{}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 14:12:29 executing program 5: socketpair(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) sendto$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 14:12:29 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000090018105e22060000000000e10109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "0400", "00000004"}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000340)={0x0, 0x0, 0x4, "7a5aa4fd"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 14:12:29 executing program 2: open(&(0x7f0000000340)='./file0\x00', 0x8a00, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x0) 14:12:29 executing program 3: sendmsg$unix(0xffffffffffffff9c, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 14:12:29 executing program 5: setitimer(0x0, 0x0, &(0x7f0000000640)) [ 577.342255][ T7869] loop1: detected capacity change from 0 to 4 [ 577.350263][ T7868] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 14:12:29 executing program 2: mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) 14:12:29 executing program 3: shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000680)) [ 577.405698][ T7869] Dev loop1: unable to read RDB block 4 [ 577.411320][ T7869] loop1: unable to read partition table 14:12:29 executing program 5: r0 = open(&(0x7f0000000340)='./file0\x00', 0x8a00, 0x0) flock(r0, 0x0) 14:12:29 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700000000f6c3000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 14:12:29 executing program 3: syz_open_pts(0xffffffffffffffff, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) [ 577.494309][ T7869] loop1: partition table beyond EOD, truncated [ 577.500725][ T7869] F2FS-fs (loop1): Invalid Fs Meta Ino: node(0) meta(0) root(0) [ 577.555254][ T7887] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 577.558844][ T7869] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 577.594370][ T7869] F2FS-fs (loop1): Unable to read 2th superblock 14:12:30 executing program 1: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e0000", 0x5c, 0x400}], 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='alloc_mode=default,noinline_xattr,inline_xattr_size=0x0']) 14:12:30 executing program 2: mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) 14:12:30 executing program 5: r0 = syz_open_pts(0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x2010, r0, 0x0) [ 577.678452][ T2933] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 577.740117][ T7896] loop1: detected capacity change from 0 to 4 [ 577.743677][ T3742] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 577.756613][ T3742] Buffer I/O error on dev loop1, logical block 0, async page read [ 577.765275][ T3742] Dev loop1: unable to read RDB block 4 [ 577.771201][ T3742] loop1: unable to read partition table [ 577.777349][ T3742] loop1: partition table beyond EOD, truncated [ 577.783771][ T7896] F2FS-fs (loop1): Invalid Fs Meta Ino: node(0) meta(0) root(0) [ 577.792110][ T7896] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 577.807462][ T7896] F2FS-fs (loop1): Unable to read 2th superblock [ 577.933993][ T2933] usb 1-1: Using ep0 maxpacket: 16 [ 578.054167][ T2933] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 578.065462][ T2933] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 578.077396][ T2933] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 578.164077][ T2933] usb 1-1: New USB device found, idVendor=225e, idProduct=0006, bcdDevice= 0.00 [ 578.173246][ T2933] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=225 [ 578.181680][ T2933] usb 1-1: SerialNumber: syz [ 578.189684][ T2933] usb 1-1: config 0 descriptor?? [ 578.238680][ T2933] hub 1-1:0.0: USB hub found [ 578.454065][ T2933] hub 1-1:0.0: 1 port detected [ 579.244052][ T2933] hub 1-1:0.0: activate --> -90 [ 579.452241][ T2933] usb 1-1: USB disconnect, device number 69 14:12:32 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700000000f6c3000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 14:12:32 executing program 3: shmctl$IPC_SET(0x0, 0x1, &(0x7f0000003780)={{0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff}) 14:12:32 executing program 2: mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) 14:12:32 executing program 5: r0 = socket$unix(0x1, 0x5, 0x0) r1 = dup2(r0, r0) sendmmsg(r1, &(0x7f0000000300), 0x10, 0x0) 14:12:32 executing program 1: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000", 0x63, 0x400}], 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='alloc_mode=default,noinline_xattr,inline_xattr_size=0x0']) 14:12:32 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000090018105e22060000000000e10109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "0400", "00000004"}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000340)={0x0, 0x0, 0x4, "7a5aa4fd"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 14:12:32 executing program 3: open(&(0x7f0000000340)='./file0\x00', 0x8a00, 0x0) open(&(0x7f0000000340)='./file0\x00', 0x8a00, 0x0) [ 579.979073][ T7902] loop1: detected capacity change from 0 to 4 [ 580.004909][ T7903] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 580.022817][ T7902] Dev loop1: unable to read RDB block 4 14:12:32 executing program 2: mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) 14:12:32 executing program 5: pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) linkat(r0, &(0x7f0000000180)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) 14:12:32 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) shutdown(r0, 0x1) 14:12:32 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0xffff, 0x100, 0x0, 0x0) [ 580.039519][ T7902] loop1: unable to read partition table [ 580.050308][ T7902] loop1: partition table beyond EOD, truncated [ 580.078379][ T7902] F2FS-fs (loop1): Invalid Fs Meta Ino: node(0) meta(0) root(3) 14:12:32 executing program 5: syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @broadcast, @val, {@ipv6}}, 0x0) [ 580.108304][ T7902] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock 14:12:32 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700000000f6c3000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 14:12:32 executing program 3: syz_emit_ethernet(0x12, &(0x7f00000000c0)={@local, @broadcast}, 0x0) 14:12:32 executing program 2: syz_emit_ethernet(0x3e, &(0x7f0000000140)={@broadcast, @broadcast, @val, {@ipv6}}, 0x0) [ 580.163037][ T7902] F2FS-fs (loop1): Unable to read 2th superblock 14:12:32 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) select(0x40, &(0x7f0000000040)={0xfffffffffffffffc}, 0x0, 0x0, 0x0) shutdown(r0, 0x0) 14:12:32 executing program 1: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000", 0x63, 0x400}], 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='alloc_mode=default,noinline_xattr,inline_xattr_size=0x0']) [ 580.249326][ T7925] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 580.284053][ T3688] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 580.337860][ T7932] loop1: detected capacity change from 0 to 4 [ 580.356913][ T7932] Dev loop1: unable to read RDB block 4 [ 580.362645][ T7932] loop1: unable to read partition table [ 580.374727][ T7932] loop1: partition table beyond EOD, truncated [ 580.381705][ T7932] F2FS-fs (loop1): Invalid Fs Meta Ino: node(0) meta(0) root(3) [ 580.389925][ T7932] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 580.398456][ T7932] F2FS-fs (loop1): Unable to read 2th superblock [ 580.533975][ T3688] usb 1-1: Using ep0 maxpacket: 16 [ 580.654088][ T3688] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 580.665218][ T3688] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 580.675787][ T3688] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 580.764155][ T3688] usb 1-1: New USB device found, idVendor=225e, idProduct=0006, bcdDevice= 0.00 [ 580.773280][ T3688] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=225 [ 580.781536][ T3688] usb 1-1: SerialNumber: syz [ 580.791186][ T3688] usb 1-1: config 0 descriptor?? [ 580.834809][ T3688] hub 1-1:0.0: USB hub found [ 581.054105][ T3688] hub 1-1:0.0: 1 port detected [ 581.834191][ T3689] hub 1-1:0.0: activate --> -90 [ 582.036308][ T2933] usb 1-1: USB disconnect, device number 70 14:12:34 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000090018105e22060000000000e10109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "0400", "00000004"}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000340)={0x0, 0x0, 0x4, "7a5aa4fd"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 14:12:34 executing program 5: open(&(0x7f0000000340)='./file0\x00', 0x8a00, 0x0) mknod(&(0x7f0000000700)='./file0\x00', 0x0, 0x0) 14:12:34 executing program 2: msgget$private(0x0, 0x10) msgget$private(0x0, 0x3) r0 = msgget$private(0x0, 0x629) msgrcv(r0, &(0x7f0000000000)={0x0, ""/88}, 0x60, 0x2, 0x800) 14:12:34 executing program 3: pipe2(&(0x7f00000002c0), 0x0) 14:12:34 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700000000f6c3000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 14:12:34 executing program 1: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000", 0x63, 0x400}], 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='alloc_mode=default,noinline_xattr,inline_xattr_size=0x0']) [ 582.561823][ T7939] loop1: detected capacity change from 0 to 4 [ 582.572622][ T7941] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 14:12:34 executing program 5: r0 = socket$unix(0x1, 0x5, 0x0) r1 = dup2(r0, r0) getsockname$unix(r1, &(0x7f00000026c0), &(0x7f0000003700)=0x1009) 14:12:34 executing program 3: poll(0x0, 0x0, 0x2fd259fc) 14:12:35 executing program 2: madvise(&(0x7f000000c000/0x4000)=nil, 0x4000, 0x7) [ 582.604147][ T7939] Dev loop1: unable to read RDB block 4 [ 582.620703][ T7939] loop1: unable to read partition table 14:12:35 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) flock(r0, 0x2) 14:12:35 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x20}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700000000f6c3000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 582.657796][ T7939] loop1: partition table beyond EOD, truncated [ 582.670094][ T7939] F2FS-fs (loop1): Invalid Fs Meta Ino: node(0) meta(0) root(3) 14:12:35 executing program 5: sendmsg$unix(0xffffffffffffffff, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000002b80)=[{0x0}], 0x1}, 0x0) [ 582.717189][ T7939] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 582.749745][ T7939] F2FS-fs (loop1): Unable to read 2th superblock [ 582.757996][ T7957] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 582.904485][ T14] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 583.143961][ T14] usb 1-1: Using ep0 maxpacket: 16 [ 583.264384][ T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 583.275730][ T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 583.285938][ T14] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 583.374478][ T14] usb 1-1: New USB device found, idVendor=225e, idProduct=0006, bcdDevice= 0.00 [ 583.383612][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=225 [ 583.391877][ T14] usb 1-1: SerialNumber: syz [ 583.398316][ T14] usb 1-1: config 0 descriptor?? [ 583.439732][ T14] hub 1-1:0.0: USB hub found [ 583.644108][ T14] hub 1-1:0.0: 1 port detected [ 584.414086][ T14] hub 1-1:0.0: activate --> -90 [ 584.618613][ T14] usb 1-1: USB disconnect, device number 71 14:12:37 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000090018105e22060000000000e10109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "0400", "00000004"}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001d80)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000340)={0x0, 0x0, 0x4, "7a5aa4fd"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 14:12:37 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) poll(&(0x7f0000000000)=[{r2, 0x40}, {r2}, {r2, 0x1}], 0x3, 0x0) 14:12:37 executing program 5: utimensat(0xffffffffffffffff, &(0x7f0000002740)='./file0\x00', 0x0, 0x0) 14:12:37 executing program 1: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100", 0x66, 0x400}], 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='alloc_mode=default,noinline_xattr,inline_xattr_size=0x0']) 14:12:37 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x20}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700000000f6c3000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 14:12:37 executing program 3: sendmsg$unix(0xffffffffffffffff, &(0x7f0000003000)={0x0, 0x0, 0x0}, 0x0) 14:12:37 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)="efd6a99b197e7de6ba3f1b042b2977e61a1b02ee608e3d7480ad0bd83e60e10e64e5550a039d508cf509db095dead2b48a72ca0ecefdf51c3267579f8305d02d9405de67cf1aedb4fb6f0e2bfa8e43c3ce8060455d140496627ae4ead9ddad61296ceefe9f635ff5dea42b47f669fe0a3b888f6457a6ebbf069912c0fe8c3ae6cd33a7f2b8276b5cda0391ffe0d4ae3b1a", 0x91}, {&(0x7f0000000180)="828c5b0ce9483fa64cb07fa40899490fef0d6a80acda68a3e35518a4fcae1d830898a42ecf0676c7c4f03050253e5600a75ab1e6c493f9eaa889cfb9b77f21861a8a320ea18f357076831ee47b3f48749a0c2b302cc4a5858e68d4752f8932fd421b3762c6e92b8c00ecf5bbf1e4d5b9", 0x70}, {&(0x7f0000000200)="7509f89fd16eae74f2e498117506ea5a694d7af63417c32f187a8cd393956b1d392b99d12cd59e1e81c058197ff91056799c8a5cd31d43fb7da304a221010b12faf37665bc1963d23051ae167862546d853e0be60a2959fda801de4ae011cebd2ce1cfa195ff1b86f52312e30af61c17", 0x70}], 0x3}, 0x0) 14:12:37 executing program 5: recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x1}, 0x8) 14:12:37 executing program 3: syz_emit_ethernet(0x76, &(0x7f0000000180)={@local, @broadcast, @val, {@ipv4}}, 0x0) [ 585.165221][ T7968] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 585.174991][ T7965] loop1: detected capacity change from 0 to 4 [ 585.198211][ T7965] Dev loop1: unable to read RDB block 4 14:12:37 executing program 2: r0 = open(&(0x7f0000000340)='./file0\x00', 0x8a00, 0x0) fchown(r0, 0xffffffffffffffff, 0x0) 14:12:37 executing program 5: open$dir(&(0x7f0000000000)='.\x00', 0x200, 0x0) [ 585.222210][ T7965] loop1: unable to read partition table [ 585.250641][ T7965] loop1: partition table beyond EOD, truncated 14:12:37 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x20}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700000000f6c3000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 585.269456][ T7965] F2FS-fs (loop1): Invalid Fs Meta Ino: node(1) meta(0) root(3) [ 585.288314][ T7965] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 585.316680][ T7965] F2FS-fs (loop1): Unable to read 2th superblock [ 585.339419][ T7983] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 585.484135][ T3689] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 585.723990][ T3689] usb 1-1: Using ep0 maxpacket: 16 [ 585.844124][ T3689] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 585.855198][ T3689] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 585.865163][ T3689] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 585.954039][ T3689] usb 1-1: New USB device found, idVendor=225e, idProduct=0006, bcdDevice= 0.00 [ 585.963206][ T3689] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=225 [ 585.971554][ T3689] usb 1-1: SerialNumber: syz [ 585.977558][ T3689] usb 1-1: config 0 descriptor?? [ 586.014867][ T3689] hub 1-1:0.0: USB hub found [ 586.235293][ T3689] hub 1-1:0.0: 1 port detected [ 587.054072][ T917] hub 1-1:0.0: activate --> -90 [ 587.261750][ T917] usb 1-1: USB disconnect, device number 72 14:12:40 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000090018105e22060000000000e10109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "0400", "00000004"}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001d80)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000340)={0x0, 0x0, 0x4, "7a5aa4fd"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 14:12:40 executing program 3: socketpair(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0xf, 0x0) 14:12:40 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x6, &(0x7f0000000000)=@framed={{}, [@cb_func, @func]}, &(0x7f00000000c0)='GPL\x00', 0x1, 0xfc, &(0x7f0000000100)=""/252, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 14:12:40 executing program 1: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100", 0x66, 0x400}], 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='alloc_mode=default,noinline_xattr,inline_xattr_size=0x0']) 14:12:40 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000200)=@framed={{}, [@map_idx_val]}, &(0x7f0000000080)='GPL\x00', 0x3, 0xf1, &(0x7f0000000100)=""/241, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 14:12:40 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x20}}, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000440)) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700000000f6c3000000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 14:12:40 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f00000004c0)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000140)="6640ed2063fafb43038845904313cd29c97b0d924f9c6a10e78ef287fb352d3b7aabec9b8635fc1d1b14c2fd62ebdbbba52538ebfb36fcd5864d6105bf5709deeb1faa4bae8e638c10af92f7e4a32dec7f648d6bbd7cde9b60d48b7e1ce1276a3161f649d92083289e2d135b42da5a81585d90f31e37b5c97c3b4ebd56c486a3ccae871a23fda0c33ff46ba366dc17bf028d9bbd2aad091c262feb4a3e16283d97562b02e35d4faa942edd98eff4c1afd77fe53f52ce529a79239ffa21734ec9268b85bbae2fe3f4c0dce63fafeedb2039045956a03719e153b6b0b579bc", 0xde}, {&(0x7f0000000240)="ebed08648d4d2a", 0x7}, {&(0x7f0000000280)="21dcaf5ebecf16ba0bc3aca185b96196640b2e328d9d43ff73f63d1e654aee70e5d0491fae160ce5ede19888db325edc7989ca7a69c08095108b233df9d02e21df448b73d15a9ef5c7344c36f52bc853ac5abaf18dfd04d8ead80eaff785c8d8007ba87894b0e44c459780bdfe01cf216e6b35aa7213341905079233d3577d8db34a8e3b6654e4b92701105ae2e459e79aa28a0bc698f13b01cf940141e71ec6565dd47220a001b672203d9d092a8ebdfbd42f77e0a66beedc33509791428f00a0886b650268192f2c516e8c954421a4e5bb94bf4064097868f184d53aec69a7f148", 0xe2}, {&(0x7f0000000bc0)="ee1e3bec85a9a97a6993d8d14121bc89fc7a6e51d3dc26f543aa13a52383ccfe3a035755f82050e3a8de4e637cea5411c18567fff17d61846361bdf2912b69cad3a5fb13a3194509f588240ed8b1a19563e7380ae2342e3913dac9da24b0c6bf7bc9380cfa51e003929da536597afcce6fbb71810889542843697a16885b5a448d84e2ff38d3b9a0fea16227d02a87ded49d05af4092c4c08647606581385e73ee21c668a172a21b614a0488e877c9b6124180405cfd2e76f6a75749867e46b0ebd0dd3637cc69888f482386ad67b25d3f4b4c650184c9aeb8bd86a29e021cf64433d7ab5811ebf865cd0d1d82afd597635e63084dd4962bc3577ce7bf1615189df5fd97a0a74e52753a26feb6cea3267175385fea266de86fd5373fad59e0bf16983798feddf84c252ff551bb4cc0645465063bb248cae51185763d583e992b91a7c5b9ce4417dba7025bde66e0f590555861aa43860d05e6dcc7d3fcb4d1db99bc3ed842fb1581efc38f4297f71fcdaa68d29d99477c702874be81e5b738cbe429c7342ea90f0e89d9cd8544bae8f8878cf7d93d5639048f6e863371efd89eebb98be647c86ef71e63c1e930fca11ff38331528cdf6b734a832a49145c4924540708b48d92f3593e4953b103780c43b5c4bab645e7c3ef5168499f2f25fb63428b90e4e6be83cb7eda2bf1d74874302b5e39de3e8ce54375f38157abbd152a7b1c856519a8b67a84aaf21f72cadcad0ad8f6cc2ba2e835713b9184d229ee432728e8599c882f97772cd00b6e2539862a04746ae9966e3adb25cf7dbc204e287d849257a93edd0e06b66b32d1187efe340910b63da47e03444ff4a4dec0a2e3ae9145e753ec017799bfae09f4b83dce55080d12b568f0582c0268b3c663f559d102bdcbbdea2a254f77d83b6c39c9fa514c29b8b28f2e726f46cc5eb1ae84bc9e82a09bf282602e8cb37c5fe413843c8623c46d1b750181d1e83ee699f6bb1ce92c902ca46de3fd10efb983c3102bb8dfc589113ee1bb37c2b95fdb0c5ebc99c797c4f389fe88c190b38f19c9b604d001473bd077aa7f0a13de3fad2935bc6251f2c6db50e0a8478d7a7c6acf7574286bfc5de262471ead21dbf4789eb87bc87ee70f2e98952b787e95c23feb85862e8e738de9de6636e755fdcf6f0d8b1c7eba02b0cd7cd48ed308e943522d92b8b187e18ce02c3f69a065839e2a48e7301bf331a0b05d8cf7f33e6b4dab7282e61359e7f12f0dc0d4704cd0fe5c62d47753678ca10cefaeb515872154240086c84abfd83d6f1387cf3caac5b5307905655aa21705f8fdc96ad575cb24323ea63eda15ff2ce3210088470b54867813b5ee1ef8c4fc076930f7f144612bd5ddb9c46684bcc9297420de0c71cf719f3bfcdc10e2a6fab7bb4def4411903fa495f5564326bf70024ac302172f17e60009a255f0898c2e8298e5a19d6ed4c770aacb55b0e6834453babc54f2cab8c390c71999c82f73b0ea7556a05df6748df8f0aafc318d399d54155c847ce0c834f165e7e8c8ba1f5873a76132b4c180efa6b881bb47dcf3e0ee5a611703c78a40ee1043bc34ce0d46a588e3baee4b57a210f525953af4e9fecc5346c2682fd0ef20d461c50e3c41408db73c584c9d1ddb6d819c5ba258dbf78aa25de8913b579f11454faf46cf5230e7aef195d5f315f78748f8039a63b2ce439d7bcdaf246a6f03f3e189ed6c5ae680d023772107b95d7b315084432606d6b16f5a8824f4ad14f139d3129668418786149f452d834a0addd904f62e5c0c5fac46e9c05e8addeff0521ab2f4c5c75a6384aaf18ecbac76cb138ddedb144efa49f89a667286acba616666e73edc76afe8c09db964e1833b86a1f2d1798eb885eecb308d631756509a56ac44c4c8522c27529e1d15306fe1fda76ab7ea10f5efcf1e266b4592012e18dc74e30c39a3ce31cf02a8a57e43f40f64846b28302befa9eca790dcca3fd041c971ee1322041897617ebf41fdf20fdba55b8f5482c92b1ff4ee24ad496c8de8f89d1a15a409a9745e3131f17a7ea9cca4fd0037275b325c271792fb589240406e7914f7cc04632ccf946f0c1a7215e285daf5e3d45d8af441a593c4f10515c04fa9a4ebd0c712c55f2570104548d11577011ed26ea6b19b0ee3dcf0f2387a84e33e5e984661045c76b1be362aaf102e9691f5c7f4f2ab7c630df2fde351248a8002acd7a01055647af08babd3b181981a2bcc6cfaa6a023099ea92b34532376827e03b420886f403cbb749ef356fbe590adef6a83395476ea55b54d2c1770eaa0fd5a41763f7888b4bfc4da1a5a71d9e43124c98f7ef688ed23f5735d41d4bb29fd4d9b9be01664008d0587515737c0ebc5a27b4dc0582ef3e6fa9f0932e374c38e234a74da3dd38026a2e62e39124569b4e5f70985f703d57635f87bba6dba106131cf446d01bb3fe106dd52fba3356503b408e0cad0b67392fd9fdc0992ea434be8312515eb42319af130e2cc73975cab4cfdc7c851b52348b6ab67e55a16642747ed249e8d5f8ca3b9cf06eabfc37de7d9c24b14a5a1d84460e3a099b3040f207e6121db727b9fdb2ef9b740cc56da0446d2dd76c1c5be03147f58e8a2bb6c2dc135ad822cb4c24ecc2d753f30fc7b79ad5fc07f35b629fc1aff7ce2464e0042a1b531de9dd921dce481f9a3e284787fd86e90718870221b324b86d4bcd83fcb70013f3f67b726a788d7f699c875aefb77dc5321cfe2958df11cdda1f28e6d2f896bcd7ae8abcc11fb2a0fea2f8bde7a78343f63a95cfaec6c35e75d51eeba4cc11e9ad7b7c7067e1cb33b70cad13e7b8961fb3417ee63cfbed01d223c6ca65317d70df861313432d3fa91ebe53845d3a06afb5034df3055473b9d6fb56c3477c1f106703cb0e7543a302a11b2fe13655e6f4957fab4771f9e1262462b2e3d91dea5c6ae40743647507b56b57b39de040353beaccfb42033a020ffcc001c007fef169af03c21ea2e135ac82afd1abd8aff30dc5f1d3a979f3fbf66f0c4133bda12f3c1c5dcac68e83344af8c10dcdff50995a8dc5a01e613d9c7d21e2d62862456797ee5d50361aec706fc086dd6030c376ba7df637055d0d2bc2a19104bf4b1af9765c3610b9d092ce572d987823b5c9a0da421f0d301825e284280d5d08839bcef73b7ec5d1cbfc6868f58363520df15509d9060a4eafbf17af4102bf3cf8c1625421199177b68560f2855e3283148cf6497662654182fd2dc2c7460a8c7691d14453924b506d33b7674afb41e201a6eca76fd7412261c4db6ea98cbc2604534a3dd4a123a967efcf10d057c9031f19abe6f9765b30633e62d84e9a0bf85c6362869a9ee014e116482ed72635dc84c7cb6dfeca65f69a0da7b4023406241047823ce69bfaade506e45a926b441fa149c5d076667b4f0c8ccd3dd629020fc5e572b701b58fadd150d90079f750867ccf733ef40ab9406752e20ee9ec3d904c542e5edd49326bf22fd48fc5a168bc4a11070179a7a8b08b708a9c7b82787c5dc12cbeb42fa12afe50358cb24054d4f61a74c60fc280f794e0a4d5b4c30750190e055900547864c73d2e813bd86d9ee46686a4611f42ea56d8434b01be35057bbb39dde8012f366145ae2c75cff3f233f9d5d78ee951ea1730823d3c69e6f6be13808a12ec47a9143cf8926b56a0a3ee9a730d7f438750a544e1a134a7122e449c9a7b7d1c89ae6da2e77196a21e593253131799e891e56964c01f2a2de98d4893d82271b9c8db4a4d0058df22254c79f74c17ac91e36c97d62d18bd554f1d2d8b9630c48db9dfc41432288589b6f2500b216d740cf782d7d360c5d08bc758757e391242c6295c31ad0f64aecb8806403f51e440a0f2bc5fee16438c06e5165d694d235f446e2743bfbb736d895077dce72baa84643e12689add677f9878b71a5da263236ff89be40550655c923348239fb8834f3759d571e30fd0224087a8b9edecd2ea81d9138d152f60d389e1eadf1c958bfcf531375c43c9c629c2d8878df2f1114654cb1dd68f9987b09fbbe4e8132d69902d2af7683bdc49951a83996550ee942710bb4dd6164776ff672a36bb4ad600dde26e0c9b8b75bec7912e84fb13a766b9d5390f2920cc0b1a7c1ffb24353b4809b2ec3a9025abb9e59b5829afc42510b8d04b5b4c66e70d6076686e36d9729fa71fce2d1e26ec80b291820365c281bbfc6411d899200237ec16685c1040ec37dca8bcb369d95101a8b4ef985dd27c48803b5ed7c34438b8aec01686502349c389ca937ab400ed81ac7f99165d4fae3d5004120f6331ab476ec01ee5868d9ca67ddcb05ffec6144a519a227fac41ee95cc81935bf55662c5719afcd1c9b0ef567a8342648417b1aaf35c063fbbfbdb49ab9e202f9791d08c067ea7ce9202c900d3d74c600e7b555e4ac7ffd4f2fd6c3dbe1891f23496cd1811f2b9780ffc054fb369fb021629515935247ca5e1f518ce01fd28cf5239a7eb8ebb83628ed0eb26500bbf503fab5e0864f162ce1eb4cf5e24516bf06798b80700863f46b412c1a4544020e0a03e082bb482a4acfac154ffbc30be2bcff5a87332d0eab46688da2b949e598b3d693f2c65d5a3b0efe8635df1a57406f07a323023cdf1699f99ea28da73a7e6adf05cf60dfded4411f6540e4133aa578ef629731b6361e9117ead224a4796e9e2c3f78bd326189453cfafdf6c9728e1fd0e3ab305d9a072bf0e363f46bf3df34a0b99fecc66a15a4b06d44eaae8ba86144f9b1f2443c3d326e7a66fbde9b088ca64f940147f35c22c4465ec60cc7320655ee0a1e07e102364ab70bb6517fe03d53466ff58a9ab7365fcceefd19c7d8827359a34d3171f4bb2778105c3333475131c0fd1be574301557fe2317b1b2995dfc9331ea820e65ae13c2e5f7b5f58c43c43e24d21942fa49792b6e8b50f8e06f6e7b4f782eeb96ff7d0d232e22a4d59b735b470146155e5d80def9400cd9d72bc0974599885c0d7e61b307d10ddd0142c9c2417cb8bf7a12dc4baa2f915def45d84fdcd7c665c241d84960b2e0f50b88e7b86ec04ad76c7aba32aa9966c203019e50be3a24b7238d54ff78c88295a92bb5e0fd367f571fe452b46c67a9596f13772c438cee2ed017d84da6e193e637e8701c1379ecd6a2122c524f673cff923ba75bc58003364cc5fc8eae3b9112c61f68999324c12fdbc6553414d3d0863e35a47f9e88a457b65345553497313f1019fd8d09d90d946db379dc13ca3e362cc06e3a806505625e5141e70c608c77b281135278dd6a805d9484d79dc780d418d5af95c044feb1c3f909ce27a52b01194305830ea1c0f84ab5500aee4300ae99f936f21332ba7c3e4b6c3344f9fc02dcd2e0a11d94afb53df8cb57954ce8cde47bcd4a3349e0ac2abb3ff790ee32a067f2255a0b240211356f57284423bec3b20ae36feb9bcff61dd4085decf47efe76d99491171b945fc621148ade921fc205b0cfd8e33a1696f11983f54213a228c34e18478c226bc270f07c1831ba1b385f264b084ec9af0b68b9fdff76f4e0ab9dbf7b1f18f8e28c7c88bff98578ae2032970213caf1bec85acbaab82880c7afbadfef436c64f2b9fb67c1893fe222d9a15412af804d154bc6db2ddfd8f16547c3d20f023cc85961852298a0ae1928bf7e08701e7080be6cb6a84c908dee4661116b1c1e8a4adfb5e722c6f8cb406c03838c9ca8d14013b4b4722e616722764700cbb9330df9a7eb92954a8f4bf5ac9560d966128ba0a3156351bab04e4a417411a8b9f21c4d8cdbf6a4e7ae83", 0x1000}, {&(0x7f0000000380)="0fd56e75d3390f9810b27c7a5666c7935e2666", 0xffffffffffffff83}], 0x5, &(0x7f0000000440)=[@mark={{0x14}}, @timestamping={{0x14}}, @mark={{0x14}}, @mark={{0x14}}, @txtime={{0x18}}], 0x78}, 0x0) 14:12:40 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='GPL\x00', 0x1, 0xfc, &(0x7f0000000100)=""/252, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 14:12:40 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x6, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x4}, [@cb_func, @func]}, &(0x7f00000000c0)='GPL\x00', 0x1, 0xfc, &(0x7f0000000100)=""/252, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 587.813621][ T7991] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 587.834139][ T7992] loop1: detected capacity change from 0 to 4 14:12:40 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000b80)={0x0, 0xffffff8f, &(0x7f0000000780)=[{&(0x7f0000000100)="cf", 0x20000101}], 0x1, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x340}, 0x4400c0c1) recvmsg(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000640)=[{0x0}, {&(0x7f0000000200)=""/205, 0xcd}], 0x2, &(0x7f0000000700)=""/64, 0x40}, 0x22) [ 587.880024][ T7992] Dev loop1: unable to read RDB block 4 [ 587.893143][ T7992] loop1: unable to read partition table [ 587.914219][ T7992] loop1: partition table beyond EOD, truncated [ 587.921086][ T7992] F2FS-fs (loop1): Invalid Fs Meta Ino: node(1) meta(0) root(3) 14:12:40 executing program 3: syz_emit_ethernet(0x66, &(0x7f0000000100)={@random="63fece752982", @empty, @val, {@ipv6}}, 0x0) 14:12:40 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) preadv(r0, &(0x7f00000008c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0, 0x0) [ 587.963223][ T7992] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 588.035466][ T7992] F2FS-fs (loop1): Unable to read 2th superblock [ 588.163914][ T3695] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 588.424032][ T3695] usb 1-1: Using ep0 maxpacket: 16 [ 588.544393][ T3695] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 588.555602][ T3695] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 588.565622][ T3695] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 588.654148][ T3695] usb 1-1: New USB device found, idVendor=225e, idProduct=0006, bcdDevice= 0.00 [ 588.663210][ T3695] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=225 [ 588.675832][ T3695] usb 1-1: SerialNumber: syz [ 588.682026][ T3695] usb 1-1: config 0 descriptor?? [ 588.725249][ T3695] hub 1-1:0.0: USB hub found [ 588.944006][ T3695] hub 1-1:0.0: 1 port detected [ 589.734307][ T3695] hub 1-1:0.0: activate --> -90 [ 589.936403][ T6] usb 1-1: USB disconnect, device number 73 14:12:42 executing program 5: r0 = syz_open_pts(0xffffffffffffffff, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) fchown(r0, 0xffffffffffffffff, 0x0) 14:12:42 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x20}}, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000440)) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700000000f6c3000000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 14:12:42 executing program 3: open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) pipe(0x0) open(&(0x7f00000004c0)='./file0/file0\x00', 0x200, 0x0) 14:12:42 executing program 2: r0 = socket$inet6(0x18, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$unix(r1, &(0x7f0000001480)={&(0x7f0000000000)=@abs={0x0, 0x0, 0x3}, 0x8, 0x0, 0x0, &(0x7f0000001400)=[@cred], 0x20}, 0x0) 14:12:42 executing program 1: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100", 0x66, 0x400}], 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='alloc_mode=default,noinline_xattr,inline_xattr_size=0x0']) 14:12:42 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000090018105e22060000000000e10109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "0400", "00000004"}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001d80)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000340)={0x0, 0x0, 0x4, "7a5aa4fd"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 14:12:42 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) recvfrom$unix(r2, &(0x7f00000000c0)=""/209, 0xd1, 0x840, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000240), 0x10, 0x0) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 14:12:42 executing program 2: r0 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nl=@unspec, 0x80, 0x0}, 0x4008854) [ 590.466050][ T8016] loop1: detected capacity change from 0 to 4 [ 590.474572][ T8017] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 590.501502][ T8016] Dev loop1: unable to read RDB block 4 14:12:42 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f00000012c0)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{}, 0x1}}, 0x10, 0x0}, 0x0) [ 590.517207][ T8016] loop1: unable to read partition table 14:12:42 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, 0x0, &(0x7f00000002c0)) 14:12:42 executing program 2: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x7fffffff, 0x0) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000280)="23000000220009bb00b9409b849ac00a00e3b8a98623ff2a09a6c5b01109e3ecabbe82", 0x23, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/187, 0xbb, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f", 0x8}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) [ 590.564685][ T8016] loop1: partition table beyond EOD, truncated [ 590.579508][ T8016] F2FS-fs (loop1): Invalid Fs Meta Ino: node(1) meta(0) root(3) [ 590.599966][ T8016] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock 14:12:42 executing program 5: r0 = socket(0x11, 0xa, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000200)={'sit0\x00', &(0x7f00000000c0)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback}}}}) 14:12:42 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000d40), &(0x7f0000000d80)=0x30) 14:12:43 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x20}}, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000440)) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700000000f6c3000000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 590.614843][ T8016] F2FS-fs (loop1): Unable to read 2th superblock 14:12:43 executing program 3: syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12015002000000082505a8a44000010203010902"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 14:12:43 executing program 1: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e0000001000000300000001000000", 0x68, 0x400}], 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='alloc_mode=default,noinline_xattr,inline_xattr_size=0x0']) [ 590.678917][ T8032] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.2'. 14:12:43 executing program 5: ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x12) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$uinput_user_dev(r1, &(0x7f00000000c0)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x4, 0x0, 0x3, 0x0, 0x3f, 0x6], [0x0, 0x0, 0x0, 0x0, 0x0, 0xca, 0x0, 0x0, 0x81, 0x0, 0x0, 0x5, 0x4, 0x5, 0xff, 0x6, 0x2, 0x0, 0x200, 0x7fffffff, 0x0, 0x1, 0x0, 0x7f, 0x7, 0x8, 0x0, 0x0, 0x4, 0x8, 0x0, 0x773, 0x7ff, 0x1, 0x7f, 0x8, 0x7ff, 0x5, 0x0, 0x0, 0x3, 0x80000000, 0x7ff, 0x2, 0x80, 0x0, 0x9, 0x8, 0x1, 0x0, 0x7b, 0x3, 0x0, 0x3, 0x9, 0xfff, 0x0, 0x60000000, 0x0, 0x0, 0x6, 0x0, 0x2, 0x9]}, 0x45c) [ 590.737768][ T8039] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 590.782441][ T8044] loop1: detected capacity change from 0 to 4 [ 590.804378][ T3695] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 590.819078][ T8044] Dev loop1: unable to read RDB block 4 [ 590.825121][ T8044] loop1: unable to read partition table [ 590.857172][ T8044] loop1: partition table beyond EOD, truncated [ 590.868327][ T8044] F2FS-fs (loop1): Invalid Fs Meta Ino: node(1) meta(0) root(3) [ 590.890757][ T8044] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 590.916125][ T8044] F2FS-fs (loop1): Unable to read 2th superblock [ 590.994211][ T917] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 591.084018][ T3695] usb 1-1: Using ep0 maxpacket: 16 [ 591.234172][ T3695] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 591.245317][ T3695] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 591.255547][ T3695] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 591.268524][ T917] usb 4-1: Using ep0 maxpacket: 8 [ 591.354225][ T3695] usb 1-1: New USB device found, idVendor=225e, idProduct=0006, bcdDevice= 0.00 [ 591.363422][ T3695] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=225 [ 591.371935][ T3695] usb 1-1: SerialNumber: syz [ 591.378143][ T3695] usb 1-1: config 0 descriptor?? [ 591.414774][ T3695] hub 1-1:0.0: USB hub found [ 591.436486][ T917] usb 4-1: unable to get BOS descriptor or descriptor too short [ 591.534098][ T917] usb 4-1: config 0 has no interfaces? [ 591.634099][ T3695] hub 1-1:0.0: 1 port detected [ 591.804112][ T917] usb 4-1: string descriptor 0 read error: -22 [ 591.810490][ T917] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 591.819595][ T917] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.831077][ T917] usb 4-1: config 0 descriptor?? [ 592.088280][ T917] usb 4-1: USB disconnect, device number 83 [ 592.444074][ T3695] hub 1-1:0.0: activate --> -90 [ 592.645940][ T917] usb 1-1: USB disconnect, device number 74 14:12:45 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700000000f6c3000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 14:12:45 executing program 5: syz_clone(0x21000, 0x0, 0x0, &(0x7f0000000680), 0x0, 0x0) wait4(0x0, &(0x7f0000000780), 0x80000000, 0x0) 14:12:45 executing program 1: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e0000001000000300000001000000", 0x68, 0x400}], 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='alloc_mode=default,noinline_xattr,inline_xattr_size=0x0']) 14:12:45 executing program 2: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x7fffffff, 0x0) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000280)="23000000220009bb00b9409b849ac00a00e3b8a98623ff2a09a6c5b01109e3ecabbe82", 0x23, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/187, 0xbb, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f", 0x8}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) 14:12:45 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000000)='bond0\x00') getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, 0x0, 0x0) 14:12:45 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000090018105e22060000000000e10109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "0400", "00000004"}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001d80)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000340)={0x0, 0x0, 0x4, "7a5aa4fd"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 14:12:45 executing program 3: r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0xc) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0x72, &(0x7f0000000300)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @broadcast}}}}, &(0x7f0000000140)=0xb0) [ 593.195500][ T8051] loop1: detected capacity change from 0 to 4 [ 593.221317][ T8053] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 593.232018][ T8051] Dev loop1: unable to read RDB block 4 14:12:45 executing program 3: syz_usb_connect$hid(0x0, 0x89, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) [ 593.243270][ T8051] loop1: unable to read partition table [ 593.252556][ T8051] loop1: partition table beyond EOD, truncated [ 593.261971][ T8051] F2FS-fs (loop1): Invalid Fs Meta Ino: node(1) meta(0) root(3) [ 593.272719][ T8051] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 593.284321][ T8051] F2FS-fs (loop1): Unable to read 2th superblock 14:12:45 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700000000f6c3000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 593.292664][ T8055] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.2'. 14:12:45 executing program 1: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e0000001000000300000001000000", 0x68, 0x400}], 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='alloc_mode=default,noinline_xattr,inline_xattr_size=0x0']) 14:12:45 executing program 5: syz_clone(0x21000, 0x0, 0x0, &(0x7f0000000680), 0x0, 0x0) wait4(0x0, &(0x7f0000000780), 0x80000000, 0x0) [ 593.407782][ T8068] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 593.432769][ T8072] loop1: detected capacity change from 0 to 4 [ 593.460241][ T8072] Dev loop1: unable to read RDB block 4 [ 593.478825][ T8072] loop1: unable to read partition table [ 593.485718][ T917] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 593.495945][ T8072] loop1: partition table beyond EOD, truncated 14:12:45 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700000000f6c3000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 593.505552][ T8072] F2FS-fs (loop1): Invalid Fs Meta Ino: node(1) meta(0) root(3) [ 593.513438][ T8072] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 593.523631][ T8072] F2FS-fs (loop1): Unable to read 2th superblock 14:12:45 executing program 1: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69}], 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='alloc_mode=default,noinline_xattr,inline_xattr_size=0x0']) [ 593.585607][ T8077] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 14:12:46 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, r1, 0x1}, 0x14}}, 0x0) 14:12:46 executing program 4: socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x20}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700000000f6c3000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 593.698451][ T8080] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 593.737617][ T917] usb 1-1: Using ep0 maxpacket: 16 [ 593.743484][ T8080] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 593.801500][ T8080] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 593.822548][ T8080] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 593.854136][ T917] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 593.865379][ T917] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 593.875901][ T917] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 14:12:46 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x10000, 0x4) 14:12:46 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0x4, 0x8, 0x401, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x24}}, 0x0) [ 593.964209][ T917] usb 1-1: New USB device found, idVendor=225e, idProduct=0006, bcdDevice= 0.00 [ 593.973408][ T917] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=225 [ 593.990585][ T917] usb 1-1: SerialNumber: syz [ 593.998264][ T917] usb 1-1: config 0 descriptor?? [ 594.044973][ T917] hub 1-1:0.0: USB hub found [ 594.244040][ T917] hub 1-1:0.0: 1 port detected [ 594.994120][ T917] hub 1-1:0.0: activate --> -90 [ 595.198879][ T917] usb 1-1: USB disconnect, device number 75 14:12:48 executing program 1: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69}], 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='alloc_mode=default,noinline_xattr,inline_xattr_size=0x0']) 14:12:48 executing program 4: socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x20}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700000000f6c3000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 595.722795][ T8094] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 595.740120][ T8094] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 595.752289][ T8094] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 595.761181][ T8094] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 14:12:48 executing program 3: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f0000000080)='IPVS\x00', &(0x7f00000000c0)='./file0\x00', r0) 14:12:48 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={0x0, @initdev, @initdev}, &(0x7f0000000040)=0xfffffffffffffcff) 14:12:48 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000090018105e22060000000000e10109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "0400", "00000004"}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001d80)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000340)={0x0, 0x0, 0x4, "7a5aa4fd"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 14:12:48 executing program 2: socket(0xa, 0x6, 0x2) 14:12:48 executing program 4: socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x20}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700000000f6c3000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 14:12:48 executing program 1: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69}], 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='alloc_mode=default,noinline_xattr,inline_xattr_size=0x0']) 14:12:48 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x4, 0x0, 0x0) 14:12:48 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 596.346453][ T8102] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 596.379792][ T8102] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock 14:12:48 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) 14:12:48 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r1, &(0x7f0000004300)=[{{0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f0000000cc0)="977c7052f719fb03abec4a7a4a7f1ceb14997362b746eeea3fdc17ecbf087f9e8e1744c86e7c5282495c230466acd54ebc22aa043422b2661378f54e7ea51ff7c75e21ac6a70c8f44f71f03de091a7e12b62b9d86849a376c12a673a50e61d", 0x5f}, {0x0}], 0x2}}], 0x1, 0x0) recvfrom(r0, &(0x7f00000000c0)=""/95, 0x5f, 0x0, &(0x7f0000000140)=@caif=@dgm, 0x80) [ 596.404647][ T8102] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 596.416818][ T8102] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 14:12:48 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 14:12:48 executing program 1: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}], 0x0, 0x0) 14:12:48 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x48001) 14:12:48 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x2, 0x0, 0x3c) [ 596.540717][ T8120] loop1: detected capacity change from 0 to 4 [ 596.594108][ T6] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 596.622344][ T3642] Dev loop1: unable to read RDB block 4 [ 596.628072][ T3642] loop1: unable to read partition table [ 596.633801][ T3642] loop1: partition table beyond EOD, truncated [ 596.844561][ T6] usb 1-1: Using ep0 maxpacket: 16 [ 596.964639][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 596.975592][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 596.985748][ T6] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 597.074124][ T6] usb 1-1: New USB device found, idVendor=225e, idProduct=0006, bcdDevice= 0.00 [ 597.083407][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=225 [ 597.091757][ T6] usb 1-1: SerialNumber: syz [ 597.099185][ T6] usb 1-1: config 0 descriptor?? [ 597.144832][ T6] hub 1-1:0.0: USB hub found [ 597.364090][ T6] hub 1-1:0.0: 1 port detected [ 598.094057][ T6] hub 1-1:0.0: activate --> -90 [ 598.295096][ T6] usb 1-1: USB disconnect, device number 76 14:12:51 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000090018105e22060000000000e10109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "0400", "00000004"}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001d80)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000340)={0x0, 0x0, 0x4, "7a5aa4fd"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 14:12:51 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 14:12:51 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x6, 0x7, &(0x7f0000000300)={{0x0, @remote, 0x0, 0x0, 'ovf\x00'}, {@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x44) 14:12:51 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="f6", 0x1}], 0x1, &(0x7f0000000440)=[{0x10}], 0x10}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000880)="b8", 0x1}], 0x1}}], 0x2, 0xc005) 14:12:51 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x31, &(0x7f0000000300)={{0x0, @remote, 0x0, 0x0, 'ovf\x00'}, {@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x44) 14:12:51 executing program 1: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}], 0x0, 0x0) 14:12:51 executing program 2: openat$vsock(0xffffffffffffff9c, 0x0, 0x840, 0x0) 14:12:51 executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x1c3) 14:12:51 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00'}) 14:12:51 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 598.832191][ T8135] loop1: detected capacity change from 0 to 4 [ 598.867429][ T2971] Dev loop1: unable to read RDB block 4 [ 598.873056][ T2971] loop1: unable to read partition table 14:12:51 executing program 1: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}], 0x0, 0x0) 14:12:51 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_DELPDP(r0, 0x0, 0x0) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580), 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @local}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_LINK={0x8}, @GTPA_FLOW={0x6, 0x6, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x8004}, 0x4010) getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) getresuid(&(0x7f0000000180), 0x0, &(0x7f0000000200)) syz_clone(0x40000000, &(0x7f0000000240)="79d0d779754c71bb619d98e5656cf9842c3185dadc1d8ea625944f97cd42b020aada94e8103be7fae890668039a1397c9d02cfa2659cf47b0cb6a9ec684c0540cecc132ac897d3e53e255841d45ac9e5019172860ba98cdbd5", 0x59, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="be4904f7fcfa00e6fe8e4a573f8fa033b231bce129fe3275d856b39b5c63fbb136d243331cffaadd8e09d56b2bce4be978e9a4a0d93973b605fda75774c65cff100ac9") syz_clone(0xa20a0b00, &(0x7f00000003c0), 0x0, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)="ff552d4acb155bd2e6a0ed23df25175d829bf1364047d82625a3831c5295c5f925cce93fe0f554e29d3c5c70bed394ec9b3733fb4861a1b1e65f9c54b7cad1") [ 598.891980][ T2971] loop1: partition table beyond EOD, truncated [ 598.994939][ T8150] loop1: detected capacity change from 0 to 4 [ 599.020511][ T3642] Dev loop1: unable to read RDB block 4 [ 599.027410][ T3642] loop1: unable to read partition table [ 599.035448][ T3642] loop1: partition table beyond EOD, truncated [ 599.144052][ T3695] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 599.404003][ T3695] usb 1-1: Using ep0 maxpacket: 16 [ 599.544095][ T3695] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 599.555634][ T3695] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 599.566325][ T3695] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 599.673997][ T3695] usb 1-1: New USB device found, idVendor=225e, idProduct=0006, bcdDevice= 0.00 [ 599.683088][ T3695] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=225 [ 599.691317][ T3695] usb 1-1: SerialNumber: syz [ 599.697851][ T3695] usb 1-1: config 0 descriptor?? [ 599.734549][ T3695] hub 1-1:0.0: USB hub found [ 599.955618][ T3695] hub 1-1:0.0: 1 port detected [ 600.684073][ T3695] hub 1-1:0.0: activate --> -90 [ 600.885961][ T6] usb 1-1: USB disconnect, device number 77 14:12:53 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan0\x00'}) 14:12:53 executing program 3: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) accept4$inet6(r0, 0x0, 0x0, 0x0) 14:12:53 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 14:12:53 executing program 1: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}], 0x0, &(0x7f0000000100)=ANY=[]) 14:12:53 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000090018105e22060000000000e10109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "0400", "00000004"}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001d80)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000340)={0x0, 0x0, 0x4, "7a5aa4fd"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 14:12:53 executing program 2: socket$inet6(0xa, 0x2, 0x3f) 14:12:53 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 14:12:53 executing program 5: syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x0) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) 14:12:53 executing program 3: io_uring_setup(0x3f3b, &(0x7f0000000280)={0x0, 0x0, 0x2, 0x2}) [ 601.423000][ T8164] loop1: detected capacity change from 0 to 4 14:12:53 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 601.482594][ T8164] Dev loop1: unable to read RDB block 4 [ 601.499142][ T8164] loop1: unable to read partition table [ 601.520868][ T8164] loop1: partition table beyond EOD, truncated 14:12:53 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x6, 0x24, &(0x7f0000000300)={{0x0, @remote, 0x0, 0x0, 'ovf\x00'}, {@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x44) 14:12:53 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x2a, 0x0, 0x0) 14:12:53 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r0, 0x4606, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1c, 0x2}) [ 601.549417][ T8164] F2FS-fs (loop1): Unable to read 2th superblock 14:12:54 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 14:12:54 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x2, 0x0, 0x0) [ 601.599448][ T8164] syz-executor.1: attempt to access beyond end of device [ 601.599448][ T8164] loop1: rw=12288, sector=4096, nr_sectors = 8 limit=4 [ 601.666922][ T8164] syz-executor.1: attempt to access beyond end of device [ 601.666922][ T8164] loop1: rw=12288, sector=8192, nr_sectors = 8 limit=4 [ 601.725986][ T8164] F2FS-fs (loop1): Failed to get valid F2FS checkpoint [ 601.765581][ T3688] usb 1-1: new high-speed USB device number 78 using dummy_hcd 14:12:54 executing program 1: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}], 0x0, &(0x7f0000000100)=ANY=[]) [ 601.831615][ T8189] loop1: detected capacity change from 0 to 4 [ 601.840827][ T8189] Dev loop1: unable to read RDB block 4 [ 601.846770][ T8189] loop1: unable to read partition table [ 601.852502][ T8189] loop1: partition table beyond EOD, truncated [ 601.859005][ T8189] F2FS-fs (loop1): Unable to read 2th superblock [ 601.866147][ T8189] syz-executor.1: attempt to access beyond end of device [ 601.866147][ T8189] loop1: rw=12288, sector=4096, nr_sectors = 8 limit=4 [ 601.880506][ T8189] syz-executor.1: attempt to access beyond end of device [ 601.880506][ T8189] loop1: rw=12288, sector=8192, nr_sectors = 8 limit=4 [ 601.894737][ T8189] F2FS-fs (loop1): Failed to get valid F2FS checkpoint [ 602.003977][ T3688] usb 1-1: Using ep0 maxpacket: 16 [ 602.124094][ T3688] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 602.135355][ T3688] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 602.146012][ T3688] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 602.234077][ T3688] usb 1-1: New USB device found, idVendor=225e, idProduct=0006, bcdDevice= 0.00 [ 602.243180][ T3688] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=225 [ 602.251541][ T3688] usb 1-1: SerialNumber: syz [ 602.258788][ T3688] usb 1-1: config 0 descriptor?? [ 602.305410][ T3688] hub 1-1:0.0: USB hub found [ 602.524047][ T3688] hub 1-1:0.0: 1 port detected [ 603.264186][ T3688] hub 1-1:0.0: activate --> -90 [ 603.467219][ T6] usb 1-1: USB disconnect, device number 78 14:12:56 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000090018105e22060000000000e10109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "0400", "00000004"}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001d80)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000340)={0x0, 0x0, 0x4, "7a5aa4fd"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 14:12:56 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x6, 0x22, &(0x7f0000000300)={{0x0, @remote, 0x0, 0x0, 'ovf\x00'}, {@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x44) 14:12:56 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x21, 0x0, 0x0) 14:12:56 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 14:12:56 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x2, 0x0, 0x0) 14:12:56 executing program 1: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}], 0x0, &(0x7f0000000100)=ANY=[]) 14:12:56 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700000000f6c3000000000000", @ANYRES32=r2], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 14:12:56 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, 0x0) [ 604.007028][ T8199] loop1: detected capacity change from 0 to 4 14:12:56 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1}, 0x14}}, 0x0) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580), 0xc, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x8004}, 0x4010) getresuid(&(0x7f0000000000), 0x0, &(0x7f0000000080)) syz_clone(0x40000000, &(0x7f0000000240), 0x0, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="be4904f7fcfa00e6fe8e4a573f8fa033b231bce129fe3275d856b39b5c63fbb136d243331cffaadd8e09d56b2bce4be978e9a4a0d93973b605fda75774c65cff100ac9") syz_clone(0xa20a0b00, &(0x7f00000003c0)="83c0af3cd1385b69a9422c1b1d3f688d2e777555f3dc9e6bdf7b3ba83c42d382fa413a62b0fc759773537d0a0f1d88f477eb713f279eae5a39c9efb6f15d640b4ac3ff2397d768ce3fe83b41c3d3bcee4ce32da7d905", 0x56, 0x0, 0x0, &(0x7f00000004c0)="ff552d4acb155bd2e6a0ed23df25175d829bf1364047d82625a3831c5295c5f925cce93fe0f554e29d3c5c70bed394ec9b3733fb4861a1b1e65f9c54b7cad1d3") 14:12:56 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x6, 0x2, &(0x7f0000000300)={{0x0, @remote, 0x0, 0x0, 'ovf\x00'}, {@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x44) 14:12:56 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x6, 0x11, &(0x7f0000000300)={{0x0, @remote, 0x0, 0x0, 'ovf\x00'}, {@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x44) [ 604.064114][ T8199] Dev loop1: unable to read RDB block 4 [ 604.079283][ T8199] loop1: unable to read partition table [ 604.091058][ T8204] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 604.100932][ T8199] loop1: partition table beyond EOD, truncated 14:12:56 executing program 3: r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, &(0x7f0000000040)) [ 604.119259][ T8199] F2FS-fs (loop1): Unable to read 2th superblock [ 604.170821][ T8199] syz-executor.1: attempt to access beyond end of device [ 604.170821][ T8199] loop1: rw=12288, sector=4096, nr_sectors = 8 limit=4 [ 604.204913][ T8199] syz-executor.1: attempt to access beyond end of device [ 604.204913][ T8199] loop1: rw=12288, sector=8192, nr_sectors = 8 limit=4 [ 604.233253][ T8199] F2FS-fs (loop1): Failed to get valid F2FS checkpoint [ 604.314197][ T3688] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 604.554192][ T3688] usb 1-1: Using ep0 maxpacket: 16 [ 604.674198][ T3688] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 604.685419][ T3688] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 604.695266][ T3688] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 604.794230][ T3688] usb 1-1: New USB device found, idVendor=225e, idProduct=0006, bcdDevice= 0.00 [ 604.806873][ T3688] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=225 [ 604.821622][ T3688] usb 1-1: SerialNumber: syz [ 604.830199][ T3688] usb 1-1: config 0 descriptor?? [ 604.875517][ T3688] hub 1-1:0.0: USB hub found [ 605.084108][ T3688] hub 1-1:0.0: 1 port detected [ 605.834298][ T3688] hub 1-1:0.0: activate --> -90 [ 606.039733][ T2933] usb 1-1: USB disconnect, device number 79 14:12:58 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000002240)) 14:12:58 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700000000f6c3000000000000", @ANYRES32=r2], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 14:12:58 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x6, 0x10, &(0x7f0000000300)={{0x0, @remote, 0x0, 0x0, 'ovf\x00'}, {@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x44) 14:12:58 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000003480)="ab2e30323586f1628ca3a2d56abeab87", 0x10) sendmmsg$alg(r1, &(0x7f00000062c0)=[{0x0, 0x0, 0x0}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000004800)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000300)=""/55, 0x37}], 0x1}}, {{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000f00)=""/221, 0xdd}], 0x1}}], 0x2, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000d80)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="921b19f21a075cd23301f94b75876869a02a74d52f1a8ced92e5a3db4313e0c207446510383dce64702b14852f6fff0b6f9d8e14c00ff583bca8ba7e138e227606c7875d30349c0698916d8de61044d563c57c73ba740d1c0d8fb62b62db6e4abb", 0x61}], 0x1}], 0x1, 0x0) 14:12:58 executing program 1: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}], 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB]) 14:12:58 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000090018105e22060000000000e10109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "0400", "00000004"}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001d80)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000340)={0x0, 0x0, 0x4, "7a5aa4fd"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 14:12:58 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000100)={'\x00', 0x0, 0x8000000, 0x400}) 14:12:58 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000000)=0x5, 0x4) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x14) recvmmsg(r0, &(0x7f0000003c80), 0x38e, 0x62, 0x0) [ 606.575905][ T8221] loop1: detected capacity change from 0 to 4 [ 606.584176][ T8224] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. 