last executing test programs: 14.813870916s ago: executing program 4 (id=1160): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r5, 0x5452, 0x0) dup3(r0, r0, 0x80000) poll(&(0x7f0000b2c000)=[{r6}], 0x2c, 0xffffffffffbffff8) dup2(r5, r6) fcntl$setown(r5, 0x8, r4) tkill(r4, 0x2e) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x3, 0xe, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) rt_sigqueueinfo(r7, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff}) 12.909808769s ago: executing program 4 (id=1165): prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) socket$packet(0x11, 0x2, 0x300) mount(&(0x7f0000000040), &(0x7f0000000040)='.\x00', &(0x7f0000000000)='binder\x00', 0x208000, 0x0) unshare(0x42000000) syz_emit_ethernet(0x3e, &(0x7f0000000340)=ANY=[@ANYBLOB="fffffff62493dc9925f4ffffff00000000000008004500002700000000003f64cda3fcffffff1414aa040090780300000045000000000000000000000000e9e15ce8e596c17690e85436bdaf76bf4f433f9490bb3750186883dfdb5b1a4b6853b2f4a43d6bffe7ca928d9cc1202a2b4d6ee89f4df537fd5bd8ef032a12ffdc2c3a68189490420c3390ebc3392efc830d5e8f98d0e85c2fa1e7129a0a11bfb2195594fbd8e5b04661253a421d9dd644166a25d6044126c64f0edfb3712f9f1cc4d5fa3ae54f522712d5cbf56fdf17e1aa69beecc9d949ec302dec7004e1fce3f0000000"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2007, &(0x7f0000000200)) eventfd2(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) 11.356341553s ago: executing program 0 (id=1171): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000b28000)=0x3) r6 = dup3(r0, r0, 0x80000) fcntl$setsig(r6, 0xa, 0x10) poll(&(0x7f0000b2c000)=[{r5}], 0x2c, 0xffffffffffbffff8) dup2(r4, r5) fcntl$setown(r4, 0x8, 0x0) tkill(0x0, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00'}, 0x10) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigqueueinfo(r7, 0x21, 0x0) 10.351194849s ago: executing program 0 (id=1175): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r5, 0x5452, &(0x7f0000b28000)=0x3) dup3(r0, r0, 0x80000) poll(0x0, 0x0, 0xffffffffffbffff8) dup2(r5, r6) fcntl$setown(r5, 0x8, r4) tkill(r4, 0x2e) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x3, 0xe, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) rt_sigqueueinfo(r7, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff}) 10.115922219s ago: executing program 1 (id=1176): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r5, 0x5452, &(0x7f0000b28000)=0x3) r7 = dup3(r0, r0, 0x80000) fcntl$setsig(r7, 0xa, 0x10) poll(&(0x7f0000b2c000), 0x0, 0xffffffffffbffff8) dup2(r5, r6) fcntl$setown(r5, 0x8, r4) tkill(r4, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00'}, 0x10) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x3, 0xe, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) rt_sigqueueinfo(r8, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff}) 9.182826945s ago: executing program 1 (id=1178): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) poll(&(0x7f0000b2c000)=[{r5}], 0x2c, 0xffffffffffbffff8) dup2(r4, r5) fcntl$setown(r4, 0x8, r3) tkill(r3, 0x2e) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigqueueinfo(r6, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff}) 8.554358872s ago: executing program 0 (id=1179): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26", 0x3c, 0x0, 0x0, 0x0) 8.554000913s ago: executing program 0 (id=1180): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x59}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x5}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) close(r4) syz_io_uring_setup(0x6165, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0x0, 0x3}, 0x0, 0x0) 8.211890971s ago: executing program 1 (id=1182): prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) socket$packet(0x11, 0x2, 0x300) mount(&(0x7f0000000040), &(0x7f0000000040)='.\x00', &(0x7f0000000000)='binder\x00', 0x208000, 0x0) unshare(0x42000000) syz_emit_ethernet(0x3e, &(0x7f0000000340)=ANY=[@ANYBLOB="fffffff62493dc9925f4ffffff00000000000008004500002700000000003f64cda3fcffffff1414aa040090780300000045000000000000000000000000e9e15ce8e596c17690e85436bdaf76bf4f433f9490bb3750186883dfdb5b1a4b6853b2f4a43d6bffe7ca928d9cc1202a2b4d6ee89f4df537fd5bd8ef032a12ffdc2c3a68189490420c3390ebc3392efc830d5e8f98d0e85c2fa1e7129a0a11bfb2195594fbd8e5b04661253a421d9dd644166a25d6044126c64f0edfb3712f9f1cc4d5fa3ae54f522712d5cbf56fdf17e1aa69beecc9d949ec302dec7004e1fce3f0000000"], 0x0) io_setup(0x2007, &(0x7f0000000200)) eventfd2(0x0, 0x0) socket(0x10, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$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") r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) io_setup(0x200, &(0x7f0000000140)=0x0) io_submit(r3, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r2, &(0x7f0000000000), 0xfdfc}]) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) 7.93030954s ago: executing program 4 (id=1183): openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010005000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), 0x0}, 0x20) socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800400, &(0x7f0000000100), 0x1, 0x500, &(0x7f0000000500)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) 7.414609759s ago: executing program 3 (id=1185): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000003b810100850000006d000000850000005000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001800)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0a00000004000000030000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800004e9d00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @typedef={0x3}, @ptr={0x0, 0x0, 0x0, 0x2, 0x4}, @volatile={0x0, 0x0, 0x0, 0xa, 0x2}]}, {0x0, [0x0, 0x0, 0x61, 0x61]}}, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000000)={[{@errors_remount}, {@nodioread_nolock}]}, 0x4, 0x4f3, &(0x7f00000012c0)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000500)='./bus\x00', 0x4, 0x0, 0x42, 0x0, &(0x7f0000000500)) 5.411444371s ago: executing program 0 (id=1186): syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x24a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000240)='kfree\x00', r1}, 0x18) r2 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) writev(r2, &(0x7f0000000580), 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f00000003c0)=ANY=[@ANYRES64=r3, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) request_key(0x0, &(0x7f0000000540)={'syz', 0x0}, &(0x7f0000000300)='@\x9f+^\xbe-@(/[+\x9f{\x00', 0xfffffffffffffffa) r6 = syz_usb_connect$cdc_ncm(0x0, 0x7b, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000020000202505a1a44000010203010902690002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c000000060005241500000905810300020000000904010000020d00000904010102020d000009058202100000000009050302000200000096ab855ce8cd9f252e7f79a17343723795a55627bfd36645229d7dbd2221c216b6f2fdb93ce908221f90d424d0689c332134f2c28f2c090581f97ae412757de8dc81a20210d917d885"], 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3158}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, &(0x7f0000001040)={0x14, 0x0, &(0x7f0000001000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) setfsuid(0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) close(r7) setsockopt$sock_int(r7, 0x1, 0x28, &(0x7f0000000340)=0xb2c, 0x4) 5.30926374s ago: executing program 3 (id=1187): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r4}, &(0x7f0000000880), &(0x7f00000008c0)=r3}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="1201000064172f2057155081ed29010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 5.10597563s ago: executing program 4 (id=1188): bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0x5, 0x100}]}}]}, 0x38}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x314df2ae15d87bb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='sched_switch\x00', r3}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000002600)={0x0, 0x0, {0x0, @struct={0x7ff, 0x6}, 0x0, 0x0, 0x0, 0x0, 0xdbdb, 0x0, 0x0, @struct={0x8}, 0xf6a8, 0x0, [0x0, 0x6]}, {0x0, @struct={0xffffff7f}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, @struct, 0x0, 0x0, [0x0, 0x0, 0x5, 0x4]}, {0x0, @struct={0x8}, 0x0, 0x0, 0x4, 0x0, 0x800, 0xfffffffffffffff9, 0x0, @struct, 0x8, 0x0, [0x18, 0x6, 0x0, 0xfffffffffffffffd]}, {0x0, 0x0, 0x2}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="1201000064172f2057155081ed29010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) 4.282020186s ago: executing program 1 (id=1189): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r5, 0x5452, &(0x7f0000b28000)=0x3) dup3(r0, r0, 0x80000) poll(0x0, 0x0, 0xffffffffffbffff8) dup2(r5, r6) fcntl$setown(r5, 0x8, r4) tkill(r4, 0x2e) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x3, 0xe, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) rt_sigqueueinfo(r7, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff}) 4.082898325s ago: executing program 2 (id=1192): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x18) io_cancel(0x0, &(0x7f0000001800)={0x0, 0x0, 0x0, 0x8, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x31a5, 0x0, 0x3}, 0x0) 4.027769495s ago: executing program 2 (id=1193): prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) socket$packet(0x11, 0x2, 0x300) mount(&(0x7f0000000040), &(0x7f0000000040)='.