 comm="syz.1.4311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f686a179e79 code=0x7fc00000 [ 1425.967782][ T9531] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 1426.087786][ T316] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 1426.226595][ T9531] usb 4-1: Using ep0 maxpacket: 32 [ 1426.348111][ T9531] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1426.359272][ T9531] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1426.369034][ T9531] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1426.379405][ T9531] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1426.388034][ T9531] usb 4-1: config 0 descriptor?? [ 1426.428336][ T9531] hub 4-1:0.0: USB hub found [ 1426.537832][ T316] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1426.547361][ T316] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 1426.657826][ T9531] hub 4-1:0.0: 1 port detected [ 1426.707840][ T316] usb 5-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 1426.716806][ T316] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1426.724839][ T316] usb 5-1: Product: syz [ 1426.728824][ T316] usb 5-1: Manufacturer: syz [ 1426.733192][ T316] usb 5-1: SerialNumber: syz [ 1426.738548][ T316] usb 5-1: config 0 descriptor?? [ 1426.867863][ T9531] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 1426.874092][ T9531] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 1427.000384][ T316] snd-usb-audio: probe of 5-1:0.0 failed with error -12 [ 1427.007870][T13320] usbhid 1-1:0.0: can't add hid device: -71 [ 1427.013935][ T316] usb 5-1: USB disconnect, device number 92 [ 1427.015443][T13320] usbhid: probe of 1-1:0.0 failed with error -71 [ 1427.025093][ T320] udevd[320]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1427.029642][T13320] usb 1-1: USB disconnect, device number 71 [ 1427.095501][ T9531] usbhid 4-1:0.0: can't add hid device: -71 [ 1427.101355][ T9531] usbhid: probe of 4-1:0.0 failed with error -71 [ 1427.138033][ T9531] usb 4-1: USB disconnect, device number 101 [ 1427.397853][ T380] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1427.459821][T13588] usb 3-1: USB disconnect, device number 103 [ 1427.758092][T14153] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 1427.837919][ T380] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1427.848801][ T380] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1427.868232][ T380] usb 2-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 1427.877237][ T380] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1427.877781][ T316] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 1427.886381][ T380] usb 2-1: config 0 descriptor?? [ 1428.137839][T14153] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1428.147375][T14153] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 1428.247838][ T316] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1428.257476][ T316] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 1428.349605][T14153] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 1428.358617][T14153] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1428.366539][T14153] usb 4-1: Product: syz [ 1428.371032][T14153] usb 4-1: Manufacturer: syz [ 1428.375450][T14153] usb 4-1: SerialNumber: syz [ 1428.384736][T14153] usb 4-1: config 0 descriptor?? [ 1428.395267][ T380] logitech-djreceiver 0003:046D:C71B.0030: item fetching failed at offset 5/7 [ 1428.404144][ T380] logitech-djreceiver 0003:046D:C71B.0030: logi_dj_probe: parse failed [ 1428.412266][ T380] logitech-djreceiver: probe of 0003:046D:C71B.0030 failed with error -22 [ 1428.417853][ T316] usb 5-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 1428.429443][ T316] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1428.437201][ T316] usb 5-1: Product: syz [ 1428.441530][ T316] usb 5-1: Manufacturer: syz [ 1428.445948][ T316] usb 5-1: SerialNumber: syz [ 1428.451207][ T316] usb 5-1: config 0 descriptor?? [ 1428.651567][T18088] all: renamed from ip6erspan0 [ 1428.656823][T18088] A link change request failed with some changes committed already. Interface ip6erspan0 may have been left with an inconsistent configuration, please check. [ 1428.690998][T14153] snd-usb-audio: probe of 4-1:0.0 failed with error -12 [ 1428.702228][T14153] usb 4-1: USB disconnect, device number 102 [ 1428.706467][ T330] udevd[330]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1428.729674][ T316] snd-usb-audio: probe of 5-1:0.0 failed with error -12 [ 1428.739268][ T316] usb 5-1: USB disconnect, device number 93 [ 1428.744559][ T320] udevd[320]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1429.718236][T18112] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1008 sclass=netlink_audit_socket pid=18112 comm=syz.3.4325 [ 1430.216363][ T316] usb 2-1: USB disconnect, device number 84 [ 1430.315540][T18125] loop0: detected capacity change from 0 to 16 [ 1430.322120][T18125] erofs: (device loop0): erofs_read_inode: unsupported chunk format 7fff of nid 36 [ 1430.357800][T14153] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1430.858183][T14153] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1430.873910][ T316] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1430.882586][T14153] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1430.892530][T14153] usb 3-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 1430.901655][T14153] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1430.916294][T14153] usb 3-1: config 0 descriptor?? [ 1431.237828][ T316] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1431.247556][ T316] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 1431.328062][ T3292] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 1431.407931][ T316] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 1431.438223][ T316] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1431.446232][ T316] usb 2-1: Product: syz [ 1431.451975][ T316] usb 2-1: Manufacturer: syz [ 1431.456484][ T316] usb 2-1: SerialNumber: syz [ 1431.477943][ T316] usb 2-1: config 0 descriptor?? [ 1431.917871][ T3292] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1431.927538][ T3292] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 1431.983327][ T316] snd-usb-audio: probe of 2-1:0.0 failed with error -12 [ 1431.990947][ T320] udevd[320]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1432.007262][ T316] usb 2-1: USB disconnect, device number 85 [ 1432.087820][ T3292] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 1432.096717][ T3292] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1432.104547][ T3292] usb 4-1: Product: syz [ 1432.108561][ T3292] usb 4-1: Manufacturer: syz [ 1432.112921][ T3292] usb 4-1: SerialNumber: syz [ 1432.118271][ T3292] usb 4-1: config 0 descriptor?? [ 1432.359570][T18136] all: renamed from ip6erspan0 [ 1432.364978][T18136] A link change request failed with some changes committed already. Interface ip6erspan0 may have been left with an inconsistent configuration, please check. [ 1432.383293][T18136] 9pnet_fd: Insufficient options for proto=fd [ 1432.487886][ T380] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 1432.655486][ T3292] snd-usb-audio: probe of 4-1:0.0 failed with error -12 [ 1432.664748][ T3292] usb 4-1: USB disconnect, device number 103 [ 1432.678045][ T320] udevd[320]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1432.777786][ T380] usb 1-1: Using ep0 maxpacket: 16 [ 1433.157951][T14153] usbhid 3-1:0.0: can't add hid device: -71 [ 1433.164117][ T380] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1433.174929][T14153] usbhid: probe of 3-1:0.0 failed with error -71 [ 1433.181132][ T380] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1433.191679][T14153] usb 3-1: USB disconnect, device number 104 [ 1433.200039][ T380] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1433.281852][ T380] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1433.290979][ T380] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1433.302698][ T380] usb 1-1: config 0 descriptor?? [ 1433.378305][T18164] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1008 sclass=netlink_audit_socket pid=18164 comm=syz.4.4339 [ 1433.550506][T18170] loop1: detected capacity change from 0 to 16 [ 1433.556882][T18170] erofs: (device loop1): erofs_read_inode: unsupported chunk format 7fff of nid 36 [ 1433.597447][T18172] overlayfs: failed to resolve './file2': -2 [ 1433.857764][ T3292] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 1434.248177][ T3292] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1434.319716][ T3292] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1434.338480][ T3292] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1434.348505][ T3292] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1434.377291][ T3292] usb 4-1: config 0 descriptor?? [ 1434.642649][T18171] loop3: detected capacity change from 0 to 8192 [ 1434.647774][T13327] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 1434.687834][T14153] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 1434.708070][T18171] loop3: p1 < > p2 p3 p4 < p5 > [ 1434.713935][T18171] loop3: p3 size 16744448 extends beyond EOD, truncated [ 1434.730006][ T3292] usb 4-1: USB disconnect, device number 104 [ 1434.957782][T14153] usb 2-1: Using ep0 maxpacket: 32 [ 1435.007851][T13327] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1435.017429][T13327] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 1435.097839][T14153] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1435.108759][T14153] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1435.118387][T14153] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1435.127212][T14153] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1435.135874][T14153] usb 2-1: config 0 descriptor?? [ 1435.177877][T13327] usb 5-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 1435.178413][T14153] hub 2-1:0.0: USB hub found [ 1435.191328][T13327] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1435.199273][T13327] usb 5-1: Product: syz [ 1435.203298][T13327] usb 5-1: Manufacturer: syz [ 1435.207776][T13327] usb 5-1: SerialNumber: syz [ 1435.217096][T13327] usb 5-1: config 0 descriptor?? [ 1435.229771][T18192] loop0: detected capacity change from 0 to 16 [ 1435.235977][T18192] erofs: Unknown parameter '0xffffffffffffffff]#[8+KW䶓?҇98 7' [ 1435.317816][ T380] usbhid 1-1:0.0: can't add hid device: -71 [ 1435.323623][ T380] usbhid: probe of 1-1:0.0 failed with error -71 [ 1435.338484][ T380] usb 1-1: USB disconnect, device number 72 [ 1435.458375][T14153] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 1435.578065][T14153] usbhid 2-1:0.0: can't add hid device: -71 [ 1435.597189][T14153] usbhid: probe of 2-1:0.0 failed with error -71 [ 1435.688627][T18198] loop0: detected capacity change from 0 to 128 [ 1435.698612][T14153] usb 2-1: USB disconnect, device number 86 [ 1435.755060][T13327] snd-usb-audio: probe of 5-1:0.0 failed with error -12 [ 1435.767816][T13327] usb 5-1: USB disconnect, device number 94 [ 1435.776100][T18198] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1435.788475][ T320] udevd[320]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1435.804311][T18198] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1435.827899][ T9531] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 1436.205676][T18208] loop4: detected capacity change from 0 to 16 [ 1436.211933][ T9531] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1436.213227][T18208] erofs: (device loop4): erofs_read_inode: unsupported chunk format 7fff of nid 36 [ 1436.228164][ T9531] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1436.243659][ T9531] usb 4-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 1436.252811][ T9531] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1436.260663][T14153] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 1436.268809][ T9531] usb 4-1: config 0 descriptor?? [ 1436.417866][ T380] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 1436.577836][ T9325] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 1436.647864][T14153] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1436.657444][T14153] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 1436.827919][ T380] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1436.837443][ T9325] usb 5-1: Using ep0 maxpacket: 16 [ 1436.842395][ T380] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 1436.852008][T14153] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 1436.860968][T14153] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1436.868836][T14153] usb 2-1: Product: syz [ 1436.872779][T14153] usb 2-1: Manufacturer: syz [ 1436.877209][T14153] usb 2-1: SerialNumber: syz [ 1436.882778][T14153] usb 2-1: config 0 descriptor?? [ 1436.957869][ T9325] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1436.968643][ T9325] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1436.978237][ T9325] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1436.990889][ T9325] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1436.999750][ T9325] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1437.017878][ T380] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 1437.027208][ T9325] usb 5-1: config 0 descriptor?? [ 1437.032174][ T380] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1437.040023][ T380] usb 1-1: Product: syz [ 1437.043963][ T380] usb 1-1: Manufacturer: syz [ 1437.048429][ T380] usb 1-1: SerialNumber: syz [ 1437.053474][ T380] usb 1-1: config 0 descriptor?? [ 1437.170595][T18201] 9pnet_fd: Insufficient options for proto=fd [ 1437.315417][T14153] snd-usb-audio: probe of 2-1:0.0 failed with error -12 [ 1437.383562][ T380] snd-usb-audio: probe of 1-1:0.0 failed with error -12 [ 1437.453152][T18217] overlayfs: failed to resolve './file2': -2 [ 1437.466948][T14153] usb 2-1: USB disconnect, device number 87 [ 1437.508520][ T380] usb 1-1: USB disconnect, device number 73 [ 1437.586045][ T320] udevd[320]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1437.729657][ T320] udevd[320]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1437.747907][T18220] loop1: detected capacity change from 0 to 16 [ 1437.758091][T18220] erofs: Unknown parameter '0xffffffffffffffff]#[8+KW䶓?