14:12:59 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700000000f6c3000000000000", @ANYRES32=r2], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 606.642390][ T8221] Dev loop1: unable to read RDB block 4 [ 606.656493][ T8221] loop1: unable to read partition table [ 606.682453][ T8221] loop1: partition table beyond EOD, truncated 14:12:59 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010360)="1020f5f2", 0x4, 0x1400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f00000107c0)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000010ca0)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000010da0)=ANY=[]) [ 606.698960][ T8233] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 606.701761][ T8236] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 606.727506][ T8221] F2FS-fs (loop1): Unable to read 2th superblock [ 606.750655][ T8221] syz-executor.1: attempt to access beyond end of device [ 606.750655][ T8221] loop1: rw=12288, sector=4096, nr_sectors = 8 limit=4 [ 606.790716][ T8221] syz-executor.1: attempt to access beyond end of device 14:12:59 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000000)=0x5, 0x4) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x14) recvmmsg(r0, &(0x7f0000003c80), 0x38e, 0x62, 0x0) 14:12:59 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700000000f6c3000000000000", @ANYRES32=r2, @ANYBLOB], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 606.790716][ T8221] loop1: rw=12288, sector=8192, nr_sectors = 8 limit=4 [ 606.791264][ T8239] loop3: detected capacity change from 0 to 65551 [ 606.813613][ T8221] F2FS-fs (loop1): Failed to get valid F2FS checkpoint 14:12:59 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700000000f6c3000000000000", @ANYRES32=r2, @ANYBLOB], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 606.852425][ T8244] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. 14:12:59 executing program 1: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}], 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB]) 14:12:59 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000003480)="ab2e30323586f1628ca3a2d56abeab87", 0x10) recvmmsg(r1, &(0x7f0000004800)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000300)=""/55, 0x37}], 0x1}}, {{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000340)=""/28, 0x1c}, {&(0x7f0000000f00)=""/221, 0xdd}], 0x2}}], 0x2, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000d80)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="921b19f21a075cd23301f94b75876869a02a74d52f1a8ced92e5a3db4313e0c207446510383dce64702b14852f6fff0b6f9d8e14c00ff583bca8ba7e138e227606c7875d30349c0698916d8de61044d563c57c73ba740d1c0d8fb62b62db6e4abb", 0x61}], 0x1}], 0x1, 0x0) [ 606.898904][ T2933] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 606.913284][ T8239] F2FS-fs (loop3): Invalid log_blocksize (0), supports only 12 14:12:59 executing program 2: ioctl$HIDIOCSFLAG(0xffffffffffffffff, 0x4004480f, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x1c1241) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000001140)={0x84, 0x0, &(0x7f00000007c0)={0x0, 0xa, 0x1}, &(0x7f0000000dc0)={0x0, 0x8, 0x1}, &(0x7f0000000e00)={0x20, 0x0, 0x4}, &(0x7f0000000e40)={0x20, 0x0, 0x4}, 0x0, 0x0, &(0x7f0000000f00)={0x40, 0xb, 0x2, "2102"}, &(0x7f0000000f40)={0x40, 0xf, 0x2}, &(0x7f0000000f80)={0x40, 0x13, 0x6}, 0x0, &(0x7f0000001000)={0x40, 0x19, 0x2, "c3b4"}, &(0x7f0000001040)={0x40, 0x1a, 0x2, 0x3}, &(0x7f0000001080)={0x40, 0x1c, 0x1, 0x3}, &(0x7f00000010c0)={0x40, 0x1e, 0x1}, 0x0}) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0) [ 606.951532][ T8239] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 606.960991][ T8250] loop1: detected capacity change from 0 to 4 [ 606.968398][ T8251] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 606.982822][ T2971] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 14:12:59 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700000000f6c3000000000000", @ANYRES32=r2, @ANYBLOB], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 607.001938][ T2971] Buffer I/O error on dev loop1, logical block 0, async page read [ 607.013317][ T8239] F2FS-fs (loop3): invalid crc_offset: 0 [ 607.025745][ T2971] Dev loop1: unable to read RDB block 4 [ 607.032127][ T8256] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 607.032749][ T2971] loop1: unable to read partition table [ 607.050272][ T2971] loop1: partition table beyond EOD, truncated [ 607.056975][ T8239] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 0) [ 607.067045][ T8250] F2FS-fs (loop1): Unable to read 2th superblock [ 607.082210][ T8250] syz-executor.1: attempt to access beyond end of device [ 607.082210][ T8250] loop1: rw=12288, sector=4096, nr_sectors = 8 limit=4 [ 607.111551][ T8250] syz-executor.1: attempt to access beyond end of device [ 607.111551][ T8250] loop1: rw=12288, sector=8192, nr_sectors = 8 limit=4 [ 607.131971][ T8239] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 607.132161][ T8250] F2FS-fs (loop1): Failed to get valid F2FS checkpoint [ 607.149205][ T8239] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 607.204219][ T2933] usb 1-1: Using ep0 maxpacket: 16 [ 607.261757][ T8239] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 607.269621][ T8239] F2FS-fs (loop3): Mounted with checkpoint version = 753bd00b [ 607.294072][ T14] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 607.344653][ T2933] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 607.362806][ T2933] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 607.377347][ T2933] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 607.464086][ T2933] usb 1-1: New USB device found, idVendor=225e, idProduct=0006, bcdDevice= 0.00 [ 607.473268][ T2933] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=225 [ 607.485357][ T2933] usb 1-1: SerialNumber: syz [ 607.492552][ T2933] usb 1-1: config 0 descriptor?? [ 607.535048][ T2933] hub 1-1:0.0: USB hub found [ 607.554147][ T14] usb 3-1: Using ep0 maxpacket: 16 [ 607.674569][ T14] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 607.685873][ T14] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 607.695819][ T14] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 607.704957][ T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.714178][ T14] usb 3-1: config 0 descriptor?? [ 607.754187][ T2933] hub 1-1:0.0: 1 port detected [ 607.960419][ T8254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 607.969894][ T8254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 608.222221][ T14] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.0001/input/input8 [ 608.317258][ T14] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.0001/input/input9 [ 608.408168][ T14] kye 0003:0458:5019.0001: input,hiddev0,hidraw0: USB HID v0.00 Pointer [HID 0458:5019] on usb-dummy_hcd.2-1/input0 [ 608.429403][ T8254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 608.450367][ T8254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 608.484114][ T2933] hub 1-1:0.0: activate --> -90 [ 608.697707][ T14] usb 1-1: USB disconnect, device number 80 14:13:01 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev, @private0, 0x0, 0x0, 0x7}) 14:13:01 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700000000f6c3000000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 14:13:01 executing program 1: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}], 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB]) 14:13:01 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010360)="1020f5f2", 0x4, 0x1400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f00000107c0)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000010ca0)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000010da0)=ANY=[]) 14:13:01 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000090018105e22060000000000e10109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "0400", "00000004"}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001d80)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 14:13:01 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x28011, r3, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@filter={'filter\x00', 0xe, 0x3, 0x1be, [], 0x0, 0x0, &(0x7f0000000380)=[{}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x2, 0xfffffffffffffffc, 0x1, [{0x0, 0x0, 0xa01, 'veth1_macvtap\x00', 'veth1_to_bridge\x00', 'veth1_to_team\x00', 'tunl0\x00', @broadcast, [], @dev, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0x6e, 0xe6, 0x12e, [], [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x3f, 0xc1}}}, @common=@STANDARD={'\x00', 0x8}], @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}}]}]}, 0x236) r4 = gettid() process_vm_writev(r4, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) 14:13:01 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700000000f6c3000000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 609.221619][ T8266] loop3: detected capacity change from 0 to 65551 [ 609.225476][ T8268] loop1: detected capacity change from 0 to 4 [ 609.261571][ T8266] F2FS-fs (loop3): Invalid log_blocksize (0), supports only 12 [ 609.285246][ T8268] Dev loop1: unable to read RDB block 4 [ 609.303428][ T8266] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 609.308191][ T8268] loop1: unable to read partition table [ 609.312493][ C1] kye 0003:0458:5019.0001: usb_submit_urb(ctrl) failed: -1 14:13:01 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700000000f6c3000000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 609.370666][ T8268] loop1: partition table beyond EOD, truncated [ 609.389228][ T8266] F2FS-fs (loop3): invalid crc_offset: 0 [ 609.412875][ T8268] F2FS-fs (loop1): Unable to read 2th superblock [ 609.440726][ T8268] syz-executor.1: attempt to access beyond end of device [ 609.440726][ T8268] loop1: rw=12288, sector=4096, nr_sectors = 8 limit=4 14:13:01 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700000000f6c3000000000000", @ANYRES32=r2, @ANYBLOB="000000000000000028001200090001"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 609.461713][ T8266] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 0) [ 609.510361][ T8268] syz-executor.1: attempt to access beyond end of device [ 609.510361][ T8268] loop1: rw=12288, sector=8192, nr_sectors = 8 limit=4 [ 609.532159][ T8266] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. 14:13:01 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700000000f6c3000000000000", @ANYRES32=r2, @ANYBLOB="000000000000000028001200090001"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 609.553992][ T3688] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 609.554525][ T8284] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 609.581782][ T8268] F2FS-fs (loop1): Failed to get valid F2FS checkpoint [ 609.590017][ T8266] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 609.732585][ T8286] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 609.742400][ T8266] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 14:13:02 executing program 1: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}], 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='alloc_mode=default,noinline_']) [ 609.787317][ T8266] F2FS-fs (loop3): Mounted with checkpoint version = 753bd00b [ 609.795345][ T3688] usb 1-1: Using ep0 maxpacket: 16 14:13:02 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700000000f6c3000000000000", @ANYRES32=r2, @ANYBLOB="000000000000000028001200090001"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 14:13:02 executing program 2: ioctl$HIDIOCSFLAG(0xffffffffffffffff, 0x4004480f, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x1c1241) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000001140)={0x84, 0x0, &(0x7f00000007c0)={0x0, 0xa, 0x1}, &(0x7f0000000dc0)={0x0, 0x8, 0x1}, &(0x7f0000000e00)={0x20, 0x0, 0x4}, &(0x7f0000000e40)={0x20, 0x0, 0x4}, 0x0, 0x0, &(0x7f0000000f00)={0x40, 0xb, 0x2, "2102"}, &(0x7f0000000f40)={0x40, 0xf, 0x2}, &(0x7f0000000f80)={0x40, 0x13, 0x6}, 0x0, &(0x7f0000001000)={0x40, 0x19, 0x2, "c3b4"}, &(0x7f0000001040)={0x40, 0x1a, 0x2, 0x3}, &(0x7f0000001080)={0x40, 0x1c, 0x1, 0x3}, &(0x7f00000010c0)={0x40, 0x1e, 0x1}, 0x0}) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0) [ 609.854876][ T8289] loop1: detected capacity change from 0 to 4 [ 609.886772][ T8291] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 14:13:02 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010360)="1020f5f2", 0x4, 0x1400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f00000107c0)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000010ca0)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000010da0)=ANY=[]) [ 609.905964][ T8289] Dev loop1: unable to read RDB block 4 [ 609.924262][ T3688] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 14:13:02 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700000000f6c3000000000000", @ANYRES32=r2, @ANYBLOB="000000000000000028001200090001007665"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 609.949605][ T3688] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 609.959739][ T8289] loop1: unable to read partition table [ 609.994399][ T8289] loop1: partition table beyond EOD, truncated [ 610.016290][ T8289] F2FS-fs (loop1): Unable to read 2th superblock [ 610.023816][ T3688] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 14:13:02 executing program 1: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}], 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='alloc_mode=default,noinline_']) [ 610.058702][ T8289] F2FS-fs (loop1): Unrecognized mount option "noinline_" or missing value [ 610.079522][ T8296] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 610.174129][ T3688] usb 1-1: New USB device found, idVendor=225e, idProduct=0006, bcdDevice= 0.00 [ 610.201122][ T3688] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=225 [ 610.206416][ T8300] loop1: detected capacity change from 0 to 4 [ 610.234616][ T8300] Dev loop1: unable to read RDB block 4 [ 610.244801][ T3688] usb 1-1: SerialNumber: syz [ 610.245348][ T14] usb 3-1: reset high-speed USB device number 2 using dummy_hcd [ 610.266637][ T8300] loop1: unable to read partition table [ 610.272379][ T8300] loop1: partition table beyond EOD, truncated [ 610.284777][ T3688] usb 1-1: config 0 descriptor?? [ 610.312845][ T8300] F2FS-fs (loop1): Unable to read 2th superblock [ 610.324805][ T8302] loop3: detected capacity change from 0 to 65551 [ 610.334718][ T3688] hub 1-1:0.0: USB hub found [ 610.350394][ T8302] F2FS-fs (loop3): Invalid log_blocksize (0), supports only 12 [ 610.350406][ T8300] F2FS-fs (loop1): Unrecognized mount option "noinline_" or missing value [ 610.369909][ T8302] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 610.381687][ T8302] F2FS-fs (loop3): invalid crc_offset: 0 [ 610.447810][ T8302] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 0) [ 610.489243][ T8302] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 610.500226][ T8302] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 610.554022][ T3688] hub 1-1:0.0: 1 port detected [ 610.583056][ T8302] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 610.591122][ T8302] F2FS-fs (loop3): Mounted with checkpoint version = 753bd00b [ 610.599041][ T14] usb 3-1: Using ep0 maxpacket: 16 [ 610.937536][ T8293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 610.946207][ T8293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 611.227661][ T8293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 611.236301][ T8293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 611.324102][ T3688] hub 1-1:0.0: activate --> -90 [ 611.525831][ T3688] usb 1-1: USB disconnect, device number 81 14:13:04 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000090018105e22060000000000e10109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "0400", "00000004"}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001d80)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 14:13:04 executing program 1: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}], 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='alloc_mode=default,noinline_']) 14:13:04 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700000000f6c3000000000000", @ANYRES32=r2, @ANYBLOB="000000000000000028001200090001007665"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 14:13:04 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x28011, r3, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@filter={'filter\x00', 0xe, 0x3, 0x1be, [], 0x0, 0x0, &(0x7f0000000380)=[{}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x2, 0xfffffffffffffffc, 0x1, [{0x0, 0x0, 0xa01, 'veth1_macvtap\x00', 'veth1_to_bridge\x00', 'veth1_to_team\x00', 'tunl0\x00', @broadcast, [], @dev, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0x6e, 0xe6, 0x12e, [], [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x3f, 0xc1}}}, @common=@STANDARD={'\x00', 0x8}], @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}}]}]}, 0x236) r4 = gettid() process_vm_writev(r4, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) 14:13:04 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010360)="1020f5f2", 0x4, 0x1400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f00000107c0)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000010ca0)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000010da0)=ANY=[]) [ 612.058280][ T8310] loop1: detected capacity change from 0 to 4 [ 612.060522][ T8309] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 612.070835][ T8313] loop3: detected capacity change from 0 to 65551 [ 612.096969][ T8310] Dev loop1: unable to read RDB block 4 [ 612.104817][ T8313] F2FS-fs (loop3): Invalid log_blocksize (0), supports only 12 [ 612.111103][ T8310] loop1: unable to read partition table [ 612.118936][ T8310] loop1: partition table beyond EOD, truncated [ 612.125353][ T8313] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 612.139956][ T8310] F2FS-fs (loop1): Unable to read 2th superblock [ 612.153071][ T8313] F2FS-fs (loop3): invalid crc_offset: 0 [ 612.168528][ T8310] F2FS-fs (loop1): Unrecognized mount option "noinline_" or missing value [ 612.204216][ T8313] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 0) 14:13:04 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700000000f6c3000000000000", @ANYRES32=r2, @ANYBLOB="000000000000000028001200090001007665"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 14:13:04 executing program 1: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}], 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='alloc_mode=default,noinline_xattr,inline_x']) [ 612.291825][ T8313] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 612.298213][ T8325] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 612.310401][ C0] kye 0003:0458:5019.0001: usb_submit_urb(ctrl) failed: -1 [ 612.344844][ T8313] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 612.356978][ T8327] loop1: detected capacity change from 0 to 4 [ 612.374454][ T8327] Dev loop1: unable to read RDB block 4 [ 612.387994][ T3688] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 612.401656][ T8327] loop1: unable to read partition table [ 612.428512][ T8327] loop1: partition table beyond EOD, truncated [ 612.453635][ T8327] F2FS-fs (loop1): Unable to read 2th superblock [ 612.464965][ T8327] F2FS-fs (loop1): Unrecognized mount option "inline_x" or missing value 14:13:04 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700000000f6c3000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000002800120009000100766574"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 612.593523][ T8313] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 612.651286][ T8313] F2FS-fs (loop3): Mounted with checkpoint version = 753bd00b [ 612.659216][ T3688] usb 1-1: Using ep0 maxpacket: 16 [ 612.678046][ T8332] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 14:13:05 executing program 1: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}], 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='alloc_mode=default,noinline_xattr,inline_x']) 14:13:05 executing program 3: syz_mount_image$f2fs(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010360)="1020f5f2", 0x4, 0x1400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f00000107c0)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000010ca0)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000010da0)=ANY=[]) 14:13:05 executing program 2: ioctl$HIDIOCSFLAG(0xffffffffffffffff, 0x4004480f, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x1c1241) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000001140)={0x84, 0x0, &(0x7f00000007c0)={0x0, 0xa, 0x1}, &(0x7f0000000dc0)={0x0, 0x8, 0x1}, &(0x7f0000000e00)={0x20, 0x0, 0x4}, &(0x7f0000000e40)={0x20, 0x0, 0x4}, 0x0, 0x0, &(0x7f0000000f00)={0x40, 0xb, 0x2, "2102"}, &(0x7f0000000f40)={0x40, 0xf, 0x2}, &(0x7f0000000f80)={0x40, 0x13, 0x6}, 0x0, &(0x7f0000001000)={0x40, 0x19, 0x2, "c3b4"}, &(0x7f0000001040)={0x40, 0x1a, 0x2, 0x3}, &(0x7f0000001080)={0x40, 0x1c, 0x1, 0x3}, &(0x7f00000010c0)={0x40, 0x1e, 0x1}, 0x0}) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0) [ 612.804038][ T3688] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 612.815348][ T3688] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 612.825558][ T3688] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 612.846752][ T8336] loop1: detected capacity change from 0 to 4 14:13:05 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700000000f6c3000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000002800120009000100766574"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 612.855087][ T8336] Dev loop1: unable to read RDB block 4 [ 612.876327][ T8336] loop1: unable to read partition table [ 612.882206][ T8336] loop1: partition table beyond EOD, truncated [ 612.894155][ T8336] F2FS-fs (loop1): Unable to read 2th superblock [ 612.933272][ T8336] F2FS-fs (loop1): Unrecognized mount option "inline_x" or missing value [ 612.974036][ T3688] usb 1-1: New USB device found, idVendor=225e, idProduct=0006, bcdDevice= 0.00 [ 612.983143][ T3688] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=225 [ 613.011415][ T8340] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 613.015804][ T3688] usb 1-1: SerialNumber: syz [ 613.044840][ T3688] usb 1-1: config 0 descriptor?? [ 613.050180][ T8342] loop3: detected capacity change from 0 to 65551 [ 613.104767][ T3688] hub 1-1:0.0: USB hub found [ 613.334061][ T3688] hub 1-1:0.0: 1 port detected [ 613.424187][ T2933] usb 3-1: reset high-speed USB device number 2 using dummy_hcd [ 613.674073][ T2933] usb 3-1: Using ep0 maxpacket: 16 [ 613.998876][ T8338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 614.008083][ T8338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 614.114213][ T3689] hub 1-1:0.0: activate --> -90 [ 614.279517][ T8338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 614.288249][ T8338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 614.320928][ T2933] usb 1-1: USB disconnect, device number 82 14:13:07 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000090018105e22060000000000e10109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "0400", "00000004"}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001d80)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 14:13:07 executing program 3: syz_mount_image$f2fs(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010360)="1020f5f2", 0x4, 0x1400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f00000107c0)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000010ca0)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000010da0)=ANY=[]) 14:13:07 executing program 1: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}], 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='alloc_mode=default,noinline_xattr,inline_x']) 14:13:07 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700000000f6c3000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000002800120009000100766574"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 14:13:07 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) creat(0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) syz_usb_connect$uac1(0x0, 0x78, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x66, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x2, 0x0, 0x101}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x7, 0x50, 0x0, {0x7, 0x25, 0x1, 0x3, 0x7a, 0x6}}}}}}}]}}, &(0x7f0000000180)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x0, 0x0, 0x1, 0x3f, 0x8}, 0x0, 0x0}) [ 614.853306][ T8350] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 614.858721][ T8352] loop1: detected capacity change from 0 to 4 [ 614.872620][ T8349] loop3: detected capacity change from 0 to 65551 [ 614.873769][ T8352] Dev loop1: unable to read RDB block 4 [ 614.886817][ T8352] loop1: unable to read partition table 14:13:07 executing program 3: syz_mount_image$f2fs(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010360)="1020f5f2", 0x4, 0x1400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f00000107c0)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000010ca0)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000010da0)=ANY=[]) 14:13:07 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700000000f6c3000000000000", @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 614.908072][ T8352] loop1: partition table beyond EOD, truncated [ 614.943304][ T8352] F2FS-fs (loop1): Unable to read 2th superblock [ 615.006034][ T8352] F2FS-fs (loop1): Unrecognized mount option "inline_x" or missing value [ 615.019291][ T8360] loop3: detected capacity change from 0 to 65551 [ 615.029110][ T3742] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 615.029334][ T8362] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 615.046818][ T3742] Buffer I/O error on dev loop3, logical block 0, async page read 14:13:07 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700000000f6c3000000000000", @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 14:13:07 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), 0x0, 0x0, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010360)="1020f5f2", 0x4, 0x1400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f00000107c0)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000010ca0)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000010da0)=ANY=[]) [ 615.081504][ T3742] loop3: unable to read partition table 14:13:07 executing program 1: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}], 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='alloc_mode=default,noinline_xattr,inline_xattr_si']) [ 615.183435][ T8364] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 615.194634][ T2933] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 615.251061][ T8367] loop3: detected capacity change from 0 to 65551 [ 615.252249][ T8368] loop1: detected capacity change from 0 to 4 [ 615.265109][ T3742] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 615.270647][ T3887] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 615.283958][ T3689] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 615.293266][ T3887] Buffer I/O error on dev loop1, logical block 0, async page read [ 615.303790][ T3742] Buffer I/O error on dev loop3, logical block 0, async page read [ 615.323523][ T3742] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 615.336771][ T3742] Buffer I/O error on dev loop3, logical block 0, async page read [ 615.345263][ T3887] Dev loop1: unable to read RDB block 4 [ 615.351466][ T3887] loop1: unable to read partition table [ 615.359459][ T3887] loop1: partition table beyond EOD, truncated [ 615.366529][ T8368] F2FS-fs (loop1): Unable to read 2th superblock [ 615.383491][ T8368] F2FS-fs (loop1): Unrecognized mount option "inline_xattr_si" or missing value [ 615.417825][ T3742] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 615.431599][ T3742] Buffer I/O error on dev loop3, logical block 0, async page read [ 615.439726][ C0] kye 0003:0458:5019.0001: usb_submit_urb(ctrl) failed: -1 [ 615.448742][ T3694] usb 3-1: USB disconnect, device number 2 [ 615.454798][ T2933] usb 1-1: Using ep0 maxpacket: 16 [ 615.487864][ T3742] ldm_validate_partition_table(): Disk read failed. [ 615.523421][ T3742] Dev loop3: unable to read RDB block 0 [ 615.529526][ T3742] loop3: unable to read partition table [ 615.536830][ T3742] loop3: partition table beyond EOD, truncated [ 615.574192][ T3689] usb 6-1: Using ep0 maxpacket: 32 [ 615.584050][ T2933] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 615.613237][ T2933] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 615.676224][ T2933] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 615.714114][ T3689] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 615.741376][ T3689] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 615.784252][ T2933] usb 1-1: New USB device found, idVendor=225e, idProduct=0006, bcdDevice= 0.00 [ 615.793796][ T2933] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=225 [ 615.806269][ T2933] usb 1-1: SerialNumber: syz [ 615.821112][ T2933] usb 1-1: config 0 descriptor?? [ 615.864471][ T2933] hub 1-1:0.0: USB hub found 14:13:08 executing program 2: ioctl$HIDIOCSFLAG(0xffffffffffffffff, 0x4004480f, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x1c1241) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000001140)={0x84, 0x0, &(0x7f00000007c0)={0x0, 0xa, 0x1}, &(0x7f0000000dc0)={0x0, 0x8, 0x1}, &(0x7f0000000e00)={0x20, 0x0, 0x4}, &(0x7f0000000e40)={0x20, 0x0, 0x4}, 0x0, 0x0, &(0x7f0000000f00)={0x40, 0xb, 0x2, "2102"}, &(0x7f0000000f40)={0x40, 0xf, 0x2}, &(0x7f0000000f80)={0x40, 0x13, 0x6}, 0x0, &(0x7f0000001000)={0x40, 0x19, 0x2, "c3b4"}, &(0x7f0000001040)={0x40, 0x1a, 0x2, 0x3}, &(0x7f0000001080)={0x40, 0x1c, 0x1, 0x3}, &(0x7f00000010c0)={0x40, 0x1e, 0x1}, 0x0}) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0) 14:13:08 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700000000f6c3000000000000", @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 615.954023][ T3689] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 615.983927][ T8370] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 616.009883][ T3689] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.021032][ T3689] usb 6-1: Product: syz [ 616.028193][ T3689] usb 6-1: Manufacturer: syz [ 616.034406][ T3689] usb 6-1: SerialNumber: syz [ 616.084091][ T2933] hub 1-1:0.0: 1 port detected [ 616.354079][ T917] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 616.634066][ T917] usb 3-1: Using ep0 maxpacket: 16 [ 616.774149][ T917] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 616.785683][ T917] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 616.795648][ T917] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 616.804911][ T917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.820688][ T917] usb 3-1: config 0 descriptor?? [ 616.854064][ T2933] hub 1-1:0.0: activate --> -90 [ 617.056308][ T2933] usb 1-1: USB disconnect, device number 83 [ 617.068581][ T8372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 617.079059][ T8372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 617.352760][ T917] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.0002/input/input10 [ 617.449603][ T917] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.0002/input/input11 14:13:09 executing program 1: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}], 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='alloc_mode=default,noinline_xattr,inline_xattr_si']) 14:13:09 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), 0x0, 0x0, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010360)="1020f5f2", 0x4, 0x1400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f00000107c0)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000010ca0)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000010da0)=ANY=[]) 14:13:09 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700000000f6c3000000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 14:13:09 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000090018105e22060000000000e10109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "0400", "00000004"}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001d80)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 617.545639][ T8372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 617.559893][ T8372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 617.619048][ T8380] loop1: detected capacity change from 0 to 4 [ 617.627674][ T8378] loop3: detected capacity change from 0 to 65551 [ 617.631501][ T8380] Dev loop1: unable to read RDB block 4 [ 617.635490][ T8379] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 617.642055][ T8380] loop1: unable to read partition table [ 617.651035][ T917] kye 0003:0458:5019.0002: input,hiddev0,hidraw0: USB HID v0.00 Pointer [HID 0458:5019] on usb-dummy_hcd.2-1/input0 [ 617.669369][ T8380] loop1: partition table beyond EOD, truncated [ 617.687694][ T8380] F2FS-fs (loop1): Unable to read 2th superblock [ 617.710532][ T8380] F2FS-fs (loop1): Unrecognized mount option "inline_xattr_si" or missing value 14:13:10 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) creat(0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) syz_usb_connect$uac1(0x0, 0x78, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x66, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x2, 0x0, 0x101}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x7, 0x50, 0x0, {0x7, 0x25, 0x1, 0x3, 0x7a, 0x6}}}}}}}]}}, &(0x7f0000000180)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x0, 0x0, 0x1, 0x3f, 0x8}, 0x0, 0x0}) 14:13:10 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), 0x0, 0x0, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010360)="1020f5f2", 0x4, 0x1400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f00000107c0)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000010ca0)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000010da0)=ANY=[]) 14:13:10 executing program 1: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}], 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='alloc_mode=default,noinline_xattr,inline_xattr_si']) 14:13:10 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700000000f6c3000000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 617.884059][ T2933] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 617.949984][ T8384] loop3: detected capacity change from 0 to 65551 [ 617.956096][ T6] usb 3-1: USB disconnect, device number 3 [ 617.961533][ T8386] loop1: detected capacity change from 0 to 4 [ 617.970821][ T8387] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 617.985913][ T3689] usb 6-1: 0:2 : does not exist [ 618.019876][ T8386] Dev loop1: unable to read RDB block 4 [ 618.038649][ T3689] usb 6-1: USB disconnect, device number 29 [ 618.057021][ T8386] loop1: unable to read partition table 14:13:10 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010da0)=ANY=[]) [ 618.066713][ T8386] loop1: partition table beyond EOD, truncated [ 618.076679][ T8386] F2FS-fs (loop1): Unable to read 2th superblock [ 618.083307][ T8386] F2FS-fs (loop1): Unrecognized mount option "inline_xattr_si" or missing value 14:13:10 executing program 1: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}], 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='alloc_mode=default,noinline_xattr,inline_xattr_size=']) [ 618.164337][ T2933] usb 1-1: Using ep0 maxpacket: 16 [ 618.189810][ T8395] loop1: detected capacity change from 0 to 4 [ 618.201425][ T8395] Dev loop1: unable to read RDB block 4 [ 618.208269][ T8395] loop1: unable to read partition table [ 618.221971][ T8395] loop1: partition table beyond EOD, truncated [ 618.229005][ T8395] F2FS-fs (loop1): Unable to read 2th superblock [ 618.236110][ T8395] F2FS-fs (loop1): Unrecognized mount option "inline_xattr_size=" or missing value [ 618.286348][ T2933] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 618.302266][ T2933] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 618.345461][ T2933] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 14:13:10 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700000000f6c3000000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 14:13:10 executing program 2: ioctl$HIDIOCSFLAG(0xffffffffffffffff, 0x4004480f, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x1c1241) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000001140)={0x84, 0x0, &(0x7f00000007c0)={0x0, 0xa, 0x1}, &(0x7f0000000dc0)={0x0, 0x8, 0x1}, &(0x7f0000000e00)={0x20, 0x0, 0x4}, &(0x7f0000000e40)={0x20, 0x0, 0x4}, 0x0, 0x0, &(0x7f0000000f00)={0x40, 0xb, 0x2, "2102"}, &(0x7f0000000f40)={0x40, 0xf, 0x2}, &(0x7f0000000f80)={0x40, 0x13, 0x6}, 0x0, &(0x7f0000001000)={0x40, 0x19, 0x2, "c3b4"}, &(0x7f0000001040)={0x40, 0x1a, 0x2, 0x3}, &(0x7f0000001080)={0x40, 0x1c, 0x1, 0x3}, &(0x7f00000010c0)={0x40, 0x1e, 0x1}, 0x0}) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0) 14:13:10 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010da0)=ANY=[]) 14:13:10 executing program 1: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}], 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='alloc_mode=default,noinline_xattr,inline_xattr_size=']) [ 618.467576][ T2933] usb 1-1: New USB device found, idVendor=225e, idProduct=0006, bcdDevice= 0.00 [ 618.497641][ T8400] loop1: detected capacity change from 0 to 4 [ 618.522492][ T2933] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=225 [ 618.531456][ T8402] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 618.536308][ T2933] usb 1-1: SerialNumber: syz [ 618.551437][ T8400] Dev loop1: unable to read RDB block 4 [ 618.560475][ T2933] usb 1-1: config 0 descriptor?? [ 618.565679][ T8400] loop1: unable to read partition table 14:13:10 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010da0)=ANY=[]) [ 618.576138][ T8400] loop1: partition table beyond EOD, truncated [ 618.588581][ T8400] F2FS-fs (loop1): Unable to read 2th superblock [ 618.596815][ T8400] F2FS-fs (loop1): Unrecognized mount option "inline_xattr_size=" or missing value [ 618.607007][ T2933] hub 1-1:0.0: USB hub found [ 618.654024][ T3689] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 618.824189][ T2933] hub 1-1:0.0: 1 port detected [ 618.844114][ T3694] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 618.904625][ T3689] usb 6-1: Using ep0 maxpacket: 32 [ 619.044026][ T3689] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 619.060523][ T3689] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 619.083985][ T3694] usb 3-1: Using ep0 maxpacket: 16 [ 619.204182][ T3694] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 619.215505][ T3694] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 619.226171][ T3694] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 619.242265][ T3694] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.261772][ T3694] usb 3-1: config 0 descriptor?? [ 619.284205][ T3689] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 619.302510][ T3689] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.311509][ T3689] usb 6-1: Product: syz [ 619.315975][ T3689] usb 6-1: Manufacturer: syz [ 619.320696][ T3689] usb 6-1: SerialNumber: syz [ 619.536892][ T8404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 619.547256][ T8404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 619.594348][ T2933] hub 1-1:0.0: activate --> -90 [ 619.796412][ T917] usb 1-1: USB disconnect, device number 84 [ 619.817086][ T3694] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.0003/input/input12 [ 619.898133][ T3694] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.0003/input/input13 [ 619.970200][ T3694] kye 0003:0458:5019.0003: input,hiddev0,hidraw0: USB HID v0.00 Pointer [HID 0458:5019] on usb-dummy_hcd.2-1/input0 [ 620.024019][ T8404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 620.057644][ T8404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 14:13:12 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000090018105e22060000000000e10109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "0400", "00000004"}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001d80)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 620.603982][ T917] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 620.874007][ T917] usb 1-1: Using ep0 maxpacket: 16 [ 620.874094][ C0] kye 0003:0458:5019.0003: usb_submit_urb(ctrl) failed: -1 14:13:13 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) creat(0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) syz_usb_connect$uac1(0x0, 0x78, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x66, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x2, 0x0, 0x101}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x7, 0x50, 0x0, {0x7, 0x25, 0x1, 0x3, 0x7a, 0x6}}}}}}}]}}, &(0x7f0000000180)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x0, 0x0, 0x1, 0x3f, 0x8}, 0x0, 0x0}) 14:13:13 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010360)="1020f5f2", 0x4, 0x1400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f00000107c0)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000010ca0)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}], 0x0, &(0x7f0000010da0)=ANY=[]) 14:13:13 executing program 1: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}], 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='alloc_mode=default,noinline_xattr,inline_xattr_size=']) 14:13:13 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 621.036261][ T917] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 621.047585][ T917] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 621.064450][ T917] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 621.099102][ T8413] loop3: detected capacity change from 0 to 65536 [ 621.099598][ T8414] loop1: detected capacity change from 0 to 4 [ 621.121016][ T8414] Dev loop1: unable to read RDB block 4 [ 621.132408][ T8414] loop1: unable to read partition table [ 621.139666][ T8414] loop1: partition table beyond EOD, truncated 14:13:13 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 621.147764][ T3689] usb 6-1: 0:2 : does not exist [ 621.166654][ T917] usb 1-1: New USB device found, idVendor=225e, idProduct=0006, bcdDevice= 0.00 [ 621.169432][ T8413] F2FS-fs (loop3): Invalid log_blocksize (0), supports only 12 [ 621.176323][ T8414] F2FS-fs (loop1): Unable to read 2th superblock [ 621.202456][ T8413] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 621.211554][ T8414] F2FS-fs (loop1): Unrecognized mount option "inline_xattr_size=" or missing value [ 621.212538][ T917] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=225 [ 621.227188][ T8413] F2FS-fs (loop3): invalid crc_offset: 0 [ 621.236341][ T3689] usb 6-1: USB disconnect, device number 30 14:13:13 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 621.276993][ T3742] udevd[3742]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 621.279617][ T8413] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 0) [ 621.339654][ T917] usb 1-1: SerialNumber: syz 14:13:13 executing program 1: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}], 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='alloc_mode=default,noinline_xattr,inline_xattr_size=0x']) 14:13:13 executing program 2: ioctl$HIDIOCSFLAG(0xffffffffffffffff, 0x4004480f, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x1c1241) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000001140)={0x84, 0x0, &(0x7f00000007c0)={0x0, 0xa, 0x1}, &(0x7f0000000dc0)={0x0, 0x8, 0x1}, &(0x7f0000000e00)={0x20, 0x0, 0x4}, &(0x7f0000000e40)={0x20, 0x0, 0x4}, 0x0, 0x0, &(0x7f0000000f00)={0x40, 0xb, 0x2, "2102"}, &(0x7f0000000f40)={0x40, 0xf, 0x2}, &(0x7f0000000f80)={0x40, 0x13, 0x6}, 0x0, &(0x7f0000001000)={0x40, 0x19, 0x2, "c3b4"}, &(0x7f0000001040)={0x40, 0x1a, 0x2, 0x3}, &(0x7f0000001080)={0x40, 0x1c, 0x1, 0x3}, &(0x7f00000010c0)={0x40, 0x1e, 0x1}, 0x0}) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[], 0x0) ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0) [ 621.401917][ T8413] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 621.405142][ T917] usb 1-1: config 0 descriptor?? [ 621.437348][ T8428] loop1: detected capacity change from 0 to 4 14:13:13 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 621.480267][ T8413] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 621.549675][ T8428] Dev loop1: unable to read RDB block 4 [ 621.564699][ T917] hub 1-1:0.0: USB hub found [ 621.580999][ T8428] loop1: unable to read partition table 14:13:13 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 621.603638][ T8428] loop1: partition table beyond EOD, truncated [ 621.641214][ T8428] F2FS-fs (loop1): Unable to read 2th superblock 14:13:14 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 621.661250][ T8413] F2FS-fs (loop3): inconsistent node block, nid:3, node_footer[nid:0,ino:0,ofs:0,cpver:0,blkaddr:0] [ 621.675546][ T8428] F2FS-fs (loop1): Unrecognized mount option "inline_xattr_size=0x" or missing value [ 621.690865][ T8413] F2FS-fs (loop3): Failed to read root inode [ 621.774009][ T917] hub 1-1:0.0: 1 port detected [ 621.884655][ T3689] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 621.994001][ T3694] usb 3-1: reset high-speed USB device number 4 using dummy_hcd [ 622.147425][ T3689] usb 6-1: Using ep0 maxpacket: 32 [ 622.233938][ T3694] usb 3-1: Using ep0 maxpacket: 16 [ 622.274126][ T3689] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 622.288469][ T3689] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 622.485635][ T3689] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 622.497629][ T3689] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.506960][ T3689] usb 6-1: Product: syz [ 622.519051][ T3689] usb 6-1: Manufacturer: syz [ 622.528009][ T3689] usb 6-1: SerialNumber: syz [ 622.565081][ T8430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 622.573542][ T8430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 622.584213][ T917] hub 1-1:0.0: activate --> -90 [ 622.787263][ T917] usb 1-1: USB disconnect, device number 85 [ 622.846245][ T8430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 622.855011][ T8430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 14:13:15 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000090018105e22060000000000e10109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "0400", "00000004"}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001d80)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 623.583975][ T917] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 623.605762][ T1233] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.612293][ T1233] ieee802154 phy1 wpan1: encryption failed: -22 [ 623.845960][ T917] usb 1-1: Using ep0 maxpacket: 16 [ 624.004075][ T917] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 624.015234][ T917] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 624.025405][ T917] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 14:13:16 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 14:13:16 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010360)="1020f5f2", 0x4, 0x1400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f00000107c0)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000010ca0)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}], 0x0, &(0x7f0000010da0)=ANY=[]) 14:13:16 executing program 1: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}], 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='alloc_mode=default,noinline_xattr,inline_xattr_size=0x']) 14:13:16 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) creat(0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) syz_usb_connect$uac1(0x0, 0x78, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x66, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x2, 0x0, 0x101}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x7, 0x50, 0x0, {0x7, 0x25, 0x1, 0x3, 0x7a, 0x6}}}}}}}]}}, &(0x7f0000000180)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x0, 0x0, 0x1, 0x3f, 0x8}, 0x0, 0x0}) [ 624.134362][ T917] usb 1-1: New USB device found, idVendor=225e, idProduct=0006, bcdDevice= 0.00 [ 624.149249][ T917] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=225 [ 624.167633][ T8443] loop1: detected capacity change from 0 to 4 [ 624.171043][ T8442] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 624.182822][ T917] usb 1-1: SerialNumber: syz [ 624.184403][ T8444] loop3: detected capacity change from 0 to 65536 [ 624.196881][ T8443] Dev loop1: unable to read RDB block 4 [ 624.214324][ T3689] usb 6-1: 0:2 : does not exist [ 624.223593][ T917] usb 1-1: config 0 descriptor?? 14:13:16 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 624.234289][ T8443] loop1: unable to read partition table [ 624.250643][ T8444] F2FS-fs (loop3): Invalid log_blocksize (0), supports only 12 [ 624.259965][ T8444] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 624.264485][ T3689] usb 6-1: USB disconnect, device number 31 [ 624.273507][ T8444] F2FS-fs (loop3): invalid crc_offset: 0 [ 624.281229][ T8443] loop1: partition table beyond EOD, truncated [ 624.299518][ T8443] F2FS-fs (loop1): Unable to read 2th superblock [ 624.307362][ T8443] F2FS-fs (loop1): Unrecognized mount option "inline_xattr_size=0x" or missing value [ 624.324606][ T917] hub 1-1:0.0: USB hub found [ 624.328110][ T8452] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 624.349793][ T8444] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 0) 14:13:16 executing program 1: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}], 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='alloc_mode=default,noinline_xattr,inline_xattr_size=0x']) 14:13:16 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 624.477577][ T8444] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 624.518269][ T8457] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 624.535014][ T917] hub 1-1:0.0: 1 port detected [ 624.547597][ T8444] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 624.563540][ T8459] loop1: detected capacity change from 0 to 4 [ 624.572347][ T8459] Dev loop1: unable to read RDB block 4 [ 624.584773][ T8459] loop1: unable to read partition table [ 624.593724][ T8459] loop1: partition table beyond EOD, truncated [ 624.601214][ T8459] F2FS-fs (loop1): Unable to read 2th superblock [ 624.609614][ T8459] F2FS-fs (loop1): Unrecognized mount option "inline_xattr_size=0x" or missing value [ 624.633131][ T8444] F2FS-fs (loop3): inconsistent node block, nid:3, node_footer[nid:0,ino:0,ofs:0,cpver:0,blkaddr:0] [ 624.664222][ T8444] F2FS-fs (loop3): Failed to read root inode [ 624.894150][ T3689] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 625.224077][ T3689] usb 6-1: Using ep0 maxpacket: 32 [ 625.314017][ T917] hub 1-1:0.0: activate --> -90 [ 625.519789][ T2933] usb 1-1: USB disconnect, device number 86 [ 625.554078][ T3689] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 625.565054][ T3689] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 625.764572][ T3689] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 625.773673][ T3689] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.781781][ T3689] usb 6-1: Product: syz [ 625.786043][ T3689] usb 6-1: Manufacturer: syz [ 625.790638][ T3689] usb 6-1: SerialNumber: syz [ 627.304184][ T3689] usb 6-1: 0:2 : does not exist [ 627.314449][ T3689] usb 6-1: USB disconnect, device number 32 14:13:20 executing program 2: ioctl$HIDIOCSFLAG(0xffffffffffffffff, 0x4004480f, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x1c1241) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000001140)={0x84, 0x0, &(0x7f00000007c0)={0x0, 0xa, 0x1}, &(0x7f0000000dc0)={0x0, 0x8, 0x1}, &(0x7f0000000e00)={0x20, 0x0, 0x4}, &(0x7f0000000e40)={0x20, 0x0, 0x4}, 0x0, 0x0, &(0x7f0000000f00)={0x40, 0xb, 0x2, "2102"}, &(0x7f0000000f40)={0x40, 0xf, 0x2}, &(0x7f0000000f80)={0x40, 0x13, 0x6}, 0x0, &(0x7f0000001000)={0x40, 0x19, 0x2, "c3b4"}, &(0x7f0000001040)={0x40, 0x1a, 0x2, 0x3}, &(0x7f0000001080)={0x40, 0x1c, 0x1, 0x3}, &(0x7f00000010c0)={0x40, 0x1e, 0x1}, 0x0}) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[], 0x0) ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0) 14:13:20 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700000000f6c300", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 14:13:20 executing program 1: madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x65) mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x4) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 14:13:20 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010360)="1020f5f2", 0x4, 0x1400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f00000107c0)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000010ca0)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}], 0x0, &(0x7f0000010da0)=ANY=[]) 14:13:20 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000090018105e22060000000000e10109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "0400", "00000004"}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001d80)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 14:13:20 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000003480)="ab2e30323586f1628ca3a2d56abeab87", 0x10) sendmmsg(r1, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="d907cf64170cdf5eead8a4cc2dd9f209f653897818d1923bb36ecc8675c8888d68df5d1835cd54e9d81d2fe9455877985dc11741aff356f327760f4cfeb677ca", 0x40}], 0x1}}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/6, 0x6}, {&(0x7f0000000140)=""/145, 0x91}], 0x2}}], 0x1, 0x0, 0x0) [ 627.788203][ T3694] usb 3-1: USB disconnect, device number 4 14:13:20 executing program 1: openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x4602, 0x0) [ 627.831328][ T8467] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 627.854475][ T8470] loop3: detected capacity change from 0 to 65536 14:13:20 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700000000f6c300", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 14:13:20 executing program 1: clock_gettime(0x0, &(0x7f0000000280)={0x0}) pselect6(0x40, &(0x7f0000000180), &(0x7f00000001c0)={0x6}, &(0x7f0000000240)={0x3}, &(0x7f00000002c0)={r0}, 0x0) [ 627.902737][ T8470] F2FS-fs (loop3): Invalid log_blocksize (0), supports only 12 14:13:20 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000002240), r0) 14:13:20 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)) [ 627.959883][ T8470] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 627.978700][ T8479] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. 