\x00', &(0x7f0000000000)='binder\x00', 0x208000, 0x0) unshare(0x42000000) syz_emit_ethernet(0x3e, &(0x7f0000000340)=ANY=[@ANYBLOB="fffffff62493dc9925f4ffffff00000000000008004500002700000000003f64cda3fcffffff1414aa040090780300000045000000000000000000000000e9e15ce8e596c17690e85436bdaf76bf4f433f9490bb3750186883dfdb5b1a4b6853b2f4a43d6bffe7ca928d9cc1202a2b4d6ee89f4df537fd5bd8ef032a12ffdc2c3a68189490420c3390ebc3392efc830d5e8f98d0e85c2fa1e7129a0a11bfb2195594fbd8e5b04661253a421d9dd644166a25d6044126c64f0edfb3712f9f1cc4d5fa3ae54f522712d5cbf56fdf17e1aa69beecc9d949ec302dec7004e1fce3f0000000"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) eventfd2(0x0, 0x0) socket(0x10, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$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") r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) io_setup(0x200, &(0x7f0000000140)=0x0) io_submit(r4, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r3, &(0x7f0000000000), 0xfdfc}]) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) 3.722176144s ago: executing program 3 (id=1194): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x9]}, 0x8, 0x80800) ioctl$KVM_CAP_HYPERV_DIRECT_TLBFLUSH(r0, 0x4068aea3, &(0x7f0000000040)) syz_clone(0x2f000, 0x0, 0x408, 0x0, 0x0, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0200, 0x0) ioctl$KVM_GET_DEBUGREGS(r1, 0x8080aea1, &(0x7f0000000100)) 3.625054704s ago: executing program 4 (id=1195): socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpid() sched_setscheduler(0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x47) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r3}, 0x0, &(0x7f00000005c0)}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) keyctl$negate(0xd, 0x0, 0xf2, 0xfffffffffffffffe) r4 = syz_open_procfs(0x0, &(0x7f0000001940)='net/snmp\x00') read$FUSE(r4, &(0x7f0000001e80)={0x2020}, 0x2062) 3.456017463s ago: executing program 0 (id=1196): syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x24a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000240)='kfree\x00', r1}, 0x18) r2 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) writev(r2, &(0x7f0000000580), 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f00000003c0)=ANY=[@ANYRES64=r3, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) request_key(0x0, &(0x7f0000000540)={'syz', 0x0}, &(0x7f0000000300)='@\x9f+^\xbe-@(/[+\x9f{\x00', 0xfffffffffffffffa) r6 = syz_usb_connect$cdc_ncm(0x0, 0x7b, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000020000202505a1a44000010203010902690002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c000000060005241500000905810300020000000904010000020d00000904010102020d000009058202100000000009050302000200000096ab855ce8cd9f252e7f79a17343723795a55627bfd36645229d7dbd2221c216b6f2fdb93ce908221f90d424d0689c332134f2c28f2c090581f97ae412757de8dc81a20210d917d885"], 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3158}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, &(0x7f0000001040)={0x14, 0x0, &(0x7f0000001000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) setfsuid(0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) close(r7) setsockopt$sock_int(r7, 0x1, 0x28, &(0x7f0000000340)=0xb2c, 0x4) 2.346329059s ago: executing program 4 (id=1197): syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x24a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000240)='kfree\x00', r1}, 0x18) r2 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) writev(r2, &(0x7f0000000580), 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f00000003c0)=ANY=[@ANYRES64=r3, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) request_key(0x0, &(0x7f0000000540)={'syz', 0x0}, &(0x7f0000000300)='@\x9f+^\xbe-@(/[+\x9f{\x00', 0xfffffffffffffffa) r6 = syz_usb_connect$cdc_ncm(0x0, 0x7b, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000020000202505a1a44000010203010902690002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c000000060005241500000905810300020000000904010000020d00000904010102020d000009058202100000000009050302000200000096ab855ce8cd9f252e7f79a17343723795a55627bfd36645229d7dbd2221c216b6f2fdb93ce908221f90d424d0689c332134f2c28f2c090581f97ae412757de8dc81a20210d917d885"], 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3158}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, &(0x7f0000001040)={0x14, 0x0, &(0x7f0000001000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) setfsuid(0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) close(r7) setsockopt$sock_int(r7, 0x1, 0x28, &(0x7f0000000340)=0xb2c, 0x4) 2.273870848s ago: executing program 3 (id=1198): socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpid() r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x47) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r3}, &(0x7f0000000000), &(0x7f00000005c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r4}, 0x18) keyctl$negate(0xd, 0x0, 0xf2, 0xfffffffffffffffe) syz_read_part_table(0x5c7, &(0x7f0000000a40)="$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") 2.015755638s ago: executing program 1 (id=1199): sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x1c42}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x50}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x59}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x5}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) close(r5) 1.462214506s ago: executing program 3 (id=1200): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r1 = getpid() r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioprio_get$uid(0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r5, 0x0, 0x4, &(0x7f0000000000)='\x00', 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000711220000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 801.168453ms ago: executing program 1 (id=1201): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x59}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x5}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) close(r4) syz_io_uring_setup(0x6165, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0x0, 0x3}, 0x0, 0x0) 777.432563ms ago: executing program 2 (id=1202): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10", 0x5a, 0x0, 0x0, 0x0) 745.630283ms ago: executing program 2 (id=1203): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x18) io_cancel(0x0, &(0x7f0000001800)={0x0, 0x0, 0x0, 0x8, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x31a5, 0x0, 0x3}, 0x0) 691.812093ms ago: executing program 2 (id=1204): prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0100000004000000e27f0000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x184, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000006e370018110000", @ANYRES32=r1, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x5, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 691.629963ms ago: executing program 2 (id=1205): socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpid() sched_setscheduler(0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x47) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r3}, &(0x7f0000000000), &(0x7f00000005c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r4}, 0x18) keyctl$negate(0xd, 0x0, 0xf2, 0xfffffffffffffffe) r5 = syz_open_procfs(0x0, &(0x7f0000001940)='net/snmp\x00') read$FUSE(r5, &(0x7f0000001e80)={0x2020}, 0x2062) syz_read_part_table(0x5c7, &(0x7f0000000a40)="$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") 0s ago: executing program 3 (id=1206): socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpid() sched_setscheduler(0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x47) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r3}, 0x0, &(0x7f00000005c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r4}, 0x18) keyctl$negate(0xd, 0x0, 0xf2, 0xfffffffffffffffe) r5 = syz_open_procfs(0x0, &(0x7f0000001940)='net/snmp\x00') read$FUSE(r5, &(0x7f0000001e80)={0x2020}, 0x2062) syz_read_part_table(0x5c7, &(0x7f0000000a40)="$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") kernel console output (not intermixed with test programs): (loop4): unmounting filesystem. [ 271.248082][ T340] usb 3-1: device not accepting address 12, error -71 [ 271.284644][ T295] EXT4-fs (loop2): unmounting filesystem. [ 271.547229][ T2898] loop0: detected capacity change from 0 to 512 [ 271.578349][ T595] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 271.594506][ T2898] EXT4-fs: Ignoring removed mblk_io_submit option [ 271.674273][ T2898] EXT4-fs error (device loop0): ext4_get_branch:178: inode #13: block 2: comm syz.0.570: invalid block [ 271.723904][ T2898] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.570: invalid indirect mapped block 10 (level 1) [ 271.737487][ T2898] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.570: invalid indirect mapped block 8 (level 1) [ 271.750602][ T740] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 271.758622][ T2898] EXT4-fs (loop0): 1 truncate cleaned up [ 271.764225][ T2898] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 271.818091][ T595] usb 5-1: Using ep0 maxpacket: 32 [ 271.825793][ T595] usb 5-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 271.834836][ T595] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.842881][ T595] usb 5-1: Product: syz [ 271.846993][ T595] usb 5-1: Manufacturer: syz [ 271.851654][ T595] usb 5-1: SerialNumber: syz [ 272.221964][ T595] usb 5-1: config 0 descriptor?? [ 272.269385][ T294] EXT4-fs (loop3): unmounting filesystem. [ 272.299237][ T2907] loop3: detected capacity change from 0 to 256 [ 272.326203][ T2907] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 272.378110][ T740] usb 2-1: Using ep0 maxpacket: 32 [ 272.385905][ T740] usb 2-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 272.395080][ T740] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.411236][ T740] usb 2-1: Product: syz [ 272.418170][ T740] usb 2-1: Manufacturer: syz [ 272.422594][ T740] usb 2-1: SerialNumber: syz [ 272.436485][ T740] usb 2-1: config 0 descriptor?? [ 272.470002][ T293] EXT4-fs (loop0): unmounting filesystem. [ 272.682369][ T595] rtl8150 5-1:0.0: couldn't reset the device [ 272.692687][ T595] rtl8150: probe of 5-1:0.0 failed with error -5 [ 272.735261][ T595] usb 5-1: USB disconnect, device number 9 [ 272.888203][ T28] audit: type=1400 audit(1737885872.835:465): avc: denied { unlink } for pid=85 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 272.938423][ T740] rtl8150 2-1:0.0: couldn't reset the device [ 272.944422][ T740] rtl8150: probe of 2-1:0.0 failed with error -5 [ 272.951604][ T740] usb 2-1: USB disconnect, device number 10 [ 273.090670][ T2917] loop2: detected capacity change from 0 to 512 [ 273.097696][ T2917] EXT4-fs: Ignoring removed mblk_io_submit option [ 273.114291][ T2917] EXT4-fs error (device loop2): ext4_get_branch:178: inode #13: block 2: comm syz.2.576: invalid block [ 273.126001][ T2917] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.576: invalid indirect mapped block 10 (level 1) [ 273.146231][ T2917] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.576: invalid indirect mapped block 8 (level 1) [ 273.165780][ T2917] EXT4-fs (loop2): 1 truncate cleaned up [ 273.182511][ T2917] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 273.386739][ T2923] loop3: detected capacity change from 0 to 40427 [ 273.394518][ T2923] F2FS-fs (loop3): invalid crc value [ 273.401527][ T2923] F2FS-fs (loop3): Found nat_bits in checkpoint [ 273.665969][ T2923] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 273.755324][ T28] audit: type=1400 audit(1737885873.765:466): avc: denied { ioctl } for pid=2922 comm="syz.3.578" path="/116/file1/bus" dev="loop3" ino=10 ioctlcmd=0xf514 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 273.815208][ T295] EXT4-fs (loop2): unmounting filesystem. [ 273.831913][ T2942] netlink: 'syz.2.582': attribute type 4 has an invalid length. [ 273.839857][ T2942] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.582'. [ 274.048346][ T294] syz-executor: attempt to access beyond end of device [ 274.048346][ T294] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 274.341625][ T740] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 274.831026][ T2965] loop1: detected capacity change from 0 to 512 [ 274.858096][ T740] usb 3-1: Using ep0 maxpacket: 32 [ 274.866382][ T740] usb 3-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 274.886193][ T2965] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 274.890254][ T740] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.900639][ T2965] ext4 filesystem being mounted at /104/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 274.913261][ T740] usb 3-1: Product: syz [ 274.917355][ T740] usb 3-1: Manufacturer: syz [ 274.921752][ T740] usb 3-1: SerialNumber: syz [ 274.927378][ T740] usb 3-1: config 0 descriptor?? [ 275.492353][ T740] rtl8150 3-1:0.0: couldn't reset the device [ 275.498323][ T740] rtl8150: probe of 3-1:0.0 failed with error -5 [ 275.507193][ T740] usb 3-1: USB disconnect, device number 14 [ 275.709369][ T292] EXT4-fs (loop1): unmounting filesystem. [ 276.238704][ T2988] loop4: detected capacity change from 0 to 1024 [ 276.379817][ T2988] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 276.388382][ T2988] ext4 filesystem being mounted at /126/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 276.410405][ T2994] netlink: 'syz.3.593': attribute type 4 has an invalid length. [ 276.441546][ T2994] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.593'. [ 277.011496][ T296] EXT4-fs (loop4): unmounting filesystem. [ 277.553738][ T3010] loop3: detected capacity change from 0 to 512 [ 277.570759][ T3010] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 277.579665][ T3010] ext4 filesystem being mounted at /121/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 279.027744][ T645] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 279.892579][ T645] usb 2-1: Using ep0 maxpacket: 32 [ 281.345356][ T294] EXT4-fs (loop3): unmounting filesystem. [ 281.357573][ T645] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 281.378761][ T645] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 281.383423][ T3032] loop2: detected capacity change from 0 to 1024 [ 281.405418][ T3032] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 281.413821][ T3032] ext4 filesystem being mounted at /119/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 281.521436][ T645] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 281.541460][ T645] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.549496][ T645] usb 2-1: Product: syz [ 281.553524][ T645] usb 2-1: Manufacturer: syz [ 281.557941][ T645] usb 2-1: SerialNumber: syz [ 282.342500][ T295] EXT4-fs (loop2): unmounting filesystem. [ 282.349460][ T645] cdc_ncm 2-1:1.0: bind() failure [ 282.411918][ T645] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 282.471821][ T645] cdc_ncm 2-1:1.1: bind() failure [ 282.504412][ T645] usb 2-1: USB disconnect, device number 11 [ 283.094087][ T957] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 283.139311][ T3060] loop1: detected capacity change from 0 to 1024 [ 283.192573][ T3060] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 283.200957][ T3060] ext4 filesystem being mounted at /107/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 283.278049][ T957] usb 1-1: Using ep0 maxpacket: 32 [ 283.285589][ T957] usb 1-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 283.304989][ T957] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.324181][ T957] usb 1-1: Product: syz [ 283.332407][ T957] usb 1-1: Manufacturer: syz [ 283.338193][ T957] usb 1-1: SerialNumber: syz [ 283.343435][ T957] usb 1-1: config 0 descriptor?? [ 283.351117][ T3073] loop3: detected capacity change from 0 to 2048 [ 283.448436][ T3073] loop3: p1 < > p2 p3 < p5 > [ 283.452987][ T3073] loop3: partition table partially beyond EOD, truncated [ 283.498952][ T3073] loop3: p1 start 4278190080 is beyond EOD, truncated [ 283.505580][ T3073] loop3: p2 start 16908288 is beyond EOD, truncated [ 283.529721][ T292] EXT4-fs (loop1): unmounting filesystem. [ 283.535849][ T3073] loop3: p5 start 16908288 is beyond EOD, truncated [ 283.643213][ T957] rtl8150 1-1:0.0: couldn't reset the device [ 283.649297][ T957] rtl8150: probe of 1-1:0.0 failed with error -5 [ 283.659415][ T957] usb 1-1: USB disconnect, device number 12 [ 283.908089][ T740] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 284.099125][ T740] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.109897][ T740] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 284.121267][ T740] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 284.130381][ T740] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.138885][ T740] usb 2-1: Product: syz [ 284.142981][ T740] usb 2-1: Manufacturer: syz [ 284.147366][ T740] usb 2-1: SerialNumber: syz [ 285.161093][ T3092] loop0: detected capacity change from 0 to 1024 [ 285.167976][ T740] cdc_mbim 2-1:1.0: bind() failure [ 285.174002][ T740] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 285.188386][ T740] cdc_ncm 2-1:1.1: bind() failure [ 285.194235][ T740] usb 2-1: USB disconnect, device number 12 [ 285.223007][ T3100] loop4: detected capacity change from 0 to 512 [ 285.241612][ T3092] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 285.249975][ T3092] ext4 filesystem being mounted at /124/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 285.269598][ T3100] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 285.278430][ T3100] ext4 filesystem being mounted at /131/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 286.496307][ T3111] loop3: detected capacity change from 0 to 4096 [ 286.781287][ T293] EXT4-fs (loop0): unmounting filesystem. [ 286.802903][ T3111] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 287.529738][ T296] EXT4-fs (loop4): unmounting filesystem. [ 287.780827][ T294] EXT4-fs (loop3): unmounting filesystem. [ 288.017992][ T348] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 288.228185][ T348] usb 1-1: Using ep0 maxpacket: 32 [ 288.235977][ T348] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 288.285526][ T348] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 288.330602][ T348] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 288.366603][ T348] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.383171][ T348] usb 1-1: Product: syz [ 288.389289][ T348] usb 1-1: Manufacturer: syz [ 288.397423][ T348] usb 1-1: SerialNumber: syz [ 288.530801][ T740] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 288.552914][ T3140] loop4: detected capacity change from 0 to 256 [ 288.571004][ T3140] exfat: Bad value for 'uid' [ 288.608625][ T3120] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 288.679558][ T3142] loop4: detected capacity change from 0 to 2048 [ 288.690247][ T3142] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 288.698844][ T3142] ext4 filesystem being mounted at /133/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 288.728044][ T740] usb 4-1: Using ep0 maxpacket: 32 [ 288.741735][ T3147] loop1: detected capacity change from 0 to 512 [ 288.749257][ T740] usb 4-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 288.758219][ T740] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.771844][ T740] usb 4-1: Product: syz [ 288.775853][ T740] usb 4-1: Manufacturer: syz [ 288.781792][ T3147] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 288.785692][ T3148] loop2: detected capacity change from 0 to 2048 [ 288.791210][ T3147] ext4 filesystem being mounted at /110/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 288.807160][ T740] usb 4-1: SerialNumber: syz [ 288.812555][ T740] usb 4-1: config 0 descriptor?? [ 288.894669][ T3148] loop2: p1 < > p2 p3 < p5 > [ 288.899391][ T3148] loop2: partition table partially beyond EOD, truncated [ 288.906528][ T3148] loop2: p1 start 4278190080 is beyond EOD, truncated [ 288.913610][ T3148] loop2: p2 start 16908288 is beyond EOD, truncated [ 288.921798][ T3148] loop2: p5 start 16908288 is beyond EOD, truncated [ 289.288897][ T3120] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 289.496438][ T348] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 289.505957][ T348] cdc_ncm 1-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 289.512087][ T740] rtl8150 4-1:0.0: couldn't reset the device [ 289.518084][ T348] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 289.520312][ T740] rtl8150: probe of 4-1:0.0 failed with error -5 [ 289.525334][ T296] EXT4-fs (loop4): unmounting filesystem. [ 289.536937][ T740] usb 4-1: USB disconnect, device number 8 [ 289.670157][ T292] EXT4-fs (loop1): unmounting filesystem. [ 289.721957][ T348] cdc_ncm 1-1:1.0 eth1: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 289.766610][ T348] usb 1-1: USB disconnect, device number 13 [ 289.964221][ T348] cdc_ncm 1-1:1.0 eth1: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 290.604801][ T3175] loop3: detected capacity change from 0 to 2048 [ 290.722363][ T3175] loop3: p1 < > p2 p3 < p5 > [ 290.726993][ T3175] loop3: partition table partially beyond EOD, truncated [ 290.734987][ T3175] loop3: p1 start 4278190080 is beyond EOD, truncated [ 290.742480][ T3175] loop3: p2 start 16908288 is beyond EOD, truncated [ 291.649150][ T3178] loop0: detected capacity change from 0 to 1024 [ 291.694349][ T3175] loop3: p5 start 16908288 is beyond EOD, truncated [ 291.863603][ T3178] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 291.872000][ T3178] ext4 filesystem being mounted at /126/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 291.894669][ T3192] fuse: Bad value for 'rootmode' [ 292.122852][ T3198] loop2: detected capacity change from 0 to 512 [ 292.169972][ T293] EXT4-fs (loop0): unmounting filesystem. [ 292.257011][ T3198] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 292.266284][ T3198] ext4 filesystem being mounted at /126/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 293.823467][ T3217] loop0: detected capacity change from 0 to 512 [ 293.865497][ T3217] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 293.874286][ T3217] ext4 filesystem being mounted at /128/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 294.278129][ T348] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 294.471315][ T293] EXT4-fs (loop0): unmounting filesystem. [ 294.478314][ T295] EXT4-fs (loop2): unmounting filesystem. [ 296.960357][ T3242] loop0: detected capacity change from 0 to 4096 [ 296.998141][ T348] usb 2-1: Using ep0 maxpacket: 32 [ 297.728685][ T3242] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 298.557630][ T348] usb 2-1: device descriptor read/all, error -71 [ 298.857463][ T293] EXT4-fs (loop0): unmounting filesystem. [ 298.870767][ T3249] loop4: detected capacity change from 0 to 4096 [ 298.922605][ T3249] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 299.929814][ T3264] fuse: Unknown parameter 'use0x0000000000000003' [ 300.416043][ T296] EXT4-fs (loop4): unmounting filesystem. [ 301.225516][ T3278] loop0: detected capacity change from 0 to 1024 [ 301.246100][ T3278] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 301.254865][ T3278] ext4 filesystem being mounted at /131/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 301.810690][ T3292] loop4: detected capacity change from 0 to 4096 [ 302.701138][ T3294] loop3: detected capacity change from 0 to 4096 [ 304.450535][ T348] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 304.497849][ T293] EXT4-fs (loop0): unmounting filesystem. [ 304.567816][ T3292] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 304.740310][ T3294] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 305.465620][ T736] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 305.590021][ T3306] loop1: detected capacity change from 0 to 128 [ 305.608113][ T3306] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 305.645891][ T296] EXT4-fs (loop4): unmounting filesystem. [ 305.802226][ T294] EXT4-fs (loop3): unmounting filesystem. [ 305.858163][ T60] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 306.138171][ T60] usb 1-1: Using ep0 maxpacket: 32 [ 306.155252][ T60] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 306.277592][ T60] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 306.359735][ T60] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 306.420891][ T60] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.430966][ T3316] loop2: detected capacity change from 0 to 4096 [ 306.475029][ T60] usb 1-1: Product: syz [ 306.490350][ T3316] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 306.508315][ T60] usb 1-1: Manufacturer: syz [ 306.525931][ T60] usb 1-1: SerialNumber: syz [ 306.663260][ T3322] fuse: Unknown parameter 'use0x0000000000000003' [ 306.745683][ T3300] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 307.060866][ T3328] loop1: detected capacity change from 0 to 2048 [ 307.119828][ T3328] loop1: p1 < > p2 p3 < p5 > [ 307.124420][ T3328] loop1: partition table partially beyond EOD, truncated [ 307.131642][ T3328] loop1: p1 start 4278190080 is beyond EOD, truncated [ 307.138342][ T3328] loop1: p2 start 16908288 is beyond EOD, truncated [ 307.152349][ T3328] loop1: p5 start 16908288 is beyond EOD, truncated [ 307.368926][ T3300] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 307.578186][ T60] cdc_ncm 1-1:1.0: failed to get mac address [ 307.586277][ T60] cdc_ncm 1-1:1.0: bind() failure [ 307.608123][ T60] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 307.624953][ T60] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 307.648430][ T60] usb 1-1: USB disconnect, device number 14 [ 307.917009][ T3336] loop3: detected capacity change from 0 to 512 [ 308.222305][ T3336] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 308.231635][ T3336] ext4 filesystem being mounted at /132/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 308.479047][ T6] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 308.593025][ T294] EXT4-fs (loop3): unmounting filesystem. [ 308.682430][ T3349] loop1: detected capacity change from 0 to 512 [ 308.699447][ T6] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 308.718252][ T6] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 308.729702][ T3349] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 308.738485][ T3349] ext4 filesystem being mounted at /119/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 308.768040][ T736] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 308.776272][ T6] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 308.824442][ T6] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.832316][ T6] usb 5-1: Product: syz [ 308.836267][ T6] usb 5-1: Manufacturer: syz [ 308.840753][ T6] usb 5-1: SerialNumber: syz [ 308.879721][ T3353] loop3: detected capacity change from 0 to 512 [ 308.886085][ T3353] EXT4-fs: Ignoring removed mblk_io_submit option [ 308.894766][ T3353] EXT4-fs error (device loop3): ext4_get_branch:178: inode #13: block 2: comm syz.3.666: invalid block [ 308.906488][ T3353] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.666: invalid indirect mapped block 10 (level 1) [ 308.936422][ T3353] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.666: invalid indirect mapped block 8 (level 1) [ 308.950827][ T3353] EXT4-fs (loop3): 1 truncate cleaned up [ 308.956315][ T3353] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 309.108375][ T736] usb 1-1: Using ep0 maxpacket: 32 [ 309.141461][ T6] cdc_mbim 5-1:1.0: bind() failure [ 309.215247][ T736] usb 1-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 309.292653][ T6] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 309.303753][ T6] cdc_ncm 5-1:1.1: bind() failure [ 309.309758][ T736] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.396473][ T6] usb 5-1: USB disconnect, device number 10 [ 309.407094][ T736] usb 1-1: Product: syz [ 309.412297][ T736] usb 1-1: Manufacturer: syz [ 309.588215][ T736] usb 1-1: SerialNumber: syz [ 309.593330][ T736] usb 1-1: config 0 descriptor?? [ 309.641621][ T292] EXT4-fs (loop1): unmounting filesystem. [ 309.908963][ T295] EXT4-fs (loop2): unmounting filesystem. [ 309.922720][ T294] EXT4-fs (loop3): unmounting filesystem. [ 309.971331][ T3368] loop3: detected capacity change from 0 to 256 [ 309.987938][ T3368] exfat: Bad value for 'uid' [ 310.029515][ T736] rtl8150 1-1:0.0: couldn't reset the device [ 310.035485][ T736] rtl8150: probe of 1-1:0.0 failed with error -5 [ 310.048798][ T736] usb 1-1: USB disconnect, device number 15 [ 310.461439][ T3377] loop3: detected capacity change from 0 to 1024 [ 310.606328][ T3377] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 310.614695][ T3377] ext4 filesystem being mounted at /135/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 310.633176][ T3376] loop2: detected capacity change from 0 to 2048 [ 310.700616][ T3376] loop2: p1 < > p2 p3 < p5 > [ 310.711383][ T3376] loop2: partition table partially beyond EOD, truncated [ 310.732809][ T3376] loop2: p1 start 4278190080 is beyond EOD, truncated [ 310.751849][ T3376] loop2: p2 start 16908288 is beyond EOD, truncated [ 310.772319][ T3376] loop2: p5 start 16908288 is beyond EOD, truncated [ 310.938094][ T6] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 311.047335][ T294] EXT4-fs (loop3): unmounting filesystem. [ 311.465011][ T3390] loop1: detected capacity change from 0 to 2048 [ 312.299326][ T6] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 312.310328][ T6] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 312.322102][ T6] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 313.921292][ T6] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.119328][ T3408] loop3: detected capacity change from 0 to 4096 [ 315.123275][ T3410] loop2: detected capacity change from 0 to 512 [ 319.935815][ T349] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 319.943634][ T3408] EXT4-fs: failed to create workqueue [ 319.948865][ T3408] EXT4-fs (loop3): mount failed [ 319.956569][ T3410] EXT4-fs warning (device loop2): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop2. [ 321.463974][ T3430] loop4: detected capacity change from 0 to 4096 [ 321.489571][ T3430] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 322.058480][ T6] usb 1-1: Product: syz [ 322.062911][ T6] usb 1-1: Manufacturer: syz [ 322.067354][ T6] usb 1-1: SerialNumber: syz [ 322.280750][ T6] usb 1-1: can't set config #1, error -71 [ 322.286781][ T6] usb 1-1: USB disconnect, device number 16 [ 322.387036][ T296] EXT4-fs (loop4): unmounting filesystem. [ 322.490185][ T3436] loop1: detected capacity change from 0 to 4096 [ 322.501694][ T3436] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 322.986970][ T3448] loop3: detected capacity change from 0 to 1024 [ 323.265759][ T3447] loop2: detected capacity change from 0 to 4096 [ 324.146754][ T292] EXT4-fs (loop1): unmounting filesystem. [ 324.161840][ T3447] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 324.656952][ T3448] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 324.665308][ T3448] ext4 filesystem being mounted at /138/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 324.769816][ T295] EXT4-fs (loop2): unmounting filesystem. [ 324.791634][ T3463] netlink: 'syz.2.690': attribute type 4 has an invalid length. [ 324.799253][ T3463] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.690'. [ 324.828584][ T294] EXT4-fs (loop3): unmounting filesystem. [ 325.142792][ T3472] loop3: detected capacity change from 0 to 4096 [ 325.167438][ T3472] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 327.021312][ T6] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 327.538128][ T3480] loop4: detected capacity change from 0 to 4096 [ 327.768207][ T3480] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 328.526485][ T3481] loop1: detected capacity change from 0 to 512 [ 328.542157][ T294] EXT4-fs (loop3): unmounting filesystem. [ 328.652176][ T3481] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 328.669381][ T3481] ext4 filesystem being mounted at /126/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 329.204093][ T292] EXT4-fs (loop1): unmounting filesystem. [ 330.518728][ T296] EXT4-fs (loop4): unmounting filesystem. [ 330.612861][ T3512] loop2: detected capacity change from 0 to 4096 [ 330.730161][ T3512] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 330.878163][ T3523] loop3: detected capacity change from 0 to 1024 [ 330.953487][ T3523] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 330.962554][ T3523] ext4 filesystem being mounted at /141/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 331.078766][ T349] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 331.312960][ T295] EXT4-fs (loop2): unmounting filesystem. [ 331.337417][ T3528] loop2: detected capacity change from 0 to 512 [ 331.360225][ T3528] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 331.369067][ T3528] ext4 filesystem being mounted at /139/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 331.501210][ T349] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 331.503133][ T294] EXT4-fs (loop3): unmounting filesystem. [ 331.517515][ T349] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 331.665385][ T349] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 331.693133][ T349] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.264579][ T349] usb 5-1: Product: syz [ 332.273811][ T349] usb 5-1: Manufacturer: syz [ 332.314905][ T349] usb 5-1: SerialNumber: syz [ 332.677236][ T3537] loop3: detected capacity change from 0 to 512 [ 332.728640][ T295] EXT4-fs (loop2): unmounting filesystem. [ 332.784628][ T3537] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 333.274671][ T349] cdc_mbim 5-1:1.0: bind() failure [ 333.286023][ T3537] ext4 filesystem being mounted at /142/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 333.298813][ T349] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 333.305499][ T349] cdc_ncm 5-1:1.1: bind() failure [ 333.603914][ T3553] loop1: detected capacity change from 0 to 4096 [ 333.614841][ T349] usb 5-1: USB disconnect, device number 11 [ 334.026902][ T3553] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 335.885761][ T3564] loop0: detected capacity change from 0 to 4096 [ 336.764552][ T3564] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 338.448146][ T3571] loop4: detected capacity change from 0 to 4096 [ 338.868813][ T292] EXT4-fs (loop1): unmounting filesystem. [ 338.915796][ T3571] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 339.267187][ T294] EXT4-fs (loop3): unmounting filesystem. [ 339.492127][ T293] EXT4-fs (loop0): unmounting filesystem. [ 339.689334][ T296] EXT4-fs (loop4): unmounting filesystem. [ 339.712165][ T3593] loop4: detected capacity change from 0 to 512 [ 339.738207][ T349] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 339.893490][ T3591] loop3: detected capacity change from 0 to 4096 [ 339.969100][ T3593] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 339.978068][ T3593] ext4 filesystem being mounted at /155/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 339.996187][ T3591] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 340.018321][ T349] usb 3-1: Using ep0 maxpacket: 32 [ 340.097366][ T349] usb 3-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 340.132326][ T349] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.140237][ T349] usb 3-1: Product: syz [ 340.144378][ T349] usb 3-1: Manufacturer: syz [ 340.148846][ T349] usb 3-1: SerialNumber: syz [ 340.153780][ T349] usb 3-1: config 0 descriptor?? [ 340.779591][ T3607] loop1: detected capacity change from 0 to 4096 [ 341.850801][ T3609] loop0: detected capacity change from 0 to 4096 [ 343.758667][ T3609] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 343.832798][ T3607] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 343.936213][ T349] rtl8150 3-1:0.0: couldn't reset the device [ 344.153076][ T296] EXT4-fs (loop4): unmounting filesystem. [ 344.172067][ T349] rtl8150: probe of 3-1:0.0 failed with error -5 [ 344.193016][ T349] usb 3-1: USB disconnect, device number 16 [ 344.267516][ T293] EXT4-fs (loop0): unmounting filesystem. [ 344.363084][ T294] EXT4-fs (loop3): unmounting filesystem. [ 344.575084][ T3622] loop2: detected capacity change from 0 to 1024 [ 344.734831][ T3622] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 344.743294][ T3622] ext4 filesystem being mounted at /144/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 344.760293][ T292] EXT4-fs (loop1): unmounting filesystem. [ 344.842534][ T3635] loop4: detected capacity change from 0 to 128 [ 344.890885][ T3635] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 345.335604][ T3637] loop1: detected capacity change from 0 to 4096 [ 345.369071][ T295] EXT4-fs (loop2): unmounting filesystem. [ 345.460055][ T3637] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 346.205127][ T3644] loop0: detected capacity change from 0 to 512 [ 346.212250][ T3644] EXT4-fs: Ignoring removed mblk_io_submit option [ 346.222282][ T3644] EXT4-fs error (device loop0): ext4_get_branch:178: inode #13: block 2: comm syz.0.721: invalid block [ 347.040492][ T3644] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.721: invalid indirect mapped block 10 (level 1) [ 347.064228][ T3647] loop2: detected capacity change from 0 to 4096 [ 347.173831][ T3644] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.721: invalid indirect mapped block 8 (level 1) [ 347.208548][ T3644] EXT4-fs (loop0): 1 truncate cleaned up [ 347.214067][ T3644] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 347.253867][ T3647] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 347.392368][ T292] EXT4-fs (loop1): unmounting filesystem. [ 347.808724][ T295] EXT4-fs (loop2): unmounting filesystem. [ 347.878430][ T3662] loop2: detected capacity change from 0 to 256 [ 347.899178][ T3662] exfat: Bad value for 'uid' [ 347.922985][ T3664] loop3: detected capacity change from 0 to 2048 [ 347.968516][ T3664] loop3: p1 < > p2 p3 < p5 > [ 347.973063][ T3664] loop3: partition table partially beyond EOD, truncated [ 347.980073][ T3664] loop3: p1 start 4278190080 is beyond EOD, truncated [ 347.986701][ T3664] loop3: p2 start 16908288 is beyond EOD, truncated [ 347.994570][ T3664] loop3: p5 start 16908288 is beyond EOD, truncated [ 348.142021][ T3667] loop2: detected capacity change from 0 to 2048 [ 348.183294][ T3667] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 348.211188][ T3667] ext4 filesystem being mounted at /147/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 348.402283][ T295] EXT4-fs (loop2): unmounting filesystem. [ 348.408803][ T293] EXT4-fs (loop0): unmounting filesystem. [ 348.734303][ T3681] loop4: detected capacity change from 0 to 512 [ 348.758662][ T3685] fuse: Bad value for 'fd' [ 348.917848][ T3688] loop1: detected capacity change from 0 to 4096 [ 348.962799][ T736] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 348.999508][ T3681] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 349.008451][ T3681] ext4 filesystem being mounted at /158/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 349.220227][ T3688] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 350.058131][ T3690] loop3: detected capacity change from 0 to 4096 [ 350.066735][ T3690] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 350.226537][ T3698] netlink: 'syz.2.737': attribute type 4 has an invalid length. [ 350.262828][ T3698] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.737'. [ 350.403345][ T296] EXT4-fs (loop4): unmounting filesystem. [ 350.493814][ T292] EXT4-fs (loop1): unmounting filesystem. [ 350.529215][ T3705] loop4: detected capacity change from 0 to 128 [ 350.546206][ T3705] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 350.712155][ T736] usb 1-1: Using ep0 maxpacket: 32 [ 350.737672][ T736] usb 1-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 350.780470][ T736] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.820561][ T736] usb 1-1: Product: syz [ 351.083099][ T3711] loop1: detected capacity change from 0 to 4096 [ 351.106620][ T294] EXT4-fs (loop3): unmounting filesystem. [ 351.126158][ T3711] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 352.028587][ T736] usb 1-1: Manufacturer: syz [ 352.033711][ T736] usb 1-1: SerialNumber: syz [ 352.048261][ T736] usb 1-1: config 0 descriptor?? [ 352.058073][ T736] usb 1-1: can't set config #0, error -71 [ 352.064113][ T736] usb 1-1: USB disconnect, device number 18 [ 352.279436][ T292] EXT4-fs (loop1): unmounting filesystem. [ 352.414027][ T3732] fuse: Bad value for 'fd' [ 352.428167][ T349] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 352.465015][ T3735] loop4: detected capacity change from 0 to 512 [ 352.480543][ T3735] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 352.489404][ T3735] ext4 filesystem being mounted at /161/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 352.668116][ T349] usb 3-1: Using ep0 maxpacket: 32 [ 352.677699][ T349] usb 3-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 352.691366][ T349] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.765149][ T349] usb 3-1: Product: syz [ 352.830347][ T349] usb 3-1: Manufacturer: syz [ 352.835423][ T349] usb 3-1: SerialNumber: syz [ 352.880881][ T349] usb 3-1: config 0 descriptor?? [ 353.181169][ T349] rtl8150 3-1:0.0: couldn't reset the device [ 353.187047][ T349] rtl8150: probe of 3-1:0.0 failed with error -5 [ 353.197200][ T3750] loop0: detected capacity change from 0 to 512 [ 353.200343][ T349] usb 3-1: USB disconnect, device number 17 [ 353.605380][ T296] EXT4-fs (loop4): unmounting filesystem. [ 353.626125][ T3750] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 353.640509][ T3750] ext4 filesystem being mounted at /145/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 353.664235][ T3761] loop1: detected capacity change from 0 to 512 [ 353.680748][ T3761] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 353.689811][ T3761] ext4 filesystem being