҇98 7' [ 1437.935794][T18224] loop1: detected capacity change from 0 to 128 [ 1437.952291][T18224] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1437.964606][T18224] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1438.217756][ T316] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 1438.457786][ T316] usb 3-1: Using ep0 maxpacket: 16 [ 1438.477812][ T9531] usbhid 4-1:0.0: can't add hid device: -71 [ 1438.483665][ T9531] usbhid: probe of 4-1:0.0 failed with error -71 [ 1438.490686][ T9531] usb 4-1: USB disconnect, device number 105 [ 1438.523927][ T28] audit: type=1326 audit(1723884213.700:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18230 comm="syz.0.4359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2552f79e79 code=0x7fc00000 [ 1438.577811][ T316] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1438.599859][ T316] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1438.609511][ T28] audit: type=1326 audit(1723884213.780:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18233 comm="syz.3.4360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f61979e79 code=0x7fc00000 [ 1438.642777][ T316] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1438.668700][ T316] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1438.678269][ T316] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1438.697980][ T316] usb 3-1: config 0 descriptor?? [ 1439.040808][ T380] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 1439.049865][T18245] overlayfs: failed to resolve './file2': -2 [ 1439.306995][T18236] loop0: detected capacity change from 0 to 131072 [ 1439.327197][T18236] F2FS-fs (loop0): Segment count (31) mismatch with total segments from devices (0) [ 1439.336933][T18236] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1439.345880][T18236] F2FS-fs (loop0): invalid crc value [ 1439.390392][T18238] loop3: detected capacity change from 0 to 131072 [ 1439.397382][T18238] F2FS-fs (loop3): Segment count (31) mismatch with total segments from devices (0) [ 1439.406885][T18238] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1439.423926][T18236] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1439.430720][T18238] F2FS-fs (loop3): invalid crc value [ 1439.443627][T18238] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1439.457854][ T380] usb 2-1: Using ep0 maxpacket: 16 [ 1439.462849][ T9325] usbhid 5-1:0.0: can't add hid device: -71 [ 1439.468892][ T9325] usbhid: probe of 5-1:0.0 failed with error -71 [ 1439.494530][ T9325] usb 5-1: USB disconnect, device number 95 [ 1439.628055][ T380] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1439.639574][ T380] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1439.651916][T18236] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 1439.658959][T18236] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 1439.666729][ T380] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1439.686562][T18238] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1439.695293][T18238] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 1439.698791][ T380] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1439.719512][ T380] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1439.730288][ T380] usb 2-1: config 0 descriptor?? [ 1439.849068][ T28] audit: type=1326 audit(1723884215.030:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18230 comm="syz.0.4359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2552f79e79 code=0x7fc00000 [ 1439.888185][ T28] audit: type=1326 audit(1723884215.070:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18233 comm="syz.3.4360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2f61979e79 code=0x7fc00000 [ 1440.110622][T18260] overlayfs: failed to resolve './file2': -2 [ 1440.503350][T18265] loop3: detected capacity change from 0 to 512 [ 1440.519740][T18265] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #16: comm syz.3.4364: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 3630(4), depth 0(0) [ 1440.537621][T18265] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.4364: couldn't read orphan inode 16 (err -117) [ 1440.549756][T18265] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1440.558807][T18265] ext4 filesystem being mounted at /258/file1 supports timestamps until 2038 (0x7fffffff) [ 1440.674849][T18269] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4364'. [ 1440.684967][T18269] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1440.707785][T13327] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 1440.947996][T13327] usb 1-1: Using ep0 maxpacket: 32 [ 1441.047817][ T316] usbhid 3-1:0.0: can't add hid device: -71 [ 1441.053637][ T316] usbhid: probe of 3-1:0.0 failed with error -71 [ 1441.060971][ T316] usb 3-1: USB disconnect, device number 105 [ 1441.067818][T13327] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1441.078966][T13327] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1441.088623][T13327] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1441.316986][T13327] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1441.326119][T13327] usb 1-1: config 0 descriptor?? [ 1441.362290][T12534] EXT4-fs (loop3): unmounting filesystem. [ 1441.368460][T13327] hub 1-1:0.0: USB hub found [ 1441.381527][T18278] loop3: detected capacity change from 0 to 16 [ 1441.388089][T18278] erofs: Unknown parameter '0xffffffffffffffff]#[8+KW䶓?҇98 7' [ 1441.606345][T18280] loop3: detected capacity change from 0 to 128 [ 1441.616067][T18280] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1441.627823][T13327] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 1441.635800][T18280] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1441.727795][T13327] usbhid 1-1:0.0: can't add hid device: -71 [ 1441.733712][T13327] usbhid: probe of 1-1:0.0 failed with error -71 [ 1441.777966][T13327] usb 1-1: USB disconnect, device number 74 [ 1441.877784][ T380] usbhid 2-1:0.0: can't add hid device: -71 [ 1441.883560][ T380] usbhid: probe of 2-1:0.0 failed with error -71 [ 1441.890616][ T380] usb 2-1: USB disconnect, device number 88 [ 1442.287945][ T380] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 1442.797747][ T9325] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 1442.827807][ T380] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1442.837530][ T380] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 1443.037877][ T380] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 1443.046961][ T380] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1443.054926][ T380] usb 2-1: Product: syz [ 1443.058925][ T380] usb 2-1: Manufacturer: syz [ 1443.063317][ T380] usb 2-1: SerialNumber: syz [ 1443.068648][ T380] usb 2-1: config 0 descriptor?? [ 1443.197831][ T9325] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1443.217814][ T9531] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 1443.350146][ T380] snd-usb-audio: probe of 2-1:0.0 failed with error -12 [ 1443.357588][ T380] usb 2-1: USB disconnect, device number 89 [ 1443.365868][ T320] udevd[320]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1443.387850][ T9325] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 1443.396885][ T9325] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1443.404733][ T9325] usb 4-1: Product: syz [ 1443.409336][ T9325] usb 4-1: Manufacturer: syz [ 1443.413756][ T9325] usb 4-1: SerialNumber: syz [ 1443.419244][ T9325] usb 4-1: config 0 descriptor?? [ 1443.467814][ T9531] usb 1-1: Using ep0 maxpacket: 32 [ 1443.634782][ T28] audit: type=1326 audit(1723884218.810:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18298 comm="syz.4.4373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e24779e79 code=0x7fc00000 [ 1443.689752][ T9325] snd-usb-audio: probe of 4-1:0.0 failed with error -2 [ 1443.703428][ T2155] udevd[2155]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1443.719743][ T9325] usb 4-1: USB disconnect, device number 106 [ 1443.797831][ T9531] usb 1-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 1443.806840][ T9531] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1443.814686][ T9531] usb 1-1: Product: syz [ 1443.818823][ T9531] usb 1-1: Manufacturer: syz [ 1443.823233][ T9531] usb 1-1: SerialNumber: syz [ 1443.838206][ T9531] usb 1-1: config 0 descriptor?? [ 1444.216960][T18302] loop4: detected capacity change from 0 to 131072 [ 1444.232125][T18302] F2FS-fs (loop4): Segment count (31) mismatch with total segments from devices (0) [ 1444.251497][T18302] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1444.266954][T18302] F2FS-fs (loop4): invalid crc value [ 1444.277286][T18312] loop3: detected capacity change from 0 to 512 [ 1444.297916][ T9325] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 1444.307238][T18312] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #16: comm syz.3.4376: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 3630(4), depth 0(0) [ 1444.325864][T18302] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1444.346543][T18312] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.4376: couldn't read orphan inode 16 (err -117) [ 1444.375138][T18312] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1444.389975][T18312] ext4 filesystem being mounted at /261/file1 supports timestamps until 2038 (0x7fffffff) [ 1444.400193][T18302] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1444.407087][T18302] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 1444.532448][T18320] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4376'. [ 1444.542473][T18320] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1444.592730][ T28] audit: type=1326 audit(1723884219.750:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18298 comm="syz.4.4373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9e24779e79 code=0x7fc00000 [ 1444.667819][ T9325] usb 3-1: Using ep0 maxpacket: 16 [ 1444.689833][ T9531] (unnamed net_device) (uninitialized): Assigned a random MAC address: 5a:45:96:49:df:31 [ 1444.701723][ T9531] rtl8150 1-1:0.0: eth1: rtl8150 is detected [ 1444.708231][ T9531] usb 1-1: USB disconnect, device number 75 [ 1444.773189][T18325] loop1: detected capacity change from 0 to 16 [ 1444.789925][T18325] erofs: Unknown parameter '0xffffffffffffffff]#[8+KW䶓?