14:13:20 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700000000f6c300", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 628.027257][ T8470] F2FS-fs (loop3): invalid crc_offset: 0 [ 628.063671][ T8470] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 0) [ 628.089097][ T14] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 628.091274][ T8491] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 628.133809][ T8470] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 628.173414][ T8470] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 628.205524][ T8470] F2FS-fs (loop3): inconsistent node block, nid:3, node_footer[nid:0,ino:0,ofs:0,cpver:0,blkaddr:0] [ 628.217038][ T8470] F2FS-fs (loop3): Failed to read root inode [ 628.253979][ T3694] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 628.344124][ T14] usb 1-1: Using ep0 maxpacket: 16 [ 628.464163][ T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 628.475323][ T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 628.485337][ T14] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 628.498427][ T3694] usb 3-1: Using ep0 maxpacket: 16 [ 628.574405][ T14] usb 1-1: New USB device found, idVendor=225e, idProduct=0006, bcdDevice= 0.00 [ 628.583613][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=225 [ 628.591816][ T14] usb 1-1: SerialNumber: syz [ 628.598444][ T14] usb 1-1: config 0 descriptor?? [ 628.614246][ T3694] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 628.625650][ T3694] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 628.636481][ T14] hub 1-1:0.0: USB hub found [ 628.641612][ T3694] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 628.651001][ T3694] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.660751][ T3694] usb 3-1: config 0 descriptor?? [ 628.854072][ T14] hub 1-1:0.0: 1 port detected [ 628.908551][ T8473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 628.917194][ T8473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 629.161148][ T3694] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.0004/input/input14 [ 629.238040][ T3694] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.0004/input/input15 [ 629.310241][ T3694] kye 0003:0458:5019.0004: input,hiddev0,hidraw0: USB HID v0.00 Pointer [HID 0458:5019] on usb-dummy_hcd.2-1/input0 [ 629.358966][ T8473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 629.397792][ T8473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 629.504041][ T14] hub 1-1:0.0: hub_ext_port_status failed (err = 0) [ 630.204059][ C0] kye 0003:0458:5019.0004: usb_submit_urb(ctrl) failed: -1 14:13:23 executing program 2: ioctl$HIDIOCSFLAG(0xffffffffffffffff, 0x4004480f, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x1c1241) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000001140)={0x84, 0x0, &(0x7f00000007c0)={0x0, 0xa, 0x1}, &(0x7f0000000dc0)={0x0, 0x8, 0x1}, &(0x7f0000000e00)={0x20, 0x0, 0x4}, &(0x7f0000000e40)={0x20, 0x0, 0x4}, 0x0, 0x0, &(0x7f0000000f00)={0x40, 0xb, 0x2, "2102"}, &(0x7f0000000f40)={0x40, 0xf, 0x2}, &(0x7f0000000f80)={0x40, 0x13, 0x6}, 0x0, &(0x7f0000001000)={0x40, 0x19, 0x2, "c3b4"}, &(0x7f0000001040)={0x40, 0x1a, 0x2, 0x3}, &(0x7f0000001080)={0x40, 0x1c, 0x1, 0x3}, &(0x7f00000010c0)={0x40, 0x1e, 0x1}, 0x0}) ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0) 14:13:23 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f00000006c0)={{0x1, 0x1, 0x18}, './file0\x00'}) 14:13:23 executing program 5: r0 = socket(0x2, 0xa, 0x0) recvmsg$can_raw(r0, &(0x7f0000001540)={0x0, 0x0, 0x0}, 0x1) 14:13:23 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700000000f6c300000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 630.743809][ T8497] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 14:13:23 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000090018105e22060000000000e10109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "0400", "00000004"}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001d80)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 14:13:23 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010360)="1020f5f2", 0x4, 0x1400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f00000107c0)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000010ca0)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {0x0, 0x0, 0x1000fe0}], 0x0, &(0x7f0000010da0)=ANY=[]) 14:13:23 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000001800), 0x10) 14:13:23 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700000000f6c300000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 14:13:23 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) getsockopt$ax25_int(r0, 0x101, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=0x4) [ 630.831699][ T14] usb 1-1: USB disconnect, device number 87 [ 630.842986][ T8504] loop3: detected capacity change from 0 to 65551 [ 630.850226][ T8506] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 14:13:23 executing program 5: clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) setitimer(0x1, &(0x7f0000000140)={{}, {0x0, r0/1000+60000}}, 0x0) setitimer(0x2, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) 14:13:23 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$sock_ax25_SIOCDELRT(r0, 0x890c, &(0x7f0000000140)={@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) 14:13:23 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700000000f6c300000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 630.883124][ T8504] F2FS-fs (loop3): Invalid log_blocksize (0), supports only 12 [ 630.917265][ T8504] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 630.933471][ T8504] F2FS-fs (loop3): invalid crc_offset: 0 [ 630.982020][ T8520] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 631.009585][ T8504] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 0) [ 631.033642][ T8504] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 631.051734][ T8504] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 631.089009][ T8504] F2FS-fs (loop3): inconsistent node block, nid:3, node_footer[nid:0,ino:0,ofs:0,cpver:0,blkaddr:0] [ 631.100047][ T8504] F2FS-fs (loop3): Failed to read root inode [ 631.135121][ T3694] usb 3-1: reset high-speed USB device number 5 using dummy_hcd [ 631.293972][ T14] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 631.394116][ T3694] usb 3-1: Using ep0 maxpacket: 16 [ 631.554028][ T14] usb 1-1: Using ep0 maxpacket: 16 [ 631.706163][ T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 631.717207][ T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 631.727739][ T14] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 631.745881][ T8501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 631.754623][ T8501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 631.844126][ T14] usb 1-1: New USB device found, idVendor=225e, idProduct=0006, bcdDevice= 0.00 [ 631.853268][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=225 [ 631.861609][ T14] usb 1-1: SerialNumber: syz [ 631.868236][ T14] usb 1-1: config 0 descriptor?? [ 631.904657][ T14] hub 1-1:0.0: USB hub found [ 632.124140][ T14] hub 1-1:0.0: 1 port detected [ 632.774262][ T14] hub 1-1:0.0: hub_ext_port_status failed (err = 0) [ 633.985792][ T3692] usb 1-1: USB disconnect, device number 88 14:13:29 executing program 2: ioctl$HIDIOCSFLAG(0xffffffffffffffff, 0x4004480f, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x1c1241) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000001140)={0x84, 0x0, &(0x7f00000007c0)={0x0, 0xa, 0x1}, &(0x7f0000000dc0)={0x0, 0x8, 0x1}, &(0x7f0000000e00)={0x20, 0x0, 0x4}, &(0x7f0000000e40)={0x20, 0x0, 0x4}, 0x0, 0x0, &(0x7f0000000f00)={0x40, 0xb, 0x2, "2102"}, &(0x7f0000000f40)={0x40, 0xf, 0x2}, &(0x7f0000000f80)={0x40, 0x13, 0x6}, 0x0, &(0x7f0000001000)={0x40, 0x19, 0x2, "c3b4"}, &(0x7f0000001040)={0x40, 0x1a, 0x2, 0x3}, &(0x7f0000001080)={0x40, 0x1c, 0x1, 0x3}, &(0x7f00000010c0)={0x40, 0x1e, 0x1}, 0x0}) ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0) 14:13:29 executing program 1: socket(0x10, 0x3, 0x80000001) 14:13:29 executing program 5: r0 = socket(0x2, 0x1, 0x0) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, 0x0, 0x0) 14:13:29 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700000000f6c30000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 14:13:29 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010360)="1020f5f2", 0x4, 0x1400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f00000107c0)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000010ca0)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {0x0, 0x0, 0x1000fe0}], 0x0, &(0x7f0000010da0)=ANY=[]) 14:13:29 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000090018105e22060000000000e10109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "0400", "00000004"}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001d80)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 14:13:29 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000003c0)={0xe, 0x18, 0xfa00, @id_afonly={0x0, r1}}, 0x20) 14:13:29 executing program 5: r0 = socket(0x2, 0x5, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="73797a746e6c32000000d9990c41b9c8", @ANYRES32=0x0, @ANYBLOB="7800008000000001000000014a"]}) [ 637.031540][ T3694] usb 3-1: USB disconnect, device number 5 [ 637.036273][ T8532] loop3: detected capacity change from 0 to 65551 [ 637.059265][ T8532] F2FS-fs (loop3): Invalid log_blocksize (0), supports only 12 [ 637.067533][ T8531] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. 14:13:29 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) pselect6(0x40, &(0x7f0000000080)={0x8}, 0x0, 0x0, 0x0, 0x0) 14:13:29 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x9) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x4c}, 0x4c}}, 0x0) 14:13:29 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700000000f6c30000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 637.102498][ T8532] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 637.131401][ T8532] F2FS-fs (loop3): invalid crc_offset: 0 14:13:29 executing program 5: r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000080)="c1", 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)="e4", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000040)={r1, r1, r0}, 0x0, 0x0, 0x0) [ 637.183631][ T8532] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 0) [ 637.186743][ T8548] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 637.222881][ T8532] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 637.251363][ T8532] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 637.307309][ T8532] F2FS-fs (loop3): inconsistent node block, nid:3, node_footer[nid:0,ino:0,ofs:0,cpver:0,blkaddr:0] [ 637.320894][ T8532] F2FS-fs (loop3): Failed to read root inode [ 637.334456][ T14] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 637.494210][ T3694] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 637.604082][ T14] usb 1-1: Using ep0 maxpacket: 16 [ 637.724117][ T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 637.735220][ T3694] usb 3-1: Using ep0 maxpacket: 16 [ 637.740510][ T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 637.750310][ T14] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 637.834418][ T14] usb 1-1: New USB device found, idVendor=225e, idProduct=0006, bcdDevice= 0.00 [ 637.848491][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=225 [ 637.857251][ T3694] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 637.875207][ T3694] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 637.889006][ T14] usb 1-1: SerialNumber: syz [ 637.899468][ T14] usb 1-1: config 0 descriptor?? [ 637.908942][ T3694] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 637.923625][ T3694] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.938500][ T3694] usb 3-1: config 0 descriptor?? [ 637.954774][ T14] hub 1-1:0.0: USB hub found [ 638.177457][ T14] hub 1-1:0.0: 1 port detected [ 638.185436][ T8534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 638.204090][ T8534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 638.457628][ T3694] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.0005/input/input16 [ 638.560248][ T3694] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.0005/input/input17 [ 638.661640][ T3694] kye 0003:0458:5019.0005: input,hiddev0,hidraw0: USB HID v0.00 Pointer [HID 0458:5019] on usb-dummy_hcd.2-1/input0 [ 638.701443][ T3694] usb 3-1: USB disconnect, device number 6 [ 638.835813][ T14] hub 1-1:0.0: hub_ext_port_status failed (err = 0) 14:13:31 executing program 5: syz_emit_ethernet(0x4e, &(0x7f0000000000)={@random="63bf7055a2ab", @dev, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "638f49", 0x18, 0x2c, 0x0, @local, @local, {[@routing={0x0, 0x2, 0x1, 0x0, 0x0, [@dev]}]}}}}}, 0x0) 14:13:31 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700000000f6c30000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 14:13:31 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010360)="1020f5f2", 0x4, 0x1400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f00000107c0)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000010ca0)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {0x0, 0x0, 0x1000fe0}], 0x0, &(0x7f0000010da0)=ANY=[]) 14:13:31 executing program 2: ioctl$HIDIOCSFLAG(0xffffffffffffffff, 0x4004480f, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x1c1241) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000001140)={0x84, 0x0, &(0x7f00000007c0)={0x0, 0xa, 0x1}, &(0x7f0000000dc0)={0x0, 0x8, 0x1}, &(0x7f0000000e00)={0x20, 0x0, 0x4}, &(0x7f0000000e40)={0x20, 0x0, 0x4}, 0x0, 0x0, &(0x7f0000000f00)={0x40, 0xb, 0x2, "2102"}, &(0x7f0000000f40)={0x40, 0xf, 0x2}, &(0x7f0000000f80)={0x40, 0x13, 0x6}, 0x0, &(0x7f0000001000)={0x40, 0x19, 0x2, "c3b4"}, &(0x7f0000001040)={0x40, 0x1a, 0x2, 0x3}, &(0x7f0000001080)={0x40, 0x1c, 0x1, 0x3}, &(0x7f00000010c0)={0x40, 0x1e, 0x1}, 0x0}) ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0) 14:13:31 executing program 1: io_setup(0x2, &(0x7f00000016c0)) [ 639.167815][ T8555] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 639.186205][ T8558] loop3: detected capacity change from 0 to 65551 [ 639.223678][ T8558] F2FS-fs (loop3): Invalid log_blocksize (0), supports only 12 [ 639.241947][ T8558] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 639.266042][ T8558] F2FS-fs (loop3): invalid crc_offset: 0 [ 639.291081][ T8558] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 0) [ 639.307793][ T8558] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 639.317276][ T8558] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 639.348578][ T8558] F2FS-fs (loop3): inconsistent node block, nid:3, node_footer[nid:0,ino:0,ofs:0,cpver:0,blkaddr:0] [ 639.360182][ T8558] F2FS-fs (loop3): Failed to read root inode [ 639.494010][ T917] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 639.733991][ T917] usb 3-1: Using ep0 maxpacket: 16 [ 639.854057][ T917] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 639.865354][ T917] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 639.875310][ T917] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 639.884428][ T917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.895611][ T917] usb 3-1: config 0 descriptor?? 14:13:32 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000090018105e22060000000000e10109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "0400", "00000004"}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001d80)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000340)={0x0, 0x0, 0x2, 'zZ'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 14:13:32 executing program 5: pselect6(0x40, &(0x7f0000000200), &(0x7f0000000240)={0x6}, 0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300), 0x8}) 14:13:32 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700000000f6c3000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 14:13:32 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, 0xd, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}, 0x1c}}, 0x0) 14:13:32 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010360)="1020f5f2", 0x4, 0x1400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f00000107c0)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000010ca0)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20), 0x0, 0x1000fe0}], 0x0, &(0x7f0000010da0)=ANY=[]) 14:13:32 executing program 1: syz_emit_ethernet(0x7e, &(0x7f0000000080)={@broadcast, @link_local, @val={@void}, {@ipv4={0x800, @tipc={{0x10, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @remote, {[@timestamp={0x44, 0x14, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}, @ssrr={0x89, 0xb, 0x0, [@broadcast, @multicast2]}, @timestamp={0x44, 0xc, 0x0, 0x0, 0x0, [0x0, 0x0]}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb}}}}}}}}}}, 0x0) 14:13:32 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'sit0\x00', 0x0}) [ 640.040931][ T3689] usb 1-1: USB disconnect, device number 89 [ 640.074971][ T8574] loop3: detected capacity change from 0 to 65551 [ 640.084480][ T8572] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 14:13:32 executing program 1: r0 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_buf(r0, 0x29, 0x49, 0x0, &(0x7f0000000180)) [ 640.120710][ T8574] F2FS-fs (loop3): Invalid log_blocksize (0), supports only 12 [ 640.135279][ T8561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 640.153818][ T8561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 640.162086][ T8574] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock 14:13:32 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x190, 0x384, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x2}) 14:13:32 executing program 5: keyctl$link(0x3, 0x0, 0x0) [ 640.185943][ T8574] F2FS-fs (loop3): invalid crc_offset: 0 [ 640.269533][ T8574] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 0) [ 640.304736][ T8574] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 640.322465][ T8574] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 640.369478][ T8574] F2FS-fs (loop3): inconsistent node block, nid:3, node_footer[nid:0,ino:0,ofs:0,cpver:0,blkaddr:0] [ 640.380989][ T8574] F2FS-fs (loop3): Failed to read root inode [ 640.421534][ T917] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.0006/input/input18 [ 640.480879][ T3689] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 640.517611][ T917] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.0006/input/input19 [ 640.590221][ T917] kye 0003:0458:5019.0006: input,hiddev0,hidraw0: USB HID v0.00 Pointer [HID 0458:5019] on usb-dummy_hcd.2-1/input0 [ 640.724079][ T3689] usb 1-1: Using ep0 maxpacket: 16 [ 640.844166][ T3689] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 640.855309][ T3689] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 640.865330][ T3689] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 640.954179][ T3689] usb 1-1: New USB device found, idVendor=225e, idProduct=0006, bcdDevice= 0.00 [ 640.967425][ T3689] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=225 [ 640.975739][ T3689] usb 1-1: SerialNumber: syz [ 640.982959][ T3689] usb 1-1: config 0 descriptor?? [ 641.026566][ T3689] hub 1-1:0.0: USB hub found [ 641.234073][ T3689] hub 1-1:0.0: 1 port detected [ 641.493994][ C1] kye 0003:0458:5019.0006: usb_submit_urb(ctrl) failed: -1 [ 641.884057][ T3689] hub 1-1:0.0: hub_ext_port_status failed (err = 2) 14:13:34 executing program 2: ioctl$HIDIOCSFLAG(0xffffffffffffffff, 0x4004480f, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x1c1241) ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0) 14:13:34 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700000000f6c3000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 642.023141][ T8592] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 642.383971][ T3695] usb 3-1: reset high-speed USB device number 7 using dummy_hcd [ 642.624132][ T3695] usb 3-1: Using ep0 maxpacket: 16 [ 642.945646][ T8594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 642.956382][ T8594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 14:13:35 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000090018105e22060000000000e10109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "0400", "00000004"}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001d80)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000340)={0x0, 0x0, 0x2, 'zZ'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 14:13:35 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x7, 0x0, 0x0) 14:13:35 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f00000002c0), 0x0, 0x0) io_uring_setup(0x1387, &(0x7f0000000000)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r0}) 14:13:35 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010360)="1020f5f2", 0x4, 0x1400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f00000107c0)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000010ca0)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20), 0x0, 0x1000fe0}], 0x0, &(0x7f0000010da0)=ANY=[]) 14:13:35 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700000000f6c3000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 643.093277][ T3692] usb 1-1: USB disconnect, device number 90 [ 643.133294][ T8602] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 14:13:35 executing program 1: request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0xfffffffffffffffb) 14:13:35 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_EEE_TX_LPI_TIMER={0x8}, @ETHTOOL_A_EEE_HEADER={0x4}]}, 0x20}}, 0x0) [ 643.138161][ T8603] loop3: detected capacity change from 0 to 65551 14:13:35 executing program 1: request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='\x00', 0xffffffffffffffff) 14:13:35 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x5}]}]}}, &(0x7f0000000580)=""/164, 0x2e, 0xa4, 0x1}, 0x20) [ 643.196522][ T8603] F2FS-fs (loop3): Invalid log_blocksize (0), supports only 12 [ 643.217974][ T8603] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock 14:13:35 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700000000f6c3000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 643.265825][ T8603] F2FS-fs (loop3): invalid crc_offset: 0 [ 643.331058][ T8603] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 0) [ 643.352976][ T8621] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 643.374607][ T8603] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 643.392718][ T8603] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 643.443286][ T8603] F2FS-fs (loop3): inconsistent node block, nid:3, node_footer[nid:0,ino:0,ofs:0,cpver:0,blkaddr:0] [ 643.455658][ T8603] F2FS-fs (loop3): Failed to read root inode [ 643.553989][ T3692] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 643.793982][ T3692] usb 1-1: Using ep0 maxpacket: 16 [ 643.914318][ T3692] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 643.929185][ T3692] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 643.938996][ T3692] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 644.024825][ T3692] usb 1-1: New USB device found, idVendor=225e, idProduct=0006, bcdDevice= 0.00 [ 644.034165][ T3692] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=225 [ 644.042529][ T3692] usb 1-1: SerialNumber: syz [ 644.048515][ T3692] usb 1-1: config 0 descriptor?? [ 644.084726][ T3692] hub 1-1:0.0: USB hub found [ 644.294049][ T3692] hub 1-1:0.0: 1 port detected [ 644.944184][ T3692] hub 1-1:0.0: hub_ext_port_status failed (err = 2) [ 646.178680][ T3689] usb 1-1: USB disconnect, device number 91 14:13:40 executing program 2: ioctl$HIDIOCSFLAG(0xffffffffffffffff, 0x4004480f, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x1c1241) ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0) 14:13:40 executing program 5: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000180)='0\x00', 0x2) 14:13:40 executing program 1: request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='\x00', 0xffffffffffffffff) 14:13:40 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010360)="1020f5f2", 0x4, 0x1400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f00000107c0)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000010ca0)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20), 0x0, 0x1000fe0}], 0x0, &(0x7f0000010da0)=ANY=[]) 14:13:40 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000090018105e22060000000000e10109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "0400", "00000004"}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001d80)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000340)={0x0, 0x0, 0x2, 'zZ'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 14:13:40 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700000000f6c3000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 648.222577][ T6] usb 3-1: USB disconnect, device number 7 [ 648.254331][ T8632] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 648.262578][ T8634] loop3: detected capacity change from 0 to 65551 14:13:40 executing program 1: semtimedop(0x0, &(0x7f0000000340)=[{0x0, 0x6}, {}], 0x2, 0x0) [ 648.277611][ T8634] F2FS-fs (loop3): Invalid log_blocksize (0), supports only 12 [ 648.285998][ T8634] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock 14:13:40 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700000000f6c3000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 648.328483][ T8634] F2FS-fs (loop3): invalid crc_offset: 0 14:13:40 executing program 1: futex(&(0x7f00000001c0), 0x3, 0x0, 0x0, &(0x7f0000000240), 0x0) [ 648.373653][ T8634] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 0) [ 648.412763][ T8634] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 648.434144][ T8634] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 648.446193][ T8645] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 14:13:40 executing program 1: semtimedop(0x0, 0x0, 0x0, &(0x7f0000000380)) [ 648.534091][ T14] usb 1-1: new high-speed USB device number 92 using dummy_hcd 14:13:40 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$sock_timeval(r0, 0x1, 0x0, 0x0, 0x0) 14:13:40 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700000000f6c3000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 648.588009][ T8634] F2FS-fs (loop3): inconsistent node block, nid:3, node_footer[nid:0,ino:0,ofs:0,cpver:0,blkaddr:0] [ 648.622977][ T8634] F2FS-fs (loop3): Failed to read root inode [ 648.671154][ T8653] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 648.714183][ T6] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 648.779392][ T14] usb 1-1: Using ep0 maxpacket: 16 [ 648.904471][ T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 648.923923][ T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 648.933720][ T14] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 648.973999][ T6] usb 3-1: Using ep0 maxpacket: 16 [ 649.034070][ T14] usb 1-1: New USB device found, idVendor=225e, idProduct=0006, bcdDevice= 0.00 [ 649.043141][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=225 [ 649.064129][ T14] usb 1-1: SerialNumber: syz [ 649.084633][ T14] usb 1-1: config 0 descriptor?? [ 649.094095][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 649.113960][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 649.124672][ T14] hub 1-1:0.0: USB hub found [ 649.133405][ T6] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 649.142533][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.159515][ T6] usb 3-1: config 0 descriptor?? [ 649.344054][ T14] hub 1-1:0.0: 1 port detected [ 649.406356][ T8638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 649.425057][ T8638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 649.671186][ T6] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.0007/input/input20 [ 649.756786][ T6] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.0007/input/input21 [ 649.837976][ T6] kye 0003:0458:5019.0007: input,hiddev0,hidraw0: USB HID v0.00 Pointer [HID 0458:5019] on usb-dummy_hcd.2-1/input0 [ 649.994146][ T6] hub 1-1:0.0: hub_ext_port_status failed (err = 2) [ 650.724088][ C0] kye 0003:0458:5019.0007: usb_submit_urb(ctrl) failed: -1 14:13:43 executing program 2: ioctl$HIDIOCSFLAG(0xffffffffffffffff, 0x4004480f, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x4805, 0x0) 14:13:43 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700000000f6c3000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 14:13:43 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000880), 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) 14:13:43 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010360)="1020f5f2", 0x4, 0x1400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f00000107c0)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000010ca0)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)='\x00\x00\x00\x00\x00\x00\x00', 0x7, 0x1000fe0}], 0x0, &(0x7f0000010da0)=ANY=[]) 14:13:43 executing program 5: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000180)='0\x00', 0x2) 14:13:43 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000090018105e22060000000000e10109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "0400", "00000004"}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001d80)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000340)={0x0, 0x0, 0x3, "7a5aa4"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 651.258278][ T3694] usb 1-1: USB disconnect, device number 92 [ 651.259077][ T8661] loop3: detected capacity change from 0 to 65551 14:13:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000001440)=ANY=[@ANYBLOB="1000000000716d"], 0x10}], 0x1}, 0x0) [ 651.303356][ T8665] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 14:13:43 executing program 1: r0 = io_uring_setup(0x2db9, &(0x7f0000000040)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$vcsa(&(0x7f0000000140), 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000180)=[r1, r2], 0x2) 14:13:43 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700000000f6c3000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 651.355845][ T8661] F2FS-fs (loop3): Invalid log_blocksize (0), supports only 12 [ 651.365162][ T8661] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 651.375645][ T8661] F2FS-fs (loop3): invalid crc_offset: 0 [ 651.441863][ T8661] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 0) 14:13:43 executing program 1: request_key(&(0x7f0000000540)='.dead\x00', 0x0, 0x0, 0xfffffffffffffffd) [ 651.482251][ T8679] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 651.490885][ T8661] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. 14:13:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001700)={&(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000016c0)=[{&(0x7f0000000040)={0xeb4, 0x0, 0x0, 0x0, 0x0, "", [@nested={0xea1, 0x0, 0x0, 0x1, [@generic="e79b5c7bf43505c4fbefce953275bd23987615445ccab1227a3582a031c2bd2f0c4c2eab277adab28587c7b2a3fc9430f87cebded83cff689fa06b8b938ce85d146cfd921215c4334d9b6fafaac738a52e0e03175c1086db4e49ab6d772fcd65c7c2a0119cc0894db936816506360a64f014cdae821274e5497d93116b32025be62dc332209ec79396a9f25ddc56bf9035bfcad6368cf1d7720498619ca6c5007d11b84146edead19b35ce9baad97ea5f71532f4ed5cbdbeed49989d09fff62bbf73c032a99e1ff3990ea7125f82e70b4aea4a6f582631d1e7e6", @typed={0x14, 0x0, 0x0, 0x0, @ipv6=@loopback}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="1af3b2d452782853bf7179a0a1af6253a545ac8aa2f62ae4034ca453d5377859e71f2731a938725c21790aa4b50c3f252e481feae9332ca3d15f84dcb8b64904cf6de7f8ff0fb65d09d3e7e6c24ca3bf7a18e33cddea2d8d6644edb5d9ec3a646de2c8a2d3579936bfcc4778e06f2e94794661813c67befe2c40d0f52e6d69d3560d2914b585988525", @generic="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"]}]}, 0xeb4}, {&(0x7f0000001340)={0x10}, 0x10}], 0x2}, 0x0) [ 651.523259][ T8661] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. 14:13:43 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700000000f6c3000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x3c, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 651.581832][ T8661] F2FS-fs (loop3): inconsistent node block, nid:3, node_footer[nid:0,ino:0,ofs:0,cpver:0,blkaddr:0] [ 651.620802][ T8661] F2FS-fs (loop3): Failed to read root inode [ 651.674133][ T3689] usb 3-1: reset high-speed USB device number 8 using dummy_hcd [ 651.714091][ T3694] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 651.722788][ T8686] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 651.955061][ T3689] usb 3-1: Using ep0 maxpacket: 16 [ 651.964006][ T3694] usb 1-1: Using ep0 maxpacket: 16 [ 652.084063][ T3694] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 652.103968][ T3694] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 652.113814][ T3694] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 652.204092][ T3694] usb 1-1: New USB device found, idVendor=225e, idProduct=0006, bcdDevice= 0.00 [ 652.213589][ T3694] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=225 [ 652.222071][ T3694] usb 1-1: SerialNumber: syz [ 652.228348][ T3694] usb 1-1: config 0 descriptor?? [ 652.264907][ T3694] hub 1-1:0.0: USB hub found [ 652.306722][ T8667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 652.316054][ T8667] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 652.484197][ T3694] hub 1-1:0.0: 1 port detected [ 652.575878][ T3692] usb 3-1: USB disconnect, device number 8 [ 652.594185][ T3689] kye 0003:0458:5019.0007: usb_submit_urb(ctrl) failed: -19 14:13:45 executing program 2: ioctl$HIDIOCSFLAG(0xffffffffffffffff, 0x4004480f, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x4805, 0x0) 14:13:45 executing program 1: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@private, @in=@private}, {}, {}, 0x0, 0x6e6bb8}}, 0xb8}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="880100001b"], 0x188}}, 0x0) 14:13:45 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010360)="1020f5f2", 0x4, 0x1400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f00000107c0)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000010ca0)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)='\x00\x00\x00\x00\x00\x00\x00', 0x7, 0x1000fe0}], 0x0, &(0x7f0000010da0)=ANY=[]) 14:13:45 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700000000f6c3000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x3c, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 14:13:45 executing program 5: r0 = syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x20000001f5, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x1ef}], 0x0, &(0x7f0000000140)=ANY=[]) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x0, @dev}, {0x2, 0x0, @dev}, {}, 0xcd}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x5000, 0x0) statx(r0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, &(0x7f0000000440)) [ 653.098893][ T8690] loop3: detected capacity change from 0 to 65551 [ 653.105469][ T8692] netlink: 200 bytes leftover after parsing attributes in process `syz-executor.1'. [ 653.109565][ T8693] loop5: detected capacity change from 0 to 264192 [ 653.119830][ T8694] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 653.143397][ T8690] F2FS-fs (loop3): Invalid log_blocksize (0), supports only 12 [ 653.154051][ T3694] hub 1-1:0.0: hub_ext_port_status failed (err = 3) [ 653.177871][ T8690] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 653.219916][ T8690] F2FS-fs (loop3): invalid crc_offset: 0 [ 653.275457][ T8690] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 0) [ 653.305597][ T8690] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 653.315249][ T8690] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 653.351438][ T8690] F2FS-fs (loop3): inconsistent node block, nid:3, node_footer[nid:0,ino:0,ofs:0,cpver:0,blkaddr:0] [ 653.362984][ T8690] F2FS-fs (loop3): Failed to read root inode [ 653.474076][ T14] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 653.713981][ T14] usb 3-1: Using ep0 maxpacket: 16 [ 653.834346][ T14] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 653.850746][ T14] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 653.860823][ T14] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 653.870618][ T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.880723][ T14] usb 3-1: config 0 descriptor?? [ 654.130074][ T8697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 654.140376][ T8697] misc raw-gadget: fail, usb_gadget_register_driver returned -16 14:13:46 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000090018105e22060000000000e10109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "0400", "00000004"}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001d80)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000340)={0x0, 0x0, 0x3, "7a5aa4"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 14:13:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 14:13:46 executing program 5: syz_usb_connect$cdc_ecm(0x0, 0x62, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x50, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, [@mdlm={0x15}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x0, 0x7c}}}}}]}}]}}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 14:13:46 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700000000f6c3000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x3c, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 14:13:46 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010360)="1020f5f2", 0x4, 0x1400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f00000107c0)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000010ca0)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)='\x00\x00\x00\x00\x00\x00\x00', 0x7, 0x1000fe0}], 0x0, &(0x7f0000010da0)=ANY=[]) [ 654.369071][ T3692] usb 1-1: USB disconnect, device number 93 [ 654.407008][ T8708] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 14:13:46 executing program 1: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0}) [ 654.428532][ T14] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.0008/input/input22 [ 654.437074][ T8711] loop3: detected capacity change from 0 to 65551 [ 654.461330][ T8711] F2FS-fs (loop3): Invalid log_blocksize (0), supports only 12 14:13:46 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700000000f6c3000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 654.485462][ T14] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.0008/input/input23 [ 654.488353][ T8711] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 654.527030][ T8711] F2FS-fs (loop3): invalid crc_offset: 0 [ 654.538984][ T8718] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 654.549942][ T8711] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 0) [ 654.571638][ T14] kye 0003:0458:5019.0008: input,hiddev0,hidraw0: USB HID v0.00 Pointer [HID 0458:5019] on usb-dummy_hcd.2-1/input0 [ 654.579742][ T8711] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 654.601286][ T8711] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 654.603891][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 654.629805][ T14] usb 3-1: USB disconnect, device number 9 [ 654.634457][ T8711] F2FS-fs (loop3): inconsistent node block, nid:3, node_footer[nid:0,ino:0,ofs:0,cpver:0,blkaddr:0] [ 654.651564][ T8711] F2FS-fs (loop3): Failed to read root inode [ 654.684057][ T3693] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 654.744064][ T3694] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 654.854124][ T3692] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 654.934016][ T3693] usb 6-1: Using ep0 maxpacket: 32 [ 654.984009][ T3694] usb 2-1: Using ep0 maxpacket: 32 [ 655.054181][ T3693] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 14:13:47 executing program 2: ioctl$HIDIOCSFLAG(0xffffffffffffffff, 0x4004480f, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x4805, 0x0) 14:13:47 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700000000f6c3000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 14:13:47 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010360)="1020f5f2", 0x4, 0x1400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f00000107c0)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000010ca0)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300", 0xa, 0x1000fe0}], 0x0, &(0x7f0000010da0)=ANY=[]) [ 655.124124][ T3692] usb 1-1: Using ep0 maxpacket: 16 [ 655.144176][ T3694] usb 2-1: unable to get BOS descriptor or descriptor too short [ 655.153227][ T8724] loop3: detected capacity change from 0 to 65551 [ 655.165368][ T8725] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 14:13:47 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700000000f6c3000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 655.197556][ T8724] F2FS-fs (loop3): Invalid log_blocksize (0), supports only 12 [ 655.207230][ T8724] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 655.229896][ T3694] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 655.246074][ T8730] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 655.255624][ T8724] F2FS-fs (loop3): invalid crc_offset: 0 [ 655.265868][ T3692] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 655.277318][ T3692] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 655.279920][ T8724] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 0) 14:13:47 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700000000f6c3000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 655.287665][ T3692] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 655.325993][ T3693] usb 6-1: string descriptor 0 read error: -22 [ 655.332387][ T3693] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 655.341760][ T8724] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 655.351466][ T8724] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 655.372100][ T8736] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 655.372594][ T3693] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.424120][ T3694] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 655.424206][ T3692] usb 1-1: New USB device found, idVendor=225e, idProduct=0006, bcdDevice= 0.00 [ 655.438037][ T3694] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.451868][ T3693] cdc_ether: probe of 6-1:1.0 failed with error -22 [ 655.458678][ T8724] F2FS-fs (loop3): sanity_check_inode: corrupted inode footer i_ino=3, ino,nid: [0, 3] run fsck to fix. [ 655.470656][ T3762] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 655.471132][ T8724] F2FS-fs (loop3): Failed to read root inode [ 655.479894][ T3694] usb 2-1: Product: syz [ 655.492025][ T3694] usb 2-1: Manufacturer: syz [ 655.497311][ T3692] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=225 [ 655.510335][ T3694] usb 2-1: SerialNumber: syz [ 655.522176][ T3692] usb 1-1: SerialNumber: syz [ 655.535695][ T3692] usb 1-1: config 0 descriptor?? [ 655.555931][ T3694] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 655.584511][ T3692] hub 1-1:0.0: USB hub found [ 655.664651][ T3695] usb 6-1: USB disconnect, device number 33 [ 655.714090][ T3762] usb 3-1: Using ep0 maxpacket: 16 [ 655.758383][ T3689] usb 2-1: USB disconnect, device number 4 [ 655.804110][ T3692] hub 1-1:0.0: 1 port detected [ 655.834351][ T3762] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 655.851010][ T3762] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 655.860938][ T3762] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 655.870385][ T3762] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 655.880803][ T3762] usb 3-1: config 0 descriptor?? [ 656.125709][ T8727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 656.138129][ T8727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 656.389312][ T3762] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.0009/input/input24 [ 656.445362][ T3692] hub 1-1:0.0: hub_ext_port_status failed (err = 3) [ 656.470100][ T3762] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.0009/input/input25 [ 656.549917][ T3762] kye 0003:0458:5019.0009: input,hiddev0,hidraw0: USB HID v0.00 Pointer [HID 0458:5019] on usb-dummy_hcd.2-1/input0 [ 656.590054][ T3692] usb 3-1: USB disconnect, device number 10 14:13:50 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000090018105e22060000000000e10109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "0400", "00000004"}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001d80)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000340)={0x0, 0x0, 0x3, "7a5aa4"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 14:13:50 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700000000f6c3000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 14:13:50 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010360)="1020f5f2", 0x4, 0x1400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f00000107c0)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000010ca0)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300", 0xa, 0x1000fe0}], 0x0, &(0x7f0000010da0)=ANY=[]) 14:13:50 executing program 5: mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) 14:13:50 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDMKTONE(r0, 0x4b4e, 0x1a) 14:13:50 executing program 2: ioctl$HIDIOCSFLAG(0xffffffffffffffff, 0x4004480f, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x1c1241) ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0) 14:13:50 executing program 1: request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0) 14:13:50 executing program 5: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) inotify_add_watch(r0, 0x0, 0x4000000) [ 657.658211][ T3695] usb 1-1: USB disconnect, device number 94 [ 657.685794][ T8742] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 657.695655][ T8743] loop3: detected capacity change from 0 to 65551 14:13:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000780)={'sit0\x00', 0x0}) [ 657.726576][ T8743] F2FS-fs (loop3): Invalid log_blocksize (0), supports only 12 [ 657.749569][ T8743] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 657.773956][ T8743] F2FS-fs (loop3): invalid crc_offset: 0 14:13:50 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) pipe2(&(0x7f0000001640), 0x0) 14:13:50 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0x66, 0x0, &(0x7f0000000100)) 14:13:50 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700000000f6c3000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 657.797988][ T8743] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 0) [ 657.820311][ T8743] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 657.834204][ T8743] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 657.889754][ T8766] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 657.907049][ T8743] F2FS-fs (loop3): sanity_check_inode: corrupted inode footer i_ino=3, ino,nid: [0, 3] run fsck to fix. [ 657.930505][ T8743] F2FS-fs (loop3): Failed to read root inode [ 657.994601][ T3689] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 658.134191][ T3695] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 658.274073][ T3689] usb 3-1: Using ep0 maxpacket: 16 [ 658.414019][ T3695] usb 1-1: Using ep0 maxpacket: 16 [ 658.425029][ T3689] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 658.436042][ T3689] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 658.446038][ T3689] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 658.455500][ T3689] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.464805][ T3689] usb 3-1: config 0 descriptor?? [ 658.535171][ T3695] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 658.546172][ T3695] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 658.556444][ T3695] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 658.655893][ T3695] usb 1-1: New USB device found, idVendor=225e, idProduct=0006, bcdDevice= 0.00 [ 658.665115][ T3695] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=225 [ 658.673342][ T3695] usb 1-1: SerialNumber: syz [ 658.680384][ T3695] usb 1-1: config 0 descriptor?? [ 658.715769][ T8748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 658.725328][ T3695] hub 1-1:0.0: USB hub found [ 658.730210][ T8748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 658.934062][ T3695] hub 1-1:0.0: 1 port detected [ 659.024091][ T3689] usbhid 3-1:0.0: can't add hid device: -71 [ 659.030177][ T3689] usbhid: probe of 3-1:0.0 failed with error -71 [ 659.048245][ T3689] usb 3-1: USB disconnect, device number 11 [ 659.614167][ T3695] hub 1-1:0.0: hub_ext_port_status failed (err = 3) 14:13:53 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000090018105e22060000000000e10109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "0400", "00000004"}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001d80)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000340)={0x0, 0x0, 0x4, "7a5aa4fd"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 14:13:53 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000015c0)=@bpf_tracing={0x1a, 0x3, &(0x7f0000001340)=@framed, &(0x7f00000013c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 14:13:53 executing program 5: pipe2(&(0x7f0000000000), 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 14:13:53 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700000000f6c3000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 14:13:53 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010360)="1020f5f2", 0x4, 0x1400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f00000107c0)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000010ca0)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300", 0xa, 0x1000fe0}], 0x0, &(0x7f0000010da0)=ANY=[]) 14:13:53 executing program 2: ioctl$HIDIOCSFLAG(0xffffffffffffffff, 0x4004480f, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x1c1241) ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0) [ 660.827142][ T3693] usb 1-1: USB disconnect, device number 95 14:13:53 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x3, 0x3, &(0x7f00000008c0)=@framed, &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 14:13:53 executing program 1: mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 660.874420][ T8779] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 660.889572][ T8777] loop3: detected capacity change from 0 to 65551 14:13:53 executing program 5: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000001180), 0x214940, 0x0) 14:13:53 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="0f010000fe000047"], 0x138) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}]}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000009c0)) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) 14:13:53 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700000000f6c3000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 660.930454][ T8777] F2FS-fs (loop3): Invalid log_blocksize (0), supports only 12 [ 660.965377][ T8777] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock 14:13:53 executing program 5: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000015c0)=@bpf_tracing={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) pipe2(&(0x7f0000001640), 0x800) [ 661.005689][ T8777] F2FS-fs (loop3): invalid crc_offset: 0 [ 661.053425][ T8777] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 0) [ 661.083231][ T8798] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 661.123128][ T8777] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 661.136100][ T8777] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 661.164998][ T3762] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 661.187592][ T8777] F2FS-fs (loop3): sanity_check_inode: corrupted inode footer i_ino=3, ino,nid: [0, 3] run fsck to fix. [ 661.207688][ T8777] F2FS-fs (loop3): Failed to read root inode [ 661.294177][ T3693] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 661.404015][ T3762] usb 3-1: Using ep0 maxpacket: 16 [ 661.524083][ T3762] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 661.535236][ T3693] usb 1-1: Using ep0 maxpacket: 16 [ 661.540435][ T3762] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 661.550379][ T3762] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 661.559537][ T3762] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 661.569797][ T3762] usb 3-1: config 0 descriptor?? [ 661.654140][ T3693] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 661.665601][ T3693] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 661.675550][ T3693] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 661.764147][ T3693] usb 1-1: New USB device found, idVendor=225e, idProduct=0006, bcdDevice= 0.00 [ 661.773302][ T3693] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=225 [ 661.781612][ T3693] usb 1-1: SerialNumber: syz [ 661.789617][ T3693] usb 1-1: config 0 descriptor?? [ 661.815531][ T8778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 661.828808][ T8778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 661.837425][ T3693] hub 1-1:0.0: USB hub found [ 662.054315][ T3693] hub 1-1:0.0: 1 port detected [ 662.134067][ T3762] usbhid 3-1:0.0: can't add hid device: -71 [ 662.140152][ T3762] usbhid: probe of 3-1:0.0 failed with error -71 [ 662.156332][ T3762] usb 3-1: USB disconnect, device number 12 [ 662.924031][ T3762] hub 1-1:0.0: activate --> -90 [ 663.335816][ T3695] usb 1-1: USB disconnect, device number 96 14:13:56 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000090018105e22060000000000e10109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "0400", "00000004"}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001d80)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000340)={0x0, 0x0, 0x4, "7a5aa4fd"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 14:13:56 executing program 5: mmap$snddsp_control(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x2000007, 0x30, 0xffffffffffffffff, 0x83000000) 14:13:56 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="0f010000fe000047"], 0x138) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}]}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000009c0)) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) 14:13:56 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010360)="1020f5f2", 0x4, 0x1400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f00000107c0)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000010ca0)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="000000000000000003000000", 0xc, 0x1000fe0}], 0x0, &(0x7f0000010da0)=ANY=[]) 14:13:56 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700000000f6c3000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 14:13:56 executing program 2: ioctl$HIDIOCSFLAG(0xffffffffffffffff, 0x4004480f, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x1c1241) ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0) 14:13:56 executing program 5: syz_open_dev$sndpcmc(&(0x7f0000000280), 0x0, 0x83) [ 663.863630][ T8808] loop3: detected capacity change from 0 to 65551 [ 663.870470][ T8807] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 14:13:56 executing program 5: mincore(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) 