mounted at /138/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 354.493119][ T3765] loop4: detected capacity change from 0 to 1024 [ 354.770966][ T3765] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 354.779366][ T3765] ext4 filesystem being mounted at /162/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 355.780121][ T296] EXT4-fs (loop4): unmounting filesystem. [ 355.802334][ T3782] loop4: detected capacity change from 0 to 512 [ 358.040506][ T3782] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 358.049466][ T3782] ext4 filesystem being mounted at /163/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 358.102426][ T293] EXT4-fs (loop0): unmounting filesystem. [ 358.108831][ T292] EXT4-fs (loop1): unmounting filesystem. [ 358.878150][ T3797] loop3: detected capacity change from 0 to 1024 [ 359.210450][ T3797] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 359.218898][ T3797] ext4 filesystem being mounted at /151/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 359.235479][ T3805] fuse: Bad value for 'fd' [ 359.484859][ T294] EXT4-fs (loop3): unmounting filesystem. [ 359.508478][ T3810] loop2: detected capacity change from 0 to 512 [ 359.636704][ T3810] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 359.650053][ T3810] ext4 filesystem being mounted at /155/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 359.692368][ T296] EXT4-fs (loop4): unmounting filesystem. [ 359.889377][ T3822] loop1: detected capacity change from 0 to 2048 [ 361.494066][ T295] EXT4-fs (loop2): unmounting filesystem. [ 361.499653][ T3830] loop0: detected capacity change from 0 to 256 [ 361.499909][ T3830] exfat: Bad value for 'uid' [ 361.999579][ T3836] loop1: detected capacity change from 0 to 4096 [ 362.020171][ T3838] loop2: detected capacity change from 0 to 1024 [ 362.028735][ T3836] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 362.040883][ T3838] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 362.049331][ T3838] ext4 filesystem being mounted at /156/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 362.421467][ T3853] loop0: detected capacity change from 0 to 4096 [ 362.455933][ T295] EXT4-fs (loop2): unmounting filesystem. [ 362.502588][ T3853] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 362.917620][ T292] EXT4-fs (loop1): unmounting filesystem. [ 363.386928][ T3857] fuse: Unknown parameter '0x0000000000000003' [ 363.577868][ T293] EXT4-fs (loop0): unmounting filesystem. [ 363.615715][ T3868] loop0: detected capacity change from 0 to 512 [ 363.630192][ T3868] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 363.639890][ T3868] ext4 filesystem being mounted at /149/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 363.722237][ T3875] loop1: detected capacity change from 0 to 2048 [ 363.778383][ T3875] loop1: p1 < > p2 p3 < p5 > [ 363.785049][ T3875] loop1: partition table partially beyond EOD, truncated [ 363.801486][ T631] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 363.909178][ T3875] loop1: p1 start 4278190080 is beyond EOD, truncated [ 363.983900][ T3875] loop1: p2 start 16908288 is beyond EOD, truncated [ 364.017354][ T3875] loop1: p5 start 16908288 is beyond EOD, truncated [ 364.158100][ T631] usb 4-1: Using ep0 maxpacket: 32 [ 364.166238][ T631] usb 4-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 364.175413][ T631] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.183478][ T631] usb 4-1: Product: syz [ 364.187596][ T631] usb 4-1: Manufacturer: syz [ 364.192070][ T631] usb 4-1: SerialNumber: syz [ 364.203823][ T631] usb 4-1: config 0 descriptor?? [ 365.669048][ T293] EXT4-fs (loop0): unmounting filesystem. [ 365.793159][ T631] rtl8150 4-1:0.0: couldn't reset the device [ 365.804910][ T631] rtl8150: probe of 4-1:0.0 failed with error -5 [ 365.868467][ T631] usb 4-1: USB disconnect, device number 9 [ 366.240864][ T3902] loop0: detected capacity change from 0 to 2048 [ 366.269859][ T3902] loop0: p1 < > p2 p3 < p5 > [ 366.274462][ T3902] loop0: partition table partially beyond EOD, truncated [ 366.281728][ T3902] loop0: p1 start 4278190080 is beyond EOD, truncated [ 366.288413][ T3902] loop0: p2 start 16908288 is beyond EOD, truncated [ 366.302839][ T3902] loop0: p5 start 16908288 is beyond EOD, truncated [ 366.708575][ T3912] fuse: Unknown parameter '0x0000000000000003' [ 366.721284][ T3910] loop1: detected capacity change from 0 to 2048 [ 366.761713][ T3910] loop1: p1 < > p2 p3 < p5 > [ 366.766278][ T3910] loop1: partition table partially beyond EOD, truncated [ 366.776678][ T3910] loop1: p1 start 4278190080 is beyond EOD, truncated [ 366.785688][ T3910] loop1: p2 start 16908288 is beyond EOD, truncated [ 366.896211][ T3910] loop1: p5 start 16908288 is beyond EOD, truncated [ 366.999846][ T3920] loop0: detected capacity change from 0 to 4096 [ 367.024852][ T3920] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 367.087864][ T3923] loop3: detected capacity change from 0 to 512 [ 367.126151][ T3923] EXT4-fs: Ignoring removed mblk_io_submit option [ 367.134938][ T3923] EXT4-fs error (device loop3): ext4_get_branch:178: inode #13: block 2: comm syz.3.784: invalid block [ 367.146566][ T3923] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.784: invalid indirect mapped block 10 (level 1) [ 367.160689][ T3923] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.784: invalid indirect mapped block 8 (level 1) [ 367.174235][ T3923] EXT4-fs (loop3): 1 truncate cleaned up [ 367.179950][ T3923] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 367.309060][ T3926] loop1: detected capacity change from 0 to 512 [ 367.326079][ T3926] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 367.334866][ T3926] ext4 filesystem being mounted at /144/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 369.214567][ T292] EXT4-fs (loop1): unmounting filesystem. [ 369.295602][ T293] EXT4-fs (loop0): unmounting filesystem. [ 369.320654][ T3940] loop1: detected capacity change from 0 to 512 [ 369.375875][ T3940] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 369.384708][ T3940] ext4 filesystem being mounted at /145/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 369.396495][ T294] EXT4-fs (loop3): unmounting filesystem. [ 369.556616][ T3946] loop0: detected capacity change from 0 to 4096 [ 369.582624][ T3946] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 371.006803][ T293] EXT4-fs (loop0): unmounting filesystem. [ 371.027411][ T3961] loop3: detected capacity change from 0 to 256 [ 371.038215][ T292] EXT4-fs (loop1): unmounting filesystem. [ 371.040032][ T3961] exfat: Bad value for 'uid' [ 371.577726][ T3969] loop4: detected capacity change from 0 to 1024 [ 371.594610][ T3972] loop0: detected capacity change from 0 to 2048 [ 371.618519][ T3969] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 371.627293][ T3969] ext4 filesystem being mounted at /172/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 371.809515][ T3972] loop0: p1 < > p2 p3 < p5 > [ 371.814146][ T3972] loop0: partition table partially beyond EOD, truncated [ 371.821427][ T3972] loop0: p1 start 4278190080 is beyond EOD, truncated [ 371.828096][ T3972] loop0: p2 start 16908288 is beyond EOD, truncated [ 371.836434][ T3972] loop0: p5 start 16908288 is beyond EOD, truncated [ 371.958601][ T296] EXT4-fs (loop4): unmounting filesystem. [ 372.111549][ T3988] loop0: detected capacity change from 0 to 256 [ 372.125796][ T3988] exfat: Bad value for 'uid' [ 372.174266][ T3990] loop1: detected capacity change from 0 to 512 [ 372.199960][ T3990] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 372.208870][ T3990] ext4 filesystem being mounted at /147/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 372.258101][ T631] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 372.750612][ T4001] loop0: detected capacity change from 0 to 4096 [ 372.770296][ T4001] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 372.772963][ T3999] loop2: detected capacity change from 0 to 4096 [ 372.788864][ T631] usb 5-1: Using ep0 maxpacket: 32 [ 372.794501][ T3999] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 372.797742][ T631] usb 5-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 372.814248][ T631] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.822148][ T631] usb 5-1: Product: syz [ 372.826325][ T631] usb 5-1: Manufacturer: syz [ 372.831085][ T631] usb 5-1: SerialNumber: syz [ 372.837121][ T631] usb 5-1: config 0 descriptor?? [ 373.091426][ T292] EXT4-fs (loop1): unmounting filesystem. [ 373.244287][ T295] EXT4-fs (loop2): unmounting