҇98 7' [ 1444.827860][ T9325] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1444.855207][ T9325] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1444.872163][ T9325] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1444.897185][ T9325] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1444.914426][ T9325] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1444.931665][ T9325] usb 3-1: config 0 descriptor?? [ 1445.080875][T18330] loop1: detected capacity change from 0 to 128 [ 1445.087494][T18330] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1445.100485][T18330] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1445.146568][T12534] EXT4-fs (loop3): unmounting filesystem. [ 1445.287787][T13588] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 1445.458981][T18338] overlayfs: failed to resolve './file2': -2 [ 1445.527780][ T316] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 1445.767766][ T316] usb 1-1: Using ep0 maxpacket: 32 [ 1445.777768][T13588] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1445.787771][T13588] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1445.796564][T13588] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1445.805452][T13588] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1445.814220][T13588] usb 5-1: config 0 descriptor?? [ 1445.917794][ T3292] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 1446.047790][ T316] usb 1-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 1446.056672][ T316] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1446.064555][ T316] usb 1-1: Product: syz [ 1446.068603][ T316] usb 1-1: Manufacturer: syz [ 1446.072973][ T316] usb 1-1: SerialNumber: syz [ 1446.085022][ T316] usb 1-1: config 0 descriptor?? [ 1446.098554][T18329] loop4: detected capacity change from 0 to 8192 [ 1446.138079][T18329] loop4: p1 < > p2 p3 p4 < p5 > [ 1446.143865][T18329] loop4: p3 size 16744448 extends beyond EOD, truncated [ 1446.154196][ T380] usb 5-1: USB disconnect, device number 96 [ 1446.159936][ T3292] usb 2-1: Using ep0 maxpacket: 32 [ 1446.277794][ T3292] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1446.288708][ T3292] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1446.298306][ T3292] usb 2-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 1446.307136][ T3292] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1446.315683][ T3292] usb 2-1: config 0 descriptor?? [ 1446.802350][ T3292] hid-rmi 0003:0461:4E72.0031: unknown main item tag 0x0 [ 1446.809398][ T3292] hid-rmi 0003:0461:4E72.0031: unknown main item tag 0x0 [ 1446.816261][ T3292] hid-rmi 0003:0461:4E72.0031: unknown main item tag 0x0 [ 1446.823286][ T3292] hid-rmi 0003:0461:4E72.0031: unknown main item tag 0x0 [ 1446.830725][ T3292] hid-rmi 0003:0461:4E72.0031: unknown main item tag 0x0 [ 1446.838275][ T3292] hid-rmi 0003:0461:4E72.0031: hidraw0: USB HID v0.00 Device [HID 0461:4e72] on usb-dummy_hcd.1-1/input0 [ 1447.084632][T14153] usb 2-1: USB disconnect, device number 90 [ 1447.267896][ T9325] usbhid 3-1:0.0: can't add hid device: -71 [ 1447.273730][ T9325] usbhid: probe of 3-1:0.0 failed with error -71 [ 1447.280679][ T9325] usb 3-1: USB disconnect, device number 106 [ 1447.347788][ T316] (unnamed net_device) (uninitialized): Assigned a random MAC address: 4e:50:dc:55:2c:64 [ 1447.359072][ T316] rtl8150 1-1:0.0: eth1: rtl8150 is detected [ 1447.367252][ T316] usb 1-1: USB disconnect, device number 76 [ 1447.373912][ T28] audit: type=1400 audit(1723884222.550:935): avc: denied { read } for pid=139 comm="dhcpcd" name="n22" dev="tmpfs" ino=50385 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1447.395501][ T28] audit: type=1400 audit(1723884222.550:936): avc: denied { open } for pid=139 comm="dhcpcd" path="/run/udev/data/n22" dev="tmpfs" ino=50385 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1447.421548][ T28] audit: type=1400 audit(1723884222.550:937): avc: denied { getattr } for pid=139 comm="dhcpcd" path="/run/udev/data/n22" dev="tmpfs" ino=50385 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1447.482840][ T28] audit: type=1400 audit(1723884222.660:938): avc: denied { create } for pid=18353 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1447.505349][ T28] audit: type=1400 audit(1723884222.660:939): avc: denied { write } for pid=18353 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth1.link" dev="tmpfs" ino=50389 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1447.532327][ T28] audit: type=1400 audit(1723884222.660:940): avc: denied { append } for pid=18353 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" dev="tmpfs" ino=50389 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1447.556909][ T28] audit: type=1400 audit(1723884222.680:941): avc: denied { unlink } for pid=18365 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=50389 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1447.797771][ T316] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 1447.907774][T13327] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 1447.915217][ T28] audit: type=1326 audit(1723884223.090:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18384 comm="syz.2.4387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c81579e79 code=0x7fc00000 [ 1448.177778][ T316] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1448.187342][ T316] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 1448.317882][T13327] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1448.328021][T13327] usb 2-1: config 0 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1448.338417][T18391] loop2: detected capacity change from 0 to 131072 [ 1448.339458][T13327] usb 2-1: config 0 interface 0 altsetting 129 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1448.355374][T13327] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1448.361974][T13327] usb 2-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 1448.362865][T18391] F2FS-fs (loop2): Segment count (31) mismatch with total segments from devices (0) [ 1448.371291][T13327] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1448.381415][T18391] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1448.401477][T13327] usb 2-1: config 0 descriptor?? [ 1448.409703][T18391] F2FS-fs (loop2): invalid crc value [ 1448.418620][T18391] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1448.447818][ T316] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 1448.461998][ T316] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1448.481616][ T316] usb 1-1: Product: syz [ 1448.490095][ T316] usb 1-1: Manufacturer: syz [ 1448.494550][ T316] usb 1-1: SerialNumber: syz [ 1448.503494][ T316] usb 1-1: config 0 descriptor?? [ 1448.521615][T18391] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1448.528911][T18391] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 1448.910926][ T316] snd-usb-audio: probe of 1-1:0.0 failed with error -12 [ 1448.924712][ T320] udevd[320]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1448.941032][ T316] usb 1-1: USB disconnect, device number 77 [ 1448.959435][T13327] zeroplus 0003:0C12:0005.0032: item fetching failed at offset 1/5 [ 1448.968846][T13327] zeroplus 0003:0C12:0005.0032: parse failed [ 1448.974694][T13327] zeroplus: probe of 0003:0C12:0005.0032 failed with error -22 [ 1448.989670][ T28] audit: type=1326 audit(1723884224.170:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18384 comm="syz.2.4387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4c81579e79 code=0x7fc00000 [ 1449.293662][T18409] loop2: detected capacity change from 0 to 512 [ 1449.309861][T18409] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #16: comm syz.2.4390: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 3630(4), depth 0(0) [ 1449.327627][T18409] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.4390: couldn't read orphan inode 16 (err -117) [ 1449.339526][T18409] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1449.348429][T18409] ext4 filesystem being mounted at /171/file1 supports timestamps until 2038 (0x7fffffff) [ 1449.417823][T13327] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 1449.459515][T18415] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4390'. [ 1449.470087][T18415] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1449.767788][ T316] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 1449.777883][T13327] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1449.787459][T13327] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 1449.947805][T13327] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 1449.956692][T13327] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1449.964558][T13327] usb 4-1: Product: syz [ 1449.968506][T13327] usb 4-1: Manufacturer: syz [ 1449.972898][T13327] usb 4-1: SerialNumber: syz [ 1449.978436][T13327] usb 4-1: config 0 descriptor?? [ 1450.127793][ T316] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1450.137856][ T316] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1450.168518][ T316] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1450.177468][ T316] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1450.178101][T15002] EXT4-fs (loop2): unmounting filesystem. [ 1450.189329][ T316] usb 1-1: config 0 descriptor?? [ 1450.205578][T18421] fuse: Unknown parameter 'user_i00000000000000000000' [ 1450.240752][T13327] snd-usb-audio: probe of 4-1:0.0 failed with error -12 [ 1450.249063][T13327] usb 4-1: USB disconnect, device number 107 [ 1450.257898][ T320] udevd[320]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1450.450680][T18416] loop0: detected capacity change from 0 to 8192 [ 1450.488106][T18416] loop0: p1 < > p2 p3 p4 < p5 > [ 1450.493889][T18416] loop0: p3 size 16744448 extends beyond EOD, truncated [ 1450.504097][T13327] usb 1-1: USB disconnect, device number 78 [ 1450.597829][ T9325] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 1450.657796][T14153] usb 2-1: USB disconnect, device number 91 [ 1451.047865][T14153] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 1451.087878][ T9325] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1451.097475][ T9325] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 1451.277988][ T9325] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 1451.286921][ T9325] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1451.295007][ T9325] usb 3-1: Product: syz [ 1451.299030][ T9325] usb 3-1: Manufacturer: syz [ 1451.303420][ T9325] usb 3-1: SerialNumber: syz [ 1451.307875][T14153] usb 2-1: Using ep0 maxpacket: 16 [ 1451.313393][ T9325] usb 3-1: config 0 descriptor?? [ 1451.427837][T14153] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1451.438687][T14153] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1451.448323][T14153] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1451.460891][T14153] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1451.469746][T14153] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1451.478050][T14153] usb 2-1: config 0 descriptor?? [ 1451.681999][ T9325] snd-usb-audio: probe of 3-1:0.0 failed with error -12 [ 1451.690314][ T9325] usb 3-1: USB disconnect, device number 107 [ 1451.855570][ T320] udevd[320]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1452.064755][T18450] overlayfs: failed to resolve './file2': -2 [ 1452.167429][ T380] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 1452.499786][ T28] audit: type=1326 audit(1723884227.680:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18439 comm="syz.3.4400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f61979e79 code=0x7fc00000 [ 1452.591577][ T380] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1452.602360][ T380] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1452.612060][ T380] usb 5-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 1452.620982][ T380] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1452.629765][ T380] usb 5-1: config 0 descriptor?? [ 1453.007790][ T9325] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 1453.467864][ T9325] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1453.478813][ T9325] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1453.488339][ T9531] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 1453.495790][ T9325] usb 4-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 1453.504654][ T9325] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1453.513226][ T9325] usb 4-1: config 0 descriptor?? [ 1453.692332][T18467] loop1: detected capacity change from 0 to 512 [ 1453.709892][T18467] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #16: comm syz.1.4404: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 3630(4), depth 0(0) [ 1453.727597][T18467] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.4404: couldn't read orphan inode 16 (err -117) [ 1453.739943][T18467] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1453.749076][T18467] ext4 filesystem being mounted at /164/file1 supports timestamps until 2038 (0x7fffffff) [ 1453.827837][T14153] usbhid 2-1:0.0: can't add hid device: -71 [ 1453.833664][T14153] usbhid: probe of 2-1:0.0 failed with error -71 [ 1453.841369][T14153] usb 2-1: USB disconnect, device number 92 [ 1453.870207][T18471] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4404'. [ 1453.880632][T18471] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1453.888030][ T9531] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1453.900656][ T9531] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1453.910688][ T9531] usb 3-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 1453.919819][ T9531] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1453.931755][ T9531] usb 3-1: config 0 descriptor?? [ 1454.551511][T15188] EXT4-fs (loop1): unmounting filesystem. [ 1454.718560][ T380] usbhid 5-1:0.0: can't add hid device: -71 [ 1454.784540][ T380] usbhid: probe of 5-1:0.0 failed with error -71 [ 1454.869126][ T380] usb 5-1: USB disconnect, device number 97 [ 1455.237790][T14153] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 1455.357760][ T380] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 1455.517793][T14153] usb 1-1: Using ep0 maxpacket: 32 [ 1455.887903][ T9325] usbhid 4-1:0.0: can't add hid device: -71 [ 1455.893812][ T9325] usbhid: probe of 4-1:0.0 failed with error -71 [ 1455.901000][ T9325] usb 4-1: USB disconnect, device number 108 [ 1455.907901][T14153] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1455.918869][T14153] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1455.928979][T14153] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1455.937946][T14153] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1455.946386][T14153] usb 1-1: config 0 descriptor?? [ 1455.988346][T14153] hub 1-1:0.0: USB hub found [ 1456.007830][ T380] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1456.018596][ T380] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1456.028207][ T380] usb 5-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 1456.037081][ T380] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1456.045785][ T380] usb 5-1: config 0 descriptor?? [ 1456.157852][ T9531] usbhid 3-1:0.0: can't add hid device: -71 [ 1456.163657][ T9531] usbhid: probe of 3-1:0.0 failed with error -71 [ 1456.172510][ T9531] usb 3-1: USB disconnect, device number 108 [ 1456.197830][T14153] hub 1-1:0.0: 1 port detected [ 1456.287781][ T9325] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 1456.407841][T14153] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 1456.414003][T14153] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 1456.508916][ T380] logitech-djreceiver 0003:046D:C71B.0033: item fetching failed at offset 5/7 [ 1456.517779][T14153] usbhid 1-1:0.0: can't add hid device: -71 [ 1456.523559][T14153] usbhid: probe of 1-1:0.0 failed with error -71 [ 1456.529902][ T380] logitech-djreceiver 0003:046D:C71B.0033: logi_dj_probe: parse failed [ 1456.538597][ T380] logitech-djreceiver: probe of 0003:046D:C71B.0033 failed with error -22 [ 1456.578046][T14153] usb 1-1: USB disconnect, device number 79 [ 1456.657869][ T9325] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1456.667539][ T9325] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 1456.709720][ T316] usb 5-1: USB disconnect, device number 98 [ 1456.837811][ T9325] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 1456.846738][ T9325] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1456.854549][ T9325] usb 4-1: Product: syz [ 1456.858529][ T9325] usb 4-1: Manufacturer: syz [ 1456.862883][ T9325] usb 4-1: SerialNumber: syz [ 1456.868189][ T9325] usb 4-1: config 0 descriptor?? [ 1456.887802][ T3292] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 1457.110194][T18491] all: renamed from ip6erspan0 [ 1457.115447][T18491] A link change request failed with some changes committed already. Interface ip6erspan0 may have been left with an inconsistent configuration, please check. [ 1457.140172][ T9325] snd-usb-audio: probe of 4-1:0.0 failed with error -12 [ 1457.147898][ T9325] usb 4-1: USB disconnect, device number 109 [ 1457.154841][ T320] udevd[320]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1457.177823][ T316] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 1457.247800][ T3292] usb 3-1: config index 0 descriptor too short (expected 10770, got 27) [ 1457.256146][ T3292] usb 3-1: config 48 has too many interfaces: 93, using maximum allowed: 32 [ 1457.264901][ T3292] usb 3-1: config 48 has an invalid descriptor of length 235, skipping remainder of the config [ 1457.275637][ T3292] usb 3-1: config 48 has 0 interfaces, different from the descriptor's value: 93 [ 1457.438000][ T3292] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 1457.446899][ T3292] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1457.454974][ T3292] usb 3-1: Product: syz [ 1457.459215][ T3292] usb 3-1: Manufacturer: syz [ 1457.463640][ T3292] usb 3-1: SerialNumber: syz [ 1457.537798][ T316] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1457.547304][ T316] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 1457.707852][ T316] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 1457.716813][ T316] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1457.724613][ T316] usb 1-1: Product: syz [ 1457.728595][ T316] usb 1-1: Manufacturer: syz [ 1457.733049][ T316] usb 1-1: SerialNumber: syz [ 1457.738395][ T316] usb 1-1: config 0 descriptor?? [ 1457.788305][ T3292] usb 3-1: USB disconnect, device number 109 [ 1457.917798][T14153] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 1458.039991][ T316] snd-usb-audio: probe of 1-1:0.0 failed with error -12 [ 1458.047556][ T316] usb 1-1: USB disconnect, device number 80 [ 1458.055354][ T320] udevd[320]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1458.099242][T18507] loop4: detected capacity change from 0 to 512 [ 1458.110206][T18507] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #16: comm syz.4.4415: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 3630(4), depth 0(0) [ 1458.128751][T18507] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.4415: couldn't read orphan inode 16 (err -117) [ 1458.140761][T18507] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1458.149866][T18507] ext4 filesystem being mounted at /287/file1 supports timestamps until 2038 (0x7fffffff) [ 1458.209880][T14153] usb 4-1: Using ep0 maxpacket: 16 [ 1458.360822][T18513] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4415'. [ 1458.376355][T18513] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1458.607677][T14153] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1458.668239][T18515] loop1: detected capacity change from 0 to 512 [ 1458.690077][T18515] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #16: comm syz.1.4417: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 3630(4), depth 0(0) [ 1458.708237][T18515] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.4417: couldn't read orphan inode 16 (err -117) [ 1458.725428][T14153] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1458.736441][T18515] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1458.748140][T18515] ext4 filesystem being mounted at /167/file1 supports timestamps until 2038 (0x7fffffff) [ 1458.773368][T14153] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1459.336308][T18522] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4417'. [ 1459.340756][T14153] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1459.347287][T18522] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1459.354521][T14153] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1459.405301][T12535] EXT4-fs (loop4): unmounting filesystem. [ 1459.429574][T14153] usb 4-1: config 0 descriptor?? [ 1459.644535][T18532] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4419'. [ 1459.680044][T18532] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1460.072883][T15188] EXT4-fs (loop1): unmounting filesystem. [ 1460.078207][T18504] overlayfs: failed to resolve './file2': -2 [ 1460.198169][T14153] usbhid 4-1:0.0: can't add hid device: -71 [ 1460.204586][T14153] usbhid: probe of 4-1:0.0 failed with error -71 [ 1460.215673][T14153] usb 4-1: USB disconnect, device number 110 [ 1460.732620][ T28] audit: type=1326 audit(1723884235.910:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18527 comm="syz.4.4418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e24779e79 code=0x7fc00000 [ 1460.869634][ T28] audit: type=1326 audit(1723884236.050:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18527 comm="syz.4.4418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9e24779e79 code=0x7fc00000 [ 1461.555843][ T28] audit: type=1326 audit(1723884236.070:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18527 comm="syz.4.4418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e24779e79 code=0x7fc00000 [ 1461.580327][ T28] audit: type=1326 audit(1723884236.070:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18527 comm="syz.4.4418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e24779e79 code=0x7fc00000 [ 1461.610094][ T28] audit: type=1326 audit(1723884236.070:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18527 comm="syz.4.4418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e24779e79 code=0x7fc00000 [ 1461.633873][ T28] audit: type=1326 audit(1723884236.070:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18527 comm="syz.4.4418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e24779e79 code=0x7fc00000 [ 1461.657443][ T28] audit: type=1326 audit(1723884236.070:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18527 comm="syz.4.4418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e24779e79 code=0x7fc00000 [ 1461.707435][ T28] audit: type=1326 audit(1723884236.070:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18527 comm="syz.4.4418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e24779e79 code=0x7fc00000 [ 1461.730947][T18552] loop2: detected capacity change from 0 to 16 [ 1461.732590][ T28] audit: type=1326 audit(1723884236.070:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18527 comm="syz.4.4418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e24779e79 code=0x7fc00000 [ 1461.768000][ T28] audit: type=1326 audit(1723884236.070:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18527 comm="syz.4.4418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e24779e79 code=0x7fc00000 [ 1461.873433][T18552] erofs: Unknown parameter '' [ 1462.339846][ T3292] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 1462.697814][ T3292] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1462.707342][ T3292] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 1462.737769][T13327] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 1462.797796][ T316] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 1462.867807][T13588] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 1462.875346][ T3292] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 1462.884209][ T3292] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1462.891986][ T3292] usb 4-1: Product: syz [ 1462.896050][ T3292] usb 4-1: Manufacturer: syz [ 1462.900455][ T3292] usb 4-1: SerialNumber: syz [ 1462.905808][ T3292] usb 4-1: config 0 descriptor?? [ 1463.097837][T13327] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1463.107949][T13327] usb 2-1: config 0 has no interfaces? [ 1463.157882][ T316] usb 5-1: config index 0 descriptor too short (expected 10770, got 27) [ 1463.166042][ T316] usb 5-1: config 48 has too many interfaces: 93, using maximum allowed: 32 [ 1463.175241][ T316] usb 5-1: config 48 has an invalid descriptor of length 235, skipping remainder of the config [ 1463.185837][ T316] usb 5-1: config 48 has 0 interfaces, different from the descriptor's value: 93 [ 1463.195274][T13327] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1463.204545][T13327] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1463.213161][ T3292] snd-usb-audio: probe of 4-1:0.0 failed with error -12 [ 1463.220637][ T3292] usb 4-1: USB disconnect, device number 111 [ 1463.226538][T13327] usb 2-1: Manufacturer: syz [ 1463.230997][T13588] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1463.241464][T13588] usb 1-1: config 0 has no interfaces? [ 1463.242051][ T320] udevd[320]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1463.248079][T13327] usb 2-1: config 0 descriptor?? [ 1463.317829][T13588] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1463.326857][T13588] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1463.334749][T13588] usb 1-1: Manufacturer: syz [ 1463.339953][T13588] usb 1-1: config 0 descriptor?? [ 1463.377843][ T316] usb 5-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 1463.386724][ T316] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1463.395254][ T316] usb 5-1: Product: syz [ 1463.399365][ T316] usb 5-1: Manufacturer: syz [ 1463.403779][ T316] usb 5-1: SerialNumber: syz [ 1463.505639][ T3292] usb 2-1: USB disconnect, device number 93 [ 1463.579569][T18572] loop0: detected capacity change from 0 to 16 [ 1463.585817][T18572] erofs: Unknown parameter '' [ 1463.592451][T13588] usb 1-1: USB disconnect, device number 81 [ 1463.688325][ T316] usb 5-1: USB disconnect, device number 99 [ 1464.607985][ T1165] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 1465.031398][ T1165] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1465.041776][ T1165] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1465.057897][ T1165] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1465.072077][ T1165] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1465.085660][ T1165] usb 5-1: config 0 descriptor?? [ 1465.410247][T18599] loop0: detected capacity change from 0 to 16 [ 1465.420525][T18599] erofs: (device loop0): erofs_read_inode: unsupported chunk format 7fff of nid 36 [ 1465.547757][T14153] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 1465.640240][T18585] loop4: detected capacity change from 0 to 8192 [ 1465.678057][T18585] loop4: p1 < > p2 p3 p4 < p5 > [ 1465.683715][T18585] loop4: p3 size 16744448 extends beyond EOD, truncated [ 1465.694715][ T9325] usb 5-1: USB disconnect, device number 100 [ 1465.747826][T13588] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 1465.807848][ T316] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 1465.937855][T14153] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1465.948649][T14153] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1465.958341][T14153] usb 2-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 1465.967205][T14153] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1465.975888][T14153] usb 2-1: config 0 descriptor?? [ 1466.107871][T13588] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1466.117451][T13588] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 1466.167815][ T316] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1466.178661][ T316] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1466.188449][ T316] usb 3-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 1466.197265][ T316] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1466.209872][ T316] usb 3-1: config 0 descriptor?? [ 1466.277817][T13588] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 