14:13:56 executing program 5: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000015c0)=@bpf_tracing={0x1a, 0x0, 0x0, &(0x7f00000013c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 663.921114][ T8808] F2FS-fs (loop3): Invalid log_blocksize (0), supports only 12 [ 663.935907][ T8808] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock 14:13:56 executing program 5: syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9da, 0x1a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{}, [{{0x9, 0x5, 0x2, 0x3, 0x10}}]}}}]}}]}}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 14:13:56 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700000000f6c3000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 14:13:56 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="0f010000fe000047"], 0x138) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}]}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000009c0)) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) [ 664.031151][ T8808] F2FS-fs (loop3): invalid crc_offset: 0 [ 664.061305][ T8808] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 0) [ 664.090325][ T8808] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 664.115598][ T8826] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 664.131124][ T8808] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 664.144018][ T3694] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 664.174089][ T3762] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 664.209401][ T8808] F2FS-fs (loop3): sanity_check_inode: corrupted inode footer i_ino=3, ino,nid: [0, 3] run fsck to fix. [ 664.221015][ T8808] F2FS-fs (loop3): Failed to read root inode [ 664.374226][ T3693] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 664.403975][ T3694] usb 3-1: Using ep0 maxpacket: 16 [ 664.444128][ T3762] usb 1-1: Using ep0 maxpacket: 16 [ 664.534104][ T3694] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 664.546164][ T3694] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 664.556026][ T3694] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 664.565409][ T3694] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.576464][ T3694] usb 3-1: config 0 descriptor?? [ 664.584145][ T3762] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 664.595382][ T3762] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 664.605259][ T3762] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 664.619764][ T3693] usb 6-1: Using ep0 maxpacket: 16 [ 664.734580][ T3762] usb 1-1: New USB device found, idVendor=225e, idProduct=0006, bcdDevice= 0.00 [ 664.744053][ T3762] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=225 [ 664.752389][ T3762] usb 1-1: SerialNumber: syz [ 664.760406][ T3762] usb 1-1: config 0 descriptor?? [ 664.784125][ T3693] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 664.804966][ T3762] hub 1-1:0.0: USB hub found [ 664.819492][ T8806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 664.829532][ T8806] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 665.014177][ T3762] hub 1-1:0.0: 1 port detected [ 665.084537][ T3693] usb 6-1: string descriptor 0 read error: -22 [ 665.091235][ T3693] usb 6-1: New USB device found, idVendor=09da, idProduct=001a, bcdDevice= 0.40 [ 665.100988][ T3693] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.124199][ T3694] usbhid 3-1:0.0: can't add hid device: -71 [ 665.130299][ T3694] usbhid: probe of 3-1:0.0 failed with error -71 [ 665.138644][ T3694] usb 3-1: USB disconnect, device number 13 [ 665.148375][ T3693] usbhid 6-1:1.0: couldn't find an input interrupt endpoint [ 665.347704][ T3693] usb 6-1: USB disconnect, device number 34 [ 665.884136][ T3762] hub 1-1:0.0: activate --> -90 [ 666.296405][ T3693] usb 1-1: USB disconnect, device number 97 14:13:59 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000090018105e22060000000000e10109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "0400", "00000004"}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001d80)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000340)={0x0, 0x0, 0x4, "7a5aa4fd"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 14:13:59 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700000000f6c3000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 14:13:59 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010360)="1020f5f2", 0x4, 0x1400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f00000107c0)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000010ca0)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="000000000000000003000000", 0xc, 0x1000fe0}], 0x0, &(0x7f0000010da0)=ANY=[]) 14:13:59 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="0f010000fe000047"], 0x138) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}]}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000009c0)) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) 14:13:59 executing program 2: ioctl$HIDIOCSFLAG(0xffffffffffffffff, 0x4004480f, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x1c1241) ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0) 14:13:59 executing program 5: syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9da, 0x1a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{}, [{{0x9, 0x5, 0x2, 0x3, 0x10}}]}}}]}}]}}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 666.833313][ T8835] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 666.842265][ T8834] loop3: detected capacity change from 0 to 65551 [ 666.866826][ T8834] F2FS-fs (loop3): Invalid log_blocksize (0), supports only 12 14:13:59 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700000000f6c3000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 666.885265][ T8834] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock 14:13:59 executing program 1: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9da, 0x1a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) [ 666.928703][ T8834] F2FS-fs (loop3): invalid crc_offset: 0 [ 666.962970][ T8843] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 14:13:59 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700000000f6c3000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 666.978933][ T8834] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 0) [ 667.005117][ T8834] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 667.016731][ T8834] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 667.076936][ T8850] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 667.088427][ T8834] F2FS-fs (loop3): sanity_check_inode: corrupted inode footer i_ino=3, ino,nid: [0, 3] run fsck to fix. [ 667.093974][ T3762] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 667.099683][ T3695] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 667.114412][ T3693] usb 1-1: new high-speed USB device number 98 using dummy_hcd 14:13:59 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700000000f6c3000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 667.115319][ T8834] F2FS-fs (loop3): Failed to read root inode 14:13:59 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010360)="1020f5f2", 0x4, 0x1400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f00000107c0)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000010ca0)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="000000000000000003000000", 0xc, 0x1000fe0}], 0x0, &(0x7f0000010da0)=ANY=[]) 14:13:59 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700000000f6c3000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 667.179050][ T8853] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 667.266333][ T8856] loop3: detected capacity change from 0 to 65551 [ 667.267415][ T8857] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 667.279240][ T8856] F2FS-fs (loop3): Invalid log_blocksize (0), supports only 12 [ 667.294048][ T3689] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 667.297411][ T8856] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 667.322829][ T8856] F2FS-fs (loop3): invalid crc_offset: 0 [ 667.338327][ T8856] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 0) [ 667.345328][ T3762] usb 6-1: Using ep0 maxpacket: 16 [ 667.360023][ T3693] usb 1-1: Using ep0 maxpacket: 16 [ 667.365488][ T8856] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 667.374616][ T3695] usb 3-1: Using ep0 maxpacket: 16 [ 667.379996][ T8856] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 667.412456][ T8856] F2FS-fs (loop3): sanity_check_inode: corrupted inode footer i_ino=3, ino,nid: [0, 3] run fsck to fix. [ 667.424032][ T8856] F2FS-fs (loop3): Failed to read root inode [ 667.494157][ T3762] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 667.511694][ T3693] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 667.522951][ T3693] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 667.533114][ T3693] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 667.534162][ T3695] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 667.557917][ T3689] usb 2-1: Using ep0 maxpacket: 16 [ 667.563149][ T3695] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 667.583001][ T3695] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 667.593658][ T3695] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 667.603829][ T3695] usb 3-1: config 0 descriptor?? [ 667.624351][ T3693] usb 1-1: New USB device found, idVendor=225e, idProduct=0006, bcdDevice= 0.00 [ 667.634032][ T3693] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=225 [ 667.642359][ T3693] usb 1-1: SerialNumber: syz [ 667.649748][ T3693] usb 1-1: config 0 descriptor?? [ 667.684187][ T3689] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 667.695054][ T3693] hub 1-1:0.0: USB hub found [ 667.764066][ T3762] usb 6-1: string descriptor 0 read error: -22 [ 667.770823][ T3762] usb 6-1: New USB device found, idVendor=09da, idProduct=001a, bcdDevice= 0.40 [ 667.779938][ T3762] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.825706][ T3762] usbhid 6-1:1.0: couldn't find an input interrupt endpoint [ 667.864121][ T3689] usb 2-1: New USB device found, idVendor=09da, idProduct=001a, bcdDevice= 0.40 [ 667.875449][ T8837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 667.878867][ T3689] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.892377][ T3689] usb 2-1: Product: syz [ 667.897124][ T3689] usb 2-1: Manufacturer: syz [ 667.897777][ T8837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 667.901898][ T3689] usb 2-1: SerialNumber: syz [ 667.914121][ T3693] hub 1-1:0.0: 1 port detected [ 667.967519][ T3689] usbhid 2-1:1.0: couldn't find an input interrupt endpoint [ 668.035823][ T14] usb 6-1: USB disconnect, device number 35 [ 668.167464][ T3689] usb 2-1: USB disconnect, device number 5 [ 668.206027][ T3695] usbhid 3-1:0.0: can't add hid device: -71 [ 668.212151][ T3695] usbhid: probe of 3-1:0.0 failed with error -71 [ 668.224402][ T3695] usb 3-1: USB disconnect, device number 14 [ 668.784168][ T3693] hub 1-1:0.0: activate --> -90 [ 669.207507][ T3762] usb 1-1: USB disconnect, device number 98 14:14:02 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000090018105e22060000000000e10109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "0400", "00000004"}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001d80)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000340)={0x0, 0x0, 0x4, "7a5aa4fd"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 14:14:02 executing program 1: r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$fscrypt_v1(&(0x7f0000000240), &(0x7f0000000280), &(0x7f0000000400)={0x0, "be345c00fcd5e93b7f99290eb945699929981015912a8efc1d6db4b15c2c33da0e6995f0d5079c402785df45b551c3493ccfa4fce8ae2c19a56634deb859d91c"}, 0x48, r0) r2 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$link(0x8, r1, r2) 14:14:02 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700000000f6c3000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 14:14:02 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010360)="1020f5f2", 0x4, 0x1400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f00000107c0)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000010ca0)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd}], 0x0, &(0x7f0000010da0)=ANY=[]) 14:14:02 executing program 2: ioctl$HIDIOCSFLAG(0xffffffffffffffff, 0x4004480f, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x1c1241) ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0) 14:14:02 executing program 5: syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9da, 0x1a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{}, [{{0x9, 0x5, 0x2, 0x3, 0x10}}]}}}]}}]}}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 14:14:02 executing program 1: r0 = openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) read$watch_queue(r0, 0x0, 0x0) [ 669.731166][ T8867] loop3: detected capacity change from 0 to 65536 [ 669.761996][ T8866] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 669.773433][ T8867] F2FS-fs (loop3): Invalid log_blocksize (0), supports only 12 14:14:02 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) [ 669.812786][ T8867] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 669.823615][ T8867] F2FS-fs (loop3): invalid crc_offset: 0 14:14:02 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700000000f6c3000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 669.855664][ T27] audit: type=1326 audit(1662300842.213:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8878 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6354a89279 code=0x0 [ 669.861957][ T8867] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 0) 14:14:02 executing program 1: setreuid(0xee01, 0xee01) socket$packet(0x11, 0x0, 0x300) 14:14:02 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) [ 669.912406][ T8867] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 669.936193][ T8882] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 669.953326][ T8867] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. 14:14:02 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700000000f6c3000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 670.004254][ T3693] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 670.034192][ T3762] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 670.039819][ T8888] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 670.051511][ T3689] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 670.052127][ T8867] F2FS-fs (loop3): inconsistent node block, nid:3, node_footer[nid:0,ino:0,ofs:0,cpver:0,blkaddr:0] [ 670.075031][ T8867] F2FS-fs (loop3): Failed to read root inode [ 670.263963][ T3693] usb 3-1: Using ep0 maxpacket: 16 [ 670.284151][ T3762] usb 1-1: Using ep0 maxpacket: 16 [ 670.314115][ T3689] usb 6-1: Using ep0 maxpacket: 16 [ 670.384095][ T3693] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 670.395223][ T3693] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 670.405319][ T3762] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 670.416503][ T3693] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 670.425576][ T3762] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 670.435500][ T3693] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.444009][ T3762] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 670.454034][ T3689] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 670.466198][ T3693] usb 3-1: config 0 descriptor?? [ 670.534118][ T3762] usb 1-1: New USB device found, idVendor=225e, idProduct=0006, bcdDevice= 0.00 [ 670.544150][ T3762] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=225 [ 670.552333][ T3762] usb 1-1: SerialNumber: syz [ 670.558819][ T3762] usb 1-1: config 0 descriptor?? [ 670.604851][ T3762] hub 1-1:0.0: USB hub found [ 670.715890][ T8869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 670.725160][ T8869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 670.764179][ T3689] usb 6-1: string descriptor 0 read error: -22 [ 670.770514][ T3689] usb 6-1: New USB device found, idVendor=09da, idProduct=001a, bcdDevice= 0.40 [ 670.779734][ T3689] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.824100][ T3762] hub 1-1:0.0: 1 port detected [ 670.836379][ T3689] usbhid 6-1:1.0: couldn't find an input interrupt endpoint [ 671.014012][ T3693] usbhid 3-1:0.0: can't add hid device: -71 [ 671.020117][ T3693] usbhid: probe of 3-1:0.0 failed with error -71 [ 671.032145][ T3693] usb 3-1: USB disconnect, device number 15 [ 671.069569][ T6] usb 6-1: USB disconnect, device number 36 [ 671.684098][ T3762] hub 1-1:0.0: activate --> -90 [ 672.108438][ T917] usb 1-1: USB disconnect, device number 99 14:14:04 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700000000f6c3000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 14:14:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x14, r1, 0x1}, 0x14}}, 0x0) 14:14:04 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010360)="1020f5f2", 0x4, 0x1400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f00000107c0)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000010ca0)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd}], 0x0, &(0x7f0000010da0)=ANY=[]) 14:14:04 executing program 2: ioctl$HIDIOCSFLAG(0xffffffffffffffff, 0x4004480f, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x1c1241) ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0) 14:14:04 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000090018105e22060000000000e10109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "0400", "00000004"}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001d80)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000340)={0x0, 0x0, 0x4, "7a5aa4fd"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 14:14:04 executing program 5: syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9da, 0x1a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{}, [{{0x9, 0x5, 0x2, 0x3, 0x10}}]}}}]}}]}}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 14:14:05 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 672.629716][ T8894] loop3: detected capacity change from 0 to 65536 [ 672.658561][ T8896] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 672.662677][ T8894] F2FS-fs (loop3): Invalid log_blocksize (0), supports only 12 14:14:05 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000800, &(0x7f0000001040)={0xa, 0x0, 0x0, @local, 0x8}, 0x1c) [ 672.700461][ T8894] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock 14:14:05 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700000000f6c3000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 672.748551][ T8894] F2FS-fs (loop3): invalid crc_offset: 0 [ 672.769756][ T8894] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 0) 14:14:05 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700000000f6c3000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 672.806737][ T8911] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 672.810478][ T8894] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 672.825292][ T8894] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. 14:14:05 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700000000f6c3000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 672.879141][ T8913] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 672.891656][ T8894] F2FS-fs (loop3): inconsistent node block, nid:3, node_footer[nid:0,ino:0,ofs:0,cpver:0,blkaddr:0] [ 672.904366][ T3762] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 672.913991][ T8894] F2FS-fs (loop3): Failed to read root inode [ 672.924016][ T917] usb 6-1: new high-speed USB device number 37 using dummy_hcd 14:14:05 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700000000f6c3000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 672.959428][ T8915] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 672.969764][ T3689] usb 1-1: new high-speed USB device number 100 using dummy_hcd 14:14:05 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010360)="1020f5f2", 0x4, 0x1400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f00000107c0)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000010ca0)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd}], 0x0, &(0x7f0000010da0)=ANY=[]) [ 673.046023][ T8917] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 673.054593][ T8919] loop3: detected capacity change from 0 to 65536 [ 673.065493][ T8919] F2FS-fs (loop3): Invalid log_blocksize (0), supports only 12 [ 673.073352][ T8919] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 673.093707][ T8919] F2FS-fs (loop3): invalid crc_offset: 0 [ 673.115119][ T8923] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 673.130868][ T8919] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 0) [ 673.148776][ T8919] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 673.157954][ T3762] usb 3-1: Using ep0 maxpacket: 16 [ 673.163708][ T8919] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 673.201535][ T8926] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 673.211342][ T917] usb 6-1: Using ep0 maxpacket: 16 [ 673.225140][ T8919] F2FS-fs (loop3): inconsistent node block, nid:3, node_footer[nid:0,ino:0,ofs:0,cpver:0,blkaddr:0] [ 673.233956][ T3689] usb 1-1: Using ep0 maxpacket: 16 [ 673.240930][ T8919] F2FS-fs (loop3): Failed to read root inode [ 673.274228][ T3762] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 673.298083][ T3762] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 673.308772][ T3762] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 673.318799][ T3762] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 673.334349][ T917] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 673.334888][ T3762] usb 3-1: config 0 descriptor?? [ 673.354217][ T3689] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 14:14:05 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700000000f6c3000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 14:14:05 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700000000f6c3000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 673.377637][ T3689] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 673.405282][ T3689] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 673.514463][ T3689] usb 1-1: New USB device found, idVendor=225e, idProduct=0006, bcdDevice= 0.00 [ 673.523712][ T3689] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=225 [ 673.532098][ T3689] usb 1-1: SerialNumber: syz [ 673.542302][ T3689] usb 1-1: config 0 descriptor?? [ 673.585794][ T3689] hub 1-1:0.0: USB hub found [ 673.605418][ T8898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 673.621642][ T8898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 673.664163][ T917] usb 6-1: string descriptor 0 read error: -22 [ 673.670806][ T917] usb 6-1: New USB device found, idVendor=09da, idProduct=001a, bcdDevice= 0.40 [ 673.680167][ T917] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.726288][ T917] usbhid 6-1:1.0: couldn't find an input interrupt endpoint [ 673.794116][ T3689] hub 1-1:0.0: 1 port detected [ 673.924385][ T3762] usbhid 3-1:0.0: can't add hid device: -71 [ 673.930428][ T3762] usbhid: probe of 3-1:0.0 failed with error -71 [ 673.949734][ T3762] usb 3-1: USB disconnect, device number 16 [ 673.953490][ T917] usb 6-1: USB disconnect, device number 37 14:14:06 executing program 2: ioctl$HIDIOCSFLAG(0xffffffffffffffff, 0x4004480f, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x1c1241) ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0) [ 674.643997][ T6] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 674.664223][ T3689] hub 1-1:0.0: activate --> -90 [ 674.883939][ T6] usb 3-1: Using ep0 maxpacket: 16 [ 675.004032][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 675.015489][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 675.025753][ T6] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 675.035178][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 675.046870][ T6] usb 3-1: config 0 descriptor?? [ 675.092902][ T917] usb 1-1: USB disconnect, device number 100 [ 675.289045][ T8928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 675.297868][ T8928] misc raw-gadget: fail, usb_gadget_register_driver returned -16 14:14:07 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000090018105e22060000000000e10109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "0400", "00000004"}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001d80)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000340)={0x0, 0x0, 0x4, "7a5aa4fd"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 14:14:07 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700000000f6c3000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 14:14:07 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010360)="1020f5f2", 0x4, 0x1400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f00000107c0)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000010da0)=ANY=[]) 14:14:07 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x2, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}, @NFQA_CFG_PARAMS={0x9}, @NFQA_CFG_QUEUE_MAXLEN={0x8}]}, 0x30}}, 0x0) 14:14:07 executing program 5: r0 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000100)={'icmp6\x00'}, &(0x7f0000000240)=0x1e) [ 675.551049][ T6] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.000A/input/input26 14:14:07 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x20, 0x3fa, 0x1}, 0x20}}, 0x0) 14:14:08 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x2, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}, @NFQA_CFG_PARAMS={0x9}, @NFQA_CFG_QUEUE_MAXLEN={0x8}]}, 0x30}}, 0x0) [ 675.621023][ T8936] loop3: detected capacity change from 0 to 65551 [ 675.631807][ T8933] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 675.643237][ T6] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.000A/input/input27 14:14:08 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000cc0)={0x6, 0x3, &(0x7f0000000a40)=@raw=[@func, @map_idx], &(0x7f0000000ac0)='syzkaller\x00', 0x5, 0xeb, &(0x7f0000000b00)=""/235, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 675.677371][ T8936] F2FS-fs (loop3): Invalid log_blocksize (0), supports only 12 [ 675.689001][ T8936] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock 14:14:08 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700000000f6c3000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 14:14:08 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x2, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}, @NFQA_CFG_PARAMS={0x9}, @NFQA_CFG_QUEUE_MAXLEN={0x8}]}, 0x30}}, 0x0) [ 675.729026][ T8936] F2FS-fs (loop3): invalid crc_offset: 0 [ 675.744818][ T6] kye 0003:0458:5019.000A: input,hiddev0,hidraw0: USB HID v0.00 Pointer [HID 0458:5019] on usb-dummy_hcd.2-1/input0 14:14:08 executing program 5: open(&(0x7f0000000180)='./file0/file0\x00', 0x0, 0x0) [ 675.795863][ T8936] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 0) [ 675.811014][ T8951] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 675.830712][ T8936] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 675.842037][ T8936] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 675.934100][ T3693] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 675.995187][ T8936] F2FS-fs (loop3): sanity_check_inode: corrupted inode i_blocks i_ino=3 iblocks=0, run fsck to fix. [ 676.058085][ T8936] F2FS-fs (loop3): Failed to read root inode [ 676.174105][ T3693] usb 1-1: Using ep0 maxpacket: 16 [ 676.294135][ T3693] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 676.305130][ T3693] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 676.314987][ T3693] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 676.404312][ T3693] usb 1-1: New USB device found, idVendor=225e, idProduct=0006, bcdDevice= 0.00 [ 676.413518][ T3693] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=225 [ 676.421840][ T3693] usb 1-1: SerialNumber: syz [ 676.429210][ T3693] usb 1-1: config 0 descriptor?? [ 676.474763][ T3693] hub 1-1:0.0: USB hub found [ 676.674018][ C0] kye 0003:0458:5019.000A: usb_submit_urb(ctrl) failed: -1 [ 676.694102][ T3693] hub 1-1:0.0: 1 port detected 14:14:09 executing program 2: ioctl$HIDIOCSFLAG(0xffffffffffffffff, 0x4004480f, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x1c1241) ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0) [ 677.564038][ T3693] hub 1-1:0.0: activate --> -90 [ 677.594121][ T3689] usb 3-1: reset high-speed USB device number 17 using dummy_hcd [ 677.863996][ T3689] usb 3-1: Using ep0 maxpacket: 16 [ 677.989442][ T3762] usb 1-1: USB disconnect, device number 101 14:14:10 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000090018105e22060000000000e10109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "0400", "00000004"}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001d80)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000340)={0x0, 0x0, 0x4, "7a5aa4fd"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 14:14:10 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x33, &(0x7f0000000200)=ANY=[], 0x68) sendto$inet6(r0, &(0x7f0000000080)='I', 0x1, 0x0, &(0x7f0000000040)={0x1c, 0x1c, 0x2}, 0x1c) 14:14:10 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x2, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}, @NFQA_CFG_PARAMS={0x9}, @NFQA_CFG_QUEUE_MAXLEN={0x8}]}, 0x30}}, 0x0) 14:14:10 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700000000f6c3000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x3c, 0x2c, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 14:14:10 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010360)="1020f5f2", 0x4, 0x1400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f00000107c0)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000010da0)=ANY=[]) 14:14:10 executing program 1: open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x100401, 0x0) writev(r0, &(0x7f0000000480)=[{0x0}, {&(0x7f00000000c0)='~', 0x1}], 0x2) [ 678.475991][ T3695] usb 3-1: USB disconnect, device number 17 [ 678.545423][ T8965] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 678.559913][ T8966] loop3: detected capacity change from 0 to 65551 14:14:10 executing program 5: r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x100401, 0x0) copy_file_range(r0, 0x0, r1, &(0x7f00000000c0), 0x0, 0x0) 14:14:11 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x1c, 0x1c, 0x2}, 0x1c) getsockname$inet6(r0, 0x0, &(0x7f00000000c0)) [ 678.596062][ T8966] F2FS-fs (loop3): Invalid log_blocksize (0), supports only 12 [ 678.630906][ T8966] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock 14:14:11 executing program 5: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000400)=""/183) 14:14:11 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700000000f6c3000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x3c, 0x2c, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 678.663395][ T8966] F2FS-fs (loop3): invalid crc_offset: 0 [ 678.691465][ T8966] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 0) 14:14:11 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000004280), 0x7fffffff, 0x0) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f0000000280)={0x0, @reserved}) [ 678.732075][ T8966] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 678.747089][ T8982] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 678.760323][ T8966] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 678.854092][ T3762] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 678.876361][ T8966] F2FS-fs (loop3): sanity_check_inode: corrupted inode i_blocks i_ino=3 iblocks=0, run fsck to fix. [ 678.892027][ T8966] F2FS-fs (loop3): Failed to read root inode 14:14:11 executing program 2: ioctl$HIDIOCSFLAG(0xffffffffffffffff, 0x4004480f, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x1c1241) ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0) [ 679.103968][ T3762] usb 1-1: Using ep0 maxpacket: 16 [ 679.226179][ T3762] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 679.237487][ T3762] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 679.247296][ T3762] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 679.283976][ T3694] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 679.334271][ T3762] usb 1-1: New USB device found, idVendor=225e, idProduct=0006, bcdDevice= 0.00 [ 679.343462][ T3762] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=225 [ 679.351780][ T3762] usb 1-1: SerialNumber: syz [ 679.358977][ T3762] usb 1-1: config 0 descriptor?? [ 679.404601][ T3762] hub 1-1:0.0: USB hub found [ 679.523941][ T3694] usb 3-1: Using ep0 maxpacket: 16 [ 679.624124][ T3762] hub 1-1:0.0: 1 port detected [ 679.644096][ T3694] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 679.659079][ T3694] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 679.669015][ T3694] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 679.678279][ T3694] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 679.688248][ T3694] usb 3-1: config 0 descriptor?? [ 680.424224][ T3694] usbhid 3-1:0.0: can't add hid device: -71 [ 680.430710][ T3694] usbhid: probe of 3-1:0.0 failed with error -71 [ 680.439001][ T3694] usb 3-1: USB disconnect, device number 18 [ 680.484022][ T3762] hub 1-1:0.0: activate --> -90 [ 680.685912][ T3689] usb 1-1: USB disconnect, device number 102 [ 680.704015][ T3762] hub 1-1:0.0: hub_ext_port_status failed (err = -71) 14:14:13 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000090018105e22060000000000e10109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "0400", "00000004"}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001d80)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000340)={0x0, 0x0, 0x4, "7a5aa4fd"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 14:14:13 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 14:14:13 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700000000f6c3000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x3c, 0x2c, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 14:14:13 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010360)="1020f5f2", 0x4, 0x1400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f00000107c0)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000010da0)=ANY=[]) 14:14:13 executing program 5: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000180)=@multiplanar_userptr={0x0, 0x8, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "49d8c6d3"}, 0x0, 0x2, {0x0}}) 14:14:13 executing program 2: ioctl$HIDIOCSFLAG(0xffffffffffffffff, 0x4004480f, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x1c1241) ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0) 14:14:13 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x1, &(0x7f0000000840)=@raw=[@exit], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 14:14:13 executing program 1: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0xc0045878, 0x0) [ 681.219510][ T8997] loop3: detected capacity change from 0 to 65551 [ 681.238143][ T8999] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 681.251779][ T8997] F2FS-fs (loop3): Invalid log_blocksize (0), supports only 12 14:14:13 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700000000f6c3000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 14:14:13 executing program 1: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x5450, 0x0) [ 681.296416][ T8997] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock 14:14:13 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x1, &(0x7f0000000840)=@raw=[@exit], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 681.351706][ T8997] F2FS-fs (loop3): invalid crc_offset: 0 14:14:13 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@bloom_filter={0x1e, 0x0, 0xff, 0x1000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x6}, 0x48) [ 681.403132][ T8997] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 0) [ 681.414497][ T9013] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 681.447764][ T8997] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 681.465346][ T8997] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 681.493944][ T3694] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 681.533546][ T3762] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 681.543050][ T8997] F2FS-fs (loop3): sanity_check_inode: corrupted inode i_blocks i_ino=3 iblocks=0, run fsck to fix. [ 681.556604][ T8997] F2FS-fs (loop3): Failed to read root inode [ 681.734003][ T3694] usb 3-1: Using ep0 maxpacket: 16 [ 681.774257][ T3762] usb 1-1: Using ep0 maxpacket: 16 [ 681.854107][ T3694] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 681.865400][ T3694] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 681.875963][ T3694] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 681.885319][ T3694] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.896684][ T3694] usb 3-1: config 0 descriptor?? [ 681.904191][ T3762] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 681.915244][ T3762] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 681.925312][ T3762] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 682.014123][ T3762] usb 1-1: New USB device found, idVendor=225e, idProduct=0006, bcdDevice= 0.00 [ 682.023284][ T3762] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=225 [ 682.031569][ T3762] usb 1-1: SerialNumber: syz [ 682.037778][ T3762] usb 1-1: config 0 descriptor?? [ 682.075787][ T3762] hub 1-1:0.0: USB hub found [ 682.294094][ T3762] hub 1-1:0.0: 1 port detected [ 682.634176][ T3694] usbhid 3-1:0.0: can't add hid device: -71 [ 682.640304][ T3694] usbhid: probe of 3-1:0.0 failed with error -71 [ 682.652709][ T3694] usb 3-1: USB disconnect, device number 19 [ 683.164112][ T3762] hub 1-1:0.0: activate --> -90 [ 683.369063][ T3689] usb 1-1: USB disconnect, device number 103 [ 683.384052][ T3762] hub 1-1:0.0: hub_ext_port_status failed (err = -71) 14:14:16 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000090018105e22060000000000e10109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "0400", "00000004"}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001d80)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000340)={0x0, 0x0, 0x4, "7a5aa4fd"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 14:14:16 executing program 5: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000043c0), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000004400)={0x2}) 14:14:16 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010360)="1020f5f2", 0x4, 0x1400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f00000107c0)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {0x0, 0x0, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000010da0)=ANY=[]) 14:14:16 executing program 1: syz_open_dev$vcsu(&(0x7f0000005800), 0x1ff, 0x0) 14:14:16 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700000000f6c3000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 14:14:16 executing program 2: ioctl$HIDIOCSFLAG(0xffffffffffffffff, 0x4004480f, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r0 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x1c1241) ioctl$HIDIOCINITREPORT(r0, 0x4805, 0x0) 14:14:16 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000240)={'wg1\x00'}) [ 683.900630][ T9028] loop3: detected capacity change from 0 to 65551 [ 683.905156][ T9027] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 14:14:16 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x0, 0x7, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 14:14:16 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700000000f6c3000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 14:14:16 executing program 5: bpf$MAP_CREATE(0x8, &(0x7f0000000180)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 14:14:16 executing program 1: syz_open_dev$video(&(0x7f0000000000), 0x0, 0x84001) [ 684.014733][ T9028] F2FS-fs (loop3): Invalid log_blocksize (0), supports only 12 [ 684.023437][ T9028] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 684.028320][ T9037] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 684.070977][ T9028] F2FS-fs (loop3): invalid crc_offset: 0 14:14:16 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000004280), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f0000000000)={0x1}) [ 684.125193][ T9028] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 0) [ 684.163063][ T9028] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 684.172578][ T3689] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 684.188266][ T9028] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 684.214308][ T917] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 684.240958][ T9028] F2FS-fs (loop3): sanity_check_inode: corrupted inode i_blocks i_ino=3 iblocks=0, run fsck to fix. [ 684.252661][ T9028] F2FS-fs (loop3): Failed to read root inode [ 684.404013][ T3689] usb 3-1: device descriptor read/64, error 18 [ 684.474040][ T917] usb 1-1: Using ep0 maxpacket: 16 [ 684.615200][ T917] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 684.626374][ T917] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 684.636740][ T917] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 684.694153][ T3689] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 684.744150][ T917] usb 1-1: New USB device found, idVendor=225e, idProduct=0006, bcdDevice= 0.00 [ 684.753754][ T917] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=225 [ 684.762883][ T917] usb 1-1: SerialNumber: syz [ 684.771244][ T917] usb 1-1: config 0 descriptor?? [ 684.814889][ T917] hub 1-1:0.0: USB hub found [ 684.914120][ T3689] usb 3-1: device descriptor read/64, error 18 [ 685.024105][ T917] hub 1-1:0.0: 1 port detected [ 685.044834][ T1233] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.045067][ T3689] usb usb3-port1: attempt power cycle [ 685.051779][ T1233] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.484028][ T3689] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 685.574173][ T3689] usb 3-1: Invalid ep0 maxpacket: 0 [ 685.724104][ T3689] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 685.814452][ T3689] usb 3-1: Invalid ep0 maxpacket: 0 [ 685.820263][ T3689] usb usb3-port1: unable to enumerate USB device [ 685.884051][ T917] hub 1-1:0.0: activate --> -90 [ 686.088816][ T6] usb 1-1: USB disconnect, device number 104 [ 686.104190][ T917] hub 1-1:0.0: hub_ext_port_status failed (err = -71) 14:14:18 executing program 1: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x40086602, 0x0) 14:14:18 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700000000f6c3000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 14:14:18 executing program 5: openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000400), 0x80) 14:14:18 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000090018105e22060000000000e10109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "0400", "00000004"}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001d80)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000340)={0x0, 0x0, 0x4, "7a5aa4fd"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 14:14:18 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010360)="1020f5f2", 0x4, 0x1400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f00000107c0)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {0x0, 0x0, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000010da0)=ANY=[]) [ 686.615108][ T9053] loop3: detected capacity change from 0 to 65551 [ 686.643588][ T9054] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 686.651197][ T9053] F2FS-fs (loop3): Invalid log_blocksize (0), supports only 12 [ 686.668786][ T9053] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 686.707993][ T9053] F2FS-fs (loop3): invalid crc_offset: 0 [ 686.718869][ T9053] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 0) [ 686.739408][ T9053] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 686.748849][ T9053] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 686.782058][ T9053] F2FS-fs (loop3): sanity_check_inode: corrupted inode i_blocks i_ino=3 iblocks=0, run fsck to fix. [ 686.793262][ T9053] F2FS-fs (loop3): Failed to read root inode 14:14:19 executing program 2: ioctl$HIDIOCSFLAG(0xffffffffffffffff, 0x4004480f, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r0 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x1c1241) ioctl$HIDIOCINITREPORT(r0, 0x4805, 0x0) 14:14:19 executing program 5: bpf$MAP_CREATE(0x1c, &(0x7f0000000180)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 14:14:19 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000002400)={0x20}, 0x20) 14:14:19 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700000000f6c3000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 14:14:19 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010360)="1020f5f2", 0x4, 0x1400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f00000107c0)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {0x0, 0x0, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000010da0)=ANY=[]) 14:14:19 executing program 1: bpf$MAP_CREATE(0x1d, &(0x7f0000000180)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 14:14:19 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1]}, 0x80) [ 686.913958][ T917] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 686.937857][ T9065] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 686.956433][ T9070] loop3: detected capacity change from 0 to 65551 14:14:19 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x16, 0x0, 0x6, 0x9, 0x308}, 0x48) 14:14:19 executing program 5: r0 = syz_open_dev$radio(&(0x7f0000000640), 0x2, 0x2) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, 0x0) 14:14:19 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700000000f6c3000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 686.991310][ T9070] F2FS-fs (loop3): Invalid log_blocksize (0), supports only 12 [ 687.016126][ T9070] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 687.046722][ T9070] F2FS-fs (loop3): invalid crc_offset: 0 [ 687.070861][ T9070] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 0) [ 687.096650][ T9070] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 687.119419][ T9070] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 687.133066][ T9085] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 687.163966][ T917] usb 1-1: Using ep0 maxpacket: 16 [ 687.193768][ T9070] F2FS-fs (loop3): sanity_check_inode: corrupted inode i_blocks i_ino=3 iblocks=0, run fsck to fix. [ 687.212920][ T9070] F2FS-fs (loop3): Failed to read root inode [ 687.284186][ T917] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 687.296145][ T917] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 687.314571][ T917] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 687.384293][ T3689] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 687.414070][ T917] usb 1-1: New USB device found, idVendor=225e, idProduct=0006, bcdDevice= 0.00 [ 687.423439][ T917] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=225 [ 687.432061][ T917] usb 1-1: SerialNumber: syz [ 687.438501][ T917] usb 1-1: config 0 descriptor?? [ 687.474740][ T917] hub 1-1:0.0: USB hub found [ 687.573967][ T3689] usb 3-1: device descriptor read/64, error 18 [ 687.694077][ T917] hub 1-1:0.0: 1 port detected [ 687.843941][ T3689] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 688.034005][ T3689] usb 3-1: device descriptor read/64, error 18 [ 688.156631][ T3689] usb usb3-port1: attempt power cycle [ 688.574205][ T917] hub 1-1:0.0: activate --> -90 [ 688.594131][ T3689] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 688.694380][ T3689] usb 3-1: Invalid ep0 maxpacket: 0 [ 688.828343][ T3694] usb 1-1: USB disconnect, device number 105 [ 688.846063][ T917] hub 1-1:0.0: hub_ext_port_status failed (err = -71) [ 688.853117][ T3689] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 688.964286][ T3689] usb 3-1: Invalid ep0 maxpacket: 0 [ 688.969946][ T3689] usb usb3-port1: unable to enumerate USB device 14:14:21 executing program 5: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000000c0)=@userptr={0x0, 0x2, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "aea0f709"}, 0x0, 0x2, {0x0}}) 14:14:21 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000040), 0x0, 0x282401) close$fd_v4l2_buffer(r0) 14:14:22 executing program 2: ioctl$HIDIOCSFLAG(0xffffffffffffffff, 0x4004480f, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r0 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x1c1241) ioctl$HIDIOCINITREPORT(r0, 0x4805, 0x0) 14:14:22 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700000000f6c3000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x5}}}, 0x24}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 14:14:22 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010360)="1020f5f2", 0x4, 0x1400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f00000107c0)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000010ca0), 0x0, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000010da0)=ANY=[]) 14:14:22 executing program 1: socket$inet6(0xa, 0x3, 0x7) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw6\x00') read$usbfs(r0, &(0x7f0000001040)=""/4087, 0xff7) 14:14:22 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002880)=ANY=[@ANYBLOB="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"/4332], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='sys_enter\x00', r0}, 0x10) lremovexattr(0x0, 0x0) 14:14:22 executing program 0: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000004c0)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0}) 14:14:22 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) ioctl$EVIOCGVERSION(r0, 0xc0189436, &(0x7f0000000100)=""/119) [ 689.985273][ T9099] loop3: detected capacity change from 0 to 65551 [ 689.993781][ T9098] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 690.015213][ T9099] F2FS-fs (loop3): Invalid log_blocksize (0), supports only 12 [ 690.023101][ T9099] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock 14:14:22 executing program 1: syz_usb_connect$uac1(0x0, 0x8b, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x79, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0x9, 0x24, 0x8, 0x0, 0x0, 0x0, "c416"}, @output_terminal={0x9}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x3f, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) [ 690.047509][ T9099] F2FS-fs (loop3): invalid crc_offset: 0 14:14:22 executing program 5: r0 = syz_usb_connect$uac1(0x3, 0xc0, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xae, 0x3, 0x1, 0x9, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0x9, 0x24, 0x8, 0x3, 0x0, 0x0, "c416"}, @output_terminal={0x9, 0x24, 0x3, 0x0, 0x303, 0x2, 0x4, 0x3}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x7f, 0x2, 0x0, 0x6, "94"}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x20, 0x9, 0x0, {0x7, 0x25, 0x1, 0x0, 0x1, 0x76d}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x0, 0x4432, 0x6, "a8505da3aa34fecd"}, @format_type_ii_discrete={0x9}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x60, 0x3, 0xd8}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x5, 0x1, 0x43, "1113b2bcc4c68092aa"}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x0, 0x1f, 0x0, {0x7, 0x25, 0x1, 0x80, 0x5}}}}}}}]}}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000840)={0x14, 0x0, &(0x7f0000000800)={0x0, 0x3, 0x35, @string={0x35, 0x3, "e31aaf84244d93fd8323fc157b3f4034b1876f5cf1be7bf332b61689d19da345962473152f293451c5278f6f3e5995e50b5b9e"}}}, 0x0) syz_open_dev$evdev(0x0, 0x5, 0x18040) 14:14:22 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700000000f6c3000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x5}}}, 0x24}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 690.089862][ T9099] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 0) [ 690.118606][ T9099] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 690.133058][ T9099] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 690.166941][ T9115] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 14:14:22 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700000000f6c3000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x5}}}, 0x24}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 690.212427][ T9099] F2FS-fs (loop3): sanity_check_inode: corrupted inode i_blocks i_ino=3 iblocks=0, run fsck to fix. [ 690.236379][ T9099] F2FS-fs (loop3): Failed to read root inode 14:14:22 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700000000f6c3000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 690.259432][ T9118] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 690.263931][ T3762] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 690.329594][ T9120] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 690.414188][ T917] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 690.421839][ T3689] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 690.454132][ T6] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 690.554377][ T3762] usb 1-1: Using ep0 maxpacket: 32 [ 690.613957][ T3689] usb 3-1: device descriptor read/64, error 18 [ 690.684168][ T917] usb 2-1: Using ep0 maxpacket: 32 [ 690.704057][ T6] usb 6-1: Using ep0 maxpacket: 32 [ 690.714049][ T3762] usb 1-1: unable to get BOS descriptor or descriptor too short [ 690.801124][ T3762] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 690.834132][ T6] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 690.843008][ T6] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 690.853260][ T6] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 690.854010][ T917] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 690.871351][ T917] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 690.882155][ T917] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 690.904089][ T3689] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 690.974191][ T3762] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 690.983361][ T3762] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 690.991745][ T3762] usb 1-1: Product: syz [ 690.996009][ T3762] usb 1-1: Manufacturer: syz [ 691.001148][ T3762] usb 1-1: SerialNumber: syz [ 691.024324][ T6] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 691.038070][ T6] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.047038][ T3762] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 691.057735][ T6] usb 6-1: Product: syz [ 691.062073][ T6] usb 6-1: Manufacturer: syz [ 691.067219][ T6] usb 6-1: SerialNumber: syz [ 691.074240][ T917] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 691.083595][ T917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.091978][ T917] usb 2-1: Product: syz [ 691.096387][ T3689] usb 3-1: device descriptor read/64, error 18 [ 691.102663][ T917] usb 2-1: Manufacturer: syz [ 691.107563][ T917] usb 2-1: SerialNumber: syz [ 691.214100][ T3689] usb usb3-port1: attempt power cycle [ 691.250155][ T3762] usb 1-1: USB disconnect, device number 106 [ 691.444274][ T917] usb 2-1: 0:2 : does not exist [ 691.459438][ T917] usb 2-1: USB disconnect, device number 6 [ 691.594478][ T6] usb 6-1: 0:2 : does not exist [ 691.613218][ T6] usb 6-1: USB disconnect, device number 38 [ 691.644087][ T3689] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 691.764051][ T3689] usb 3-1: Invalid ep0 maxpacket: 0 [ 691.914211][ T3689] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 692.014967][ T3689] usb 3-1: Invalid ep0 maxpacket: 0 [ 692.020408][ T3689] usb usb3-port1: unable to enumerate USB device 14:14:25 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x1c1241) ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0) 14:14:25 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700000000f6c3000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 14:14:25 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x20000202, &(0x7f0000000100)=@raw=[@cb_func], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 14:14:25 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw6\x00') lseek(r0, 0x2, 0x0) read$usbfs(r0, &(0x7f0000000040)=""/4096, 0x1000) 14:14:25 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010360)="1020f5f2", 0x4, 0x1400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f00000107c0)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000010ca0), 0x0, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000010da0)=ANY=[]) 14:14:25 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r1 = dup(r0) write$UHID_INPUT(r1, 0x0, 0x0) 14:14:25 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f00000011c0)={0x8, {"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", 0x1000}}, 0x1006) 14:14:25 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r1 = dup(r0) write$UHID_INPUT(r1, 0x0, 0x0) 14:14:25 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000180)='\v ') [ 693.040897][ T9126] loop3: detected capacity change from 0 to 65551 [ 693.058683][ T9130] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 693.107057][ T9126] F2FS-fs (loop3): Invalid log_blocksize (0), supports only 12 14:14:25 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700000000f6c3000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 693.139310][ T9126] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 693.160270][ T9126] F2FS-fs (loop3): invalid crc_offset: 0 [ 693.206761][ T9126] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 0) [ 693.212842][ T9126] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 693.212869][ T9126] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 693.214791][ T9145] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 14:14:25 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700000000f6c3000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 693.288488][ T9126] F2FS-fs (loop3): sanity_check_inode: corrupted inode i_blocks i_ino=3 iblocks=0, run fsck to fix. [ 693.288632][ T9126] F2FS-fs (loop3): Failed to read root inode 14:14:25 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010360)="1020f5f2", 0x4, 0x1400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f00000107c0)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000010ca0), 0x0, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000010da0)=ANY=[]) 14:14:25 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700000000f6c3000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 693.371780][ T9147] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 693.453540][ T9149] loop3: detected capacity change from 0 to 65551 [ 693.476864][ T9149] F2FS-fs (loop3): Invalid log_blocksize (0), supports only 12 [ 693.476893][ T9149] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 693.478365][ T9149] F2FS-fs (loop3): invalid crc_offset: 0 [ 693.480857][ T9153] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 693.494766][ T9149] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 0) [ 693.522343][ T3694] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 693.536137][ T9149] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 693.536168][ T9149] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 693.565560][ T9149] F2FS-fs (loop3): sanity_check_inode: corrupted inode i_blocks i_ino=3 iblocks=0, run fsck to fix. [ 693.565676][ T9149] F2FS-fs (loop3): Failed to read root inode [ 693.764191][ T3694] usb 3-1: Using ep0 maxpacket: 16 [ 693.884020][ T3694] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 693.895191][ T3694] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 693.905389][ T3694] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 693.914527][ T3694] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 693.924242][ T3694] usb 3-1: config 0 descriptor?? [ 694.167129][ T9132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 694.175765][ T9132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 694.430925][ T3694] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.000B/input/input28 [ 694.506629][ T3694] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.000B/input/input29 [ 694.578654][ T3694] kye 0003:0458:5019.000B: input,hiddev0,hidraw0: USB HID v0.00 Pointer [HID 0458:5019] on usb-dummy_hcd.2-1/input0 [ 695.483999][ C0] kye 0003:0458:5019.000B: usb_submit_urb(ctrl) failed: -1 14:14:28 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x1c1241) ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0) 14:14:28 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700000000f6c3000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 14:14:28 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010360)="1020f5f2", 0x4, 0x1400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f00000107c0)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000010ca0)="ed410000e8030000e803000002", 0xd, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000010da0)=ANY=[]) 14:14:28 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r1 = dup(r0) write$UHID_INPUT(r1, 0x0, 0x0) 14:14:28 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000340)={0x0, 0x74270000, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01040000000a000000007e"], 0x24}}, 0x0) 14:14:28 executing program 0: r0 = semget$private(0x0, 0x1, 0x0) semctl$IPC_INFO(r0, 0x3, 0x3, &(0x7f0000000000)=""/93) 14:14:28 executing program 0: openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x90cbddd5c82cd7d7, 0x0) 14:14:28 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r1 = dup(r0) write$UHID_INPUT(r1, 0x0, 0x0) [ 696.041090][ T9158] loop3: detected capacity change from 0 to 65551 [ 696.041494][ T9163] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 696.057638][ T9158] F2FS-fs (loop3): Invalid log_blocksize (0), supports only 12 [ 696.057663][ T9158] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 696.065920][ T9158] F2FS-fs (loop3): invalid crc_offset: 0 [ 696.074858][ T9164] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 14:14:28 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700000000f6c3000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, 0x0, 0x0, 0x0) 14:14:28 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0xac02, 0x0) write$FUSE_POLL(r0, 0x0, 0x1) [ 696.120161][ T9163] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 696.160323][ T9163] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 14:14:28 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) 14:14:28 executing program 0: semctl$IPC_INFO(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000000)=""/255) [ 696.184046][ T9158] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 0) [ 696.223247][ T9177] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 696.235411][ T9158] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 696.265299][ T9158] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 696.359490][ T9158] F2FS-fs (loop3): sanity_check_inode: corrupted inode i_blocks i_ino=3 iblocks=0, run fsck to fix. [ 696.371775][ T9158] F2FS-fs (loop3): Failed to read root inode [ 696.374244][ T3694] usb 3-1: reset high-speed USB device number 32 using dummy_hcd [ 696.573951][ T3694] usb 3-1: device descriptor read/64, error 18 [ 696.843953][ T3694] usb 3-1: reset high-speed USB device number 32 using dummy_hcd [ 697.034182][ T3694] usb 3-1: device descriptor read/64, error 18 [ 697.303981][ T3694] usb 3-1: reset high-speed USB device number 32 using dummy_hcd [ 697.394133][ T3694] usb 3-1: Invalid ep0 maxpacket: 0 [ 697.543942][ T3694] usb 3-1: reset high-speed USB device number 32 using dummy_hcd [ 697.634228][ T3694] usb 3-1: Invalid ep0 maxpacket: 0 [ 697.640742][ T917] usb 3-1: USB disconnect, device number 32 [ 697.803986][ T917] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 698.003985][ T917] usb 3-1: device descriptor read/64, error 18 [ 698.273964][ T917] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 698.474140][ T917] usb 3-1: device descriptor read/64, error 18 [ 698.594879][ T917] usb usb3-port1: attempt power cycle 14:14:31 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x1c1241) ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0) 14:14:31 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) 14:14:31 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r0, 0x0, 0x0) 14:14:31 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700000000f6c3000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, 0x0, 0x0, 0x0) 14:14:31 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010360)="1020f5f2", 0x4, 0x1400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f00000107c0)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000010ca0)="ed410000e8030000e803000002", 0xd, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000010da0)=ANY=[]) 14:14:31 executing program 1: semctl$IPC_INFO(0x0, 0x2, 0x3, &(0x7f0000000940)=""/236) [ 699.003918][ T917] usb 3-1: new high-speed USB device number 35 using dummy_hcd 14:14:31 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) 14:14:31 executing program 1: mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) munmap(&(0x7f0000ff5000/0xb000)=nil, 0xb000) [ 699.067579][ T9187] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 699.072289][ T9189] loop3: detected capacity change from 0 to 65551 14:14:31 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) getpeername$unix(r0, 0x0, &(0x7f00000003c0)) [ 699.134146][ T917] usb 3-1: device descriptor read/8, error -71 [ 699.162448][ T9189] F2FS-fs (loop3): Invalid log_blocksize (0), supports only 12 14:14:31 executing program 1: shmget(0x1, 0x2000, 0x227, &(0x7f0000ffe000/0x2000)=nil) 14:14:31 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000011c0)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, &(0x7f0000001180)=[{&(0x7f0000000040)="11", 0x1}], 0x1}, 0x85) [ 699.179943][ T9189] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock 14:14:31 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, 0x0, 0x0) [ 699.233933][ T9189] F2FS-fs (loop3): invalid crc_offset: 0 [ 699.301642][ T9189] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 0) [ 699.318112][ T9189] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 699.338497][ T9189] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 699.377374][ T9189] F2FS-fs (loop3): sanity_check_inode: corrupted inode i_blocks i_ino=3 iblocks=0, run fsck to fix. [ 699.388576][ T9189] F2FS-fs (loop3): Failed to read root inode [ 699.644056][ T917] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 699.744186][ T917] usb 3-1: Invalid ep0 maxpacket: 0 [ 699.749612][ T917] usb usb3-port1: unable to enumerate USB device 14:14:34 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x1c1241) ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0) 14:14:34 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700000000f6c3000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, 0x0, 0x0, 0x0) 14:14:34 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0xf, &(0x7f00000018c0), &(0x7f0000001900)=0xc) 14:14:34 executing program 0: mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) mprotect(&(0x7f0000ff6000/0x4000)=nil, 0x4000, 0x0) mincore(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) 14:14:34 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, 0x0, 0x0) 14:14:34 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010360)="1020f5f2", 0x4, 0x1400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f00000107c0)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000010ca0)="ed410000e8030000e803000002", 0xd, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000010da0)=ANY=[]) 14:14:34 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, 0x0, 0x0) 14:14:34 executing program 0: mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2) [ 702.148557][ T9215] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 702.162611][ T9218] loop3: detected capacity change from 0 to 65551 14:14:34 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r0, 0x0, 0x3, &(0x7f00000000c0), 0x4) [ 702.227719][ T9218] F2FS-fs (loop3): Invalid log_blocksize (0), supports only 12 [ 702.267573][ T9218] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 702.299566][ T9218] F2FS-fs (loop3): invalid crc_offset: 0 14:14:34 executing program 0: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, 0x0, 0x0) 14:14:34 executing program 4: getsockname$inet(0xffffffffffffffff, 0x0, &(0x7f0000000080)) getresuid(&(0x7f00000002c0), &(0x7f0000000300), 0x0) 14:14:34 executing program 5: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r0 = dup(0xffffffffffffffff) write$UHID_INPUT(r0, 0x0, 0x0) [ 702.338794][ T9218] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 0) [ 702.365580][ T9218] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 702.432498][ T9218] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 702.513966][ T917] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 702.521914][ T9218] F2FS-fs (loop3): sanity_check_inode: corrupted inode i_blocks i_ino=3 iblocks=0, run fsck to fix. [ 702.533376][ T9218] F2FS-fs (loop3): Failed to read root inode [ 702.703967][ T917] usb 3-1: device descriptor read/64, error 18 [ 702.974002][ T917] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 703.163962][ T917] usb 3-1: device descriptor read/64, error 18 [ 703.284508][ T917] usb usb3-port1: attempt power cycle [ 703.723938][ T917] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 703.844892][ T917] usb 3-1: Invalid ep0 maxpacket: 0 [ 704.013960][ T917] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 704.134328][ T917] usb 3-1: Invalid ep0 maxpacket: 0 [ 704.139699][ T917] usb usb3-port1: unable to enumerate USB device 14:14:37 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x1c1241) ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0) 14:14:37 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000000040)=@in={0x0, 0x2}, 0x1c, 0x0, 0x0, 0x0, 0xfffffffffffffea2}, 0x0) 14:14:37 executing program 4: pipe2(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) 14:14:37 executing program 5: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r0 = dup(0xffffffffffffffff) write$UHID_INPUT(r0, 0x0, 0x0) 14:14:37 executing program 0: r0 = socket(0x1e, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @empty}}}}) 14:14:37 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010360)="1020f5f2", 0x4, 0x1400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f00000107c0)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000010ca0)="ed410000e8030000e803000002000000001000", 0x13, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000010da0)=ANY=[]) 14:14:37 executing program 1: mincore(&(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f00000001c0)=""/150) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 14:14:37 executing program 5: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r0 = dup(0xffffffffffffffff) write$UHID_INPUT(r0, 0x0, 0x0) 14:14:37 executing program 0: mincore(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) syz_usb_connect$uac1(0x0, 0x80, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0xf8, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}, @as_header={0x7, 0x24, 0x1, 0x0, 0x0, 0x2}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x2, {0x7}}}}}}}]}}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 14:14:37 executing program 4: syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) [ 705.249142][ T9250] loop3: detected capacity change from 0 to 65551 14:14:37 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r1 = dup(r0) write$UHID_INPUT(r1, 0x0, 0x0) 14:14:37 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = dup(r0) write$UHID_INPUT(r1, 0x0, 0x0) [ 705.315122][ T9250] F2FS-fs (loop3): Invalid log_blocksize (0), supports only 12 [ 705.334767][ T9250] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 705.349603][ T9250] F2FS-fs (loop3): invalid crc_offset: 0 [ 705.396216][ T9250] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 0) [ 705.435037][ T9250] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 705.452172][ T9250] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 705.489575][ T9250] F2FS-fs (loop3): sanity_check_inode: corrupted inode i_blocks i_ino=3 iblocks=0, run fsck to fix. [ 705.500483][ T9250] F2FS-fs (loop3): Failed to read root inode [ 705.594322][ T6] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 705.602036][ T3694] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 705.608548][ T917] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 705.703964][ T3689] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 705.834132][ T6] usb 5-1: Using ep0 maxpacket: 16 [ 705.843993][ T3694] usb 1-1: Using ep0 maxpacket: 16 [ 705.874229][ T917] usb 2-1: Using ep0 maxpacket: 16 [ 705.915334][ T3689] usb 3-1: device descriptor read/64, error 18 [ 705.954251][ T6] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 705.966778][ T3694] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 705.975774][ T6] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 705.985999][ T3694] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 705.996277][ T6] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 706.005273][ T3694] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 706.024225][ T917] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 706.032997][ T917] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 706.043765][ T917] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 706.174272][ T6] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 706.183386][ T6] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 706.195747][ T3689] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 706.196366][ T6] usb 5-1: Product: syz [ 706.207811][ T6] usb 5-1: Manufacturer: syz [ 706.212426][ T6] usb 5-1: SerialNumber: syz [ 706.244298][ T917] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 706.253421][ T917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 706.261888][ T917] usb 2-1: Product: syz [ 706.264186][ T3694] usb 1-1: string descriptor 0 read error: -22 [ 706.266486][ T917] usb 2-1: Manufacturer: syz [ 706.272336][ T3694] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 706.277307][ T917] usb 2-1: SerialNumber: syz [ 706.294379][ T3694] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 706.404195][ T3689] usb 3-1: device descriptor read/64, error 18 [ 706.524267][ T3689] usb usb3-port1: attempt power cycle [ 706.534075][ T6] usb 5-1: 0:2 : does not exist [ 706.559636][ T6] usb 5-1: USB disconnect, device number 12 [ 706.655864][ T917] usb 2-1: 0:2 : does not exist [ 706.665468][ T3694] usb 1-1: 0:2 : does not exist [ 706.693603][ T917] usb 2-1: USB disconnect, device number 7 [ 706.720068][ T3694] usb 1-1: USB disconnect, device number 107 [ 706.750803][ T3887] udevd[3887]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 706.954177][ T3689] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 707.174134][ T3689] usb 3-1: device descriptor read/8, error -61 [ 707.443941][ T3689] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 707.614183][ T3689] usb 3-1: device descriptor read/8, error -61 [ 707.745305][ T3689] usb usb3-port1: unable to enumerate USB device 14:14:40 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x1c1241) ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0) 14:14:40 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = dup(r0) write$UHID_INPUT(r1, 0x0, 0x0) 14:14:40 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010360)="1020f5f2", 0x4, 0x1400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f00000107c0)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000010ca0)="ed410000e8030000e803000002000000001000", 0x13, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000010da0)=ANY=[]) 14:14:40 executing program 4: syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 14:14:40 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0xf, &(0x7f00000000c0)={0x0, {{0x2, 0x0, @private}}}, 0x88) 14:14:40 executing program 0: mincore(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) syz_usb_connect$uac1(0x0, 0x80, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0xf8, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}, @as_header={0x7, 0x24, 0x1, 0x0, 0x0, 0x2}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x2, {0x7}}}}}}}]}}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 14:14:40 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = dup(r0) write$UHID_INPUT(r1, 0x0, 0x0) 14:14:40 executing program 1: r0 = socket$inet(0x2, 0xa, 0x0) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, 0x0, 0x0) [ 708.300494][ T9276] loop3: detected capacity change from 0 to 65551 [ 708.316533][ T9276] F2FS-fs (loop3): Invalid log_blocksize (0), supports only 12 14:14:40 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r1 = dup(0xffffffffffffffff) write$UHID_INPUT(r1, 0x0, 0x0) [ 708.351489][ T9276] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock 14:14:40 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001540)={0x0, &(0x7f0000000540)=""/4096, 0x0, 0x1000}, 0x20) 14:14:40 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r1 = dup(0xffffffffffffffff) write$UHID_INPUT(r1, 0x0, 0x0) 14:14:40 executing program 1: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) [ 708.394491][ T9276] F2FS-fs (loop3): invalid crc_offset: 0 [ 708.430555][ T9276] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 0) [ 708.489066][ T9276] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 708.504522][ T9276] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 708.570665][ T9276] F2FS-fs (loop3): sanity_check_inode: corrupted inode i_blocks i_ino=3 iblocks=0, run fsck to fix. [ 708.581964][ T3692] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 708.583071][ T9276] F2FS-fs (loop3): Failed to read root inode [ 708.596325][ T3694] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 708.764037][ T6] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 708.823938][ T3692] usb 5-1: Using ep0 maxpacket: 16 [ 708.864008][ T3694] usb 1-1: Using ep0 maxpacket: 16 [ 708.944150][ T3692] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 708.952891][ T3692] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 708.964274][ T3692] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 708.970199][ T6] usb 3-1: device descriptor read/64, error 18 [ 709.016047][ T3694] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 709.024951][ T3694] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 709.035379][ T3694] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 709.124071][ T3692] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 709.133530][ T3692] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 709.141687][ T3692] usb 5-1: Product: syz [ 709.145941][ T3692] usb 5-1: Manufacturer: syz [ 709.150579][ T3692] usb 5-1: SerialNumber: syz [ 709.245267][ T6] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 709.324065][ T3694] usb 1-1: string descriptor 0 read error: -22 [ 709.330882][ T3694] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 709.345345][ T3694] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 709.454187][ T6] usb 3-1: device descriptor read/64, error 18 [ 709.475199][ T3692] usb 5-1: 0:2 : does not exist [ 709.484704][ T3694] usb 1-1: 0:2 : does not exist [ 709.485417][ T3692] usb 5-1: USB disconnect, device number 13 [ 709.576068][ T6] usb usb3-port1: attempt power cycle [ 709.607250][ T3762] usb 1-1: USB disconnect, device number 108 [ 710.004626][ T6] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 710.224116][ T6] usb 3-1: device descriptor read/8, error -61 [ 710.503928][ T6] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 710.674045][ T6] usb 3-1: device descriptor read/8, error -61 [ 710.794580][ T6] usb usb3-port1: unable to enumerate USB device 14:14:43 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x1c1241) ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0) 14:14:43 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r1 = dup(0xffffffffffffffff) write$UHID_INPUT(r1, 0x0, 0x0) 14:14:43 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000380)={0x2, &(0x7f0000000300)=[{}, {}]}) 14:14:43 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010360)="1020f5f2", 0x4, 0x1400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f00000107c0)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000010ca0)="ed410000e8030000e803000002000000001000", 0x13, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000010da0)=ANY=[]) 14:14:43 executing program 4: syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 14:14:43 executing program 0: mincore(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) syz_usb_connect$uac1(0x0, 0x80, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0xf8, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}, @as_header={0x7, 0x24, 0x1, 0x0, 0x0, 0x2}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x2, {0x7}}}}}}}]}}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 14:14:43 executing program 1: openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x80081, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0, 0x14}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) syz_io_uring_setup(0x4daf, &(0x7f0000000100), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000500), 0x0) syz_io_uring_setup(0x1b4d, &(0x7f0000000640)={0x0, 0x34ec, 0x8}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000006c0), &(0x7f0000000700)) 14:14:43 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) dup(r0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) [ 711.369331][ T9305] loop3: detected capacity change from 0 to 65551 14:14:43 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) dup(r0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) [ 711.410609][ T9305] F2FS-fs (loop3): Invalid log_blocksize (0), supports only 12 [ 711.438280][ T9305] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock 14:14:43 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000380)={0x1, &(0x7f0000000300)=[{0x9}]}) 14:14:43 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) dup(r0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) 14:14:43 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000000), 0x4) [ 711.462967][ T9305] F2FS-fs (loop3): invalid crc_offset: 0 [ 711.520027][ T9305] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 0) [ 711.553827][ T9305] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 711.599295][ T9305] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 711.644289][ T917] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 711.653994][ T6] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 711.660360][ T9305] F2FS-fs (loop3): sanity_check_inode: corrupted inode i_blocks i_ino=3 iblocks=0, run fsck to fix. [ 711.675574][ T9305] F2FS-fs (loop3): Failed to read root inode [ 711.834128][ T3689] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 711.894009][ T6] usb 1-1: Using ep0 maxpacket: 16 [ 711.904017][ T917] usb 5-1: Using ep0 maxpacket: 16 [ 712.014308][ T6] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 712.023942][ T3689] usb 3-1: device descriptor read/64, error 18 [ 712.026839][ T6] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 712.040546][ T6] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 712.054032][ T917] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 712.062881][ T917] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 712.073377][ T917] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 712.274178][ T917] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 712.283443][ T917] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.284189][ T6] usb 1-1: string descriptor 0 read error: -22 [ 712.292013][ T917] usb 5-1: Product: syz [ 712.302342][ T917] usb 5-1: Manufacturer: syz [ 712.303644][ T6] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 712.307268][ T3689] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 712.322910][ T6] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.323942][ T917] usb 5-1: SerialNumber: syz [ 712.377855][ T6] usb 1-1: 0:2 : does not exist [ 712.544033][ T3689] usb 3-1: device descriptor read/64, error 18 [ 712.583777][ T6] usb 1-1: USB disconnect, device number 109 [ 712.654212][ T917] usb 5-1: 0:2 : does not exist [ 712.674129][ T3689] usb usb3-port1: attempt power cycle [ 712.693018][ T917] usb 5-1: USB disconnect, device number 14 [ 713.094000][ T3689] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 713.324242][ T3689] usb 3-1: device descriptor read/8, error -61 [ 713.593974][ T3689] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 713.804104][ T3689] usb 3-1: device descriptor read/8, error -61 [ 713.934053][ T3689] usb usb3-port1: unable to enumerate USB device 14:14:46 executing program 1: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') dup2(r0, r1) 14:14:46 executing program 4: syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 14:14:46 executing program 5: syz_mount_image$udf(0x0, &(0x7f00000063c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000009000)='./file0\x00', 0x0) 14:14:46 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x1c1241) ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0) 14:14:46 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010360)="1020f5f2", 0x4, 0x1400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f00000107c0)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000010ca0)="ed410000e8030000e803000002000000001000000000", 0x16, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000010da0)=ANY=[]) 14:14:46 executing program 0: mincore(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) syz_usb_connect$uac1(0x0, 0x80, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0xf8, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}, @as_header={0x7, 0x24, 0x1, 0x0, 0x0, 0x2}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x2, {0x7}}}}}}}]}}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 14:14:46 executing program 5: syz_mount_image$pvfs2(&(0x7f0000004440), &(0x7f0000004480)='./file0\x00', 0x0, 0x0, &(0x7f00000068c0), 0x0, &(0x7f00000069c0)={[{'smackfstransmute'}], [{@rootcontext={'rootcontext', 0x3d, 'system_u'}}]}) socket$phonet_pipe(0x23, 0x5, 0x2) 14:14:46 executing program 1: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') dup2(r0, r1) [ 714.444358][ T9330] loop3: detected capacity change from 0 to 65551 [ 714.461600][ T9330] F2FS-fs (loop3): Invalid log_blocksize (0), supports only 12 [ 714.479886][ T9330] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 714.490270][ T9330] F2FS-fs (loop3): invalid crc_offset: 0 14:14:46 executing program 1: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') dup2(r0, r1) [ 714.526838][ T9330] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 0) [ 714.561410][ T9330] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. 14:14:46 executing program 1: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') dup2(r0, r1) [ 714.583384][ T9330] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. 14:14:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x14, r1, 0x723}, 0x14}}, 0x0) 14:14:47 executing program 1: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x5, 0x1, &(0x7f0000001540)=[{0x0, 0x0, 0x900}], 0x0, &(0x7f0000001600)={[], [{@audit}]}) syz_mount_image$pvfs2(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000069c0)={[{'smackfstransmute'}]}) mkdir(0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) [ 714.644243][ T9330] F2FS-fs (loop3): sanity_check_inode: corrupted inode i_blocks i_ino=3 iblocks=0, run fsck to fix. [ 714.656948][ T9330] F2FS-fs (loop3): Failed to read root inode [ 714.707580][ T9351] loop1: detected capacity change from 0 to 9 [ 714.714397][ T3742] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 714.723643][ T3742] Buffer I/O error on dev loop1, logical block 0, async page read [ 714.727314][ T9351] erofs: Unknown parameter 'audit' [ 714.736736][ T3689] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 714.744507][ T917] usb 5-1: new high-speed USB device number 15 using dummy_hcd 14:14:47 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010360)="1020f5f2", 0x4, 0x1400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f00000107c0)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000010ca0)="ed410000e8030000e803000002000000001000000000", 0x16, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000010da0)=ANY=[]) [ 714.767361][ T3742] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 714.794039][ T3742] Buffer I/O error on dev loop1, logical block 0, async page read [ 714.802339][ T3742] ldm_validate_partition_table(): Disk read failed. [ 714.812489][ T3742] Dev loop1: unable to read RDB block 0 [ 714.820886][ T3742] loop1: unable to read partition table [ 714.827389][ T3742] loop1: partition table beyond EOD, truncated [ 714.835036][ T9354] loop3: detected capacity change from 0 to 65551 [ 714.870517][ T9354] F2FS-fs (loop3): Invalid log_blocksize (0), supports only 12 [ 714.878353][ T9354] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 714.917813][ T9354] F2FS-fs (loop3): invalid crc_offset: 0 [ 714.925659][ T3692] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 714.960111][ T9354] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 0) [ 714.974915][ T9354] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 714.984238][ T9354] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 715.003955][ T3689] usb 1-1: Using ep0 maxpacket: 16 [ 715.009217][ T917] usb 5-1: Using ep0 maxpacket: 16 [ 715.022713][ T9354] F2FS-fs (loop3): sanity_check_inode: corrupted inode i_blocks i_ino=3 iblocks=0, run fsck to fix. [ 715.034434][ T9354] F2FS-fs (loop3): Failed to read root inode [ 715.134076][ T3692] usb 3-1: device descriptor read/64, error 18 [ 715.155970][ T917] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 715.164954][ T3689] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 715.173654][ T3689] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 715.183935][ T917] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 715.194692][ T3689] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 715.203745][ T917] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 715.335719][ T9337] orangefs_mount: mount request failed with -4 [ 715.404061][ T917] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 715.417866][ T917] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 715.427091][ T3692] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 715.439732][ T917] usb 5-1: Product: syz [ 715.445368][ T917] usb 5-1: Manufacturer: syz [ 715.450177][ T917] usb 5-1: SerialNumber: syz [ 715.474233][ T3689] usb 1-1: string descriptor 0 read error: -22 [ 715.480736][ T3689] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 715.490027][ T3689] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 715.664072][ T3692] usb 3-1: device descriptor read/64, error 18 [ 715.784150][ T917] usb 5-1: 0:2 : does not exist [ 715.789350][ T3692] usb usb3-port1: attempt power cycle [ 715.798855][ T3689] usb 1-1: 0:2 : does not exist [ 715.813289][ T917] usb 5-1: USB disconnect, device number 15 [ 715.833693][ T3689] usb 1-1: USB disconnect, device number 110 [ 716.244134][ T3692] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 716.434085][ T3692] usb 3-1: device descriptor read/8, error -61 [ 716.713984][ T3692] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 716.904077][ T3692] usb 3-1: device descriptor read/8, error -61 [ 717.024432][ T3692] usb usb3-port1: unable to enumerate USB device 14:14:49 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x1c1241) ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0) 14:14:49 executing program 1: syz_mount_image$erofs(0x0, 0x0, 0x0, 0x2, &(0x7f0000001540)=[{0x0}, {&(0x7f00000002c0)}], 0x0, 0x0) syz_mount_image$pvfs2(0x0, 0x0, 0x0, 0x0, &(0x7f00000068c0), 0x0, &(0x7f00000069c0)={[{'smackfstransmute'}, {'hash'}]}) mkdir(&(0x7f0000006ac0)='./file0\x00', 0x0) 14:14:49 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010360)="1020f5f2", 0x4, 0x1400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f00000107c0)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000010ca0)="ed410000e8030000e803000002000000001000000000", 0x16, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000010da0)=ANY=[]) 14:14:49 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000001a40)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001a00)={&(0x7f0000001680)={0x14}, 0x14}}, 0x0) 14:14:49 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/183, 0xb7}], 0x1, 0x8, 0x0) 14:14:49 executing program 0: pipe2$watch_queue(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r0, 0xc01064c1, &(0x7f0000000380)) getresuid(&(0x7f0000001800), &(0x7f0000001840), &(0x7f0000001880)) read$FUSE(0xffffffffffffffff, &(0x7f00000018c0)={0x2020, 0x0, 0x0}, 0x2020) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000200)={0xd0, 0x0, r1, [{0x3, 0x7, 0xa, 0x4, '/dev/vcsa\x00'}, {0x5, 0x2, 0xa, 0x20, '/dev/vcsa\x00'}, {0x5, 0x0, 0x12, 0x5, '/dev/loop-control\x00'}, {0x0, 0x9, 0xa, 0x0, '/dev/vcsa\x00'}, {0x2, 0x2d}]}, 0xd0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(0xffffffffffffffff, 0xc01864cd, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x8402, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000300), 0x8103, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(0xffffffffffffffff, 0xc01864cd, 0x0) getpid() ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000003c0)={'\x00', 0x8001, 0x2, 0x5, 0x1414}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, 0x0, 0x20008010) 14:14:49 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000000)={{{@in6=@local, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}, {{@in=@private, 0x0, 0x2b}, 0xa, @in=@dev, 0x0, 0x4}}, 0xe8) 14:14:49 executing program 5: mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) 14:14:49 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x1) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$uinput_user_dev(r2, &(0x7f00000000c0)={'syz1\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x45c) [ 717.505452][ T9364] loop3: detected capacity change from 0 to 65551 [ 717.541039][ T9364] F2FS-fs (loop3): Invalid log_blocksize (0), supports only 12 [ 717.566859][ T9364] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock 14:14:50 executing program 5: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)='R') process_vm_readv(r0, &(0x7f0000000ec0)=[{0x0}, {&(0x7f0000000e00)=""/179, 0xb3}], 0x2, &(0x7f00000011c0)=[{&(0x7f0000000f00)=""/56, 0x38}, {&(0x7f0000000f40)=""/158, 0x9e}], 0x2, 0x0) 14:14:50 executing program 4: sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x69, &(0x7f0000001780)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x57, 0x1, 0x1, 0x0, 0x30, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x3f}, {0xd}, [@network_terminal={0x7, 0x24, 0xa, 0x0, 0x0, 0x36, 0x80}, @mbim={0xc, 0x24, 0x1b, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1f}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400}}], {{0x9, 0x5, 0x82, 0x2, 0x40}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x0, 0x2}}}}}]}}]}}, 0x0) syz_emit_ethernet(0x14, &(0x7f0000001ac0)={@link_local, @empty, @void, {@llc={0x4, {@llc={0x0, 0x0, 'Y#', "d580"}}}}}, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000001d00), 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000002140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc084}, 0x0) 14:14:50 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="b800000015000100000000000000000006000000000000000000000000000001e0000002000000000000000000000100000000000000000002"], 0xb8}}, 0x0) [ 717.638046][ T9364] F2FS-fs (loop3): invalid crc_offset: 0 [ 717.696514][ T9364] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 0) [ 717.718698][ T9364] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 717.749636][ T9364] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 717.766641][ T9386] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.1'. [ 717.821457][ T9364] F2FS-fs (loop3): sanity_check_inode: corrupted inode i_blocks i_ino=3 iblocks=0, run fsck to fix. [ 717.833563][ T9364] F2FS-fs (loop3): Failed to read root inode [ 717.994053][ T6] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 718.004305][ T3692] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 718.204166][ T6] usb 3-1: device descriptor read/64, error 18 [ 718.244009][ T3692] usb 5-1: Using ep0 maxpacket: 8 [ 718.364102][ T3692] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 718.375262][ T3692] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 718.385152][ T3692] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 718.494005][ T6] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 718.554258][ T3692] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 718.563347][ T3692] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 718.571562][ T3692] usb 5-1: Product: syz [ 718.575772][ T3692] usb 5-1: Manufacturer: syz [ 718.580365][ T3692] usb 5-1: SerialNumber: syz [ 718.604349][ T9384] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 718.627250][ T3692] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 718.693973][ T6] usb 3-1: device descriptor read/64, error 18 [ 718.824792][ T6] usb usb3-port1: attempt power cycle [ 718.834570][ T3692] usb 5-1: USB disconnect, device number 16 [ 719.253991][ T6] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 719.464074][ T6] usb 3-1: device descriptor read/8, error -61 [ 719.743964][ T6] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 719.914221][ T6] usb 3-1: device descriptor read/8, error -61 [ 720.034147][ T6] usb usb3-port1: unable to enumerate USB device 14:14:52 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x1c1241) ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0) 14:14:52 executing program 0: syz_emit_ethernet(0xe8, &(0x7f00000002c0)=ANY=[], 0x0) 14:14:52 executing program 5: socketpair(0x1, 0x802, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x37fe0}}, 0x0) 14:14:52 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010360)="1020f5f2", 0x4, 0x1400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f00000107c0)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000010ca0)="ed410000e8030000e8030000020000000010000000000000", 0x18, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000010da0)=ANY=[]) 14:14:52 executing program 4: socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r2) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xd0}, 0x1, 0x0, 0x2}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$sock(r3, &(0x7f00000005c0)={&(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, 0x0}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'gre0\x00', 0x0, 0x7800, 0x7, 0x7f, 0x3, {{0x15, 0x4, 0x2, 0x0, 0x54, 0x64, 0x0, 0x1, 0x2f, 0x0, @private=0xa010101, @empty, {[@generic={0x44, 0x11, "0004203a3ac9ac4db3b6a5bd0bc0b4"}, @timestamp_prespec={0x44, 0x2c, 0xe8, 0x3, 0xf, [{@rand_addr=0x64010101, 0x2}, {@private=0xa010100, 0x1}, {@multicast1, 0x3e59}, {@private=0xa010101, 0x4}, {@private=0xa010101, 0x5}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000280)={'gretap0\x00', &(0x7f0000000400)=ANY=[@ANYBLOB='gretap0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r4, @ANYBLOB="008000100000000800000006491d00240067000080299078ac1414aaac1414aa890f48ffffffffac1414aa371e00010045cc3fd319ae95b8db9dfc10c76b3a8f4b29be1e5e9411c12e3a3692b87fec4efe4c6cf3eb6be1b6bb1c4e2de87bd5830a40ef60ef92668df6a117dce595c028c2972b695e4f3c244b38215ca97fba63a4599a795e989b9bc6d1ca416ee3f950f3308c717ad240fabd5e73a84fcd5f0967aba57d7f5e03154b5c36c81b2524e9997b30263e00d9"]}) 14:14:52 executing program 1: sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x0, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x6}, @NLBL_MGMT_A_DOMAIN={0x7, 0x1, '-\'\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x400584d}, 0xc00a3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x1ff) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x4b, &(0x7f0000000280)={0x0, 0xd0}, 0x1, 0x0, 0x3e80, 0x4810}, 0x2004c000) 14:14:52 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000500)={'ip6_vti0\x00', &(0x7f0000000480)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast2, @loopback}}) 14:14:53 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="d400000019001905000000000000000002200000ff"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x84ffe0, 0x0) 14:14:53 executing program 5: socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x37fe0}}, 0x0) [ 720.603312][ T9396] loop3: detected capacity change from 0 to 65551 [ 720.668812][ T9396] F2FS-fs (loop3): Invalid log_blocksize (0), supports only 12 14:14:53 executing program 0: socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f00000089c0)=[{{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000080)='S', 0x1}, {0x0}, {&(0x7f0000000200)="af", 0x1}], 0x3}}], 0x1, 0x0) 14:14:53 executing program 5: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='('], 0x28}}, 0x0) [ 720.717060][ T9396] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 720.742742][ T9396] F2FS-fs (loop3): invalid crc_offset: 0 14:14:53 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000003c0)={'syztnl1\x00', 0x0}) [ 720.767662][ T9409] netlink: 184 bytes leftover after parsing attributes in process `syz-executor.1'. [ 720.816480][ T9396] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 0) [ 720.846725][ T9396] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 720.869871][ T9396] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 720.926279][ T9396] F2FS-fs (loop3): sanity_check_inode: corrupted inode i_blocks i_ino=3 iblocks=0, run fsck to fix. [ 720.944067][ T9396] F2FS-fs (loop3): Failed to read root inode [ 721.048365][ T6] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 721.243945][ T6] usb 3-1: device descriptor read/64, error 18 [ 721.514212][ T6] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 721.703998][ T6] usb 3-1: device descriptor read/64, error 18 [ 721.824449][ T6] usb usb3-port1: attempt power cycle [ 722.234133][ T6] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 722.404052][ T6] usb 3-1: device descriptor read/8, error -61 [ 722.673956][ T6] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 722.844061][ T6] usb 3-1: device descriptor read/8, error -61 [ 722.964355][ T6] usb usb3-port1: unable to enumerate USB device 14:14:56 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x1c1241) ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0) 14:14:56 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x5efe) sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) syz_clone3(&(0x7f0000000a00)={0x40b86000, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0}, 0x58) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002f00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001480)={0x6, 0x3, &(0x7f00000008c0)=@framed, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r5, 0x1, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) 14:14:56 executing program 0: socketpair(0x10, 0x0, 0x5, &(0x7f0000000300)) 14:14:56 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)=r0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000400)) ftruncate(0xffffffffffffffff, 0x800) 14:14:56 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010360)="1020f5f2", 0x4, 0x1400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f00000107c0)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000010ca0)="ed410000e8030000e8030000020000000010000000000000", 0x18, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000010da0)=ANY=[]) 14:14:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000280)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {}, {0x10, 0x13, @udp='udp:syz1\x00'}}}, 0x2c}}, 0x0) 14:14:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000280)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {}, {0x10, 0x13, @udp='udp:syz1\x00'}}}, 0x2c}}, 0x0) [ 723.666284][ T9425] loop3: detected capacity change from 0 to 65551 [ 723.679468][ T9425] F2FS-fs (loop3): Invalid log_blocksize (0), supports only 12 [ 723.730046][ T9425] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock 14:14:57 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)=r0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000400)) ftruncate(0xffffffffffffffff, 0x800) 14:14:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000280)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {}, {0x10, 0x13, @udp='udp:syz1\x00'}}}, 0x2c}}, 0x0) 14:14:57 executing program 0: bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_mount_image$vfat(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000000c0)=@framed, &(0x7f00000001c0)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) lgetxattr(&(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0) [ 724.904068][ T9425] F2FS-fs (loop3): invalid crc_offset: 0 [ 725.196100][ T9425] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-4) [ 725.254910][ T3692] usb 3-1: new high-speed USB device number 65 using dummy_hcd 14:14:57 executing program 4: socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f00000089c0)=[{{0x0, 0x0, &(0x7f0000001300)=[{0x0}, {&(0x7f0000000100)='{', 0x1}, {&(0x7f0000000200)="af", 0x1}], 0x3, &(0x7f0000001340)=[@ip_tos_u8={{0x11}}], 0x18}}], 0x1, 0x0) [ 725.634383][ T3692] usb 3-1: Using ep0 maxpacket: 16 14:14:58 executing program 0: bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_mount_image$vfat(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000000c0)=@framed, &(0x7f00000001c0)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) lgetxattr(&(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0) [ 725.754215][ T3692] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 725.797604][ T3692] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 725.809233][ T3692] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 725.818628][ T3692] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 725.833671][ T3692] usb 3-1: config 0 descriptor?? [ 726.089902][ T9433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 726.098906][ T9433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 14:15:00 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x1c1241) ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0) 14:15:00 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000280)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {}, {0x10, 0x13, @udp='udp:syz1\x00'}}}, 0x2c}}, 0x0) 14:15:00 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010360)="1020f5f2", 0x4, 0x1400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f00000107c0)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000010ca0)="ed410000e8030000e8030000020000000010000000000000", 0x18, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000010da0)=ANY=[]) 14:15:00 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x5efe) sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) syz_clone3(&(0x7f0000000a00)={0x40b86000, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0}, 0x58) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002f00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001480)={0x6, 0x3, &(0x7f00000008c0)=@framed, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000300)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000380)={0x5, 0x0, 0x5, 0x8}, 0x10}, 0x80) 14:15:00 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)=r0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000400)) ftruncate(0xffffffffffffffff, 0x800) 14:15:00 executing program 0: bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_mount_image$vfat(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000000c0)=@framed, &(0x7f00000001c0)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) lgetxattr(&(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0) [ 727.821142][ T917] usb 3-1: USB disconnect, device number 65 [ 727.854876][ T9475] loop3: detected capacity change from 0 to 65551 [ 727.882722][ T9475] F2FS-fs (loop3): Invalid log_blocksize (0), supports only 12 [ 727.903517][ T9475] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock 14:15:01 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)=r0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000400)) ftruncate(0xffffffffffffffff, 0x800) 14:15:01 executing program 0: bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_mount_image$vfat(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000000c0)=@framed, &(0x7f00000001c0)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) lgetxattr(&(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0) [ 729.206824][ T9475] F2FS-fs (loop3): invalid crc_offset: 0 [ 729.254130][ T917] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 729.316101][ T9475] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-4) [ 729.614013][ T917] usb 3-1: Using ep0 maxpacket: 16 [ 729.755072][ T917] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 729.803867][ C0] sched: RT throttling activated 14:15:02 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010360)="1020f5f2", 0x4, 0x1400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f00000107c0)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000010ca0)="ed410000e8030000e803000002000000001000000000000002", 0x19}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000010da0)=ANY=[]) 14:15:02 executing program 4: r0 = socket$inet(0x2, 0xa, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 729.853554][ T917] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 729.976193][ T917] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 730.000856][ T9498] loop3: detected capacity change from 0 to 65551 [ 730.003981][ T917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 730.010963][ T9498] F2FS-fs (loop3): Invalid log_blocksize (0), supports only 12 [ 730.025576][ T9498] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 730.035068][ T917] usb 3-1: config 0 descriptor?? [ 730.045537][ T9498] F2FS-fs (loop3): invalid crc_offset: 0 [ 730.091338][ T9498] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 0) [ 730.130601][ T9498] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 730.141384][ T9498] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 730.176529][ T9498] F2FS-fs (loop3): sanity_check_inode: corrupted inode i_blocks i_ino=3 iblocks=0, run fsck to fix. [ 730.187680][ T9498] F2FS-fs (loop3): Failed to read root inode 14:15:02 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010360)="1020f5f2", 0x4, 0x1400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f00000107c0)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000010ca0)="ed410000e8030000e803000002000000001000000000000002", 0x19}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000010da0)=ANY=[]) [ 730.292736][ T9478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 730.323411][ T9503] loop3: detected capacity change from 0 to 65551 [ 730.327226][ T9478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 730.341986][ T9503] F2FS-fs (loop3): Invalid log_blocksize (0), supports only 12 [ 730.350323][ T9503] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 730.361649][ T9503] F2FS-fs (loop3): invalid crc_offset: 0 [ 730.370418][ T9503] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 0) [ 730.383414][ T9503] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 730.392552][ T9503] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 730.426953][ T9503] F2FS-fs (loop3): sanity_check_inode: corrupted inode i_blocks i_ino=3 iblocks=0, run fsck to fix. [ 730.437997][ T9503] F2FS-fs (loop3): Failed to read root inode 14:15:02 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010360)="1020f5f2", 0x4, 0x1400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f00000107c0)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000010ca0)="ed410000e8030000e803000002000000001000000000000002", 0x19}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000010da0)=ANY=[]) [ 730.551161][ T9508] loop3: detected capacity change from 0 to 65551 [ 730.555632][ T3742] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 730.568397][ T3742] Buffer I/O error on dev loop3, logical block 0, async page read [ 730.595077][ T3742] loop3: unable to read partition table [ 730.601455][ T9508] F2FS-fs (loop3): Invalid log_blocksize (0), supports only 12 [ 730.610889][ T9508] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 730.629362][ T9508] F2FS-fs (loop3): invalid crc_offset: 0 [ 730.659621][ T9508] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 0) [ 730.678992][ T9508] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 730.690288][ T9508] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 730.739730][ T9508] F2FS-fs (loop3): sanity_check_inode: corrupted inode i_blocks i_ino=3 iblocks=0, run fsck to fix. [ 730.758783][ T9508] F2FS-fs (loop3): Failed to read root inode 14:15:04 executing program 4: bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) lgetxattr(&(0x7f0000000240)='./file0\x00', &(0x7f00000020c0)=@random={'btrfs.', '\x00'}, 0x0, 0x0) socket(0x100000000011, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x171}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) 14:15:04 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x1c1241) ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0) 14:15:04 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010360)="1020f5f2", 0x4, 0x1400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f00000107c0)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010ca0)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000010da0)=ANY=[]) [ 732.052045][ T6] usb 3-1: USB disconnect, device number 66 [ 732.074785][ T9517] loop3: detected capacity change from 0 to 65551 [ 732.111957][ T9517] F2FS-fs (loop3): Invalid log_blocksize (0), supports only 12 [ 732.127730][ T9517] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 732.141177][ T9517] F2FS-fs (loop3): invalid crc value [ 732.148264][ T9517] F2FS-fs (loop3): invalid crc_offset: 0 [ 732.155163][ T9517] F2FS-fs (loop3): Failed to get valid F2FS checkpoint 14:15:04 executing program 4: bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) lgetxattr(&(0x7f0000000240)='./file0\x00', &(0x7f00000020c0)=@random={'btrfs.', '\x00'}, 0x0, 0x0) socket(0x100000000011, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x171}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) 14:15:04 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010360)="1020f5f2", 0x4, 0x1400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f00000107c0)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010ca0)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000010da0)=ANY=[]) [ 732.260428][ T9524] loop3: detected capacity change from 0 to 65551 [ 732.269876][ T9524] F2FS-fs (loop3): Invalid log_blocksize (0), supports only 12 [ 732.284852][ T9524] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 732.300570][ T9524] F2FS-fs (loop3): invalid crc value [ 732.307144][ T9524] F2FS-fs (loop3): invalid crc_offset: 0 [ 732.312812][ T9524] F2FS-fs (loop3): Failed to get valid F2FS checkpoint 14:15:04 executing program 4: bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) lgetxattr(&(0x7f0000000240)='./file0\x00', &(0x7f00000020c0)=@random={'btrfs.', '\x00'}, 0x0, 0x0) socket(0x100000000011, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x171}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) 14:15:04 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010360)="1020f5f2", 0x4, 0x1400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f00000107c0)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010ca0)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000010da0)=ANY=[]) [ 732.439359][ T9529] loop3: detected capacity change from 0 to 65551 [ 732.448444][ T9529] F2FS-fs (loop3): Invalid log_blocksize (0), supports only 12 [ 732.462975][ T9529] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 732.473137][ T9529] F2FS-fs (loop3): invalid crc value [ 732.480846][ T9529] F2FS-fs (loop3): invalid crc_offset: 0 14:15:04 executing program 4: bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) lgetxattr(&(0x7f0000000240)='./file0\x00', &(0x7f00000020c0)=@random={'btrfs.', '\x00'}, 0x0, 0x0) socket(0x100000000011, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="b70200000f0e0009bfa300000000000024020000fffeff7f7a03f0fff8ffffff79a4f0ff00000000b7060000d0b68af1de640200000000007502faff07cd02020404000001007d60b70300000d1000006a0a00fe0000000d8500000026000000b70000000004002995000000000000001da5ad3548ebb63d18db6a1c72821c9b767ac8308fbcd5c5e4a5ad1059b5725ac60c2ceaea4c0ec908abb6e7325ec1956bd8660bf3664148a2c96752fe2bb328dff1aa503b8de7ab9a780001000000000000d4bf20c2bd152d814f01f2cd539e030b0000000000007f4182f32333b08e6e497640000000aea5cac0ceafdb9a2eeb02a1f5104d16ddb64963d84d91004cd5817e0b7f005e6ee7a39e2f0b5a18ed786b783ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb9f35e4f41a62d79b4c03e53466fa4f22d8c19f958e8b34de3535e7dacf1b13f7e851ec843c2288a2e7ff949a7a48ce18799ee53de177a81ea67a8f84538a9a311c754e5ab59a43f56d2085786e7ec07d78917f7169f006f3f5c95177fbd0b14b36259e2905ef911785c88a16aae46084d676d8ef8aa6ecc2d34a442bc098f4fcc96623b7c373b0ef04d55b846b094b0d6c7a75a76d445e0dcdf72c7ef97e08512ef5987b6e09a6a7caffff0000141f65e7d9ebe3be70c4364333af9a9d91c3e41ac37a63f85ad8254479c12f7c84fa5df32b70a80cce69cf30d3d67d84ccf3f9db9b2ff72f3ce0d7ce76fd967d0736690111de2ddc4b153c989ef100bbf76063d3f6ffffb73d70e9c3d7b90aecf48eb19767e00b75041739952fe87fde27ce01893f54ec0ea8e792414f639bc9ce1fea3f6ac0d7025759d4b45577c205c70631e8ad585951950e851250540593e61860b69a521f4e210b6494e3c52d927195737945cc03d5668483151710de246420a1b6c55b73876a6ed7f58bde38b44ab13d980c894ed90d9338923789a1edcd8043fe87919088383268324a25df14010c8e1b49b0400e4f6f767ee30ea3aad2c6d6b8c97c00eaa00ff9bc46e1cfecbdc0e4ffac53e8f76c8b556306b409d04544d3a7edd4d447d2fb431e226ae182b8dcc86fe09b404a0b7c723d3b19c3dc382fa91fb0fb8f9f3f13296bb1758b24aad0922091d49e2bc408a5a37d2fe7a60b903d2d9fe9c151cafcc8dc389671c2d08b6e2641500568445b00cee4585af04fa69e0380be0d66649dcf3bf8a9066e596119109ea8b308ff070000aab1c95bb22cedd913b22dcaa197ccc34586dc50bd9f4628ebe757bae30b356521df06f995cb57f97052fc4158250ccecfb47ea8faf509593fadc7eafb613313b052397af1ede94d87590ce90a0a7579766f7ec4fcd3cb0b1a8c531724d5ef6b334803cedaa9cedf16dc3af6c9eb0dcca5303eed6689ea910900785f61278dde47e6672e93a314a5f60e7b682bf0cacde21f6090f4fb311afd7f8b48f3f0d8c66449d8687dcf2d0f76668b2b9bf8b32b518e01ffb985f8054d37959c529e99b7daf32acfed749d516d014cef5f98126324e202badc1e5c20d69e576a770000000000005addc0103756b894418e4591c624a9b2ccabbfb888d413d923b0c901973cd7c9d197d6d8e64787c4d397f57a15b6e0b4212b6cb55b9c207bbe84f483b15f45b9a1d3af087047c568aef1d8559c6146bb93026ebfc0bb5ec10b6290dc757a4903a88fb2c035f9349b59085cf91b8b775152786118a1020000fc19928ccb713ff09e179c308fbe9bc543dcf43f731074d96ef2447a2a4af5ca0c39e7ca2e801e57560a55e9cfa095cf3f74398219ad10e5e9d26631c2f1db3a2882f6e130a79517a88de7596429a20793e12616aa32b3e720c6521fbe933321adde8ca7dd99c0a0125ff8c18119a6926083f4a2c008a9f2a29e30823bf0ec3639cadaf9be9608358e1e5ab17eea477b1754f78f45468c9568471647f8bc03d11811ac6eec1741ceb39a3ecd9e3c325fcabbab3d12f6a759f7ce11dafa387a8077db8a2230d2014a57bc8dd47741270000008000000000b2eebd5e1626cab98499328ff024a240199993433ceb5be20427a32df7047d63010dfc6a461517ad48ff64042e84c85c899fd11c6320a8d8fc0e78c1aaa152d567f91dd943f62d167fed1b605965a5c2b32d094a461a990000000000000000000000000000000000000000000200000000000000000000b385c644a4a170e6dc9e9e546bfa049d025b319abd87fd85482b43db5d6c2cb6a204d45f88dd4140c8edb598a36e21ad132bf6b88c99c56633b01813fc5cd7d048469a966bbfb300fd772cbadf0cf26899bfd15e7d9408026a92f13f11d1c9832259b2f97227f84a3bb96253717a177ac091d0f4632f638b09a0307ff31729857f6fb7dac17ed09e6fe9f19e481a3f77cead663f42456e080952636515c758f5047b2148944133a492ef20a1778088c42094903d6ece2497b99fc745c420b035ff7961484a0f62a2d957ae2e47ff1ea8a059f2d03bf9c3e8d2b16ab409de762522f6008de48bb70b698c5c9867437ac3127fad4bd699acaad78a5f66c7fc7d46e048082a0af61e6b052e473ed26b032a070ea10e985703b292c7336112b1f35c3b069363869dce725d8da75dcec76dc591c052feecee18c64c4600a0bc3d4945d4b918865bbf52f732a500689cbd9a84d07846417796f2a85e7a41d27d64b10f8e970469cf495b4a1b4ea8b5322f78e9f3048351b550c59a634b47981420081ea4da18b9d318fa001ce660b28bbcf3c1a8893d130b26d25e491f478ae4f95f71ea8897b34c55f1678b8453f08a5ae1b3b4d8c83053c57637a98ef57e5fa51971eba5e287e9910cba734336703defc13fe1659b157e5d9de7bfb929e715ed1a9a505a04a8d8474482295afbb9de90de2e918522cac2d5b5ac09d1fdc4fd7c6393a684ad7234ecb65d0008000000000000560ad146e8b9e9cd9b050edb1f6735c90a76b1ba4dbdee34d0b6750f25ba7251944ada77665573460056351d009a568c782f4438ecba9bee47f25286300e83bd1853076ad52eac84029335b86e7f21e39a1af3d070abef94bc0827db0046dcb7d63bf64bf801f33e3196b522c836a40b0100d0961533737c57e9b7337b981a99f63f600f90647703f0640f6594dd9f26436024a1f90f174769bad5a283271e6d7f49dec90a05bd771dd0502dc2170ccf98ade27e858eb5686ac900000000ae1bc4246ae316c6af10bf02088b4bb2ac89c96e58578dc50eddbf01ece3cb8a363ecbeb8198997115d7151f691a2a755d8233e006dd38ed5ba350bd6aad3bf6f5108083f0100f8a20666e92ec7254ce7284159057be455d16134d65ce69c4b906b76427224b69750b779d81eb6e37e1db62b1788ff918433787f8026ef5c518113d4841b5ca4dbe8d4afff527513a2efc8403be48e494b3bfeede33b1deefd9d902e8dc868f30161c2cd13621b0a20362181186ff8cf4c8d58d74822f92554287ee157e9f1597c3e2e238f382a91bf48b4de88363c841bd7a8cddae334429ccf45bd3d434d9ecf74634ffc9539010f0d36e672b9d668cc6762c0b25e4a527fb4d184ba84498b1367e4b31faf75f1b3dcecfd80c57015d8cd16171507add30833865fc1a42780e9d57bb14a6ebea4018d26e18747546fc7a4a619753fd9bea132058eb90f9b80549473eea2fb9bc43d38d8719a1cca094bd933ceef87a3ec0c2ac70d5f843425100950000009e000000000008000018779600b1f2ae5ed34f5b7e77278f7ded9f030000002e050000009f95a59418f612dfa87c654043da1a59c3c43c7884ab65d4b34984afe30c67179c4f5a3ba0e491f2b942b754a3c0d5b878c4ad63591c3fc7d3a4d4296d4bab0a88e55ff9c2536654bb2f83e8015fac216119e8ce582698938c9a331a97c087b71ffb4c3a599e08fa0607e50300f7ff00d03bf057b408c86a1165bd9a1bdbf3dff88c9b2173a75d5fc82dce6d8a3f297231e33588d7cf183109c1118d94a41d48f8efcf193ff26908accba23f1ec1cff64a1b912ededeb080f9a241e07709e6dd6a3a7e18200c9e80b9634e6f0c4d000000000000000000000000000000005e50e77d04fcf8931ad07b38a39957e6b3a3c909000000e9d694e483e848fe0d00ee7c7d6cc30932a9575aa8808d10a4963560250bb4e60e88c726f63662cb143daf4b9ebd0774998a59fbb42dc35f12452cca456a12b7d15cf3ce7ea350e9510e96527cde622998683e65b235c284543ca32436f9e705dff00f08df1115175628a327876dea291480c2dde8a59d1856eed2b502965038af0d56e49e0e2e9cb06b2927b2eec3f42fa0e4d0f2e25104805f386d460e212c27ac7bafe6a0078f8648ff9f1e0257338ae58457fb27b29430cc9ac6a33ea11b88ae8bc95dffa293aa69d6d47f89b28a25a7ec2fce6691549990f93d1f02e1b619813699303b6b1260d5537e85315551adabe00c98bd7aa06e7f00c89f11a410518d181cbfb9bdb9160af19f1fc456b5fc4f099814631024b734c0cd8843c5cb124a21092e6cdd8aa2f4d3f93e92c6d850898890d9449e3f499af92be74ba8ba7928feabbd99d6288dece7513c50b973bab87214415078857d18032ab5adb8d4bf32405cc5f63eba7e60bcd0098fd7957943b3c4cf13de4e049e06ad7ebc236d1088c99d35f40555364ff86cab4542261999bccd3269e51d10900a1c05696b47ff33a159abce6bb1d69193bd01f59f1d3f431b4e0868db623cb8375baa50785b8fcd37ce4c52abe43c1e3368735022e7cc7a9b397b19b32adc91444f519ad33f7f2680e3cf7ecd3cfc67816eb66b1faa78dd8e3f7e233b6048c53813e6b508dfc713583d8ef8f9cfff5cdae59aa7aca654b1740c90eb71ca000000000000000000000000000000000000000000faa53c07b5f590ee4c8bfbd828972bb7bbc8ed7ae23bf3bca7eb378ba0e912b150dde95dafe80ee043a1d640bd60fdfbe4a2d2aa0607b026f78417471e6ea0d1e86b309b29d0dae2d2c9c730ac21cc2a6213596a784a09775f86a9e6d5b6c7b3c5d10177a873edb630fdf9b1e11005a1ce41d04a2ad3f5d25a1595e7609849033d2e86ac682f2f0cde376f50a88a3ab5e83f56e43a07641b82c077fa1479b79e85c71a9c00000000000000078ce7c4ab383dac0325fa7f4ffb201c479265272febf3d529aa3d9ffb08e4dbc8842fbda4d38c4cf584ccf207e5373231fdb1f7888049370800845004e16a26b06b635f740492c303da988ab41b2ac3d9e9074590475678260f205532235444e991d7d63e52aa28964fb727db39091e5efee76e3d61b34d191895b7d49600a3536c7506df587256999d8094e6346eb781c0e212020d89242ac467aa803fa4140093fe17c4d15e3b4dd931b0db633e0162786e43da18a722aed9a3781d6d373598ae96ab34909981681c75d1f823647fed2bd858a86ecf4b5c32d2f63ca6268ed97eb79ff8d3ccb24f111cf6f9179a8cbedaebe04172b3bc54dffa34e065facf9eafdbff22bddc89faff0f9ed96221bcab5a06391cca36a09c92e8704751"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x171}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) [ 732.492804][ T9529] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 732.500107][ T6] usb 3-1: new high-speed USB device number 67 using dummy_hcd 14:15:04 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010360)="1020f5f2", 0x4, 0x1400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f00000107c0)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {0x0, 0x0, 0x205fe0}, {&(0x7f0000010ca0)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000010da0)=ANY=[]) [ 732.603526][ T9535] loop3: detected capacity change from 0 to 65551 [ 732.619993][ T9535] F2FS-fs (loop3): Invalid log_blocksize (0), supports only 12 [ 732.630197][ T9535] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 732.643574][ T9535] F2FS-fs (loop3): invalid crc value [ 732.660708][ T9535] F2FS-fs (loop3): invalid crc_offset: 0 [ 732.668793][ T9535] F2FS-fs (loop3): Failed to get valid F2FS checkpoint 14:15:05 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010360)="1020f5f2", 0x4, 0x1400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f00000107c0)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {0x0, 0x0, 0x205fe0}, {&(0x7f0000010ca0)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000010da0)=ANY=[]) [ 732.744008][ T6] usb 3-1: Using ep0 maxpacket: 16 [ 732.754103][ T9537] loop3: detected capacity change from 0 to 65551 [ 732.762428][ T9537] F2FS-fs (loop3): Invalid log_blocksize (0), supports only 12 [ 732.770074][ T9537] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 732.779725][ T9537] F2FS-fs (loop3): invalid crc value [ 732.785586][ T9537] F2FS-fs (loop3): invalid crc_offset: 0 [ 732.791254][ T9537] F2FS-fs (loop3): Failed to get valid F2FS checkpoint 14:15:05 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010360)="1020f5f2", 0x4, 0x1400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f00000107c0)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {0x0, 0x0, 0x205fe0}, {&(0x7f0000010ca0)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000010da0)=ANY=[]) [ 732.863405][ T9539] loop3: detected capacity change from 0 to 65551 [ 732.872046][ T9539] F2FS-fs (loop3): Invalid log_blocksize (0), supports only 12 [ 732.879143][ T6] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 732.879993][ T9539] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 732.890244][ T6] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 732.904669][ T9539] F2FS-fs (loop3): invalid crc value [ 732.908014][ T6] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 732.913039][ T9539] F2FS-fs (loop3): invalid crc_offset: 0 [ 732.922874][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.930865][ T6] usb 3-1: config 0 descriptor?? [ 732.941933][ T9539] F2FS-fs (loop3): Failed to get valid F2FS checkpoint 14:15:05 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010360)="1020f5f2", 0x4, 0x1400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f00000107c0)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00), 0x0, 0x205fe0}, {&(0x7f0000010ca0)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000010da0)=ANY=[]) [ 733.019821][ T9541] loop3: detected capacity change from 0 to 65551 [ 733.023393][ T3742] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 733.037818][ T3742] Buffer I/O error on dev loop3, logical block 0, async page read [ 733.046819][ T3742] loop3: unable to read partition table [ 733.052812][ T9541] F2FS-fs (loop3): Invalid log_blocksize (0), supports only 12 14:15:05 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010360)="1020f5f2", 0x4, 0x1400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f00000107c0)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00), 0x0, 0x205fe0}, {&(0x7f0000010ca0)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000010da0)=ANY=[]) [ 733.063193][ T9541] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 733.072793][ T9541] F2FS-fs (loop3): invalid crc value [ 733.078791][ T9541] F2FS-fs (loop3): invalid crc_offset: 0 [ 733.084826][ T9541] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 733.123244][ T9543] loop3: detected capacity change from 0 to 65551 [ 733.126294][ T3742] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 733.139173][ T3742] Buffer I/O error on dev loop3, logical block 0, async page read [ 733.148411][ T3742] loop3: unable to read partition table [ 733.160302][ T9543] F2FS-fs (loop3): Invalid log_blocksize (0), supports only 12 [ 733.169434][ T9543] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 733.177835][ T9519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 733.186900][ T9519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 733.195372][ T9543] F2FS-fs (loop3): invalid crc value [ 733.201096][ T9543] F2FS-fs (loop3): invalid crc_offset: 0 [ 733.206974][ T9543] F2FS-fs (loop3): Failed to get valid F2FS checkpoint 14:15:07 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x1c1241) ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0) 14:15:07 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010360)="1020f5f2", 0x4, 0x1400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f00000107c0)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00), 0x0, 0x205fe0}, {&(0x7f0000010ca0)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000010da0)=ANY=[]) [ 735.109691][ T3762] usb 3-1: USB disconnect, device number 67 [ 735.129085][ T9547] loop3: detected capacity change from 0 to 65551 [ 735.142532][ T9547] F2FS-fs (loop3): Invalid log_blocksize (0), supports only 12 [ 735.155821][ T9547] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 735.166945][ T9547] F2FS-fs (loop3): invalid crc value [ 735.172757][ T9547] F2FS-fs (loop3): invalid crc_offset: 0 [ 735.178863][ T9547] F2FS-fs (loop3): Failed to get valid F2FS checkpoint 14:15:07 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010360)="1020f5f2", 0x4, 0x1400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f00000107c0)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)='\x00'/16, 0x10, 0x205fe0}, {&(0x7f0000010ca0)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000010da0)=ANY=[]) [ 735.260024][ T9551] loop3: detected capacity change from 0 to 65551 [ 735.261344][ T3742] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 735.277527][ T3742] Buffer I/O error on dev loop3, logical block 0, async page read [ 735.287559][ T3742] loop3: unable to read partition table [ 735.293647][ T9551] F2FS-fs (loop3): Invalid log_blocksize (0), supports only 12 [ 735.303066][ T9551] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 735.312776][ T9551] F2FS-fs (loop3): invalid crc value [ 735.319039][ T9551] F2FS-fs (loop3): invalid crc_offset: 0 [ 735.325266][ T9551] F2FS-fs (loop3): Failed to get valid F2FS checkpoint 14:15:07 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010360)="1020f5f2", 0x4, 0x1400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f00000107c0)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)='\x00'/16, 0x10, 0x205fe0}, {&(0x7f0000010ca0)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000010da0)=ANY=[]) [ 735.410386][ T9553] loop3: detected capacity change from 0 to 65551 [ 735.419804][ T9553] F2FS-fs (loop3): Invalid log_blocksize (0), supports only 12 [ 735.427976][ T9553] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 735.437450][ T9553] F2FS-fs (loop3): invalid crc value [ 735.443057][ T9553] F2FS-fs (loop3): invalid crc_offset: 0 [ 735.449764][ T9553] F2FS-fs (loop3): Failed to get valid F2FS checkpoint 14:15:07 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010360)="1020f5f2", 0x4, 0x1400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f00000107c0)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)='\x00'/16, 0x10, 0x205fe0}, {&(0x7f0000010ca0)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000010da0)=ANY=[]) [ 735.524071][ T3762] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 735.545826][ T9555] loop3: detected capacity change from 0 to 65551 [ 735.555599][ T9555] F2FS-fs (loop3): Invalid log_blocksize (0), supports only 12 [ 735.563295][ T9555] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 735.572879][ T9555] F2FS-fs (loop3): invalid crc value [ 735.578753][ T9555] F2FS-fs (loop3): invalid crc_offset: 0 [ 735.584515][ T9555] F2FS-fs (loop3): Failed to get valid F2FS checkpoint 14:15:08 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010360)="1020f5f2", 0x4, 0x1400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f00000107c0)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)='\x00'/24, 0x18, 0x205fe0}, {&(0x7f0000010ca0)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000010da0)=ANY=[]) [ 735.685248][ T9557] loop3: detected capacity change from 0 to 65551 [ 735.693552][ T9557] F2FS-fs (loop3): Invalid log_blocksize (0), supports only 12 [ 735.701245][ T9557] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 735.713259][ T9557] F2FS-fs (loop3): invalid crc value [ 735.719208][ T9557] F2FS-fs (loop3): invalid crc_offset: 0 [ 735.725090][ T9557] F2FS-fs (loop3): Failed to get valid F2FS checkpoint 14:15:08 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010360)="1020f5f2", 0x4, 0x1400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f00000107c0)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)='\x00'/24, 0x18, 0x205fe0}, {&(0x7f0000010ca0)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000010da0)=ANY=[]) [ 735.764325][ T3762] usb 3-1: Using ep0 maxpacket: 16 [ 735.805916][ T9559] loop3: detected capacity change from 0 to 65551 [ 735.806827][ T3742] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 735.822217][ T3742] Buffer I/O error on dev loop3, logical block 0, async page read [ 735.831047][ T3742] loop3: unable to read partition table [ 735.838232][ T9559] F2FS-fs (loop3): Invalid log_blocksize (0), supports only 12 [ 735.852616][ T9559] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 735.862189][ T9559] F2FS-fs (loop3): invalid crc value [ 735.867954][ T9559] F2FS-fs (loop3): invalid crc_offset: 0 [ 735.876274][ T9559] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 735.914676][ T3762] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 735.925713][ T3762] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 14:15:08 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010360)="1020f5f2", 0x4, 0x1400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f00000107c0)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)='\x00'/24, 0x18, 0x205fe0}, {&(0x7f0000010ca0)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000010da0)=ANY=[]) [ 735.961096][ T3762] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 735.979306][ T3762] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 735.992604][ T9561] loop3: detected capacity change from 0 to 65551 [ 735.998792][ T3762] usb 3-1: config 0 descriptor?? [ 736.006973][ T9561] F2FS-fs (loop3): Invalid log_blocksize (0), supports only 12 [ 736.014727][ T9561] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 736.024019][ T9561] F2FS-fs (loop3): invalid crc value [ 736.029860][ T9561] F2FS-fs (loop3): invalid crc_offset: 0 [ 736.035938][ T9561] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 736.046442][ T3762] usbhid 3-1:0.0: couldn't find an input interrupt endpoint 14:15:08 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010360)="1020f5f2", 0x4, 0x1400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f00000107c0)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)='\x00'/28, 0x1c, 0x205fe0}, {&(0x7f0000010ca0)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000010da0)=ANY=[]) [ 736.123477][ T9563] loop3: detected capacity change from 0 to 65551 [ 736.132785][ T9563] F2FS-fs (loop3): Invalid log_blocksize (0), supports only 12 [ 736.140911][ T9563] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 736.150682][ T9563] F2FS-fs (loop3): invalid crc value [ 736.156866][ T9563] F2FS-fs (loop3): invalid crc_offset: 0 [ 736.162545][ T9563] F2FS-fs (loop3): Failed to get valid F2FS checkpoint 14:15:08 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010360)="1020f5f2", 0x4, 0x1400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f00000107c0)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)='\x00'/28, 0x1c, 0x205fe0}, {&(0x7f0000010ca0)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000010da0)=ANY=[]) [ 736.240631][ T9565] loop3: detected capacity change from 0 to 65551 [ 736.247973][ T9549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 736.249018][ T9565] F2FS-fs (loop3): Invalid log_blocksize (0), supports only 12 [ 736.259117][ T9549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 736.269637][ T9565] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 736.281129][ T9565] F2FS-fs (loop3): invalid crc value [ 736.287019][ T9565] F2FS-fs (loop3): invalid crc_offset: 0 [ 736.292753][ T9565] F2FS-fs (loop3): Failed to get valid F2FS checkpoint 14:15:08 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010360)="1020f5f2", 0x4, 0x1400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f00000107c0)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)='\x00'/28, 0x1c, 0x205fe0}, {&(0x7f0000010ca0)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000010da0)=ANY=[]) [ 736.385569][ T9567] loop3: detected capacity change from 0 to 65551 [ 736.393673][ T9567] F2FS-fs (loop3): Invalid log_blocksize (0), supports only 12 [ 736.402020][ T9567] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 736.413086][ T9567] F2FS-fs (loop3): invalid crc value [ 736.419230][ T9567] F2FS-fs (loop3): invalid crc_offset: 0 [ 736.425147][ T9567] F2FS-fs (loop3): Failed to get valid F2FS checkpoint 14:15:08 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010360)="1020f5f2", 0x4, 0x1400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f00000107c0)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa", 0x1e, 0x205fe0}, {&(0x7f0000010ca0)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000010da0)=ANY=[]) [ 736.502273][ T9569] loop3: detected capacity change from 0 to 65551 [ 736.511849][ T9569] F2FS-fs (loop3): Invalid log_blocksize (0), supports only 12 [ 736.525633][ T9569] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 736.540214][ T9569] F2FS-fs (loop3): invalid crc value [ 736.546243][ T9569] F2FS-fs (loop3): invalid crc_offset: 0 [ 736.551975][ T9569] F2FS-fs (loop3): Failed to get valid F2FS checkpoint 14:15:10 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x1c1241) ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0) 14:15:10 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010360)="1020f5f2", 0x4, 0x1400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f00000107c0)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa", 0x1e, 0x205fe0}, {&(0x7f0000010ca0)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000010da0)=ANY=[]) [ 738.142075][ T3695] usb 3-1: USB disconnect, device number 68 [ 738.158395][ T9573] loop3: detected capacity change from 0 to 65551 [ 738.176256][ T9573] F2FS-fs (loop3): Invalid log_blocksize (0), supports only 12 14:15:10 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010360)="1020f5f2", 0x4, 0x1400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f00000107c0)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa", 0x1e, 0x205fe0}, {&(0x7f0000010ca0)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000010da0)=ANY=[]) [ 738.192010][ T9573] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 738.202325][ T9573] F2FS-fs (loop3): invalid crc value [ 738.209217][ T9573] F2FS-fs (loop3): invalid crc_offset: 0 [ 738.215317][ T9573] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 738.289808][ T9577] loop3: detected capacity change from 0 to 65551 [ 738.290031][ T3742] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 738.307500][ T3742] Buffer I/O error on dev loop3, logical block 0, async page read [ 738.316381][ T3742] loop3: unable to read partition table [ 738.323170][ T9577] F2FS-fs (loop3): Invalid log_blocksize (0), supports only 12 [ 738.331736][ T9577] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 738.341587][ T9577] F2FS-fs (loop3): invalid crc value [ 738.349040][ T9577] F2FS-fs (loop3): invalid crc_offset: 0 [ 738.355031][ T9577] F2FS-fs (loop3): Failed to get valid F2FS checkpoint 14:15:10 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010360)="1020f5f2", 0x4, 0x1400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f00000107c0)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28", 0x1f, 0x205fe0}, {&(0x7f0000010ca0)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000010da0)=ANY=[]) [ 738.440339][ T9579] loop3: detected capacity change from 0 to 65551 [ 738.449048][ T9579] F2FS-fs (loop3): Invalid log_blocksize (0), supports only 12 [ 738.457500][ T9579] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 738.466825][ T9579] F2FS-fs (loop3): invalid crc value [ 738.472425][ T9579] F2FS-fs (loop3): invalid crc_offset: 0 [ 738.478167][ T9579] F2FS-fs (loop3): Failed to get valid F2FS checkpoint 14:15:10 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010360)="1020f5f2", 0x4, 0x1400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f00000107c0)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28", 0x1f, 0x205fe0}, {&(0x7f0000010ca0)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000010da0)=ANY=[]) [ 738.554021][ T3695] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 738.566356][ T9581] loop3: detected capacity change from 0 to 65551 [ 738.575451][ T9581] F2FS-fs (loop3): Invalid log_blocksize (0), supports only 12 [ 738.583122][ T9581] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 738.592501][ T9581] F2FS-fs (loop3): invalid crc value [ 738.598628][ T9581] F2FS-fs (loop3): invalid crc_offset: 0 [ 738.606171][ T9581] F2FS-fs (loop3): Failed to get valid F2FS checkpoint 14:15:11 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010360)="1020f5f2", 0x4, 0x1400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f00000107c0)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28", 0x1f, 0x205fe0}, {&(0x7f0000010ca0)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000010da0)=ANY=[]) [ 738.710874][ T9583] loop3: detected capacity change from 0 to 65551 [ 738.721716][ T9583] F2FS-fs (loop3): Invalid log_blocksize (0), supports only 12 [ 738.731864][ T9583] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 738.741504][ T9583] F2FS-fs (loop3): invalid crc value [ 738.748030][ T9583] F2FS-fs (loop3): invalid crc_offset: 0 [ 738.754423][ T9583] F2FS-fs (loop3): Failed to get valid F2FS checkpoint 14:15:11 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010360)="1020f5f2", 0x4, 0x1400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f00000107c0)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20}, {&(0x7f0000010ca0)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000010da0)=ANY=[]) [ 738.794251][ T3695] usb 3-1: Using ep0 maxpacket: 16 [ 738.836195][ T9585] loop3: detected capacity change from 0 to 65551 [ 738.846991][ T9585] F2FS-fs (loop3): Invalid log_blocksize (0), supports only 12 [ 738.855032][ T9585] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 738.866757][ T9585] F2FS-fs (loop3): invalid crc value [ 738.872518][ T9585] F2FS-fs (loop3): invalid crc_offset: 0 [ 738.878849][ T9585] F2FS-fs (loop3): Failed to get valid F2FS checkpoint 14:15:11 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010360)="1020f5f2", 0x4, 0x1400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f00000107c0)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20}, {&(0x7f0000010ca0)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000010da0)=ANY=[]) [ 738.914317][ T3695] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 738.924734][ T3695] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 738.937737][ T3695] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 738.947034][ T3695] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 738.956617][ T3695] usb 3-1: config 0 descriptor?? [ 738.995888][ T3695] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 739.016532][ T9587] loop3: detected capacity change from 0 to 65551 [ 739.017884][ T3887] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 739.033071][ T3887] Buffer I/O error on dev loop3, logical block 0, async page read [ 739.042865][ T3887] loop3: unable to read partition table [ 739.049686][ T9587] F2FS-fs (loop3): Invalid log_blocksize (0), supports only 12 [ 739.057676][ T9587] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 739.067904][ T9587] F2FS-fs (loop3): invalid crc value [ 739.073554][ T9587] F2FS-fs (loop3): invalid crc_offset: 0 [ 739.079309][ T9587] F2FS-fs (loop3): Failed to get valid F2FS checkpoint 14:15:11 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010360)="1020f5f2", 0x4, 0x1400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f00000107c0)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20}, {&(0x7f0000010ca0)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000010da0)=ANY=[]) [ 739.164939][ T9589] loop3: detected capacity change from 0 to 65551 [ 739.173107][ T9589] F2FS-fs (loop3): Invalid log_blocksize (0), supports only 12 [ 739.182487][ T9589] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 739.193311][ T9589] F2FS-fs (loop3): invalid crc value [ 739.198788][ T9575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 739.198951][ T9575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 739.211160][ T9589] F2FS-fs (loop3): invalid crc_offset: 0 [ 739.224664][ T9589] F2FS-fs (loop3): Failed to get valid F2FS checkpoint 14:15:11 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010360)="1020f5f2", 0x4, 0x1400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f00000107c0)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000010ca0)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000010da0)=ANY=[]) [ 739.324810][ T9591] loop3: detected capacity change from 0 to 65551 [ 739.333364][ T9591] F2FS-fs (loop3): Invalid log_blocksize (0), supports only 12 [ 739.343244][ T9591] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 739.352680][ T9591] F2FS-fs (loop3): invalid crc_offset: 0 [ 739.359126][ T9591] F2FS-fs (loop3): invalid crc_offset: 0 [ 739.365639][ T9591] F2FS-fs (loop3): Failed to get valid F2FS checkpoint 14:15:11 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010360)="1020f5f2", 0x4, 0x1400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f00000107c0)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000010ca0)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000010da0)=ANY=[]) [ 739.430523][ T9593] loop3: detected capacity change from 0 to 65551 [ 739.440536][ T9593] F2FS-fs (loop3): Invalid log_blocksize (0), supports only 12 [ 739.449669][ T9593] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 739.460340][ T9593] F2FS-fs (loop3): invalid crc_offset: 0 [ 739.466407][ T9593] F2FS-fs (loop3): invalid crc_offset: 0 [ 739.472061][ T9593] F2FS-fs (loop3): Failed to get valid F2FS checkpoint 14:15:11 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010360)="1020f5f2", 0x4, 0x1400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f00000107c0)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000010ca0)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000010da0)=ANY=[]) [ 739.562439][ T9595] loop3: detected capacity change from 0 to 65551 [ 739.570912][ T9595] F2FS-fs (loop3): Invalid log_blocksize (0), supports only 12 [ 739.579995][ T9595] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 739.592023][ T9595] F2FS-fs (loop3): invalid crc_offset: 0 [ 739.598347][ T9595] F2FS-fs (loop3): invalid crc_offset: 0 [ 739.604626][ T9595] F2FS-fs (loop3): Failed to get valid F2FS checkpoint 14:15:13 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x1c1241) ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0) 14:15:13 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010360)="1020f5f2", 0x4, 0x1400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f00000107c0)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {0x0, 0x0, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000010ca0)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000010da0)=ANY=[]) [ 741.175573][ T9483] usb 3-1: USB disconnect, device number 69 [ 741.192673][ T9599] loop3: detected capacity change from 0 to 65551 [ 741.213665][ T9599] F2FS-fs (loop3): Invalid log_blocksize (0), supports only 12 [ 741.225789][ T9599] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 741.235306][ T9599] F2FS-fs (loop3): invalid crc_offset: 0 [ 741.241126][ T9599] F2FS-fs (loop3): invalid crc_offset: 0 [ 741.247718][ T9599] F2FS-fs (loop3): Failed to get valid F2FS checkpoint 14:15:13 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010360)="1020f5f2", 0x4, 0x1400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f00000107c0)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {0x0, 0x0, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000010ca0)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000010da0)=ANY=[]) [ 741.337103][ T9603] loop3: detected capacity change from 0 to 65551 [ 741.346931][ T9603] F2FS-fs (loop3): Invalid log_blocksize (0), supports only 12 [ 741.355395][ T9603] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 741.364959][ T9603] F2FS-fs (loop3): invalid crc_offset: 0 [ 741.370888][ T9603] F2FS-fs (loop3): invalid crc_offset: 0 [ 741.377764][ T9603] F2FS-fs (loop3): Failed to get valid F2FS checkpoint 14:15:13 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010360)="1020f5f2", 0x4, 0x1400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f00000107c0)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {0x0, 0x0, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000010ca0)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000010da0)=ANY=[]) [ 741.451902][ T9605] loop3: detected capacity change from 0 to 65551 [ 741.453042][ T3742] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 741.468927][ T3742] Buffer I/O error on dev loop3, logical block 0, async page read [ 741.478437][ T3742] loop3: unable to read partition table [ 741.485064][ T9605] F2FS-fs (loop3): Invalid log_blocksize (0), supports only 12 [ 741.494306][ T9605] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 741.503405][ T9605] F2FS-fs (loop3): invalid crc_offset: 0 [ 741.509614][ T9605] F2FS-fs (loop3): invalid crc_offset: 0 [ 741.516794][ T9605] F2FS-fs (loop3): Failed to get valid F2FS checkpoint 14:15:13 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010360)="1020f5f2", 0x4, 0x1400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f00000107c0)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920), 0x0, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000010ca0)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000010da0)=ANY=[]) [ 741.606112][ T9607] loop3: detected capacity change from 0 to 65551 [ 741.617820][ T9483] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 741.625869][ T9607] F2FS-fs (loop3): Invalid log_blocksize (0), supports only 12 [ 741.633598][ T9607] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 741.643501][ T9607] F2FS-fs (loop3): invalid crc_offset: 0 [ 741.650365][ T9607] F2FS-fs (loop3): invalid crc_offset: 0 [ 741.656104][ T9607] F2FS-fs (loop3): Failed to get valid F2FS checkpoint 14:15:14 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010360)="1020f5f2", 0x4, 0x1400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f00000107c0)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920), 0x0, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000010ca0)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000010da0)=ANY=[]) [ 741.747773][ T9609] loop3: detected capacity change from 0 to 65551 [ 741.756777][ T9609] F2FS-fs (loop3): Invalid log_blocksize (0), supports only 12 [ 741.764509][ T9609] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 741.773634][ T9609] F2FS-fs (loop3): invalid crc_offset: 0 [ 741.780970][ T9609] F2FS-fs (loop3): invalid crc_offset: 0 [ 741.786689][ T9609] F2FS-fs (loop3): Failed to get valid F2FS checkpoint 14:15:14 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010360)="1020f5f2", 0x4, 0x1400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f00000107c0)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920), 0x0, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000010ca0)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000010da0)=ANY=[]) [ 741.874424][ T9483] usb 3-1: Using ep0 maxpacket: 16 [ 741.894494][ T9611] loop3: detected capacity change from 0 to 65551 [ 741.895942][ T3742] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 741.911403][ T3742] Buffer I/O error on dev loop3, logical block 0, async page read [ 741.920165][ T3742] loop3: unable to read partition table [ 741.926416][ T9611] F2FS-fs (loop3): Invalid log_blocksize (0), supports only 12 [ 741.937146][ T9611] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 741.946975][ T9611] F2FS-fs (loop3): invalid crc_offset: 0 [ 741.952858][ T9611] F2FS-fs (loop3): invalid crc_offset: 0 [ 741.959036][ T9611] F2FS-fs (loop3): Failed to get valid F2FS checkpoint 14:15:14 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010360)="1020f5f2", 0x4, 0x1400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f00000107c0)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffff", 0x63, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000010ca0)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000010da0)=ANY=[]) [ 742.042973][ T9613] loop3: detected capacity change from 0 to 65551 [ 742.049832][ T9483] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 742.052066][ T9613] F2FS-fs (loop3): Invalid log_blocksize (0), supports only 12 [ 742.060419][ T9483] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 742.068050][ T9613] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 742.091160][ T9613] F2FS-fs (loop3): invalid crc_offset: 0 [ 742.095511][ T9483] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 742.097342][ T9613] F2FS-fs (loop3): invalid crc_offset: 0 [ 742.106762][ T9483] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.115085][ T9613] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 742.121841][ T9483] usb 3-1: config 0 descriptor?? 14:15:14 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010360)="1020f5f2", 0x4, 0x1400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f00000107c0)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffff", 0x63, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000010ca0)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000010da0)=ANY=[]) [ 742.186459][ T9483] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 742.239141][ T9615] loop3: detected capacity change from 0 to 65551 [ 742.248549][ T9615] F2FS-fs (loop3): Invalid log_blocksize (0), supports only 12 [ 742.256220][ T9615] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 742.266145][ T9615] F2FS-fs (loop3): invalid crc_offset: 0 [ 742.272046][ T9615] F2FS-fs (loop3): invalid crc_offset: 0 [ 742.277791][ T9615] F2FS-fs (loop3): Failed to get valid F2FS checkpoint 14:15:14 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010360)="1020f5f2", 0x4, 0x1400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f00000107c0)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffff", 0x63, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000010ca0)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000010da0)=ANY=[]) [ 742.373294][ T9617] loop3: detected capacity change from 0 to 65551 [ 742.381546][ T9617] F2FS-fs (loop3): Invalid log_blocksize (0), supports only 12 [ 742.390168][ T9617] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 742.397773][ T9601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 742.401088][ T9617] F2FS-fs (loop3): invalid crc_offset: 0 [ 742.411242][ T9601] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 742.414007][ T9617] F2FS-fs (loop3): invalid crc_offset: 0 [ 742.425938][ T9617] F2FS-fs (loop3): Failed to get valid F2FS checkpoint 14:15:14 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010360)="1020f5f2", 0x4, 0x1400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f00000107c0)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff01", 0x95, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000010ca0)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000010da0)=ANY=[]) [ 742.503065][ T9619] loop3: detected capacity change from 0 to 65551 [ 742.503306][ T3742] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 742.519457][ T3742] Buffer I/O error on dev loop3, logical block 0, async page read [ 742.528290][ T3742] loop3: unable to read partition table [ 742.536848][ T9619] F2FS-fs (loop3): Invalid log_blocksize (0), supports only 12 [ 742.546180][ T9619] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 742.557578][ T9619] F2FS-fs (loop3): invalid crc_offset: 0 [ 742.563505][ T9619] F2FS-fs (loop3): invalid crc_offset: 0 [ 742.569364][ T9619] F2FS-fs (loop3): Failed to get valid F2FS checkpoint 14:15:14 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010360)="1020f5f2", 0x4, 0x1400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f00000107c0)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff01", 0x95, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000010ca0)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000010da0)=ANY=[]) [ 742.654901][ T9621] loop3: detected capacity change from 0 to 65551 [ 742.663199][ T9621] F2FS-fs (loop3): Invalid log_blocksize (0), supports only 12 [ 742.671700][ T9621] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 742.681769][ T9621] F2FS-fs (loop3): invalid crc_offset: 0 [ 742.687692][ T9621] F2FS-fs (loop3): invalid crc_offset: 0 [ 742.693362][ T9621] F2FS-fs (loop3): Failed to get valid F2FS checkpoint 14:15:16 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x1c1241) ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0) 14:15:16 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010360)="1020f5f2", 0x4, 0x1400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f00000107c0)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff01", 0x95, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000010ca0)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000010da0)=ANY=[]) 14:15:16 executing program 1: mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x20, &(0x7f0000000280)={[], [{@audit}]}) 14:15:16 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f00000000c0)={0x0, 0x2d, 0x46a2}) 14:15:16 executing program 5: semtimedop(0xffffffffffffffff, &(0x7f0000000000)=[{}], 0x1, 0x0) 14:15:16 executing program 4: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$FIOCLEX(r0, 0x5451) 14:15:16 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TCXONC(r0, 0x540a, 0x3) 14:15:16 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xffffffffffffff16, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc}}}, ["", "", "", "", ""]}, 0x28}}, 0x0) 14:15:16 executing program 4: socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xd0}, 0x1, 0x0, 0x803e0000}, 0x0) [ 744.211369][ T3762] usb 3-1: USB disconnect, device number 70 [ 744.233589][ T9629] binder: Unknown parameter 'audit' [ 744.240309][ T9631] loop3: detected capacity change from 0 to 65551 14:15:16 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[], 0x28}}, 0x0) 14:15:16 executing program 5: r0 = syz_clone(0x6a30c100, 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000180)="8a") r1 = syz_open_procfs$namespace(r0, &(0x7f0000003680)='ns/net\x00') sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000003ec0)={0x0, 0x0, &(0x7f0000003e80)={&(0x7f0000003dc0)={0xb0, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r1}}]}, 0xb0}}, 0x20000000) syz_open_procfs$namespace(r0, 0x0) syz_clone(0x40080000, &(0x7f0000003d40)="52a3f666c13d05611fc6a6aa90ec9f68972cfb4dfa9b393f33aacd3f44278681bced3a99c5cc86291463cfc0b40f19dfd1ed006f8a1d1ccb013a0d4f9791d9dae595c06e1077a8f537fcdd6168b83bc0b164cce4d2e1ee266cefda3f423f16bab217", 0x62, &(0x7f00000036c0), &(0x7f0000003700), &(0x7f0000003740)="e44fc85d187be49de8e9c36df37107bdc12ac0240fbef6bb147a2a3aad8694b5aaa46036aa449736be6942368358b5ae4fd8311eed08263315c3c22e3dc8664c197bec8d18c05a242d6c39df233813f424dabfb7d30a9a15f7d1e236e94a4b9138c55218e5b09912d63076302fcff0e6ca0078104f0b6e70a14ea70d68df0ef8de1fca9668c659c18f87a64d3f760cd08d55eb98bad35d58e114d0214b540f9f7c4f26f8019995d49d97cd3298f1a79e92be1b2fc2af50f32c4a802e8a66bc0c") sched_setscheduler(0x0, 0x0, &(0x7f0000003840)) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs$namespace(r2, 0x0) syz_clone(0x0, 0x0, 0x0, &(0x7f0000001300), 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 14:15:16 executing program 4: sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) syz_clone(0x40080000, 0x0, 0x0, &(0x7f00000036c0), &(0x7f0000003700), &(0x7f0000003740)) [ 744.326848][ T9631] F2FS-fs (loop3): Invalid log_blocksize (0), supports only 12 [ 744.326875][ T9631] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 744.345805][ T9631] F2FS-fs (loop3): invalid crc_offset: 0 [ 744.348059][ T9631] F2FS-fs (loop3): invalid crc_offset: 0 [ 744.348092][ T9631] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 744.644076][ T3762] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 744.884014][ T3762] usb 3-1: Using ep0 maxpacket: 16 [ 745.004165][ T3762] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 745.019477][ T3762] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 745.032474][ T3762] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 745.041753][ T3762] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 745.057345][ T3762] usb 3-1: config 0 descriptor?? [ 745.098989][ T3762] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 745.298987][ T9635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 745.315760][ T9635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 746.476202][ T1233] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.482516][ T1233] ieee802154 phy1 wpan1: encryption failed: -22 14:15:19 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x1c1241) ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0) 14:15:19 executing program 1: socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xd0}, 0x1, 0x0, 0x2}, 0x0) 14:15:19 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010360)="1020f5f2", 0x4, 0x1400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f00000107c0)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff0100000000000000000000000000000085010000060000000100", 0xae, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000010ca0)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000010da0)=ANY=[]) 14:15:19 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$sock(r0, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@proc={0x10, 0x0, 0x25dfdbfb}, 0x80, &(0x7f0000000580)=[{&(0x7f00000000c0)="9e", 0x1}], 0x1}, 0x0) 14:15:19 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="b800000015000103"], 0xb8}}, 0x0) 14:15:19 executing program 5: r0 = syz_clone(0x6a30c100, 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000180)="8a") r1 = syz_open_procfs$namespace(r0, &(0x7f0000003680)='ns/net\x00') sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000003ec0)={0x0, 0x0, &(0x7f0000003e80)={&(0x7f0000003dc0)={0xb0, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r1}}]}, 0xb0}}, 0x20000000) syz_open_procfs$namespace(r0, 0x0) syz_clone(0x40080000, &(0x7f0000003d40)="52a3f666c13d05611fc6a6aa90ec9f68972cfb4dfa9b393f33aacd3f44278681bced3a99c5cc86291463cfc0b40f19dfd1ed006f8a1d1ccb013a0d4f9791d9dae595c06e1077a8f537fcdd6168b83bc0b164cce4d2e1ee266cefda3f423f16bab217", 0x62, &(0x7f00000036c0), &(0x7f0000003700), &(0x7f0000003740)="e44fc85d187be49de8e9c36df37107bdc12ac0240fbef6bb147a2a3aad8694b5aaa46036aa449736be6942368358b5ae4fd8311eed08263315c3c22e3dc8664c197bec8d18c05a242d6c39df233813f424dabfb7d30a9a15f7d1e236e94a4b9138c55218e5b09912d63076302fcff0e6ca0078104f0b6e70a14ea70d68df0ef8de1fca9668c659c18f87a64d3f760cd08d55eb98bad35d58e114d0214b540f9f7c4f26f8019995d49d97cd3298f1a79e92be1b2fc2af50f32c4a802e8a66bc0c") sched_setscheduler(0x0, 0x0, &(0x7f0000003840)) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs$namespace(r2, 0x0) syz_clone(0x0, 0x0, 0x0, &(0x7f0000001300), 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 747.272519][ T6] usb 3-1: USB disconnect, device number 71 14:15:19 executing program 1: syz_clone(0x40080000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x6a30c100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) 14:15:19 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x17}, './file0\x00'}) 14:15:19 executing program 4: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x5207, 0x0) [ 747.314984][ T9667] loop3: detected capacity change from 0 to 65551 [ 747.360433][ T9667] F2FS-fs (loop3): Invalid log_blocksize (0), supports only 12 14:15:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)={0x20, r1, 0x3d18ad72d13fcaeb, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x0) 14:15:19 executing program 0: syz_mount_image$romfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={&(0x7f0000000000)='./file0\x00'}, 0x10) [ 747.406902][ T9667] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 747.442999][ T9667] F2FS-fs (loop3): invalid crc_offset: 0 14:15:19 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000000)={'tunl0\x00', 0x0, 0x0, 0x701, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) [ 747.462619][ T9667] F2FS-fs (loop3): invalid crc_offset: 0 [ 747.477594][ T9667] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 747.724196][ T6] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 747.964156][ T6] usb 3-1: Using ep0 maxpacket: 16 [ 748.084169][ T6] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 748.094636][ T6] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 748.107723][ T6] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 748.117128][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 748.126565][ T6] usb 3-1: config 0 descriptor?? [ 748.166601][ T6] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 748.368463][ T9670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 748.384788][ T9670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 14:15:22 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x1c1241) ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0) 14:15:22 executing program 4: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0x4020940d, &(0x7f00000000c0)={{0x1, 0x1, 0x18}, './file1\x00'}) 14:15:22 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010360)="1020f5f2", 0x4, 0x1400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f00000107c0)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff0100000000000000000000000000000085010000060000000100", 0xae, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000010ca0)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000010da0)=ANY=[]) 14:15:22 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc018937e, 0x0) 14:15:22 executing program 5: r0 = syz_clone(0x6a30c100, 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000180)="8a") r1 = syz_open_procfs$namespace(r0, &(0x7f0000003680)='ns/net\x00') sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000003ec0)={0x0, 0x0, &(0x7f0000003e80)={&(0x7f0000003dc0)={0xb0, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r1}}]}, 0xb0}}, 0x20000000) syz_open_procfs$namespace(r0, 0x0) syz_clone(0x40080000, &(0x7f0000003d40)="52a3f666c13d05611fc6a6aa90ec9f68972cfb4dfa9b393f33aacd3f44278681bced3a99c5cc86291463cfc0b40f19dfd1ed006f8a1d1ccb013a0d4f9791d9dae595c06e1077a8f537fcdd6168b83bc0b164cce4d2e1ee266cefda3f423f16bab217", 0x62, &(0x7f00000036c0), &(0x7f0000003700), &(0x7f0000003740)="e44fc85d187be49de8e9c36df37107bdc12ac0240fbef6bb147a2a3aad8694b5aaa46036aa449736be6942368358b5ae4fd8311eed08263315c3c22e3dc8664c197bec8d18c05a242d6c39df233813f424dabfb7d30a9a15f7d1e236e94a4b9138c55218e5b09912d63076302fcff0e6ca0078104f0b6e70a14ea70d68df0ef8de1fca9668c659c18f87a64d3f760cd08d55eb98bad35d58e114d0214b540f9f7c4f26f8019995d49d97cd3298f1a79e92be1b2fc2af50f32c4a802e8a66bc0c") sched_setscheduler(0x0, 0x0, &(0x7f0000003840)) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs$namespace(r2, 0x0) syz_clone(0x0, 0x0, 0x0, &(0x7f0000001300), 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 14:15:22 executing program 1: syz_emit_ethernet(0x2fbf, &(0x7f0000000680)={@random="4576c538aa93", @random="c5d8ad94bac2", @val, {@ipv6}}, 0x0) 14:15:22 executing program 1: syslog(0x3, &(0x7f0000001040)=""/4078, 0xfee) [ 750.324701][ T9483] usb 3-1: USB disconnect, device number 72 14:15:22 