1466.286852][T13588] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1466.294684][T13588] usb 1-1: Product: syz [ 1466.298657][T13588] usb 1-1: Manufacturer: syz [ 1466.303028][T13588] usb 1-1: SerialNumber: syz [ 1466.308965][T13588] usb 1-1: config 0 descriptor?? [ 1466.610944][T13588] snd-usb-audio: probe of 1-1:0.0 failed with error -12 [ 1466.618723][T13588] usb 1-1: USB disconnect, device number 82 [ 1466.625202][ T320] udevd[320]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1467.277625][ T9325] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 1467.687853][ T9325] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1467.698860][ T9325] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1467.708477][ T9325] usb 5-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 1467.717296][ T9325] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1467.726184][ T9325] usb 5-1: config 0 descriptor?? [ 1467.947786][ T9531] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 1468.067799][T14153] usbhid 2-1:0.0: can't add hid device: -71 [ 1468.073992][T14153] usbhid: probe of 2-1:0.0 failed with error -71 [ 1468.091566][T14153] usb 2-1: USB disconnect, device number 94 [ 1468.167798][ T316] usbhid 3-1:0.0: can't add hid device: -71 [ 1468.173642][ T316] usbhid: probe of 3-1:0.0 failed with error -71 [ 1468.182177][ T316] usb 3-1: USB disconnect, device number 110 [ 1468.358067][ T9531] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1468.375272][ T28] kauditd_printk_skb: 59 callbacks suppressed [ 1468.375295][ T28] audit: type=1326 audit(1723884243.550:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18627 comm="syz.0.4446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2552f79e79 code=0x7fc00000 [ 1468.431195][ T9531] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1468.445359][ T9531] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1468.454891][ T9531] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1468.467256][ T9531] usb 4-1: config 0 descriptor?? [ 1468.518008][T14153] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 1468.756740][T18622] loop3: detected capacity change from 0 to 8192 [ 1468.808038][T18622] loop3: p1 < > p2 p3 p4 < p5 > [ 1468.814894][T18622] loop3: p3 size 16744448 extends beyond EOD, truncated [ 1468.851647][ T101] loop3: p1 < > p2 p3 p4 < p5 > [ 1468.857660][ T101] loop3: p3 size 16744448 extends beyond EOD, truncated [ 1468.864810][T18632] loop0: detected capacity change from 0 to 131072 [ 1468.873569][ T9531] usb 4-1: USB disconnect, device number 112 [ 1468.874963][T18632] F2FS-fs (loop0): Segment count (31) mismatch with total segments from devices (0) [ 1468.888924][T18632] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1468.899229][T18632] F2FS-fs (loop0): invalid crc value [ 1468.917826][T14153] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1468.931522][T14153] usb 2-1: config 0 has no interfaces? [ 1468.933610][T18632] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1468.970435][T18632] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 1468.977373][T18632] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 1469.017929][T14153] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1469.026903][T14153] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1469.034861][T14153] usb 2-1: Manufacturer: syz [ 1469.040272][T14153] usb 2-1: config 0 descriptor?? [ 1469.158820][ T28] audit: type=1326 audit(1723884244.340:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18627 comm="syz.0.4446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2552f79e79 code=0x7fc00000 [ 1469.291089][T18625] loop1: detected capacity change from 0 to 16 [ 1469.310866][T18625] erofs: (device loop1): erofs_read_inode: unsupported chunk format 7fff of nid 36 [ 1469.349538][T18642] loop0: detected capacity change from 0 to 16 [ 1469.355770][T18642] erofs: Unknown parameter '0xffffffffffffffff]#[8+KW䶓?҇98 7' [ 1469.379988][ T8225] usb 2-1: USB disconnect, device number 95 [ 1469.452248][T18644] loop3: detected capacity change from 0 to 512 [ 1469.470082][T18644] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #16: comm syz.3.4449: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 3630(4), depth 0(0) [ 1469.487841][T18644] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.4449: couldn't read orphan inode 16 (err -117) [ 1469.499792][T18644] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1469.509620][T18644] ext4 filesystem being mounted at /274/file1 supports timestamps until 2038 (0x7fffffff) [ 1469.593734][T18650] loop0: detected capacity change from 0 to 128 [ 1469.600420][T18650] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1469.613072][T18650] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1469.714884][T18651] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4449'. [ 1469.730839][T18651] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1470.127807][ T9325] usbhid 5-1:0.0: can't add hid device: -71 [ 1470.133683][ T9325] usbhid: probe of 5-1:0.0 failed with error -71 [ 1470.142357][ T9325] usb 5-1: USB disconnect, device number 101 [ 1470.310358][T12534] EXT4-fs (loop3): unmounting filesystem. [ 1470.617828][ T9325] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 1470.670376][T18671] loop1: detected capacity change from 0 to 512 [ 1470.680481][T18671] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #16: comm syz.1.4455: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 3630(4), depth 0(0) [ 1470.698387][T18671] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.4455: couldn't read orphan inode 16 (err -117) [ 1470.710756][T18671] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1470.719767][T18671] ext4 filesystem being mounted at /175/file1 supports timestamps until 2038 (0x7fffffff) [ 1470.767749][ T316] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 1470.890532][T18676] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4455'. [ 1470.904750][T18676] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1471.007981][ T9325] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1471.018881][ T9325] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1471.028996][ T9325] usb 5-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 1471.037968][ T9325] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1471.046629][ T9325] usb 5-1: config 0 descriptor?? [ 1471.127874][ T316] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1471.138761][ T316] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1471.148503][ T316] usb 1-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 1471.157551][ T316] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1471.168978][ T316] usb 1-1: config 0 descriptor?? [ 1471.529935][T15188] EXT4-fs (loop1): unmounting filesystem. [ 1471.688828][ T316] logitech-djreceiver 0003:046D:C71B.0034: item fetching failed at offset 5/7 [ 1471.700779][ T9325] logitech-djreceiver 0003:046D:C71B.0035: item fetching failed at offset 5/7 [ 1471.702654][ T316] logitech-djreceiver 0003:046D:C71B.0034: logi_dj_probe: parse failed [ 1471.712824][ T9325] logitech-djreceiver 0003:046D:C71B.0035: logi_dj_probe: parse failed [ 1471.718013][ T316] logitech-djreceiver: probe of 0003:046D:C71B.0034 failed with error -22 [ 1471.734920][ T9325] logitech-djreceiver: probe of 0003:046D:C71B.0035 failed with error -22 [ 1471.936299][ T9325] usb 1-1: USB disconnect, device number 83 [ 1471.996257][ T9531] usb 5-1: USB disconnect, device number 102 [ 1472.010406][ T316] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 1472.287762][T13588] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 1472.377854][ T316] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1472.388649][ T316] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1472.398249][ T316] usb 2-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 1472.407083][ T316] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1472.415621][ T316] usb 2-1: config 0 descriptor?? [ 1472.527835][T13588] usb 3-1: Using ep0 maxpacket: 32 [ 1472.647808][T13588] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1472.658653][T13588] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1472.668237][T13588] usb 3-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 1472.677080][T13588] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1472.685605][T13588] usb 3-1: config 0 descriptor?? [ 1472.767777][ T8225] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 1472.787748][ T9531] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 1473.127839][ T8225] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1473.137992][ T8225] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1473.147097][ T8225] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1473.158539][ T8225] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1473.167165][ T8225] usb 1-1: config 0 descriptor?? [ 1473.169867][ T9531] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1473.181905][ T9531] usb 5-1: config 0 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1473.192866][ T9531] usb 5-1: config 0 interface 0 altsetting 129 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1473.202617][ T9531] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1473.209345][ T9531] usb 5-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 1473.218240][ T9531] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1473.226508][ T9531] usb 5-1: config 0 descriptor?? [ 1473.227781][T13588] usbhid 3-1:0.0: can't add hid device: -71 [ 1473.237174][T13588] usbhid: probe of 3-1:0.0 failed with error -71 [ 1473.244035][T13588] usb 3-1: USB disconnect, device number 111 [ 1473.432153][T18693] loop0: detected capacity change from 0 to 8192 [ 1473.488025][T18693] loop0: p1 < > p2 p3 p4 < p5 > [ 1473.493966][T18693] loop0: p3 size 16744448 extends beyond EOD, truncated [ 1473.504529][ T9325] usb 1-1: USB disconnect, device number 84 [ 1473.657790][T14153] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 1473.673857][T18700] loop2: detected capacity change from 0 to 16 [ 1473.680944][T18700] erofs: Unknown parameter '0xffffffffffffffff]#[8+KW䶓?҇98 7' [ 1473.718879][ T9531] zeroplus 0003:0C12:0005.0036: item fetching failed at offset 1/5 [ 1473.726886][ T9531] zeroplus 0003:0C12:0005.0036: parse failed [ 1473.746904][ T9531] zeroplus: probe of 0003:0C12:0005.0036 failed with error -22 [ 1473.902085][T18702] loop2: detected capacity change from 0 to 128 [ 1473.908685][T18702] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1473.920900][T18702] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1474.077844][T14153] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1474.088929][T14153] usb 4-1: config 0 has no interfaces? [ 1474.187871][T14153] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1474.196811][T14153] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1474.204683][T14153] usb 4-1: Manufacturer: syz [ 1474.213198][T14153] usb 4-1: config 0 descriptor?? [ 1474.540130][T18698] loop3: detected capacity change from 0 to 16 [ 1474.548527][T18698] erofs: (device loop3): erofs_read_inode: unsupported chunk format 7fff of nid 36 [ 1474.568707][T13588] usb 4-1: USB disconnect, device number 113 [ 1474.657802][ T316] usbhid 2-1:0.0: can't add hid device: -71 [ 1474.663705][ T316] usbhid: probe of 2-1:0.0 failed with error -71 [ 1474.670966][ T316] usb 2-1: USB disconnect, device number 96 [ 1474.957837][T18716] loop0: detected capacity change from 0 to 16 [ 1474.964087][T18716] erofs: Unknown parameter '0xffffffffffffffff]#[8+KW䶓?