executing program 0: r0 = socket(0x2, 0x1, 0x0) getsockopt$inet_pktinfo(r0, 0x6, 0x21, 0x0, &(0x7f00000000c0)) 14:15:22 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000780)={'syztnl1\x00', &(0x7f0000000700)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev}}) [ 750.383359][ T9705] loop3: detected capacity change from 0 to 65551 [ 750.415642][ T9705] F2FS-fs (loop3): Invalid log_blocksize (0), supports only 12 [ 750.423404][ T9705] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock 14:15:22 executing program 0: waitid(0x1, 0x0, 0x0, 0x4, 0x0) [ 750.467070][ T9705] F2FS-fs (loop3): invalid crc_offset: 0 [ 750.480745][ T9705] F2FS-fs (loop3): invalid crc_offset: 0 [ 750.497374][ T9705] F2FS-fs (loop3): Failed to get valid F2FS checkpoint 14:15:22 executing program 0: syz_mount_image$nfs4(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x2000, &(0x7f0000000400)) 14:15:22 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010360)="1020f5f2", 0x4, 0x1400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f00000107c0)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff0100000000000000000000000000000085010000060000000100", 0xae, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000010ca0)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000010da0)=ANY=[]) [ 750.639611][ T9727] loop3: detected capacity change from 0 to 65551 [ 750.673048][ T9727] F2FS-fs (loop3): Invalid log_blocksize (0), supports only 12 [ 750.685784][ T9727] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 750.718302][ T9727] F2FS-fs (loop3): invalid crc_offset: 0 [ 750.729212][ T9727] F2FS-fs (loop3): invalid crc_offset: 0 [ 750.743241][ T9727] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 750.864064][ T9483] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 751.103971][ T9483] usb 3-1: Using ep0 maxpacket: 16 [ 751.234038][ T9483] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 751.250160][ T9483] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 751.270989][ T9483] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 751.283068][ T9483] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.300495][ T9483] usb 3-1: config 0 descriptor?? [ 751.347250][ T9483] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 751.550148][ T9709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 751.565946][ T9709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 14:15:25 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x1c1241) ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0) 14:15:25 executing program 0: syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, &(0x7f0000000a80), 0x0, 0x0) 14:15:25 executing program 4: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)={0x400}) 14:15:25 executing program 1: syslog(0x3, &(0x7f0000001040)=""/4078, 0xfee) 14:15:25 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010360)="1020f5f2", 0x4, 0x1400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f00000107c0)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff0100000000000000000000000000000085010000060000000100000001000000010000000400", 0xba, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000010ca0)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000010da0)=ANY=[]) 14:15:25 executing program 5: r0 = syz_clone(0x6a30c100, 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000180)="8a") r1 = syz_open_procfs$namespace(r0, &(0x7f0000003680)='ns/net\x00') sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000003ec0)={0x0, 0x0, &(0x7f0000003e80)={&(0x7f0000003dc0)={0xb0, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r1}}]}, 0xb0}}, 0x20000000) syz_open_procfs$namespace(r0, 0x0) syz_clone(0x40080000, &(0x7f0000003d40)="52a3f666c13d05611fc6a6aa90ec9f68972cfb4dfa9b393f33aacd3f44278681bced3a99c5cc86291463cfc0b40f19dfd1ed006f8a1d1ccb013a0d4f9791d9dae595c06e1077a8f537fcdd6168b83bc0b164cce4d2e1ee266cefda3f423f16bab217", 0x62, &(0x7f00000036c0), &(0x7f0000003700), &(0x7f0000003740)="e44fc85d187be49de8e9c36df37107bdc12ac0240fbef6bb147a2a3aad8694b5aaa46036aa449736be6942368358b5ae4fd8311eed08263315c3c22e3dc8664c197bec8d18c05a242d6c39df233813f424dabfb7d30a9a15f7d1e236e94a4b9138c55218e5b09912d63076302fcff0e6ca0078104f0b6e70a14ea70d68df0ef8de1fca9668c659c18f87a64d3f760cd08d55eb98bad35d58e114d0214b540f9f7c4f26f8019995d49d97cd3298f1a79e92be1b2fc2af50f32c4a802e8a66bc0c") sched_setscheduler(0x0, 0x0, &(0x7f0000003840)) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs$namespace(r2, 0x0) syz_clone(0x0, 0x0, 0x0, &(0x7f0000001300), 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 753.420739][ T3762] usb 3-1: USB disconnect, device number 73 [ 753.456533][ T9738] capability: warning: `syz-executor.4' uses 32-bit capabilities (legacy support in use) 14:15:25 executing program 0: syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, &(0x7f0000000a80), 0x0, 0x0) [ 753.467757][ T9739] loop3: detected capacity change from 0 to 65551 14:15:25 executing program 4: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x2, &(0x7f0000001540)=[{&(0x7f0000000240)='r', 0x1, 0xc0d8}, {&(0x7f0000001340)="a9", 0x1}], 0x0, 0x0) 14:15:25 executing program 0: syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, &(0x7f0000000a80), 0x0, 0x0) [ 753.535668][ T9739] F2FS-fs (loop3): Invalid log_blocksize (0), supports only 12 [ 753.573045][ T9739] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock 14:15:25 executing program 0: syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, &(0x7f0000000a80), 0x0, 0x0) [ 753.601534][ T9751] loop4: detected capacity change from 0 to 192 [ 753.612623][ T9739] F2FS-fs (loop3): invalid crc_offset: 0 [ 753.637795][ T9739] F2FS-fs (loop3): invalid crc_offset: 0 14:15:26 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x4020940d, &(0x7f0000000280)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0}) 14:15:26 executing program 0: openat$vsock(0xffffffffffffff9c, 0x0, 0x440000, 0x0) [ 753.650811][ T9739] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 753.894244][ T3762] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 754.133964][ T3762] usb 3-1: Using ep0 maxpacket: 16 [ 754.254344][ T3762] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 754.267467][ T3762] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 754.277027][ T3762] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.288640][ T3762] usb 3-1: config 0 descriptor?? [ 754.326296][ T3762] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 754.528879][ T9744] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 754.545615][ T9744] misc raw-gadget: fail, usb_gadget_register_driver returned -16 14:15:28 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x1c1241) ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0) 14:15:28 executing program 1: syslog(0x3, &(0x7f0000001040)=""/4078, 0xfee) 14:15:28 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010360)="1020f5f2", 0x4, 0x1400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f00000107c0)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff0100000000000000000000000000000085010000060000000100000001000000010000000400", 0xba, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000010ca0)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000010da0)=ANY=[]) 14:15:28 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller1\x00', 0x8812}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000100)=[{0x8}]}) 14:15:28 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000010c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001100)={'\x00', 0x1}) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) 14:15:28 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000002b00)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) [ 756.513304][ T3695] usb 3-1: USB disconnect, device number 74 14:15:28 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000002b00)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x14, &(0x7f0000000080), 0xfddc) [ 756.564151][ T9774] loop3: detected capacity change from 0 to 65551 14:15:28 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller1\x00', 0x8812}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x3, 0x0, 0x0, 0x7fff}]}) [ 756.606338][ T9774] F2FS-fs (loop3): Invalid log_blocksize (0), supports only 12 14:15:29 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller1\x00', 0x8812}) ioctl$SIOCSIFHWADDR(r0, 0x8927, &(0x7f0000000080)={'veth1_to_batadv\x00', @random="48fff522fd3c"}) [ 756.647720][ T9774] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 756.670766][ T9774] F2FS-fs (loop3): invalid crc_offset: 0 14:15:29 executing program 5: syz_open_dev$evdev(&(0x7f0000002540), 0x0, 0x0) 14:15:29 executing program 0: syz_open_dev$hidraw(&(0x7f00000020c0), 0x0, 0x280) [ 756.700064][ T9774] F2FS-fs (loop3): invalid crc_offset: 0 [ 756.738727][ T9774] F2FS-fs (loop3): Failed to get valid F2FS checkpoint 14:15:29 executing program 4: syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x842c0) [ 756.963991][ T3695] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 757.203969][ T3695] usb 3-1: Using ep0 maxpacket: 16 [ 757.324062][ T3695] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 757.344209][ T3695] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 757.353357][ T3695] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 757.371791][ T3695] usb 3-1: config 0 descriptor?? [ 757.415532][ T3695] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 757.617611][ T9776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 757.627145][ T9776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 14:15:31 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x1c1241) ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0) 14:15:31 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010360)="1020f5f2", 0x4, 0x1400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f00000107c0)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff0100000000000000000000000000000085010000060000000100000001000000010000000400", 0xba, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000010ca0)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000010da0)=ANY=[]) 14:15:31 executing program 5: syz_open_dev$evdev(&(0x7f0000002540), 0xffffffff7fffffff, 0x555701) 14:15:31 executing program 0: syz_open_dev$hiddev(&(0x7f0000001980), 0x0, 0x80000) 14:15:31 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x4, 0xa1, 0xf1, 0x8, 0x5c6, 0x9214, 0x32a1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xff, 0x1, 0x1, 0x0, [], [{}]}}]}}]}}, 0x0) 14:15:31 executing program 1: syslog(0x3, &(0x7f0000001040)=""/4078, 0xfee) [ 759.577233][ T3694] usb 3-1: USB disconnect, device number 75 14:15:32 executing program 0: syz_open_dev$hiddev(&(0x7f0000001980), 0x0, 0x0) 14:15:32 executing program 5: syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$hidraw(&(0x7f00000000c0), 0xfffffffffffffffd, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000180), 0x0, 0x88280) [ 759.633025][ T9798] loop3: detected capacity change from 0 to 65551 [ 759.661619][ T9798] F2FS-fs (loop3): Invalid log_blocksize (0), supports only 12 [ 759.704062][ T9798] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock 14:15:32 executing program 0: syz_open_dev$hidraw(&(0x7f00000000c0), 0x0, 0x0) 14:15:32 executing program 5: r0 = syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) [ 759.744595][ T9798] F2FS-fs (loop3): invalid crc_offset: 0 [ 759.763615][ T9798] F2FS-fs (loop3): invalid crc_offset: 0 14:15:32 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000002780), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f00000027c0)={0x0, 0x0, 0x0, 0x0, "9a6c12dacae96e4280e97a3b13404f217adb302a22d3e75039e3a514895aebab"}) [ 759.798126][ T9798] F2FS-fs (loop3): Failed to get valid F2FS checkpoint 14:15:32 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010360)="1020f5f2", 0x4, 0x1400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f00000107c0)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff0100000000000000000000000000000085010000060000000100000001000000010000000400000040000000", 0xc0, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000010ca0)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000010da0)=ANY=[]) [ 759.904090][ T3762] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 759.945339][ T9814] loop3: detected capacity change from 0 to 65551 [ 759.959450][ T9814] F2FS-fs (loop3): Invalid log_blocksize (0), supports only 12 [ 759.980090][ T9814] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 759.990367][ T9814] F2FS-fs (loop3): invalid crc_offset: 0 [ 760.028623][ T9814] F2FS-fs (loop3): invalid crc_offset: 0 [ 760.043993][ T3694] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 760.074351][ T9814] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 760.123983][ T3695] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 760.154097][ T3762] usb 5-1: Using ep0 maxpacket: 8 [ 760.274206][ T3762] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 760.307801][ T3694] usb 3-1: Using ep0 maxpacket: 16 [ 760.404237][ T3695] usb 6-1: Using ep0 maxpacket: 32 [ 760.434115][ T3694] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 760.447526][ T3694] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 760.457047][ T3762] usb 5-1: New USB device found, idVendor=05c6, idProduct=9214, bcdDevice=32.a1 [ 760.466306][ T3694] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 760.474631][ T3762] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 760.482687][ T3762] usb 5-1: Product: syz [ 760.487567][ T3762] usb 5-1: Manufacturer: syz [ 760.492860][ T3694] usb 3-1: config 0 descriptor?? [ 760.498046][ T3762] usb 5-1: SerialNumber: syz [ 760.506095][ T3762] usb 5-1: config 0 descriptor?? [ 760.535767][ T3694] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 760.554354][ T3695] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 760.574893][ T3695] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 760.585629][ T3695] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 760.738135][ T9802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 760.747087][ T9802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 760.752540][ T3694] usb 5-1: USB disconnect, device number 17 [ 760.764791][ T3695] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 760.774115][ T3695] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 760.782140][ T3695] usb 6-1: Product: syz [ 760.786397][ T3695] usb 6-1: Manufacturer: syz [ 760.791309][ T3695] usb 6-1: SerialNumber: syz [ 761.304404][ T3695] usb 6-1: 0:2 : does not exist [ 761.319919][ T3695] usb 6-1: USB disconnect, device number 39 [ 761.339651][ T3742] udevd[3742]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 14:15:35 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(r0, 0x1, 0x28, &(0x7f0000000240), 0x4) 14:15:35 executing program 0: syz_open_dev$hiddev(&(0x7f0000001040), 0x0, 0x218000) 14:15:35 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010360)="1020f5f2", 0x4, 0x1400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f00000107c0)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff0100000000000000000000000000000085010000060000000100000001000000010000000400000040000000", 0xc0, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000010ca0)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000010da0)=ANY=[]) 14:15:35 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) read$FUSE(r0, &(0x7f0000000000)={0x2020}, 0x2020) 14:15:35 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc01090581"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x1c1241) ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0) 14:15:35 executing program 5: add_key(0x0, 0x0, &(0x7f0000000300)="81fdfd33efb3710e9839be45a8e569426d", 0x11, 0xfffffffffffffffa) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0xa0) 14:15:35 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(r0, 0x10e, 0x32, 0x0, 0x0) [ 762.668418][ T3762] usb 3-1: USB disconnect, device number 76 14:15:35 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KDMKTONE(r0, 0x80046d03, 0x0) 14:15:35 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(r0, 0x1, 0x46, &(0x7f0000000240), 0x4) 14:15:35 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(r0, 0x1, 0x24, &(0x7f0000000240), 0x4) [ 762.718037][ T9824] loop3: detected capacity change from 0 to 65551 14:15:35 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(r0, 0x1, 0xa, &(0x7f0000000240), 0x4) 14:15:35 executing program 1: r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) [ 762.758467][ T9824] F2FS-fs (loop3): Invalid log_blocksize (0), supports only 12 [ 762.792408][ T9824] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 762.805320][ T9824] F2FS-fs (loop3): invalid crc_offset: 0 14:15:35 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KDMKTONE(r0, 0x8906, 0x0) 14:15:35 executing program 1: syz_mount_image$vfat(&(0x7f0000000040), 0x0, 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000440)="eb3c8f00000073", 0x7}, {0x0}], 0x0, &(0x7f0000000180)=ANY=[]) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000480)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) fstatfs(r0, &(0x7f0000000300)=""/160) [ 762.830567][ T9824] F2FS-fs (loop3): invalid crc_offset: 0 [ 762.864918][ T9824] F2FS-fs (loop3): Failed to get valid F2FS checkpoint 14:15:35 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010360)="1020f5f2", 0x4, 0x1400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f00000107c0)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff0100000000000000000000000000000085010000060000000100000001000000010000000400000040000000", 0xc0, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000010ca0)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000010da0)=ANY=[]) [ 763.020137][ T9847] loop3: detected capacity change from 0 to 65551 [ 763.029919][ T9847] F2FS-fs (loop3): Invalid log_blocksize (0), supports only 12 [ 763.039376][ T9847] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 763.051053][ T9847] F2FS-fs (loop3): invalid crc_offset: 0 [ 763.061183][ T9847] F2FS-fs (loop3): invalid crc_offset: 0 [ 763.067451][ T9847] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 763.104039][ T3762] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 763.344200][ T3762] usb 3-1: Using ep0 maxpacket: 16 14:15:35 executing program 5: r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0xd, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0x0, 0x0}, 0x10) [ 763.464416][ T3762] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 763.474514][ T3762] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 763.483662][ T3762] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 763.493109][ T3762] usb 3-1: config 0 descriptor?? [ 763.543502][ T3762] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 763.740784][ T9830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 763.749712][ T9830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 14:15:38 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010360)="1020f5f2", 0x4, 0x1400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f00000107c0)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff0100000000000000000000000000000085010000060000000100000001000000010000000400000040000000400000", 0xc3, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000010ca0)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000010da0)=ANY=[]) 14:15:38 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0xfc}}, &(0x7f0000000140)='syzkaller\x00', 0x5, 0xfd, &(0x7f0000000180)=""/253, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 14:15:38 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=@getqdisc={0x28, 0x26, 0x1, 0x0, 0x0, {}, [{0x4}]}, 0x28}}, 0x0) 14:15:38 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(r0, 0x1, 0x41, &(0x7f0000000240), 0x4) 14:15:38 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc01090581"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x1c1241) ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0) 14:15:38 executing program 5: r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)={0x0, r0}, 0x10) 14:15:38 executing program 4: r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(r1, 0x1, 0x46, &(0x7f0000000240)=r0, 0x4) 14:15:38 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=@framed={{}, [@alu]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 765.726713][ T9483] usb 3-1: USB disconnect, device number 77 [ 765.751047][ T9858] loop3: detected capacity change from 0 to 65551 14:15:38 executing program 1: syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f00000009c0)=[{&(0x7f0000010000)="90e42e85000000000500010000ffffffffffffffff00000b0800000000000002f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d07000000000000000000500000000000001010000000000000000000000000000000000000000000000000010000000000d0000000000000", 0x80, 0x10000}, {&(0x7f0000010200)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00\a', 0x14, 0x10220}, {&(0x7f0000010300)="00000000000000000000000001000000000000e40000100000000000000040000000000002000000000000000000010000000000020000000000000000100000001000000010000001000000010000000000000000001000000000001a8885d61aee4febb69bd33546bd0e04", 0x6c, 0x10320}, {&(0x7f0000010400)="000000000000000000000000105000000000000500000000000000001010000000000004000000000000000020500000000000050000000000000000005000000000000400000000000000007050000000000004000000000000000080500000000000040000000000000000000001000000000080000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f050000000000006000000000000000010100000000000040000000000000000b0500000000000060000000000000000d050000000000006000000000000000000510000000000060000000000000000605000000000000600000000000000000000010000000000d0000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000005000000000000700000000000000001010000000000004000000000000000010500000000000070000000000000000d050000000000006000000000000000000510000000000060000000000000000605000000000000600000000000000000000010000000000d000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000050500000000000040000000000000000101000000000000400000000000000006050000000000004000000000000000000500000000000040000000000000000705000000000000400000000000000008050000000000004000000000000000000000100000000008000000000000001", 0x274, 0x10b20}], 0x0, &(0x7f00000003c0)={[{@commit={'commit', 0x3d, 0xd9}}, {@nodatasum}, {@autodefrag}]}) 14:15:38 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000000)) [ 765.832855][ T9858] F2FS-fs (loop3): Invalid log_blocksize (0), supports only 12 [ 765.860681][ T9870] loop1: detected capacity change from 0 to 267 [ 765.872544][ T9858] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock 14:15:38 executing program 4: syz_mount_image$squashfs(0x0, 0x0, 0x0, 0x2, &(0x7f0000002340)=[{&(0x7f0000001ec0)='P', 0x1}, {&(0x7f0000001f00)="cc", 0x1, 0x80000001}], 0x0, 0x0) 14:15:38 executing program 5: r0 = socket$inet_dccp(0x2, 0x6, 0x0) sendmmsg$inet(r0, &(0x7f0000004dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=[@ip_tos_u8={{0x11}}, @ip_ttl={{0x14}}], 0x30}}], 0x1, 0x0) [ 765.878787][ T2971] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 765.896203][ T2971] Buffer I/O error on dev loop1, logical block 0, async page read [ 765.916988][ T9873] loop4: detected capacity change from 0 to 264192 [ 765.924994][ T2971] loop1: unable to read partition table [ 765.927775][ T9858] F2FS-fs (loop3): invalid crc_offset: 0 [ 765.952422][ T9870] BTRFS: device fsid f90cac8b-044b-4fa8-8bee-4b8d3da88dc2 devid 0 transid 7 /dev/loop1 scanned by syz-executor.1 (9870) [ 765.966202][ T9858] F2FS-fs (loop3): invalid crc_offset: 0 [ 765.981316][ T9858] F2FS-fs (loop3): Failed to get valid F2FS checkpoint 14:15:38 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010360)="1020f5f2", 0x4, 0x1400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f00000107c0)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff0100000000000000000000000000000085010000060000000100000001000000010000000400000040000000400000", 0xc3, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000010ca0)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000010da0)=ANY=[]) 14:15:38 executing program 0: syz_clone(0x40080100, 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000300)) syz_clone(0x40080000, &(0x7f0000000040)="458945e946452a59b8d32d2e486feb709692db24591271f1d0c952e20930915b4fa5629f8e3d122bd47d6316d438ad1af48625a0ca7ce894e9a958d66f9b5e68", 0x40, &(0x7f0000000100), 0x0, &(0x7f0000000180)) sched_rr_get_interval(0x0, &(0x7f0000000080)) syz_clone(0xc000200, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000340), &(0x7f0000000380)="a71fc9440069a84199cf21b4f88e95dda2d65116fa2ab62ab2217b079cea471b8f") 14:15:38 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'netpci0\x00'}) 14:15:38 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0) ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, 0x0) [ 766.161374][ T9884] loop3: detected capacity change from 0 to 65551 [ 766.193989][ T9483] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 766.204399][ T9884] F2FS-fs (loop3): Invalid log_blocksize (0), supports only 12 [ 766.212845][ T9884] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 766.229141][ T9884] F2FS-fs (loop3): invalid crc_offset: 0 [ 766.242436][ T9884] F2FS-fs (loop3): invalid crc_offset: 0 [ 766.248568][ T9884] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 766.433988][ T9483] usb 3-1: Using ep0 maxpacket: 16 [ 766.554080][ T9483] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 766.564108][ T9483] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 766.573274][ T9483] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 766.585782][ T9483] usb 3-1: config 0 descriptor?? [ 766.626608][ T9483] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 766.828020][ T9863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 766.844286][ T9863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 14:15:41 executing program 4: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000300)='dctcp\x00', 0x6) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='reno\x00', 0x5) splice(r1, 0x0, r0, 0x0, 0x406f408, 0x0) 14:15:41 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010360)="1020f5f2", 0x4, 0x1400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f00000107c0)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff0100000000000000000000000000000085010000060000000100000001000000010000000400000040000000400000", 0xc3, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000010ca0)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000010da0)=ANY=[]) 14:15:41 executing program 1: syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f00000009c0)=[{&(0x7f0000010000)="90e42e85000000000500010000ffffffffffffffff00000b0800000000000002f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d07000000000000000000500000000000001010000000000000000000000000000000000000000000000000010000000000d0000000000000", 0x80, 0x10000}, {&(0x7f0000010200)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00\a', 0x14, 0x10220}, {&(0x7f0000010300)="00000000000000000000000001000000000000e40000100000000000000040000000000002000000000000000000010000000000020000000000000000100000001000000010000001000000010000000000000000001000000000001a8885d61aee4febb69bd33546bd0e04", 0x6c, 0x10320}, {&(0x7f0000010400)="000000000000000000000000105000000000000500000000000000001010000000000004000000000000000020500000000000050000000000000000005000000000000400000000000000007050000000000004000000000000000080500000000000040000000000000000000001000000000080000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f050000000000006000000000000000010100000000000040000000000000000b0500000000000060000000000000000d050000000000006000000000000000000510000000000060000000000000000605000000000000600000000000000000000010000000000d0000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000005000000000000700000000000000001010000000000004000000000000000010500000000000070000000000000000d050000000000006000000000000000000510000000000060000000000000000605000000000000600000000000000000000010000000000d000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000050500000000000040000000000000000101000000000000400000000000000006050000000000004000000000000000000500000000000040000000000000000705000000000000400000000000000008050000000000004000000000000000000000100000000008000000000000001", 0x274, 0x10b20}], 0x0, &(0x7f00000003c0)={[{@commit={'commit', 0x3d, 0xd9}}, {@nodatasum}, {@autodefrag}]}) 14:15:41 executing program 5: openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BLKRAGET(0xffffffffffffffff, 0x1263, 0x0) syz_usb_connect$cdc_ncm(0x2, 0x6f, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, "e0"}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x20}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x0, 0x0, 0x40}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x0, 0x0, 0x20}}}}}}}]}}, 0x0) 14:15:41 executing program 0: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x124582) 14:15:41 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc01090581"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x1c1241) ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0) [ 768.787606][ T2933] usb 3-1: USB disconnect, device number 78 [ 768.805232][ T9895] loop1: detected capacity change from 0 to 267 [ 768.830260][ T9897] loop3: detected capacity change from 0 to 65551 [ 768.865849][ T9897] F2FS-fs (loop3): Invalid log_blocksize (0), supports only 12 14:15:41 executing program 0: r0 = socket$inet_dccp(0x2, 0x6, 0x0) sendmmsg$inet(r0, &(0x7f0000004dc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 14:15:41 executing program 0: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000300)='dctcp\x00', 0x6) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x406f408, 0x0) 14:15:41 executing program 1: socketpair(0x15, 0x5, 0x8, &(0x7f0000000000)) [ 768.891143][ T9897] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 768.918804][ T9897] F2FS-fs (loop3): invalid crc_offset: 0 [ 768.927284][ T9897] F2FS-fs (loop3): invalid crc_offset: 0 14:15:41 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$SNDCTL_SYNTH_MEMAVL(r0, 0xc004510e, &(0x7f0000000440)) [ 768.964523][ T9897] F2FS-fs (loop3): Failed to get valid F2FS checkpoint 14:15:41 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010360)="1020f5f2", 0x4, 0x1400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f00000107c0)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc", 0xc5, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000010ca0)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000010da0)=ANY=[]) 14:15:41 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_buf(r0, 0x0, 0x2, &(0x7f00000001c0)='W', 0x300) [ 769.063208][ T9914] loop3: detected capacity change from 0 to 65551 [ 769.067714][ T3742] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 769.091275][ T3742] Buffer I/O error on dev loop3, logical block 0, async page read [ 769.103905][ T917] usb 6-1: new full-speed USB device number 40 using dummy_hcd [ 769.118716][ T3742] loop3: unable to read partition table [ 769.125201][ T9914] F2FS-fs (loop3): Invalid log_blocksize (0), supports only 12 [ 769.132907][ T9914] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 769.142930][ T9914] F2FS-fs (loop3): invalid crc value [ 769.149597][ T9914] F2FS-fs (loop3): invalid crc_offset: 0 [ 769.158252][ T9914] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 769.284413][ T2933] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 769.464064][ T917] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 769.475247][ T917] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 769.485041][ T917] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 769.544005][ T2933] usb 3-1: Using ep0 maxpacket: 16 14:15:42 executing program 4: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000300)='dctcp\x00', 0x6) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='reno\x00', 0x5) splice(r1, 0x0, r0, 0x0, 0x406f408, 0x0) [ 769.654079][ T917] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 769.663456][ T917] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 769.671713][ T917] usb 6-1: Product: syz [ 769.683932][ T917] usb 6-1: Manufacturer: syz [ 769.684112][ T2933] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 769.688675][ T917] usb 6-1: SerialNumber: syz [ 769.709148][ T2933] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 769.719594][ T2933] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 769.733369][ T2933] usb 3-1: config 0 descriptor?? [ 769.779135][ T2933] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 769.979827][ T9902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 769.988609][ T9902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 770.004057][ T917] cdc_ncm 6-1:1.0: bind() failure [ 770.011204][ T917] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 770.021910][ T917] cdc_ncm 6-1:1.1: bind() failure [ 770.040295][ T917] usb 6-1: USB disconnect, device number 40 14:15:44 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x1c1241) ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0) 14:15:44 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x2b0, 0xffffffff, 0x2b8, 0x2b8, 0x2b8, 0xffffffff, 0xffffffff, 0x3d0, 0x3d0, 0x3d0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, 'pimreg0\x00', 'vcan0\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d9378b436c8d5af9006a1b8f213e5f5a06ab182070787122c72868524ca7"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000300)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x28, r4, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x28}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_PAN_ID(r6, &(0x7f0000000400)={0x0, 0xffffffffffffff04, &(0x7f0000000480)={&(0x7f0000000340)={0x24, r7, 0x1}, 0x24}}, 0x0) 14:15:44 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010360)="1020f5f2", 0x4, 0x1400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f00000107c0)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc", 0xc5, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000010ca0)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000010da0)=ANY=[]) 14:15:44 executing program 0: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000300)='dctcp\x00', 0x6) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x406f408, 0x0) 14:15:44 executing program 5: mmap$fb(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x30, 0xffffffffffffffff, 0x0) 14:15:44 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_buf(r0, 0x84, 0x65, 0x0, 0x0) 14:15:44 executing program 5: r0 = socket$phonet(0x23, 0x2, 0x1) recvfrom(r0, 0x0, 0x0, 0x2, 0x0, 0x0) 14:15:44 executing program 4: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, 0x0, 0x0) [ 771.863432][ T917] usb 3-1: USB disconnect, device number 79 14:15:44 executing program 4: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000280), &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000004440)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)={0x2a, 0x4, 0x0, {0x1, 0x1fffffffc0000000, 0x2, 0x0, [0x0, 0x0]}}, 0x2a) [ 771.925760][ T9931] loop3: detected capacity change from 0 to 65551 [ 771.963452][ T9931] F2FS-fs (loop3): Invalid log_blocksize (0), supports only 12 [ 772.003251][ T9940] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 772.026103][ T9931] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock 14:15:44 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000800), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000f80)=[{}], 0x0, 0x0, 0x0}) [ 772.054141][ T9931] F2FS-fs (loop3): invalid crc value [ 772.069334][ T9931] F2FS-fs (loop3): invalid crc_offset: 0 [ 772.088768][ T9931] F2FS-fs (loop3): Failed to get valid F2FS checkpoint 14:15:44 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$fb(r0, &(0x7f0000000040)=""/246, 0xf6) 14:15:44 executing program 1: r0 = inotify_init1(0x0) inotify_add_watch(r0, 0x0, 0x200008c) [ 772.323931][ T917] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 772.584075][ T917] usb 3-1: Using ep0 maxpacket: 16 [ 772.705493][ T917] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 772.717076][ T917] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 772.727031][ T917] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 772.736189][ T917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 772.746191][ T917] usb 3-1: config 0 descriptor?? [ 773.484052][ T917] usbhid 3-1:0.0: can't add hid device: -71 [ 773.490119][ T917] usbhid: probe of 3-1:0.0 failed with error -71 [ 773.498338][ T917] usb 3-1: USB disconnect, device number 80 14:15:46 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x1c1241) ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0) 14:15:46 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010360)="1020f5f2", 0x4, 0x1400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f00000107c0)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc", 0xc5, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000010ca0)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000010da0)=ANY=[]) 14:15:46 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x9529, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) 14:15:46 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) getsockname$l2tp(r0, 0x0, &(0x7f00000001c0)) 14:15:46 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x1}, 0x14}}, 0x0) 14:15:46 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_buf(r0, 0x84, 0x19, 0x0, 0x0) 14:15:46 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_buf(r0, 0x0, 0x3, &(0x7f00000001c0)='W', 0x1) 14:15:46 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_buf(r0, 0x0, 0x20, &(0x7f0000000000)="02ae1b0011eaee48335974ec", 0xc) 14:15:46 executing program 1: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="2800000010000108091000000196fe00000095b1", @ANYRES32=0x0, @ANYBLOB="050200fcff00000008001b0000"], 0x28}}, 0x0) 14:15:46 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f0000000140)={0x0, 0x0}) [ 773.952118][ T9956] loop3: detected capacity change from 0 to 65551 [ 773.990641][ T9956] F2FS-fs (loop3): Invalid log_blocksize (0), supports only 12 [ 774.024535][ T9956] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 774.047868][ T9956] F2FS-fs (loop3): invalid crc value [ 774.065800][ T9956] F2FS-fs (loop3): invalid crc_offset: 0 14:15:46 executing program 0: r0 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$MRT6(r0, 0x29, 0x1d, 0x0, &(0x7f0000000040)) 14:15:46 executing program 4: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe000000905820264"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_clone(0x40224400, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 774.088001][ T9956] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 774.088056][ T9968] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 774.120804][ T9968] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 774.184910][ T9968] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 774.294150][ T917] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 774.404177][ T2933] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 774.534045][ T917] usb 3-1: Using ep0 maxpacket: 16 [ 774.654056][ T917] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 774.665268][ T917] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 774.673919][ T2933] usb 5-1: Using ep0 maxpacket: 8 [ 774.675771][ T917] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 774.689443][ T917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 774.701077][ T917] usb 3-1: config 0 descriptor?? [ 774.804174][ T2933] usb 5-1: config index 0 descriptor too short (expected 5924, got 36) [ 774.812538][ T2933] usb 5-1: config 250 has an invalid interface number: 228 but max is -1 [ 774.821379][ T2933] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 774.830516][ T2933] usb 5-1: config 250 has no interface number 0 [ 774.837151][ T2933] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 774.852457][ T2933] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 774.863186][ T2933] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 100 [ 774.874028][ T2933] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 774.887696][ T2933] usb 5-1: config 250 interface 228 has no altsetting 0 [ 775.034173][ T2933] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 775.043330][ T2933] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 775.051756][ T2933] usb 5-1: Product: syz [ 775.056003][ T2933] usb 5-1: SerialNumber: syz [ 775.106643][ T2933] hub 5-1:250.228: bad descriptor, ignoring hub [ 775.112989][ T2933] hub: probe of 5-1:250.228 failed with error -5 [ 775.339869][ T2933] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 18 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 775.384902][ T2933] usb 5-1: USB disconnect, device number 18 [ 775.395699][ T2933] usblp0: removed [ 775.444098][ T917] usbhid 3-1:0.0: can't add hid device: -71 [ 775.450380][ T917] usbhid: probe of 3-1:0.0 failed with error -71 [ 775.467634][ T917] usb 3-1: USB disconnect, device number 81 14:15:48 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000003000)=[{{&(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10, 0x0}}, {{&(0x7f0000000040)={0x2, 0xff, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x2, 0x0) 14:15:48 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010360)="1020f5f2", 0x4, 0x1400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f00000107c0)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000010ca0)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000010da0)=ANY=[]) 14:15:48 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='dctcp\x00', 0x6) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) 14:15:48 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x1c1241) ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0) 14:15:48 executing program 1: write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000001040)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}}, 0xa0) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x6000) 14:15:48 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.net/syz1\x00', 0x200002, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='limits\x00') openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x57bb, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2e0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = syz_mount_image$xfs(&(0x7f00000002c0), 0x0, 0x0, 0x2, &(0x7f0000001580)=[{0x0, 0x0, 0x7fffffff}, {0x0}], 0x1081006, 0x0) fallocate(r4, 0x0, 0x0, 0x0) r5 = dup(r3) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x400000) 14:15:48 executing program 0: sigaltstack(&(0x7f0000006000), 0x0) bind(0xffffffffffffffff, &(0x7f0000001900)=@in={0x10, 0x2}, 0x10) madvise(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x3) 14:15:48 executing program 1: r0 = openat$damon_target_ids(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) getpgid(0x0) write$damon_target_ids(r0, 0x0, 0x0) [ 775.957624][ T9984] loop3: detected capacity change from 0 to 65551 [ 775.984004][ T2933] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 775.999414][ T9984] F2FS-fs (loop3): Invalid log_blocksize (0), supports only 12 [ 776.041898][ T9984] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock 14:15:48 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, 0x0) 14:15:48 executing program 1: r0 = openat$damon_target_ids(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) getpgid(0x0) write$damon_target_ids(r0, 0x0, 0x0) [ 776.083041][ T9989] loop5: detected capacity change from 0 to 264192 [ 776.120069][ T9984] F2FS-fs (loop3): invalid crc_offset: 0 14:15:48 executing program 0: syz_read_part_table(0x401, 0x0, 0x0) [ 776.201285][ T9984] F2FS-fs (loop3): invalid crc_offset: 0 [ 776.214170][ T9984] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 776.233979][ T917] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 776.254074][ T2933] usb 5-1: Using ep0 maxpacket: 8 [ 776.414013][ T2933] usb 5-1: config index 0 descriptor too short (expected 5924, got 36) [ 776.425915][ T2933] usb 5-1: config 250 has an invalid interface number: 228 but max is -1 [ 776.442740][ T2933] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 776.461145][ T2933] usb 5-1: config 250 has no interface number 0 [ 776.484671][ T917] usb 3-1: Using ep0 maxpacket: 16 [ 776.498789][ T2933] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 776.536686][ T2933] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 776.572968][ T2933] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 100 [ 776.604044][ T2933] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 776.604144][ T917] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 776.628932][ T2933] usb 5-1: config 250 interface 228 has no altsetting 0 [ 776.693509][ T917] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 776.723284][ T917] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 776.745385][ T917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 776.756691][ T917] usb 3-1: config 0 descriptor?? [ 776.784216][ T2933] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 776.806301][ T2933] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 776.838584][ T2933] usb 5-1: Product: syz [ 776.853013][ T2933] usb 5-1: SerialNumber: syz [ 776.930935][ T2933] hub 5-1:250.228: bad descriptor, ignoring hub [ 776.940030][ T2933] hub: probe of 5-1:250.228 failed with error -5 14:15:49 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet(r0, &(0x7f0000000000), 0x1, 0x48d8) 14:15:49 executing program 1: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c832, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, 0x0) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = dup(0xffffffffffffffff) setsockopt$inet6_tcp_int(r4, 0x6, 0x0, &(0x7f0000000380), 0x4) syz_open_dev$evdev(0x0, 0x0, 0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}]) 14:15:49 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010360)="1020f5f2", 0x4, 0x1400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f00000107c0)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000010ca0)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000010da0)=ANY=[]) 14:15:49 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x5}}]}}, &(0x7f0000000400)=""/215, 0x42, 0xd7, 0x1}, 0x20) [ 777.137600][ T2933] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 19 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 777.146924][T10005] loop3: detected capacity change from 0 to 65551 [ 777.201175][T10005] F2FS-fs (loop3): Invalid log_blocksize (0), supports only 12 [ 777.235464][ T2933] usb 5-1: USB disconnect, device number 19 [ 777.254849][T10005] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 777.255896][ T2933] usblp0: removed [ 777.270112][T10005] F2FS-fs (loop3): invalid crc_offset: 0 [ 777.277535][T10005] F2FS-fs (loop3): invalid crc_offset: 0 [ 777.283268][T10005] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 777.494007][ T917] usbhid 3-1:0.0: can't add hid device: -71 [ 777.500523][ T917] usbhid: probe of 3-1:0.0 failed with error -71 [ 777.520967][ T917] usb 3-1: USB disconnect, device number 82 14:15:50 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x1c1241) ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0) 14:15:50 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.net/syz1\x00', 0x200002, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='limits\x00') openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x57bb, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2e0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = syz_mount_image$xfs(&(0x7f00000002c0), 0x0, 0x0, 0x2, &(0x7f0000001580)=[{0x0, 0x0, 0x7fffffff}, {0x0}], 0x1081006, 0x0) fallocate(r4, 0x0, 0x0, 0x0) r5 = dup(r3) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x400000) 14:15:50 executing program 0: mkdir(&(0x7f0000002100)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002000), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000004340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000000000)="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", 0x2000, &(0x7f00000069c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000066c0)={0x90, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x801}}}, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, 0x0) 14:15:50 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 14:15:50 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010360)="1020f5f2", 0x4, 0x1400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f00000107c0)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000010ca0)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000010da0)=ANY=[]) 14:15:50 executing program 1: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c832, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, 0x0) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = dup(0xffffffffffffffff) setsockopt$inet6_tcp_int(r4, 0x6, 0x0, &(0x7f0000000380), 0x4) syz_open_dev$evdev(0x0, 0x0, 0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}]) 14:15:50 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x401, 0x0, &(0x7f0000000000)) [ 777.988537][T10020] loop3: detected capacity change from 0 to 65551 [ 778.027150][T10017] loop5: detected capacity change from 0 to 264192 14:15:50 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x1a, &(0x7f0000000040), 0x4) [ 778.062758][T10020] F2FS-fs (loop3): Invalid log_blocksize (0), supports only 12 [ 778.074781][T10020] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock 14:15:50 executing program 4: syz_clone3(&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, {0x408}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 778.108326][T10020] F2FS-fs (loop3): invalid crc_offset: 0 [ 778.121209][T10020] F2FS-fs (loop3): invalid crc_offset: 0 [ 778.128811][T10020] F2FS-fs (loop3): Failed to get valid F2FS checkpoint 14:15:50 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_int(r0, 0x11e, 0x0, 0x0, 0x0) 14:15:50 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x8, &(0x7f0000000000)=0x8000, 0x4) 14:15:50 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010360)="1020f5f2", 0x4, 0x1400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f00000107c0)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000010ca0)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000010da0)=ANY=[]) [ 778.314647][ T3762] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 778.403830][T10035] loop3: detected capacity change from 0 to 65551 [ 778.446180][T10035] F2FS-fs (loop3): Invalid log_blocksize (0), supports only 12 [ 778.513815][T10035] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 778.552990][T10035] F2FS-fs (loop3): invalid crc_offset: 0 [ 778.591353][T10035] F2FS-fs (loop3): SIT is corrupted node# 0 vs 1 [ 778.622825][T10035] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-117) [ 778.623924][ T3762] usb 3-1: Using ep0 maxpacket: 16 [ 778.764718][ T3762] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 778.793830][ T3762] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 778.825486][ T3762] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 778.841241][ T3762] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 778.874711][ T3762] usb 3-1: config 0 descriptor?? [ 779.136421][T10022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 779.145229][T10022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 779.646024][ T3762] usbhid 3-1:0.0: can't add hid device: -71 [ 779.652197][ T3762] usbhid: probe of 3-1:0.0 failed with error -71 [ 779.659961][ T3762] usb 3-1: USB disconnect, device number 83 14:15:52 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x1c1241) ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0) 14:15:52 executing program 4: sendmmsg$nfc_llcp(0xffffffffffffffff, &(0x7f0000008cc0)=[{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000300)="918642d470fb8033730734f724d251639d2871635168cb320ef05db68869abd8715c0487a4140586c22745047a55ad20a28b88edf6c7b4fb4134d2e21e0be4a96cc46957961f81fc717e67c279bdfe7895a541a2af46dfb632718b5cfaec7e354091bcccced059ef4951799fa7bb6898abf49d99ea59eb22f2ef6d76550c64e9a3188130137ee19870ae86527e541ae4ee36c7c42d4a1dc17c4a06e829c35d7e23f9dfc669dcd268bacecc302ab54e5b4dd9081d268a5ee7209c42c5d26131142f3a108ddefeedff8a4fe8c7e2c47796c861b223497ed670d5efff4f4927742607aefcd71e853638cabc2ff1afcb1889a983628884420e0cfa1f534c30e6fe5ddcacab25ffd6d39f24e88002b501a14d930584f5791adbe9511ca0003005f739f942d8386abb9aea26ebff3e672e36f24c6071c4416b2c9083f4354bfbc66fa237f7000660680f46814409f32d87069fcc0f80baba5928fd96147ba835d2572f9a529f4e7d0c9d5c54018bedbd1ed6c8681540835da78567e2a571db2cb06505f89ad889aa7dcae30624ee016c8f03af6cc29d4ed96823e521ed3f731cdda2baf467d03d76ff4c8660ee4e8d08c654f5ff93135aa576fb1fb2f803a3c05b41830b16ac927c6d8a10d2fcb0fffbfc64913848649f641154bb307497fed86a2a59cbd106deaaabe4eb006ff4821c3a168376f5e54cf119cdbb0803c6ac0bce35b9ee9b211ea11d90e63f6d7781382a24efc4c2c5b6b2a597d5f5a0036d5bd19eb430cb94421001256935fc680bf4a779212a8e18fccd586af623e0f78157a72032e027e5cd02383705a47cbe413823b80da7126349dd0f5a258272892833808497260ee4f0b53a8c9b04ca0b9f7a8736f4570cb5f0b6483fab4cb2b8135669f748246d9ce498632d488f28a9ec30d9d108918188cf515f790b17d9070d0c51387074d519336d5b64946388afb9311a563860350a808355b67ef8ec4b487a87fb9586bc5fe12bff6644712c98aa5e28f3ed77a8b097eb678f7dff3f73050b60e508aaba79771d45aac46ab7c61652f34f199093953429c76c613607571e457ab83a7c55bb4e29c382888ad433f1625a2a8292f6b947a80005b183813349e2693e5429d450a4b5a0a52124dd68e632d2676715e2eedec0e672fb59354cb23369ce80cf27663781039034b353d1a64c7030c9b542af691010443124f7c9ee28378095ba53376220b0af7e0d03753f2ad5cd189caa045d0b9124deb7a5cb3ba572c02f362f4420ac513365974cf11f428c5b43a89632de50c5f3b03cc574a5b29f7c08009187e83760a6fa5020cd349412f10580f590d48c9658faa8df31e58c8849f18aff83878c21b20b8083d90967514f64aac740bc88b16749e9e207c45bc42eec8750325a14b54a96a2ed41e0940f1052ca470852df402acbb2a92ae3f4f5ae438161d00c34754ecd4f849460e59a70b8cd8fb061c524e334808d77f44ca3dd35993f8835b43310d7ae33812e4647fa779c8d74b4b50a5cd696bcdc41515d2c33381cc19989a5d2726b4db768ec4aec4475b47357504fbf99377900dd75812a1e65d6615187a1f6849f9c7901184c2644587f0aea08b786a41f1170d010c98afee431ed145f31fb5ada20b1c0e31f93ebbd4f2c1278164757458fcd49c662be3c6b8e64341687ca972dfa06acc86bad231b63db64f89185286cda4901b419aa171364e5450f19315dc5b47fac6cc27ca1fd40f039d0cbccfebd38972f725e9974d246acd81fb5f9f77193cf389e2ccdc06d101f83ba8ec1626fa9fa4d31cc808428e47a75ad44d58e5461635bfe4b2e0e788be15462eaf446b99bcd0ee8e12ff7752c71db602b6854611938d61d409055de49d6749d44b00f1621388c8f2c4fa431150591f95fcfc78d5cd32f35a176bdc6ce50ea60f6060979c26cfde3a484699931039d1ad2d7496d6b6a62379f04bd151e1e0a518c537906d2e65b6a57a05019a823c08aadd9ab8287f8a3a378309fe0d30fadfbd12c549026d2e42ab1a063122486ae16094afaaa17351abaf72b747e1bf775445bb9ef8ff6e92fe34800677752c6fb15a710932be21973d6823247c218c2f1d634f8e80291ef251e2df2b3d142609c8a0431644bae57d9bccea1420a0424fc9d136636bce53981d81a35cd52f5f857e4608811833dde8f6022d10079b8b8070c063e7d6e8546efe4473cb90efc136e7514f575ca92a4345f3745dabeb5e9f98dc875513768dd939b4c2c18a610a4eb2ae8da53fd5701cc9c9f7e1aec3968e4d2242b8171b840c824e3e4f71f96db8460aec3568d0e235198545d51f84992c8c1fe0758d7e560b70515d59dfc", 0x681}], 0x1}], 0x1, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000940), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f0000000980)) 14:15:52 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, 0x0, 0x0) 14:15:52 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x25, &(0x7f0000000000)=0x8000, 0x4) 14:15:52 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010360)="1020f5f2", 0x4, 0x1400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f00000107c0)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000010ca0)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000010da0)=ANY=[]) 14:15:52 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.net/syz1\x00', 0x200002, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='limits\x00') openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x57bb, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2e0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = syz_mount_image$xfs(&(0x7f00000002c0), 