҇98 7' [ 1475.157127][T18723] loop3: detected capacity change from 0 to 512 [ 1475.186909][T18723] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #16: comm syz.3.4469: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 3630(4), depth 0(0) [ 1475.355063][T18723] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.4469: couldn't read orphan inode 16 (err -117) [ 1475.419126][T18723] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1475.441302][T18723] ext4 filesystem being mounted at /278/file1 supports timestamps until 2038 (0x7fffffff) [ 1475.536781][ T9325] usb 5-1: USB disconnect, device number 103 [ 1475.542948][T14153] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 1475.696584][T18734] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4469'. [ 1475.710983][T18734] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1475.968051][T14153] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1475.979297][T14153] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1476.025092][T14153] usb 3-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 1476.046162][T14153] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1476.089936][T14153] usb 3-1: config 0 descriptor?? [ 1476.098062][ T9325] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 1476.219560][T12534] EXT4-fs (loop3): unmounting filesystem. [ 1476.389306][ T28] audit: type=1326 audit(1723884251.570:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18740 comm="syz.3.4472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f61979e79 code=0x7fc00000 [ 1476.537809][ T9325] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1476.548711][ T9325] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1476.558330][ T9325] usb 5-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 1476.567125][ T9325] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1476.579080][ T9325] usb 5-1: config 0 descriptor?? [ 1476.794431][T18743] loop3: detected capacity change from 0 to 131072 [ 1476.801300][T18743] F2FS-fs (loop3): Segment count (31) mismatch with total segments from devices (0) [ 1476.810889][T18743] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1476.820152][T18743] F2FS-fs (loop3): invalid crc value [ 1476.827164][T18743] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1476.859190][T18743] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1476.866053][T18743] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 1477.048868][ T9325] logitech-djreceiver 0003:046D:C71B.0037: item fetching failed at offset 5/7 [ 1477.057810][ T9325] logitech-djreceiver 0003:046D:C71B.0037: logi_dj_probe: parse failed [ 1477.065946][ T9325] logitech-djreceiver: probe of 0003:046D:C71B.0037 failed with error -22 [ 1477.067625][ T28] audit: type=1326 audit(1723884252.240:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18740 comm="syz.3.4472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2f61979e79 code=0x7fc00000 [ 1477.097634][ T28] audit: type=1326 audit(1723884252.250:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18740 comm="syz.3.4472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f61979e79 code=0x7fc00000 [ 1477.121540][ T28] audit: type=1326 audit(1723884252.250:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18740 comm="syz.3.4472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f61979e79 code=0x7fc00000 [ 1477.145056][ T28] audit: type=1326 audit(1723884252.250:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18740 comm="syz.3.4472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f61979e79 code=0x7fc00000 [ 1477.168405][ T28] audit: type=1326 audit(1723884252.250:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18740 comm="syz.3.4472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f61979e79 code=0x7fc00000 [ 1477.191655][ T28] audit: type=1326 audit(1723884252.250:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18740 comm="syz.3.4472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f61979e79 code=0x7fc00000 [ 1477.215200][ T28] audit: type=1326 audit(1723884252.250:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18740 comm="syz.3.4472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f61979e79 code=0x7fc00000 [ 1477.238909][ T28] audit: type=1326 audit(1723884252.250:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18740 comm="syz.3.4472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f61979e79 code=0x7fc00000 [ 1477.262532][ T28] audit: type=1326 audit(1723884252.250:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18740 comm="syz.3.4472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f61979e79 code=0x7fc00000 [ 1477.321949][T13588] usb 5-1: USB disconnect, device number 104 [ 1477.491511][T18751] loop3: detected capacity change from 0 to 512 [ 1477.509347][T18751] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #16: comm syz.3.4473: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 3630(4), depth 0(0) [ 1477.527120][T18751] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.4473: couldn't read orphan inode 16 (err -117) [ 1477.539189][T18751] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1477.548102][T18751] ext4 filesystem being mounted at /280/file1 supports timestamps until 2038 (0x7fffffff) [ 1477.690086][T18756] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4473'. [ 1477.700589][T18756] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1477.967751][T13588] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 1478.112570][ T316] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 1478.207958][T14153] usbhid 3-1:0.0: can't add hid device: -71 [ 1478.213741][T14153] usbhid: probe of 3-1:0.0 failed with error -71 [ 1478.220684][T14153] usb 3-1: USB disconnect, device number 112 [ 1478.355356][T12534] EXT4-fs (loop3): unmounting filesystem. [ 1478.361134][T13588] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1478.371386][T13588] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1478.380985][T13588] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1478.391829][T13588] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1478.401233][T13588] usb 2-1: config 0 descriptor?? [ 1478.497795][ T316] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1478.507816][ T316] usb 5-1: config 0 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1478.518745][ T316] usb 5-1: config 0 interface 0 altsetting 129 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1478.528448][ T316] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1478.534950][ T316] usb 5-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 1478.543806][ T316] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1478.558519][ T316] usb 5-1: config 0 descriptor?? [ 1478.673405][T18757] loop1: detected capacity change from 0 to 8192 [ 1478.687772][T14153] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 1478.728041][T18757] loop1: p1 < > p2 p3 p4 < p5 > [ 1478.734110][T18757] loop1: p3 size 16744448 extends beyond EOD, truncated [ 1478.772069][ T101] loop1: p1 < > p2 p3 p4 < p5 > [ 1478.778720][ T101] loop1: p3 size 16744448 extends beyond EOD, truncated [ 1478.788921][ T9531] usb 2-1: USB disconnect, device number 97 [ 1479.038587][ T316] zeroplus 0003:0C12:0005.0038: item fetching failed at offset 1/5 [ 1479.046636][ T316] zeroplus 0003:0C12:0005.0038: parse failed [ 1479.052465][ T316] zeroplus: probe of 0003:0C12:0005.0038 failed with error -22 [ 1479.067868][T14153] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1479.078842][T14153] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1479.088479][T14153] usb 3-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 1479.097503][T14153] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1479.106096][T14153] usb 3-1: config 0 descriptor?? [ 1479.241764][ T9531] usb 5-1: USB disconnect, device number 105 [ 1480.185354][ T9325] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 1480.607776][ T9325] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1480.617874][ T9325] usb 4-1: config 0 has no interfaces? [ 1480.657722][T13588] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 1480.697828][ T9325] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1480.706876][ T9325] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1480.714831][ T9325] usb 4-1: Manufacturer: syz [ 1480.723770][ T9325] usb 4-1: config 0 descriptor?? [ 1480.897728][T13588] usb 1-1: Using ep0 maxpacket: 16 [ 1480.977343][T18788] loop4: detected capacity change from 0 to 131072 [ 1480.984240][T18788] F2FS-fs (loop4): Segment count (31) mismatch with total segments from devices (0) [ 1480.990105][T18773] loop3: detected capacity change from 0 to 16 [ 1480.993610][T18788] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1481.007929][T18773] erofs: (device loop3): erofs_read_inode: unsupported chunk format 7fff of nid 36 [ 1481.009382][T18788] F2FS-fs (loop4): invalid crc value [ 1481.022313][T13588] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1481.033450][T13588] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1481.037526][T18788] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1481.043044][T13588] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1481.062004][T13588] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1481.079721][T13588] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1481.088413][ T316] usb 4-1: USB disconnect, device number 114 [ 1481.094658][T18788] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1481.098992][T13588] usb 1-1: config 0 descriptor?? [ 1481.101966][T18788] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 1481.268224][T14153] usbhid 3-1:0.0: can't add hid device: -71 [ 1481.303739][T14153] usbhid: probe of 3-1:0.0 failed with error -71 [ 1481.382975][T14153] usb 3-1: USB disconnect, device number 113 [ 1481.398120][ T28] kauditd_printk_skb: 624 callbacks suppressed [ 1481.398146][ T28] audit: type=1326 audit(1723884256.580:1650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18785 comm="syz.4.4483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e24779e79 code=0x7fc00000 [ 1481.495571][T18800] overlayfs: failed to resolve './file2': -2 [ 1481.530416][ T28] audit: type=1326 audit(1723884256.680:1651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18785 comm="syz.4.4483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e24779e79 code=0x7fc00000 [ 1481.554303][ T28] audit: type=1326 audit(1723884256.690:1652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18785 comm="syz.4.4483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e24779e79 code=0x7fc00000 [ 1481.583671][ T28] audit: type=1326 audit(1723884256.690:1653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18785 comm="syz.4.4483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e24779e79 code=0x7fc00000 [ 1481.610662][ T28] audit: type=1326 audit(1723884256.690:1654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18785 comm="syz.4.4483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e24779e79 code=0x7fc00000 [ 1481.634963][ T28] audit: type=1326 audit(1723884256.690:1655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18785 comm="syz.4.4483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e24779e79 code=0x7fc00000 [ 1481.660052][ T28] audit: type=1326 audit(1723884256.690:1656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18785 comm="syz.4.4483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e24779e79 code=0x7fc00000 [ 1481.686986][ T28] audit: type=1326 audit(1723884256.690:1657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18785 comm="syz.4.4483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e24779e79 code=0x7fc00000 [ 1481.712176][ T28] audit: type=1326 audit(1723884256.690:1658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18785 comm="syz.4.4483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e24779e79 code=0x7fc00000 [ 1481.740068][ T28] audit: type=1326 audit(1723884256.690:1659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18785 comm="syz.4.4483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e24779e79 code=0x7fc00000 [ 1482.197924][T14153] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 1482.577817][T14153] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1482.588717][T14153] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1482.598576][T14153] usb 4-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 1482.607495][T14153] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1482.619729][T14153] usb 4-1: config 0 descriptor?? [ 1483.015376][T18820] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1008 sclass=netlink_audit_socket pid=18820 comm=syz.4.4489 [ 1483.088897][T14153] logitech-djreceiver 0003:046D:C71B.0039: item fetching failed at offset 5/7 [ 1483.097840][T14153] logitech-djreceiver 0003:046D:C71B.0039: logi_dj_probe: parse failed [ 1483.105931][T14153] logitech-djreceiver: probe of 0003:046D:C71B.0039 failed with error -22 [ 1483.127774][ T380] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 1483.340781][ T316] usb 4-1: USB disconnect, device number 115 [ 1483.487809][T13588] usbhid 1-1:0.0: can't add hid device: -71 [ 1483.493627][T13588] usbhid: probe of 1-1:0.0 failed with error -71 [ 1483.501164][T13588] usb 1-1: USB disconnect, device number 85 [ 1483.508532][ T380] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1483.518191][ T380] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 1483.728161][ T380] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 1483.737652][ T380] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1483.768134][ T380] usb 2-1: Product: syz [ 1483.772393][ T380] usb 2-1: Manufacturer: syz [ 1483.777023][ T380] usb 2-1: SerialNumber: syz [ 1483.782337][ T380] usb 2-1: config 0 descriptor?? [ 1483.857752][T13588] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 1484.232737][ T380] snd-usb-audio: probe of 2-1:0.0 failed with error -12 [ 1484.242382][ T380] usb 2-1: USB disconnect, device number 98 [ 1484.244945][ T320] udevd[320]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1484.437746][T13588] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1484.447712][T13588] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1484.456480][T13588] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1484.465716][T13588] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1484.476031][T13588] usb 1-1: config 0 descriptor?? [ 1484.737934][ T316] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 1484.769964][T18823] loop0: detected capacity change from 0 to 8192 [ 1484.818014][T18823] loop0: p1 < > p2 p3 p4 < p5 > [ 1484.823696][T18823] loop0: p3 size 16744448 extends beyond EOD, truncated [ 1484.833321][ T380] usb 1-1: USB disconnect, device