0x0, 0x0, 0x2, &(0x7f0000001580)=[{0x0, 0x0, 0x7fffffff}, {0x0}], 0x1081006, 0x0) fallocate(r4, 0x0, 0x0, 0x0) r5 = dup(r3) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x400000) 14:15:52 executing program 0: syz_clone3(&(0x7f0000000280)={0xf0065400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x2) [ 780.124938][T10046] loop3: detected capacity change from 0 to 65551 [ 780.147098][T10049] TCP: TCP_TX_DELAY enabled 14:15:52 executing program 4: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x25, 0x0, 0x0) 14:15:52 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1d, &(0x7f0000000000), 0x4) [ 780.170174][T10046] F2FS-fs (loop3): Invalid log_blocksize (0), supports only 12 [ 780.189106][T10046] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 780.201919][T10046] F2FS-fs (loop3): invalid crc_offset: 0 14:15:52 executing program 1: r0 = socket$inet(0x2, 0xa, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000002340)={0x0, 0x0, 0x0, 0x40000}, 0x0) 14:15:52 executing program 4: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000140)={0x11, @multicast1, 0x0, 0x0, 'wlc\x00'}, 0x2c) [ 780.229640][T10047] loop5: detected capacity change from 0 to 264192 [ 780.265256][T10046] F2FS-fs (loop3): SIT is corrupted node# 0 vs 1 [ 780.297647][T10046] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-117) 14:15:52 executing program 1: syz_clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {}, 0xfffffffffffffffe, 0x0, 0x0, 0x0}, 0x58) [ 780.433979][ T3762] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 780.684083][ T3762] usb 3-1: Using ep0 maxpacket: 16 [ 780.804276][ T3762] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 780.824191][ T3762] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 780.846947][ T3762] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 780.869650][ T3762] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 780.905213][ T3762] usb 3-1: config 0 descriptor?? [ 781.149531][T10052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 781.181428][T10052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 781.684017][ T3762] usbhid 3-1:0.0: can't add hid device: -71 [ 781.690046][ T3762] usbhid: probe of 3-1:0.0 failed with error -71 [ 781.711713][ T3762] usb 3-1: USB disconnect, device number 84 14:15:54 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x1c1241) ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0) 14:15:54 executing program 4: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000000), 0x4) 14:15:54 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010360)="1020f5f2", 0x4, 0x1400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f00000107c0)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000010ca0)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000010da0)=ANY=[]) 14:15:54 executing program 1: ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f00000000c0)={{}, {}, 0x0, 0x0, 0xb6}) syz_clone3(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0xa5) 14:15:54 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_buf(r0, 0x0, 0x61, 0x0, &(0x7f0000000000)) 14:15:54 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000040), 0x4) 14:15:54 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f0000000180), 0x4) 14:15:54 executing program 0: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) sendmmsg$nfc_llcp(r0, &(0x7f0000003fc0)=[{0x0, 0x0, 0x0}], 0x1, 0x0) [ 782.147798][T10076] loop3: detected capacity change from 0 to 65551 14:15:54 executing program 4: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x9, &(0x7f0000000040)=0x2, 0x4) 14:15:54 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000040), 0x4) getsockopt$inet_mreqsrc(r0, 0x0, 0x14, 0x0, &(0x7f0000000180)) [ 782.193145][T10076] F2FS-fs (loop3): Invalid log_blocksize (0), supports only 12 14:15:54 executing program 5: r0 = socket$inet(0x2, 0xa, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000002340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) 14:15:54 executing program 4: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000)=0x8000, 0x4) [ 782.247577][T10076] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 782.285516][T10076] F2FS-fs (loop3): invalid crc_offset: 0 [ 782.345283][T10076] F2FS-fs (loop3): SIT is corrupted node# 0 vs 1 [ 782.351891][T10076] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-117) [ 782.463944][ T3762] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 782.714054][ T3762] usb 3-1: Using ep0 maxpacket: 16 [ 782.834028][ T3762] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 782.845254][ T3762] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 782.855073][ T3762] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 782.864208][ T3762] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 782.875898][ T3762] usb 3-1: config 0 descriptor?? [ 783.116873][T10082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 783.125825][T10082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 783.644087][ T3762] usbhid 3-1:0.0: can't add hid device: -71 [ 783.650150][ T3762] usbhid: probe of 3-1:0.0 failed with error -71 [ 783.664098][ T3762] usb 3-1: USB disconnect, device number 85 14:15:56 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x1c1241) ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0) 14:15:56 executing program 1: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @local}, {0x306, @remote}, 0x2, {0x2, 0x0, @empty}, 'veth0_to_bridge\x00'}) 14:15:56 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) 14:15:56 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x10, &(0x7f0000000040), 0x4) 14:15:56 executing program 4: syz_clone3(&(0x7f0000000e40)={0x40800000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000e00)=[0xffffffffffffffff], 0x1}, 0x58) r0 = syz_clone3(&(0x7f0000000340)={0x8000000, 0x0, 0x0, &(0x7f0000000180), {}, 0x0, 0x0, &(0x7f0000000200)=""/23, &(0x7f0000000240)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0], 0x5}, 0x58) syz_clone3(&(0x7f0000000280)={0xf0025000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x12}, &(0x7f00000004c0)=""/136, 0x88, &(0x7f0000000400)=""/180, &(0x7f0000000640)=[0xffffffffffffffff, r0], 0x2}, 0x58) 14:15:56 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010360)="1020f5f2", 0x4, 0x1400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f00000107c0)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {0x0, 0x0, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000010ca0)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000010da0)=ANY=[]) 14:15:56 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_mreqsrc(r0, 0x0, 0x14, 0x0, &(0x7f0000000180)) 14:15:56 executing program 1: ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000080)=@fd={0x0, 0x7, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "903edca0"}}) syz_clone3(&(0x7f0000000280)={0x28006000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:15:56 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) [ 784.118628][T10108] loop3: detected capacity change from 0 to 65551 [ 784.164383][T10108] F2FS-fs (loop3): Invalid log_blocksize (0), supports only 12 [ 784.172047][T10108] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 784.200090][T10108] F2FS-fs (loop3): invalid crc_offset: 0 14:15:56 executing program 0: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/class/devlink', 0x12100, 0x0) 14:15:56 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x5, &(0x7f0000000580)=@raw=[@alu={0x4, 0x0, 0x3, 0x8, 0x1, 0x100, 0x10}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x3}, @ldst={0x1, 0x3, 0x7, 0x7, 0x2, 0xc, 0x4}, @ldst={0x0, 0x0, 0x3, 0x3, 0x3, 0xffffffffffffffe0}], &(0x7f00000005c0)='syzkaller\x00', 0xfc2, 0xb3, &(0x7f0000000600)=""/179, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 14:15:56 executing program 0: socketpair(0x10, 0x0, 0x5, &(0x7f0000000c40)) [ 784.242255][T10108] F2FS-fs (loop3): SIT is corrupted node# 0 vs 1 [ 784.264583][T10108] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-117) [ 784.414152][ T917] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 784.664022][ T917] usb 3-1: Using ep0 maxpacket: 16 [ 784.784318][ T917] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 784.795617][ T917] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 784.805504][ T917] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 784.814628][ T917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 784.826259][ T917] usb 3-1: config 0 descriptor?? [ 785.067032][T10110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 785.083053][T10110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 785.584064][ T917] usbhid 3-1:0.0: can't add hid device: -71 [ 785.590107][ T917] usbhid: probe of 3-1:0.0 failed with error -71 [ 785.603792][ T917] usb 3-1: USB disconnect, device number 86 14:15:58 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x1c1241) ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0) 14:15:58 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010360)="1020f5f2", 0x4, 0x1400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f00000107c0)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {0x0, 0x0, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000010ca0)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000010da0)=ANY=[]) 14:15:58 executing program 5: capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x7fffffff}) 14:15:58 executing program 1: mount$fuseblk(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000000200)={{}, 0x2c, {}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}}) 14:15:58 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0), 0x200000, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 14:15:58 executing program 4: syz_clone3(&(0x7f0000000e40)={0x40800000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000e00)=[0xffffffffffffffff], 0x1}, 0x58) r0 = syz_clone3(&(0x7f0000000340)={0x8000000, 0x0, 0x0, &(0x7f0000000180), {}, 0x0, 0x0, &(0x7f0000000200)=""/23, &(0x7f0000000240)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0], 0x5}, 0x58) syz_clone3(&(0x7f0000000280)={0xf0025000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x12}, &(0x7f00000004c0)=""/136, 0x88, &(0x7f0000000400)=""/180, &(0x7f0000000640)=[0xffffffffffffffff, r0], 0x2}, 0x58) 14:15:58 executing program 0: syz_clone3(&(0x7f0000000e40)={0x40800000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000e00)=[0xffffffffffffffff], 0x1}, 0x58) r0 = syz_clone3(&(0x7f0000000340)={0x8000000, 0x0, 0x0, &(0x7f0000000180), {}, 0x0, 0x0, &(0x7f0000000200)=""/23, &(0x7f0000000240)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0], 0x5}, 0x58) syz_clone3(&(0x7f0000000280)={0xf0025000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x12}, &(0x7f00000004c0)=""/136, 0x88, &(0x7f0000000400)=""/180, &(0x7f0000000640)=[0xffffffffffffffff, r0], 0x2}, 0x58) 14:15:58 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x3, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_sa={0x2}, @sadb_x_nat_t_port={0x1, 0x16}, @sadb_x_sec_ctx={0x1}, @sadb_key={0x1}]}, 0x38}}, 0x0) [ 786.069124][T10137] loop3: detected capacity change from 0 to 65551 [ 786.076343][T10139] capability: warning: `syz-executor.5' uses deprecated v2 capabilities in a way that may be insecure 14:15:58 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000400), 0x0, 0x0) ioctl$BLKROSET(r0, 0x125d, 0x0) [ 786.140046][T10137] F2FS-fs (loop3): Invalid log_blocksize (0), supports only 12 [ 786.161487][T10137] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock 14:15:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) 14:15:58 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/block/loop0', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, 0x0) 14:15:58 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000001c00)={0x14}, 0x14}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000002540)={&(0x7f0000002500)={0x14}, 0x14}}, 0x0) [ 786.212923][T10137] F2FS-fs (loop3): invalid crc_offset: 0 [ 786.312216][T10137] F2FS-fs (loop3): SIT is corrupted node# 0 vs 1 [ 786.338723][T10137] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-117) [ 786.374171][ T3694] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 786.624080][ T3694] usb 3-1: Using ep0 maxpacket: 16 [ 786.744470][ T3694] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 786.763910][ T3694] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 786.783909][ T3694] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 786.793246][ T3694] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 786.825379][ T3694] usb 3-1: config 0 descriptor?? [ 787.069125][T10141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 787.087113][T10141] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 787.584009][ T3694] usbhid 3-1:0.0: can't add hid device: -71 [ 787.590087][ T3694] usbhid: probe of 3-1:0.0 failed with error -71 [ 787.599101][ T3694] usb 3-1: USB disconnect, device number 87 14:16:00 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x1c1241) ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0) 14:16:00 executing program 1: syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000a40)={[{@shortname_win95}, {@uni_xlateno}]}) 14:16:00 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010360)="1020f5f2", 0x4, 0x1400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f00000107c0)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {0x0, 0x0, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000010ca0)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000010da0)=ANY=[]) 14:16:00 executing program 5: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x0, 0x0, 0x0) 14:16:00 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/block/loop0', 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000005c0), r0) 14:16:00 executing program 0: pselect6(0x2, &(0x7f0000000340), 0x0, &(0x7f00000003c0), &(0x7f0000000400)={0x77359400}, &(0x7f0000000480)={&(0x7f0000000440), 0x8}) 14:16:00 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x0, 0x1507, 0x1}, 0x48) [ 788.059739][T10171] loop3: detected capacity change from 0 to 65551 14:16:00 executing program 4: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/module/dm_mod', 0x20cc1, 0x0) 14:16:00 executing program 5: socket(0x2, 0x80002, 0x7) [ 788.104885][T10172] FAT-fs (loop1): bogus number of reserved sectors [ 788.127136][T10171] F2FS-fs (loop3): Invalid log_blocksize (0), supports only 12 14:16:00 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) 14:16:00 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/vt', 0x0, 0x0) inotify_add_watch(r0, 0x0, 0x8) [ 788.174246][T10172] FAT-fs (loop1): Can't find a valid FAT filesystem [ 788.197886][T10171] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock 14:16:00 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000001300), 0x0, &(0x7f0000001380)={[{@mode={'mode', 0x3d, 0x80000000}}, {@mpol={'mpol', 0x3d, {'interleave', '=relative', @val={0x3a, [0x36, 0x34, 0x36, 0x37, 0x31, 0x3a, 0x32]}}}}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}, {@huge_never}, {@size={'size', 0x3d, [0x67, 0x6b, 0x78]}}, {@size={'size', 0x3d, [0x30, 0x0]}}, {@mode}, {@huge_never}], [{@fsname={'fsname', 0x3d, '\'+*Z'}}, {@fsuuid={'fsuuid', 0x3d, {[0x30, 0x35, 0x37, 0x31, 0x38, 0x0, 0x57, 0x32], 0x2d, [0x62, 0x38, 0x65, 0x35], 0x2d, [0x37, 0x65, 0x56, 0x34], 0x2d, [0x65, 0xf, 0x66, 0x63], 0x2d, [0x39, 0x37, 0x32, 0x39, 0x62, 0x0, 0xf1f022d8532a8cfd]}}}, {@obj_user={'obj_user', 0x3d, '#(('}}, {@appraise}]}) [ 788.280522][T10171] F2FS-fs (loop3): invalid crc_offset: 0 [ 788.362375][T10171] F2FS-fs (loop3): SIT is corrupted node# 0 vs 1 [ 788.380347][T10171] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-117) [ 788.394188][ T3689] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 788.428209][T10192] tmpfs: Bad value for 'mpol' [ 788.674060][ T3689] usb 3-1: Using ep0 maxpacket: 16 [ 788.804163][ T3689] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 788.822213][ T3689] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 788.832896][ T3689] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 788.847478][ T3689] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 788.861639][ T3689] usb 3-1: config 0 descriptor?? [ 789.105966][T10175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 789.114881][T10175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 789.613999][ T3689] usbhid 3-1:0.0: can't add hid device: -71 [ 789.620042][ T3689] usbhid: probe of 3-1:0.0 failed with error -71 [ 789.633142][ T3689] usb 3-1: USB disconnect, device number 88 14:16:02 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x1c1241) ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0) 14:16:02 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @empty}, {0x0, @dev}, 0x0, {0x2, 0x0, @multicast1}, 'team0\x00'}) 14:16:02 executing program 5: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140)={&(0x7f0000000100)={[0xdf]}, 0x8}) 14:16:02 executing program 1: pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x7fffffff}, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={[0x3]}, 0x8}) 14:16:02 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010360)="1020f5f2", 0x4, 0x1400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f00000107c0)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880), 0x0, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000010ca0)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000010da0)=ANY=[]) 14:16:02 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x8}]}) 14:16:02 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000100)={'filter\x00', 0x4}, 0x68) 14:16:02 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000001c0)=0x4, 0x4) 14:16:02 executing program 1: openat$vsock(0xffffffffffffff9c, &(0x7f0000002000), 0x24442, 0x0) 14:16:02 executing program 4: socket(0x0, 0xf, 0x0) [ 790.083144][T10197] loop3: detected capacity change from 0 to 65551 [ 790.115952][T10197] F2FS-fs (loop3): Invalid log_blocksize (0), supports only 12 14:16:02 executing program 4: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) 14:16:02 executing program 5: r0 = socket$igmp(0x2, 0x3, 0x2) bind(r0, &(0x7f0000000040)=@phonet, 0x80) [ 790.160523][T10197] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 790.199210][T10197] F2FS-fs (loop3): invalid crc_offset: 0 [ 790.280055][T10197] F2FS-fs (loop3): SIT is corrupted node# 0 vs 1 [ 790.292654][T10197] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-117) [ 790.434163][T10161] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 790.694083][T10161] usb 3-1: Using ep0 maxpacket: 16 [ 790.825927][T10161] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 790.836927][T10161] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 790.846791][T10161] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 790.855931][T10161] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 790.865338][T10161] usb 3-1: config 0 descriptor?? [ 791.105978][T10206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 791.115909][T10206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 791.624041][T10161] usbhid 3-1:0.0: can't add hid device: -71 [ 791.630279][T10161] usbhid: probe of 3-1:0.0 failed with error -71 [ 791.641042][T10161] usb 3-1: USB disconnect, device number 89 14:16:04 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x1c1241) ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0) 14:16:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0xfffffffc}}}}, 0x30}}, 0x0) 14:16:04 executing program 4: io_setup(0x101, &(0x7f0000000680)=0x0) r1 = epoll_create1(0x0) io_submit(r0, 0x1, &(0x7f0000000280)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x5}]) 14:16:04 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter, 0x48) sysinfo(&(0x7f0000000800)=""/141) 14:16:04 executing program 5: syz_mount_image$fuse(&(0x7f0000000880), &(0x7f00000008c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002980)) 14:16:04 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010360)="1020f5f2", 0x4, 0x1400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f00000107c0)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880), 0x0, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000010ca0)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000010da0)=ANY=[]) 14:16:04 executing program 0: fsmount(0xffffffffffffffff, 0x0, 0xf8) 14:16:04 executing program 1: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000002380), 0x220401, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, 0x0) [ 792.088783][T10226] fuse: Bad value for 'fd' [ 792.105660][T10228] loop3: detected capacity change from 0 to 65551 14:16:04 executing program 5: r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00'}) 14:16:04 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/block/loop0', 0x0, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) 14:16:04 executing program 0: modify_ldt$read_default(0x2, &(0x7f0000000040)=""/237, 0xed) [ 792.155175][T10228] F2FS-fs (loop3): Invalid log_blocksize (0), supports only 12 [ 792.174359][T10228] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock 14:16:04 executing program 1: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x148032, 0xffffffffffffffff, 0x0) [ 792.220153][T10228] F2FS-fs (loop3): invalid crc_offset: 0 [ 792.276027][T10228] F2FS-fs (loop3): SIT is corrupted node# 0 vs 1 [ 792.291482][T10228] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-117) [ 792.414346][T10163] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 792.653971][T10163] usb 3-1: Using ep0 maxpacket: 16 [ 792.774167][T10163] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 792.789004][T10163] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 792.801536][T10163] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 792.814408][T10163] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 792.827569][T10163] usb 3-1: config 0 descriptor?? [ 793.068609][T10231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 793.077502][T10231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 793.584089][T10163] usbhid 3-1:0.0: can't add hid device: -71 [ 793.590111][T10163] usbhid: probe of 3-1:0.0 failed with error -71 [ 793.598234][T10163] usb 3-1: USB disconnect, device number 90 14:16:06 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x1c1241) ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0) 14:16:06 executing program 5: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x14, &(0x7f0000000080)={0x5, 0xf, 0x14, 0x2, [@ptm_cap={0x3}, @ssp_cap={0xc}]}}) 14:16:06 executing program 0: delete_module(0x0, 0x0) syz_clone(0x20025000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)='L') 14:16:06 executing program 1: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/block/loop0', 0x80840, 0x0) 14:16:06 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_key={0x1}]}, 0x18}}, 0x0) 14:16:06 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010360)="1020f5f2", 0x4, 0x1400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f00000107c0)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880), 0x0, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000010ca0)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000010da0)=ANY=[]) 14:16:06 executing program 1: connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) 14:16:06 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001700)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) [ 794.068943][T10254] loop3: detected capacity change from 0 to 65551 14:16:06 executing program 0: bpf$BPF_GET_PROG_INFO(0x6, 0x0, 0x0) [ 794.119643][T10254] F2FS-fs (loop3): Invalid log_blocksize (0), supports only 12 [ 794.138448][T10254] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock 14:16:06 executing program 1: socketpair(0x3, 0x0, 0x0, &(0x7f0000000400)) 14:16:06 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x5}]}) 14:16:06 executing program 0: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000280)={{{@in=@dev, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80, 0x0, 0x0, 0x0, 0xee01}}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x0, @in6=@private1}}, 0xe8) [ 794.182060][T10254] F2FS-fs (loop3): invalid crc_offset: 0 [ 794.204151][T10254] F2FS-fs (loop3): SIT is corrupted node# 0 vs 1 [ 794.210931][T10254] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-117) [ 794.354130][ T917] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 794.394986][ T3689] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 794.604063][ T917] usb 6-1: Using ep0 maxpacket: 16 [ 794.674046][ T3689] usb 3-1: Using ep0 maxpacket: 16 [ 794.824252][ T3689] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 794.835854][ T3689] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 794.845867][ T917] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 794.859035][ T3689] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 794.868287][ T3689] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 794.882163][ T3689] usb 3-1: config 0 descriptor?? [ 795.054133][ T917] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 795.063353][ T917] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 795.071442][ T917] usb 6-1: Product: syz [ 795.075666][ T917] usb 6-1: Manufacturer: syz [ 795.080276][ T917] usb 6-1: SerialNumber: syz [ 795.136475][T10259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 795.146466][T10259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 795.329622][ T3694] usb 6-1: USB disconnect, device number 41 [ 795.664091][ T3689] usbhid 3-1:0.0: can't add hid device: -71 [ 795.670209][ T3689] usbhid: probe of 3-1:0.0 failed with error -71 [ 795.678228][ T3689] usb 3-1: USB disconnect, device number 91 14:16:08 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x1c1241) ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0) 14:16:08 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000001440)={0x14, 0x7, 0x1, 0x5}, 0x14}}, 0x0) 14:16:08 executing program 4: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000000)) 14:16:08 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010360)="1020f5f2", 0x4, 0x1400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f00000107c0)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)='\x00\x00', 0x2, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000010ca0)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000010da0)=ANY=[]) 14:16:08 executing program 0: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, 0x0, 0x0) 14:16:08 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001380)={[{@size={'size', 0x3d, [0x30]}}]}) 14:16:08 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) 14:16:08 executing program 5: socketpair(0x6, 0x0, 0x0, &(0x7f0000000640)) [ 796.116460][T10279] loop3: detected capacity change from 0 to 65551 [ 796.135518][T10279] F2FS-fs (loop3): Invalid log_blocksize (0), supports only 12 14:16:08 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @empty}, {0x2, 0x0, @broadcast}, 0x134, 0x0, 0x0, 0x0, 0x78, &(0x7f0000000100)='syzkaller1\x00'}) 14:16:08 executing program 4: openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x519c01, 0x0) [ 796.165803][T10279] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 796.178163][T10279] F2FS-fs (loop3): invalid crc_offset: 0 14:16:08 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) inotify_init() clock_gettime(0x1, &(0x7f00000000c0)) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000680)={0x11, 0x5, {0x8, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct, 0x0, 0x0, [0x400, 0x6]}, {0xfffffffffffffff9, @usage=0x7, 0x0, 0x84e, 0x0, 0x0, 0x0, 0x0, 0x0, @usage, 0x0, 0x0, [0x8000000000000000, 0x8001]}, {0x7ff, @struct={0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @usage, 0x0, 0x0, [0x8000000000000001, 0x80, 0xfffffffffffffffd, 0x8d9c]}}) 14:16:08 executing program 0: openat$tun(0xffffffffffffff9c, 0x0, 0x692043, 0x0) [ 796.207866][T10279] F2FS-fs (loop3): SIT is corrupted node# 0 vs 1 [ 796.240717][T10279] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-117) [ 796.464096][ T917] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 796.723936][ T917] usb 3-1: Using ep0 maxpacket: 16 [ 796.844082][ T917] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 796.855190][ T917] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 796.865145][ T917] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 796.874282][ T917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 796.883523][ T917] usb 3-1: config 0 descriptor?? [ 797.125558][T10286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 797.136178][T10286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 797.634099][ T917] usbhid 3-1:0.0: can't add hid device: -71 [ 797.640315][ T917] usbhid: probe of 3-1:0.0 failed with error -71 [ 797.654312][ T917] usb 3-1: USB disconnect, device number 92 14:16:10 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x1c1241) ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0) 14:16:10 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001380)={[{@mode}, {@mpol={'mpol', 0x3d, {'interleave', '=relative'}}}, {@huge_never}, {@size={'size', 0x3d, [0x67, 0x6b, 0x78]}}, {@size={'size', 0x3d, [0x0]}}]}) 14:16:10 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/vmallocinfo\x00', 0x0, 0x0) mkdirat$cgroup(r0, &(0x7f0000000240)='syz1\x00', 0x1ff) 14:16:10 executing program 0: socket$inet(0x2, 0xa, 0xffffff4a) 14:16:10 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010360)="1020f5f2", 0x4, 0x1400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f00000107c0)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)='\x00\x00', 0x2, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000010ca0)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000010da0)=ANY=[]) 14:16:10 executing program 1: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/dax', 0x200c00, 0x0) 14:16:10 executing program 1: syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[{{0x9, 0x5, 0x81, 0x3, 0x8, 0x8}}], {{0x9, 0x5, 0x82, 0x2, 0x10}}}}}]}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) [ 798.111200][T10307] loop3: detected capacity change from 0 to 65551 [ 798.116030][T10309] tmpfs: Bad value for 'mpol' 14:16:10 executing program 0: ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f00000001c0)={0x0, "a42d45ca0a0aa821f0fcb72829442264"}) rt_sigpending(0x0, 0x0) 14:16:10 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000340)=@nat={'nat\x00', 0x1b, 0x5, 0x3d0, 0x250, 0xc8, 0xffffffff, 0xc8, 0x180, 0x338, 0x338, 0xffffffff, 0x338, 0x338, 0x5, 0x0, {[{{@uncond, 0x0, 0x90, 0xc8, 0x0, {}, [@common=@socket0={{0x20}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x1, @dev, @remote, @icmp_id}}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x31}, @loopback, 0x0, 0xff000000, 'bridge_slave_0\x00', 'ip6gretap0\x00', {0xff}, {0xff}, 0x4, 0x2, 0x34}, 0x0, 0x70, 0xb8}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x8, @ipv4=@dev={0xac, 0x14, 0x14, 0x1e}, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, @gre_key=0x834, @icmp_id=0x68}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@inet=@socket1={{0x28}, 0x1}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x2, @empty, @dev={0xac, 0x14, 0x14, 0x13}, @icmp_id=0x68, @icmp_id=0x68}}}}, {{@ip={@multicast2, @local, 0xff, 0xffffffff, 'wg1\x00', 'bond_slave_1\x00', {0xff}, {0xff}, 0x239fcee4b3b2804, 0x2, 0x10}, 0x0, 0xb0, 0xe8, 0x0, {}, [@common=@socket0={{0x20}}, @common=@socket0={{0x20}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x10, @broadcast, @private=0xa010102, @gre_key=0x9, @gre_key=0x1ff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x430) 14:16:10 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, 0x0, 0x0, 0x0) [ 798.154825][T10307] F2FS-fs (loop3): Invalid log_blocksize (0), supports only 12 [ 798.162538][T10307] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock 14:16:10 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000140)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) [ 798.207297][T10317] x_tables: duplicate underflow at hook 1 [ 798.217053][T10307] F2FS-fs (loop3): invalid crc_offset: 0 14:16:10 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind(r0, &(0x7f0000000000)=@ieee802154, 0x80) [ 798.251979][T10307] F2FS-fs (loop3): SIT is corrupted node# 0 vs 1 [ 798.263087][T10307] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-117) [ 798.463952][ T917] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 798.474116][ T3695] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 798.704017][ T917] usb 3-1: Using ep0 maxpacket: 16 [ 798.824142][ T917] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 798.835308][ T3695] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16 [ 798.845244][ T917] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 798.855480][ T3695] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 798.865834][ T917] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 798.874993][ T3695] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 798.884713][ T917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 798.894065][ T917] usb 3-1: config 0 descriptor?? [ 799.045308][ T3695] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 799.054756][ T3695] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 799.062767][ T3695] usb 2-1: Product: syz [ 799.066972][ T3695] usb 2-1: Manufacturer: syz [ 799.071565][ T3695] usb 2-1: SerialNumber: syz [ 799.094181][T10316] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 799.114976][ T3695] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 799.136249][T10313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 799.148752][T10313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 799.321775][ T3694] usb 2-1: USB disconnect, device number 8 [ 799.664085][ T917] usbhid 3-1:0.0: can't add hid device: -71 [ 799.670120][ T917] usbhid: probe of 3-1:0.0 failed with error -71 [ 799.678607][ T917] usb 3-1: USB disconnect, device number 93 14:16:12 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x1c1241) ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0) 14:16:12 executing program 4: mount$fuseblk(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={{}, 0x2c, {}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}}) 14:16:12 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9}, 0x48) 14:16:12 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010360)="1020f5f2", 0x4, 0x1400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f00000107c0)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)='\x00\x00', 0x2, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000010ca0)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000010da0)=ANY=[]) 14:16:12 executing program 0: pselect6(0x2, &(0x7f0000000340), &(0x7f0000000380)={0x3}, &(0x7f00000003c0), &(0x7f0000000400)={0x77359400}, &(0x7f0000000480)={&(0x7f0000000440), 0x8}) 14:16:12 executing program 1: syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[{{0x9, 0x5, 0x81, 0x3, 0x8, 0x8}}], {{0x9, 0x5, 0x82, 0x2, 0x10}}}}}]}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) 14:16:12 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x5, &(0x7f0000000580)=@raw=[@alu, @cb_func, @ldst={0x1, 0x3, 0x7, 0x7, 0x2, 0x0, 0x4}, @ldst={0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffffffffffe0}], &(0x7f00000005c0)='syzkaller\x00', 0xfc2, 0xb3, &(0x7f0000000600)=""/179, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 14:16:12 executing program 0: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x18}, 0xc) 14:16:12 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@multicast1}, 0xa, @in6=@ipv4={'\x00', '\xff\xff', @private}}}, 0xe8) [ 800.139414][T10337] loop3: detected capacity change from 0 to 65551 14:16:12 executing program 0: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) 14:16:12 executing program 4: syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000001180), 0x0, 0x0) [ 800.198790][T10337] F2FS-fs (loop3): Invalid log_blocksize (0), supports only 12 [ 800.219931][T10337] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock 14:16:12 executing program 0: r0 = inotify_init1(0x0) inotify_add_watch(r0, 0x0, 0x400) [ 800.254627][T10337] F2FS-fs (loop3): invalid crc_offset: 0 [ 800.297769][T10337] F2FS-fs (loop3): SIT is corrupted node# 0 vs 1 [ 800.311743][T10337] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-117) [ 800.397050][ T917] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 800.464176][T10163] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 800.743964][T10163] usb 3-1: Using ep0 maxpacket: 16 [ 800.764154][ T917] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16 [ 800.774110][ T917] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 800.783757][ T917] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 800.874086][T10163] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 800.885147][T10163] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 800.895389][T10163] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 800.904702][T10163] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 800.914710][T10163] usb 3-1: config 0 descriptor?? [ 800.944081][ T917] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 800.954684][ T917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 800.962954][ T917] usb 2-1: Product: syz [ 800.967310][ T917] usb 2-1: Manufacturer: syz [ 800.971952][ T917] usb 2-1: SerialNumber: syz [ 800.994275][T10338] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 801.014946][ T917] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 801.178476][T10340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 801.190706][T10340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 801.229710][T10161] usb 2-1: USB disconnect, device number 9 [ 801.674196][T10163] usbhid 3-1:0.0: can't add hid device: -71 [ 801.680443][T10163] usbhid: probe of 3-1:0.0 failed with error -71 [ 801.692572][T10163] usb 3-1: USB disconnect, device number 94 14:16:14 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f0000001040)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001000)={&(0x7f0000000c00)={0x14}, 0x14}}, 0x0) 14:16:14 executing program 5: setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000200)="180d4fbf43406aa64b4a6f463669cf29e2569dbcb62dbdeaddae6f4678ef9e8bc47e54efd086499e427160cb1ed466451eeff83b91d443478e8b84efe8bbec6de6399057f2c592b90e2c00f68865ed2e3e0fea2da27a1782ab12cc5dadefb51ea5bd5cf496b0c8c2", 0x68, 0x80000000}]) 14:16:14 executing program 0: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) 14:16:14 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010360)="1020f5f2", 0x4, 0x1400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f00000107c0)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)='\x00\x00\x00', 0x3, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000010ca0)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000010da0)=ANY=[]) 14:16:14 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x1c1241) ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0) 14:16:14 executing program 1: syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[{{0x9, 0x5, 0x81, 0x3, 0x8, 0x8}}], {{0x9, 0x5, 0x82, 0x2, 0x10}}}}}]}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) 14:16:14 executing program 4: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, &(0x7f0000001640), 0x0, 0x0) [ 802.151156][T10363] loop5: detected capacity change from 0 to 264192 [ 802.157342][T10365] loop3: detected capacity change from 0 to 65551 [ 802.189245][T10365] F2FS-fs (loop3): Invalid log_blocksize (0), supports only 12 14:16:14 executing program 4: syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x80081) 14:16:14 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/meminfo\x00', 0x0, 0x0) [ 802.221768][T10365] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 802.241079][T10365] F2FS-fs (loop3): invalid crc_offset: 0 14:16:14 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000001c00)={0x14}, 0x14}}, 0x0) 14:16:14 executing program 4: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001380)={[{@size={'size', 0x3d, [0x78]}}]}) [ 802.268833][T10365] F2FS-fs (loop3): SIT is corrupted node# 0 vs 1 [ 802.279604][T10365] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-117) 14:16:14 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010360)="1020f5f2", 0x4, 0x1400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f00000107c0)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)='\x00\x00\x00', 0x3, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000010ca0)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000010da0)=ANY=[]) 14:16:14 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast1, @remote, 0x1, 0x1, [@remote]}, 0x14) [ 802.382682][T10380] tmpfs: Bad value for 'size' 14:16:14 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x2a0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x208, 0xffffffff, 0xffffffff, 0x208, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xc0, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@ip={@dev, @rand_addr, 0x0, 0x0, 'ip6tnl0\x00', 'ip6tnl0\x00'}, 0x0, 0xc0, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x300) [ 802.416767][T10382] loop3: detected capacity change from 0 to 65551 [ 802.425117][ T3695] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 802.432872][ T917] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 802.444213][ T3694] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 802.458637][T10382] F2FS-fs (loop3): Invalid log_blocksize (0), supports only 12 [ 802.466569][T10386] x_tables: duplicate underflow at hook 3 [ 802.483975][T10382] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 802.505998][T10382] F2FS-fs (loop3): invalid crc_offset: 0 [ 802.538520][T10382] F2FS-fs (loop3): SIT is corrupted node# 0 vs 1 [ 802.545454][T10382] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-117) [ 802.704044][ T3694] usb 3-1: Using ep0 maxpacket: 16 [ 802.824320][ T3694] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 802.839357][ T3694] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 802.849188][ T3694] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 802.854200][ T917] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16 [ 802.862797][ T3694] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 802.868194][ T3695] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 802.881834][ T3694] usb 3-1: config 0 descriptor?? [ 802.889160][ T917] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 802.903695][ T917] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 803.084102][ T3695] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 803.093359][ T917] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 803.102564][ T3695] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 803.110633][ T917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 803.118751][ T3695] usb 1-1: Product: syz [ 803.122909][ T3695] usb 1-1: Manufacturer: syz [ 803.127628][ T917] usb 2-1: Product: syz [ 803.131808][ T917] usb 2-1: Manufacturer: syz [ 803.136635][ T3695] usb 1-1: SerialNumber: syz [ 803.138532][T10367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 803.141705][ T917] usb 2-1: SerialNumber: syz [ 803.161935][T10367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 803.174388][T10361] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 803.194940][ T3695] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 803.207540][ T917] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 803.398466][ T917] usb 1-1: USB disconnect, device number 111 [ 803.418570][T10161] usb 2-1: USB disconnect, device number 10 [ 803.456309][ T3694] usbhid 3-1:0.0: can't add hid device: -71 [ 803.462522][ T3694] usbhid: probe of 3-1:0.0 failed with error -71 [ 803.479420][ T3694] usb 3-1: USB disconnect, device number 95 14:16:16 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000001c80)={&(0x7f0000001bc0), 0xc, &(0x7f0000001c40)={&(0x7f0000001c00)={0x14}, 0x14}}, 0x0) 14:16:16 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@multicast1, 0x0, 0x32}, 0xa, @in6=@ipv4={'\x00', '\xff\xff', @private}, 0x0, 0x1}}, 0xe8) 14:16:16 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010360)="1020f5f2", 0x4, 0x1400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f00000107c0)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)='\x00\x00\x00', 0x3, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000010ca0)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000010da0)=ANY=[]) 14:16:16 executing program 1: syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[{{0x9, 0x5, 0x81, 0x3, 0x8, 0x8}}], {{0x9, 0x5, 0x82, 0x2, 0x10}}}}}]}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) 14:16:16 executing program 0: pselect6(0x40, &(0x7f0000000340)={0x85}, 0x0, 0x0, &(0x7f0000000400)={0x77359400}, 0x0) 14:16:16 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x1c1241) ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0) 14:16:16 executing program 5: bpf$BPF_GET_PROG_INFO(0x13, 0x0, 0x0) [ 803.938402][T10395] loop3: detected capacity change from 0 to 65551 14:16:16 executing program 4: rt_tgsigqueueinfo(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x2}) 14:16:16 executing program 0: eventfd2(0x0, 0x0) syz_read_part_table(0x0, 0x2, &(0x7f0000000300)=[{0x0, 0x0, 0x80000000}, {0x0, 0x0, 0x2}]) 14:16:16 executing program 5: syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) socketpair(0x10, 0x0, 0x5, &(0x7f0000000c40)) [ 804.017194][T10395] F2FS-fs (loop3): Invalid log_blocksize (0), supports only 12 [ 804.047676][T10395] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock 14:16:16 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bind$bt_hci(r0, 0x0, 0x0) 14:16:16 executing program 0: socketpair(0x25, 0x0, 0x0, &(0x7f0000000100)) 14:16:16 executing program 5: eventfd2(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) syz_read_part_table(0x7fffffff, 0x1, &(0x7f0000000300)=[{0x0}]) [ 804.073564][T10395] F2FS-fs (loop3): invalid crc_offset: 0 [ 804.105721][T10395] F2FS-fs (loop3): SIT is corrupted node# 0 vs 1 [ 804.113731][T10395] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-117) 14:16:16 executing program 0: syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0x30, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x0, 0xf7, 0x3}}, [{{0x9, 0x5, 0x82, 0x2, 0x400, 0x12, 0x7, 0x81}}]}}}]}}]}}, 0x0) 14:16:16 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010360)="1020f5f2", 0x4, 0x1400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f00000107c0)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000010ca0)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000010da0)=ANY=[]) [ 804.206554][T10417] loop5: detected capacity change from 0 to 264192 [ 804.259100][T10422] loop3: detected capacity change from 0 to 65551 [ 804.269314][T10422] F2FS-fs (loop3): Invalid log_blocksize (0), supports only 12 [ 804.277602][T10422] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 804.299532][T10422] F2FS-fs (loop3): invalid crc_offset: 0 [ 804.310457][T10161] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 804.318231][ T3694] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 804.324307][T10422] F2FS-fs (loop3): SIT is corrupted node# 0 vs 1 [ 804.332343][T10422] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-117) [ 804.533959][T10162] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 804.595508][T10161] usb 3-1: Using ep0 maxpacket: 16 [ 804.744118][ T3694] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16 [ 804.754296][T10161] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 804.765311][ T3694] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 804.775600][T10161] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 804.785548][ T3694] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 804.795375][T10161] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 804.804787][T10161] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 804.814342][T10161] usb 3-1: config 0 descriptor?? [ 804.824266][T10162] usb 1-1: Using ep0 maxpacket: 8 [ 804.964185][T10162] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 804.994139][ T3694] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 805.003377][ T3694] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 805.011726][ T3694] usb 2-1: Product: syz [ 805.016359][ T3694] usb 2-1: Manufacturer: syz [ 805.021001][ T3694] usb 2-1: SerialNumber: syz [ 805.044575][T10401] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 805.056116][T10398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 805.064960][T10398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 805.075205][ T3694] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 805.194506][T10162] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 805.203956][T10162] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 805.212160][T10162] usb 1-1: Product: syz [ 805.216938][T10162] usb 1-1: Manufacturer: syz [ 805.221581][T10162] usb 1-1: SerialNumber: syz [ 805.244390][T10420] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 805.251718][T10420] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 805.298257][ T917] usb 2-1: USB disconnect, device number 11 [ 805.354959][T10161] usbhid 3-1:0.0: can't add hid device: -71 [ 805.361072][T10161] usbhid: probe of 3-1:0.0 failed with error -71 [ 805.380832][T10161] usb 3-1: USB disconnect, device number 96 [ 805.508858][T10162] usb 1-1: USB disconnect, device number 112 14:16:18 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x5, &(0x7f0000000580)=@raw=[@alu, @cb_func, @ldst={0x1, 0x3, 0x7, 0x7, 0x2, 0xc, 0x4}, @ldst], &(0x7f00000005c0)='syzkaller\x00', 0xfc2, 0xb3, &(0x7f0000000600)=""/179, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 14:16:18 executing program 4: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)="ef") 14:16:18 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010360)="1020f5f2", 0x4, 0x1400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f00000107c0)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000010ca0)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000010da0)=ANY=[]) 14:16:18 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x1c1241) ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0) 14:16:18 executing program 5: socketpair(0x2, 0xa, 0x0, &(0x7f00000003c0)) 14:16:18 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x4ad, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xc}, 0x48) 14:16:18 executing program 1: timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) [ 805.851340][T10433] loop3: detected capacity change from 0 to 65551 [ 805.868847][T10433] F2FS-fs (loop3): Invalid log_blocksize (0), supports only 12 14:16:18 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKREPORTZONE(r0, 0xc0101282, 0x0) [ 805.903438][T10433] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 805.918985][T10433] F2FS-fs (loop3): invalid crc_offset: 0 14:16:18 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8993, &(0x7f0000000240)={'batadv_slave_1\x00'}) 14:16:18 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e20, @local}, {0x2, 0x4e22, @empty}, {0x2, 0x4e24, @loopback}, 0x21c, 0x0, 0x0, 0x0, 0xf1, &(0x7f0000000000)='bond_slave_0\x00', 0x400, 0x7fff, 0x3}) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000640)={@rand_addr, @empty}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00'}) 14:16:18 executing program 0: io_setup(0x401, &(0x7f00000000c0)=0x0) io_getevents(r0, 0x5, 0x0, 0x0, &(0x7f0000000080)) [ 805.957913][T10433] F2FS-fs (loop3): SIT is corrupted node# 0 vs 1 [ 805.967353][T10433] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-117) 14:16:18 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/vmallocinfo\x00', 0x0, 0x0) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, 0x0, 0x0) 14:16:18 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010360)="1020f5f2", 0x4, 0x1400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f00000107c0)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000010ca0)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000010da0)=ANY=[]) 14:16:18 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f000000a500), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, 0x0) 14:16:18 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/block/loop0', 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x8000000) [ 806.105998][T10455] loop3: detected capacity change from 0 to 65551 [ 806.132360][T10455] F2FS-fs (loop3): Invalid log_blocksize (0), supports only 12 [ 806.140428][T10162] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 806.181851][T10455] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 806.202827][T10455] F2FS-fs (loop3): invalid crc_offset: 0 [ 806.241983][T10455] F2FS-fs (loop3): SIT is corrupted node# 0 vs 1 [ 806.253479][T10455] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-117) [ 806.414062][T10162] usb 3-1: Using ep0 maxpacket: 16 [ 806.554059][T10162] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 806.565156][T10162] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 806.578171][T10162] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 806.587245][T10162] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 806.597463][T10162] usb 3-1: config 0 descriptor?? [ 806.836186][T10434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 806.845163][T10434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 807.144035][T10162] usbhid 3-1:0.0: can't add hid device: -71 [ 807.150111][T10162] usbhid: probe of 3-1:0.0 failed with error -71 [ 807.157989][T10162] usb 3-1: USB disconnect, device number 97 14:16:19 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x1c1241) ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0) 14:16:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}, 0x0) 14:16:19 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, 0x0) 14:16:19 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010360)="1020f5f2", 0x4, 0x1400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f00000107c0)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000010ca0)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000010da0)=ANY=[]) 14:16:19 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="1500000061ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="b00000000000006be5800913470dd3085d39710c6b397153cdf445b4c07c854723f31b"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) mkdir(&(0x7f0000000280)='./file0/file0\x00', 0x0) 14:16:19 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, 0x0, 0x110) 14:16:19 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/vmallocinfo\x00', 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x10, r0, 0x8000000) 14:16:19 executing program 5: openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0xa9941fcf1030d130, 0x0) pselect6(0x40, &(0x7f0000000340), 0x0, &(0x7f00000003c0)={0x9}, &(0x7f0000000400)={0x77359400}, &(0x7f0000000480)={&(0x7f0000000440), 0x8}) 14:16:19 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @local}, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}, 0x21c, 0x0, 0x0, 0x0, 0xf1}) [ 807.602486][T10472] loop3: detected capacity change from 0 to 65551 [ 807.655858][T10472] F2FS-fs (loop3): Invalid log_blocksize (0), supports only 12 [ 807.682589][T10470] ------------[ cut here ]------------ [ 807.688545][T10472] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 807.690976][T10472] F2FS-fs (loop3): invalid crc_offset: 0 14:16:20 executing program 1: syz_open_dev$sndpcmc(&(0x7f0000000000), 0x4, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) mmap$snddsp_control(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000009, 0x1010, 0xffffffffffffffff, 0x83000000) 14:16:20 executing program 5: r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f00000001c0)={0xb, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x9fc}}, 0x18) 14:16:20 executing program 4: syz_io_uring_setup(0x20697, &(0x7f00000002c0), &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000002000/0x2000)=nil, 0x0, 0x0)