number 86 [ 1484.997755][T13588] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 1485.107788][ T316] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1485.126713][ T316] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1485.136796][ T316] usb 5-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 1485.146068][ T316] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1485.155151][ T316] usb 5-1: config 0 descriptor?? [ 1485.559376][T13588] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1485.569468][T13588] usb 4-1: config 0 has no interfaces? [ 1485.600663][T18848] loop1: detected capacity change from 0 to 131072 [ 1485.607462][T18848] F2FS-fs (loop1): Segment count (31) mismatch with total segments from devices (0) [ 1485.617412][T18848] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1485.626214][T18848] F2FS-fs (loop1): invalid crc value [ 1485.632977][T18848] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1485.647888][T13588] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1485.657043][T13588] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1485.665129][T13588] usb 4-1: Manufacturer: syz [ 1485.676343][T18848] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1485.683530][T13588] usb 4-1: config 0 descriptor?? [ 1485.688363][T18848] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 1485.860228][T18869] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1008 sclass=netlink_audit_socket pid=18869 comm=syz.0.4501 [ 1485.949414][T18840] loop3: detected capacity change from 0 to 16 [ 1485.972092][T18840] erofs: (device loop3): erofs_read_inode: unsupported chunk format 7fff of nid 36 [ 1486.041988][ T380] usb 4-1: USB disconnect, device number 116 [ 1486.662782][T18882] loop0: detected capacity change from 0 to 512 [ 1486.668994][T13588] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 1486.680077][T18882] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #16: comm syz.0.4505: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 3630(4), depth 0(0) [ 1486.697862][T18882] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz.0.4505: couldn't read orphan inode 16 (err -117) [ 1486.710094][T18882] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1486.718972][T18882] ext4 filesystem being mounted at /329/file1 supports timestamps until 2038 (0x7fffffff) [ 1486.896816][T18887] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4505'. [ 1486.913109][T18887] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1487.111375][ T380] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 1487.468045][ T380] usb 4-1: device descriptor read/64, error -71 [ 1487.649852][T12528] EXT4-fs (loop0): unmounting filesystem. [ 1487.707838][ T316] usbhid 5-1:0.0: can't add hid device: -71 [ 1487.713622][T13588] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1487.724380][ T316] usbhid: probe of 5-1:0.0 failed with error -71 [ 1487.731014][T13588] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1487.742292][ T316] usb 5-1: USB disconnect, device number 106 [ 1487.748958][T13588] usb 2-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 1487.758371][T13588] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1487.766876][T13588] usb 2-1: config 0 descriptor?? [ 1488.122081][ T380] usb 4-1: device descriptor read/64, error -71 [ 1488.239400][T18905] loop4: detected capacity change from 0 to 512 [ 1488.294440][T18905] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #16: comm syz.4.4511: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 3630(4), depth 0(0) [ 1488.328555][T18905] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.4511: couldn't read orphan inode 16 (err -117) [ 1488.342719][T18905] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1488.353312][T18905] ext4 filesystem being mounted at /305/file1 supports timestamps until 2038 (0x7fffffff) [ 1488.423809][T18905] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4511'. [ 1488.434452][T18905] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1488.481868][T13588] logitech-djreceiver 0003:046D:C71B.003A: item fetching failed at offset 5/7 [ 1488.490968][T13588] logitech-djreceiver 0003:046D:C71B.003A: logi_dj_probe: parse failed [ 1488.499143][T13588] logitech-djreceiver: probe of 0003:046D:C71B.003A failed with error -22 [ 1488.532709][ T380] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 1488.987518][ T380] usb 4-1: device descriptor read/64, error -71 [ 1489.099208][T12535] EXT4-fs (loop4): unmounting filesystem. [ 1489.269220][ T28] kauditd_printk_skb: 2268 callbacks suppressed [ 1489.269236][ T28] audit: type=1326 audit(1723884264.450:3928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18919 comm="syz.4.4513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e24779e79 code=0x7fc00000 [ 1489.407745][ T380] usb 4-1: device descriptor read/64, error -71 [ 1489.527839][ T380] usb usb4-port1: attempt power cycle [ 1489.628617][ T316] usb 2-1: USB disconnect, device number 99 [ 1489.734981][T18923] loop4: detected capacity change from 0 to 131072 [ 1489.741906][T18923] F2FS-fs (loop4): Segment count (31) mismatch with total segments from devices (0) [ 1489.747791][T13588] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 1489.751317][T18923] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1489.767460][T18923] F2FS-fs (loop4): invalid crc value [ 1489.774086][T18923] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1489.905157][T18923] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1489.922653][T18923] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 1490.007995][ T380] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 1490.169206][ T28] audit: type=1326 audit(1723884265.350:3929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18919 comm="syz.4.4513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9e24779e79 code=0x7fc00000 [ 1490.192646][ T28] audit: type=1326 audit(1723884265.350:3930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18919 comm="syz.4.4513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e24779e79 code=0x7fc00000 [ 1490.216181][ T28] audit: type=1326 audit(1723884265.350:3931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18919 comm="syz.4.4513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e24779e79 code=0x7fc00000 [ 1490.239783][ T28] audit: type=1326 audit(1723884265.350:3932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18919 comm="syz.4.4513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e24779e79 code=0x7fc00000 [ 1490.263187][ T28] audit: type=1326 audit(1723884265.350:3933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18919 comm="syz.4.4513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e24779e79 code=0x7fc00000 [ 1490.286561][ T28] audit: type=1326 audit(1723884265.350:3934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18919 comm="syz.4.4513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e24779e79 code=0x7fc00000 [ 1490.310695][ T28] audit: type=1326 audit(1723884265.350:3935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18919 comm="syz.4.4513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e24779e79 code=0x7fc00000 [ 1490.334321][ T380] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1490.334338][ T28] audit: type=1326 audit(1723884265.350:3936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18919 comm="syz.4.4513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e24779e79 code=0x7fc00000 [ 1490.344052][ T380] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 1490.367516][ T28] audit: type=1326 audit(1723884265.350:3937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18919 comm="syz.4.4513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e24779e79 code=0x7fc00000 [ 1490.437823][T13588] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1490.447956][T13588] usb 1-1: config 0 has no interfaces? [ 1490.548304][T13588] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1490.557265][T13588] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1490.565587][T13588] usb 1-1: Manufacturer: syz [ 1490.570822][T13588] usb 1-1: config 0 descriptor?? [ 1490.577799][ T380] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 1490.586741][ T380] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1490.594671][ T380] usb 4-1: Product: syz [ 1490.598843][ T380] usb 4-1: Manufacturer: syz [ 1490.615676][ T380] usb 4-1: SerialNumber: syz [ 1490.622811][ T380] usb 4-1: config 0 descriptor?? [ 1490.810149][T18925] loop0: detected capacity change from 0 to 16 [ 1490.817726][ T9325] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 1490.819881][T18925] erofs: (device loop0): erofs_read_inode: unsupported chunk format 7fff of nid 36 [ 1490.836121][T13588] usb 1-1: USB disconnect, device number 87 [ 1490.911012][ T380] snd-usb-audio: probe of 4-1:0.0 failed with error -12 [ 1490.919597][ T380] usb 4-1: USB disconnect, device number 119 [ 1490.929593][ T320] udevd[320]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1491.047763][ T9531] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 1491.217879][ T9325] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1491.227438][ T9325] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 1491.458139][ T9325] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 1491.477974][ T9531] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1491.489469][ T9325] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1491.516653][ T9531] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1491.579001][ T9325] usb 2-1: Product: syz [ 1491.591065][ T9325] usb 2-1: Manufacturer: syz [ 1491.596588][ T9531] usb 5-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 1491.649533][ T9325] usb 2-1: SerialNumber: syz [ 1491.654684][ T9531] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1491.662804][ T9325] usb 2-1: config 0 descriptor?? [ 1491.668218][ T9531] usb 5-1: config 0 descriptor?? [ 1491.877727][ T316] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 1491.948881][ T9325] snd-usb-audio: probe of 2-1:0.0 failed with error -12 [ 1491.958583][ T9325] usb 2-1: USB disconnect, device number 100 [ 1491.965339][ T320] udevd[320]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1492.127854][ T316] usb 4-1: Using ep0 maxpacket: 32 [ 1492.471745][ T316] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1492.483271][ T316] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1492.497927][ T316] usb 4-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 1492.507070][ T316] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1492.515910][ T316] usb 4-1: config 0 descriptor?? [ 1492.777850][ T9325] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 1492.837725][T13588] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 1493.008564][ T316] hid-rmi 0003:0461:4E72.003B: unknown main item tag 0x0 [ 1493.015491][ T316] hid-rmi 0003:0461:4E72.003B: unknown main item tag 0x0 [ 1493.022366][ T316] hid-rmi 0003:0461:4E72.003B: unknown main item tag 0x0 [ 1493.029226][ T316] hid-rmi 0003:0461:4E72.003B: unknown main item tag 0x0 [ 1493.036044][ T316] hid-rmi 0003:0461:4E72.003B: unknown main item tag 0x0 [ 1493.043541][ T316] hid-rmi 0003:0461:4E72.003B: hidraw0: USB HID v0.00 Device [HID 0461:4e72] on usb-dummy_hcd.3-1/input0 [ 1493.137802][ T9325] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1493.147353][ T9325] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 1493.157756][T13588] usb 1-1: device descriptor read/64, error -71 [ 1493.212102][ T316] usb 4-1: USB disconnect, device number 120 [ 1493.307832][ T9325] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 1493.316755][ T9325] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1493.324969][ T9325] usb 2-1: Product: syz [ 1493.328979][ T9325] usb 2-1: Manufacturer: syz [ 1493.333342][ T9325] usb 2-1: SerialNumber: syz [ 1493.338894][ T9325] usb 2-1: config 0 descriptor?? [ 1493.597756][T13588] usb 1-1: device descriptor read/64, error -71 [ 1493.707806][ T9531] usbhid 5-1:0.0: can't add hid device: -71 [ 1493.713629][ T9531] usbhid: probe of 5-1:0.0 failed with error -71 [ 1493.776297][ T9531] usb 5-1: USB disconnect, device number 107 [ 1494.041062][T13588] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 1494.157767][ T380] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 1494.177900][ T9531] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 1494.327755][T13588] usb 1-1: device descriptor read/64, error -71 [ 1494.517835][ T380] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1494.528598][ T380] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1494.538169][ T9531] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1494.548971][ T380] usb 4-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 1494.557820][ T9531] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1494.567436][ T380] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1494.575284][ T9531] usb 5-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 1494.584489][ T9531] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1494.592581][ T380] usb 4-1: config 0 descriptor?? [ 1494.598041][ T9531] usb 5-1: config 0 descriptor?? [ 1494.747760][T13588] usb 1-1: device descriptor read/64, error -71 [ 1494.867819][T13588] usb usb1-port1: attempt power cycle [ 1495.078817][ T9531] logitech-djreceiver 0003:046D:C71B.003C: item fetching failed at offset 5/7 [ 1495.087877][ T9531] logitech-djreceiver 0003:046D:C71B.003C: logi_dj_probe: parse failed [ 1495.095996][ T9531] logitech-djreceiver: probe of 0003:046D:C71B.003C failed with error -22 [ 1495.150075][T18978] loop2: detected capacity change from 0 to 16 [ 1495.156243][T18978] erofs: Unknown parameter '0xffffffffffffffff]#[8+KW䶓?҇98 7' [ 1495.307768][T13588] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 1495.326721][T18980] loop2: detected capacity change from 0 to 128 [ 1495.333563][T18980] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1495.346193][T18980] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1495.364275][ T9531] usb 5-1: USB disconnect, device number 108 [ 1495.477743][T13588] usb 1-1: device descriptor read/8, error -71 [ 1495.565081][ T9325] snd-usb-audio: probe of 2-1:0.0 failed with error -12 [ 1495.573169][ T9325] usb 2-1: USB disconnect, device number 101 [ 1495.585045][ T320] udevd[320]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1495.897786][T13588] usb 1-1: device descriptor read/8, error -71 [ 1496.587768][ T9325] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 1496.687744][T13588] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 1496.813522][T18998] loop3: detected capacity change from 0 to 16 [ 1496.820232][T18998] erofs: (device loop3): erofs_read_inode: unsupported chunk format 7fff of nid 36 [ 1496.857827][ T380] usbhid 4-1:0.0: can't add hid device: -71 [ 1496.864031][ T380] usbhid: probe of 4-1:0.0 failed with error -71 [ 1496.889218][ T380] usb 4-1: USB disconnect, device number 121 [ 1497.008057][ T9325] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1497.057621][ T9325] usb 3-1: config 0 has no interfaces? [ 1497.197820][ T9325] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1497.206775][ T9325] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1497.214780][ T9325] usb 3-1: Manufacturer: syz [ 1497.219292][T13588] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1497.228718][T13588] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 1497.233308][ T9325] usb 3-1: config 0 descriptor?? [ 1497.407813][T13588] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 1497.416711][T13588] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1497.424535][T13588] usb 1-1: Product: syz [ 1497.428495][T13588] usb 1-1: Manufacturer: syz [ 1497.432911][T13588] usb 1-1: SerialNumber: syz [ 1497.438021][T13588] usb 1-1: config 0 descriptor?? [ 1497.480186][T18993] loop2: detected capacity change from 0 to 16 [ 1497.486693][T18993] erofs: (device loop2): erofs_read_inode: unsupported chunk format 7fff of nid 36 [ 1497.517767][ T380] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 1497.538966][ T9325] usb 3-1: USB disconnect, device number 114 [ 1497.676577][ T28] kauditd_printk_skb: 59 callbacks suppressed [ 1497.676594][ T28] audit: type=1400 audit(1723884272.850:3997): avc: denied { listen } for pid=19013 comm="syz.4.4541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1497.702643][ T28] audit: type=1400 audit(1723884272.850:3998): avc: denied { accept } for pid=19013 comm="syz.4.4541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1497.724282][T13588] snd-usb-audio: probe of 1-1:0.0 failed with error -12 [ 1497.731854][T13588] usb 1-1: USB disconnect, device number 91 [ 1497.739440][ T320] udevd[320]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1497.877820][ T380] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1497.887376][ T380] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 1498.047814][ T380] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 1498.056788][ T380] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1498.064623][ T380] usb 4-1: Product: syz [ 1498.068868][ T380] usb 4-1: Manufacturer: syz [ 1498.073271][ T380] usb 4-1: SerialNumber: syz [ 1498.078731][ T380] usb 4-1: config 0 descriptor?? [ 1498.100621][T19017] xt_hashlimit: size too large, truncated to 1048576 [ 1498.227369][T19020] loop0: detected capacity change from 0 to 1024 [ 1498.234347][T19020] EXT4-fs: Ignoring removed orlov option [ 1498.241062][T19020] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1498.250004][T19020] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1498.281523][T12528] EXT4-fs (loop0): unmounting filesystem. [ 1498.340304][ T380] snd-usb-audio: probe of 4-1:0.0 failed with error -12 [ 1498.348429][ T380] usb 4-1: USB disconnect, device number 122 [ 1498.355045][ T320] udevd[320]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1498.556399][T19035] loop4: detected capacity change from 0 to 512 [ 1498.562557][ T9325] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 1498.590361][ T28] audit: type=1400 audit(1723884273.770:3999): avc: denied { ioctl } for pid=19036 comm="syz.1.4549" path="socket:[81052]" dev="sockfs" ino=81052 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1498.616007][T19035] EXT4-fs: dax option not supported [ 1498.700933][ T28] audit: type=1326 audit(1723884273.880:4000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19044 comm="syz.1.4553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f686a179e79 code=0x7ffc0000 [ 1498.730445][ T28] audit: type=1326 audit(1723884273.880:4001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19044 comm="syz.1.4553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f686a179e79 code=0x7ffc0000 [ 1498.849784][ T28] audit: type=1326 audit(1723884273.880:4002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19044 comm="syz.1.4553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f686a179e79 code=0x7ffc0000 [ 1499.070071][ T28] audit: type=1326 audit(1723884273.880:4003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19044 comm="syz.1.4553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7f686a179e79 code=0x7ffc0000 [ 1499.090681][T19053] loop3: detected capacity change from 0 to 128 [ 1499.099845][ T28] audit: type=1326 audit(1723884273.880:4004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19044 comm="syz.1.4553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f686a179e79 code=0x7ffc0000 [ 1499.124992][ T9325] usb 1-1: Using ep0 maxpacket: 16 [ 1499.135340][T19053] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000080) [ 1499.151405][T19053] FAT-fs (loop3): Filesystem has been set read-only [ 1499.247798][ T9325] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 1499.265918][ T9325] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1499.289399][ T9325] usb 1-1: config 0 has no interface number 0 [ 1499.306415][ T9325] usb 1-1: config 0 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1499.406277][T19054] loop1: detected capacity change from 0 to 40427 [ 1499.430758][T19054] F2FS-fs (loop1): invalid crc value [ 1499.438458][T19054] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1499.447832][ T9325] usb 1-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 1499.458368][ T9325] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1499.466764][ T9325] usb 1-1: Product: syz [ 1499.483754][ T9325] usb 1-1: SerialNumber: syz [ 1499.494450][ T9325] usb 1-1: config 0 descriptor?? [ 1499.514932][T19065] syz.2.4559[19065] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1499.515024][T19065] syz.2.4559[19065] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1499.557832][T19054] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1499.609217][T19063] loop3: detected capacity change from 0 to 2048 [ 1499.648477][T19063] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1499.666967][T19063] ext4 filesystem being mounted at /293/bus supports timestamps until 2038 (0x7fffffff) [ 1499.681184][T19074] loop2: detected capacity change from 0 to 512 [ 1499.737920][ T28] audit: type=1400 audit(1723884274.920:4005): avc: denied { read write } for pid=19055 comm="syz.3.4557" name="file0" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1499.772549][ T28] audit: type=1400 audit(1723884274.940:4006): avc: denied { open } for pid=19055 comm="syz.3.4557" path="/293/bus/file0/file0" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1499.779234][T19074] EXT4-fs error (device loop2): ext4_do_update_inode:5212: inode #3: comm syz.2.4562: corrupted inode contents [ 1499.817601][ T9325] snd-usb-audio: probe of 1-1:0.2 failed with error -2 [ 1499.831380][ T9325] usb 1-1: USB disconnect, device number 92 [ 1500.043995][T19074] EXT4-fs error (device loop2): ext4_dirty_inode:6074: inode #3: comm syz.2.4562: mark_inode_dirty error [ 1500.111632][ T2155] udevd[2155]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1500.179658][T19074] EXT4-fs error (device loop2): ext4_do_update_inode:5212: inode #3: comm syz.2.4562: corrupted inode contents [ 1500.197910][T15188] syz-executor: attempt to access beyond end of device [ 1500.197910][T15188] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 1500.219959][T19074] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #3: comm syz.2.4562: mark_inode_dirty error [ 1500.252106][T19074] EXT4-fs error (device loop2): ext4_acquire_dquot:6764: comm syz.2.4562: Failed to acquire dquot type 0 [ 1500.265775][T19074] EXT4-fs (loop2): 1 orphan inode deleted [ 1500.271592][T19074] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1500.280762][ T1289] EXT4-fs error (device loop2): ext4_release_dquot:6787: comm kworker/u4:6: Failed to release dquot type 1 [ 1500.292236][T19074] ext4 filesystem being mounted at /208/file1 supports timestamps until 2038 (0x7fffffff) [ 1500.374304][T12534] EXT4-fs (loop3): unmounting filesystem. [ 1500.702141][T19093] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1500.726615][T15002] EXT4-fs (loop2): unmounting filesystem. [ 1500.919380][T19107] netlink: 'syz.0.4569': attribute type 4 has an invalid length. [ 1500.971710][T19099] loop2: detected capacity change from 0 to 40427 [ 1500.983314][T19099] ================================================================================ [ 1500.993261][T19099] UBSAN: shift-out-of-bounds in fs/f2fs/super.c:911:5 [ 1501.037004][T19099] shift exponent 105 is too large for 64-bit type 'unsigned long' [ 1501.177506][T19099] CPU: 1 PID: 19099 Comm: syz.2.4568 Not tainted 6.1.90-syzkaller-00020-gd6a513a78492 #0 [ 1501.187248][T19099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1501.197142][T19099] Call Trace: [ 1501.200266][T19099] [ 1501.203050][T19099] dump_stack_lvl+0x151/0x1b7 [ 1501.207557][T19099] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 1501.212858][T19099] dump_stack+0x15/0x1c [ 1501.216842][T19099] __ubsan_handle_shift_out_of_bounds+0x3e1/0x440 [ 1501.223100][T19099] parse_options+0x4b90/0x4ba0 [ 1501.227693][T19099] ? mount_bdev+0x282/0x3b0 [ 1501.232030][T19099] ? f2fs_mount+0x34/0x40 [ 1501.236207][T19099] ? default_options+0xc80/0xc80 [ 1501.240977][T19099] ? kstrdup+0x54/0x70 [ 1501.244875][T19099] ? memcpy+0x56/0x70 [ 1501.248695][T19099] f2fs_fill_super+0x23bc/0x6dc0 [ 1501.253484][T19099] ? kill_f2fs_super+0x3c0/0x3c0 [ 1501.258241][T19099] ? set_blocksize+0x1cb/0x360 [ 1501.262839][T19099] ? sb_set_blocksize+0xa8/0xf0 [ 1501.267520][T19099] mount_bdev+0x282/0x3b0 [ 1501.271690][T19099] ? kill_f2fs_super+0x3c0/0x3c0 [ 1501.276465][T19099] f2fs_mount+0x34/0x40 [ 1501.280458][T19099] legacy_get_tree+0xf1/0x190 [ 1501.284969][T19099] ? trace_raw_output_f2fs__rw_end+0x110/0x110 [ 1501.290958][T19099] vfs_get_tree+0x88/0x290 [ 1501.295226][T19099] do_new_mount+0x2ba/0xb30 [ 1501.299553][T19099] ? do_move_mount_old+0x160/0x160 [ 1501.304496][T19099] ? security_capable+0x87/0xb0 [ 1501.309184][T19099] ? ns_capable+0x89/0xe0 [ 1501.313349][T19099] path_mount+0x671/0x1070 [ 1501.317601][T19099] ? user_path_at_empty+0x14e/0x1a0 [ 1501.322638][T19099] __se_sys_mount+0x2c4/0x3b0 [ 1501.327150][T19099] ? __x64_sys_mount+0xd0/0xd0 [ 1501.331750][T19099] __x64_sys_mount+0xbf/0xd0 [ 1501.336175][T19099] x64_sys_call+0x49d/0x9a0 [ 1501.340515][T19099] do_syscall_64+0x3b/0xb0 [ 1501.344768][T19099] ? clear_bhb_loop+0x55/0xb0 [ 1501.349277][T19099] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1501.355007][T19099] RIP: 0033:0x7f4c8157b61a [ 1501.359261][T19099] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1501.378705][T19099] RSP: 002b:00007f4c8237fe68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1501.386947][T19099] RAX: ffffffffffffffda RBX: 00007f4c8237fef0 RCX: 00007f4c8157b61a [ 1501.394763][T19099] RDX: 0000000020000040 RSI: 00000000200000c0 RDI: 00007f4c8237feb0 [ 1501.402569][T19099] RBP: 0000000020000040 R08: 00007f4c8237fef0 R09: 0000000000000000 [ 1501.410380][T19099] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000200000c0 [ 1501.418194][T19099] R13: 00007f4c8237feb0 R14: 0000000000005500 R15: 0000000020001540 [ 1501.426011][T19099] [ 1501.434219][T19099] ================================================================================ [ 1501.443794][T19099] F2FS-fs (loop2): Not support 2199023255552, larger than 256