filesystem. [ 373.318669][ T631] rtl8150 5-1:0.0: couldn't reset the device [ 373.331002][ T293] EXT4-fs (loop0): unmounting filesystem. [ 373.338890][ T631] rtl8150: probe of 5-1:0.0 failed with error -5 [ 373.358232][ T631] usb 5-1: USB disconnect, device number 12 [ 373.466422][ T4013] loop1: detected capacity change from 0 to 2048 [ 373.538329][ T4013] loop1: p1 < > p2 p3 < p5 > [ 373.545842][ T4013] loop1: partition table partially beyond EOD, truncated [ 373.571007][ T4017] loop0: detected capacity change from 0 to 4096 [ 373.578648][ T4013] loop1: p1 start 4278190080 is beyond EOD, truncated [ 373.585247][ T4013] loop1: p2 start 16908288 is beyond EOD, truncated [ 373.593033][ T4013] loop1: p5 start 16908288 is beyond EOD, truncated [ 373.610302][ T4017] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 374.913378][ T4027] loop4: detected capacity change from 0 to 4096 [ 377.364409][ T293] EXT4-fs (loop0): unmounting filesystem. [ 377.370281][ T4027] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 378.461899][ T4041] loop3: detected capacity change from 0 to 2048 [ 379.170969][ T4040] loop2: detected capacity change from 0 to 2048 [ 380.100350][ T296] EXT4-fs (loop4): unmounting filesystem. [ 380.145833][ T4054] netlink: 'syz.2.815': attribute type 4 has an invalid length. [ 380.155993][ T4054] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.815'. [ 380.706421][ T4063] loop2: detected capacity change from 0 to 4096 [ 380.745241][ T4063] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 383.826958][ T4072] loop1: detected capacity change from 0 to 4096 [ 383.886944][ T4072] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 384.111177][ T295] EXT4-fs (loop2): unmounting filesystem. [ 384.639086][ T6] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 384.744421][ T292] EXT4-fs (loop1): unmounting filesystem. [ 385.101959][ T4090] loop1: detected capacity change from 0 to 2048 [ 385.905720][ T4089] loop3: detected capacity change from 0 to 4096 [ 386.100146][ T4089] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 386.361589][ T4096] loop0: detected capacity change from 0 to 2048 [ 386.845850][ T4096] loop0: p1 < > p2 p3 < p5 > [ 386.850452][ T4096] loop0: partition table partially beyond EOD, truncated [ 386.857302][ T4096] loop0: p1 start 4278190080 is beyond EOD, truncated [ 386.863886][ T4096] loop0: p2 start 16908288 is beyond EOD, truncated [ 386.873639][ T4096] loop0: p5 start 16908288 is beyond EOD, truncated [ 388.466772][ T4112] netlink: 'syz.2.826': attribute type 4 has an invalid length. [ 388.474705][ T4112] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.826'. [ 388.479571][ T294] EXT4-fs (loop3): unmounting filesystem. [ 389.348057][ T631] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 389.379968][ T4129] loop4: detected capacity change from 0 to 512 [ 389.440463][ T4129] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 389.450472][ T4129] ext4 filesystem being mounted at /179/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 389.629445][ T4139] loop0: detected capacity change from 0 to 4096 [ 389.636867][ T631] usb 2-1: Using ep0 maxpacket: 32 [ 389.643984][ T4139] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 389.648928][ T631] usb 2-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 389.684707][ T631] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.137690][ T4141] loop3: detected capacity change from 0 to 2048 [ 390.198421][ T4141] loop3: p1 < > p2 p3 < p5 > [ 390.202945][ T4141] loop3: partition table partially beyond EOD, truncated [ 390.209867][ T4141] loop3: p1 start 4278190080 is beyond EOD, truncated [ 390.216402][ T4141] loop3: p2 start 16908288 is beyond EOD, truncated [ 390.235290][ T4141] loop3: p5 start 16908288 is beyond EOD, truncated [ 390.283045][ T631] usb 2-1: Product: syz [ 390.625995][ T296] EXT4-fs (loop4): unmounting filesystem. [ 390.638274][ T631] usb 2-1: Manufacturer: syz [ 390.642711][ T631] usb 2-1: SerialNumber: syz [ 390.650667][ T4148] loop2: detected capacity change from 0 to 2048 [ 390.684291][ T631] usb 2-1: config 0 descriptor?? [ 390.692253][ T293] EXT4-fs (loop0): unmounting filesystem. [ 390.706588][ T4148] loop2: p1 < > p2 p3 < p5 > [ 390.799362][ T4148] loop2: partition table partially beyond EOD, truncated [ 390.816946][ T4148] loop2: p1 start 4278190080 is beyond EOD, truncated [ 390.824136][ T4148] loop2: p2 start 16908288 is beyond EOD, truncated [ 390.838162][ T4148] loop2: p5 start 16908288 is beyond EOD, truncated [ 390.994684][ T4159] loop4: detected capacity change from 0 to 2048 [ 391.377858][ T4160] loop0: detected capacity change from 0 to 4096 [ 391.510297][ T4159] loop4: p1 < > p2 p3 < p5 > [ 391.514860][ T4159] loop4: partition table partially beyond EOD, truncated [ 391.521768][ T4159] loop4: p1 start 4278190080 is beyond EOD, truncated [ 391.528534][ T4159] loop4: p2 start 16908288 is beyond EOD, truncated [ 391.535936][ T4159] loop4: p5 start 16908288 is beyond EOD, truncated [ 391.744608][ T4160] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 391.952759][ T4165] loop4: detected capacity change from 0 to 512 [ 391.969925][ T4167] netlink: 'syz.1.840': attribute type 4 has an invalid length. [ 391.977405][ T4167] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.840'. [ 392.018195][ T4165] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 392.027066][ T4165] ext4 filesystem being mounted at /181/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 393.651209][ T293] EXT4-fs (loop0): unmounting filesystem. [ 393.901382][ T631] rtl8150 2-1:0.0: couldn't reset the device [ 393.907372][ T631] rtl8150: probe of 2-1:0.0 failed with error -5 [ 393.915818][ T631] usb 2-1: USB disconnect, device number 16 [ 393.944893][ T4187] loop3: detected capacity change from 0 to 512 [ 394.313484][ T296] EXT4-fs (loop4): unmounting filesystem. [ 394.331436][ T4187] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 394.352536][ T4187] ext4 filesystem being mounted at /166/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 394.951960][ T4199] loop1: detected capacity change from 0 to 512 [ 394.960948][ T4197] netlink: 'syz.2.846': attribute type 4 has an invalid length. [ 394.983482][ T294] EXT4-fs (loop3): unmounting filesystem. [ 394.989854][ T4197] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.846'. [ 395.001097][ T4199] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 395.010188][ T4199] ext4 filesystem being mounted at /157/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 395.607143][ T4219] loop0: detected capacity change from 0 to 2048 [ 395.618334][ T4220] loop2: detected capacity change from 0 to 2048 [ 395.678322][ T4220] loop2: p1 < > p2 p3 < p5 > [ 395.682970][ T4220] loop2: partition table partially beyond EOD, truncated [ 395.690191][ T4219] loop0: p1 < > p2 p3 < p5 > [ 395.694737][ T4219] loop0: partition table partially beyond EOD, truncated [ 395.701661][ T4220] loop2: p1 start 4278190080 is beyond EOD, truncated [ 395.721906][ T4219] loop0: p1 start 4278190080 is beyond EOD, truncated [ 395.728646][ T4220] loop2: p2 start 16908288 is beyond EOD, truncated [ 395.737005][ T4220] loop2: p5 start 16908288 is beyond EOD, truncated [ 395.748032][ T4219] loop0: p2 start 16908288 is beyond EOD, truncated [ 395.763925][ T4219] loop0: p5 start 16908288 is beyond EOD, truncated [ 395.857396][ T292] EXT4-fs (loop1): unmounting filesystem. [ 395.925602][ T4224] netlink: 'syz.1.852': attribute type 4 has an invalid length. [ 395.948247][ T4224] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.852'. [ 395.988022][ T2039] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 396.314833][ T4231] loop1: detected capacity change from 0 to 4096 [ 396.348329][ T2039] usb 5-1: Using ep0 maxpacket: 32 [ 396.357100][ T2039] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 396.445288][ T4231] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 396.478636][ T2039] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 396.592899][ T2039] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 396.693386][ T2039] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.782543][ T2039] usb 5-1: Product: syz [ 396.829996][ T2039] usb 5-1: Manufacturer: syz [ 396.936184][ T2039] usb 5-1: SerialNumber: syz [ 397.144326][ T4222] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 398.024100][ T4244] loop0: detected capacity change from 0 to 1024 [ 398.070645][ T2039] cdc_ncm 5-1:1.0: failed GET_NTB_PARAMETERS [ 398.076493][ T2039] cdc_ncm 5-1:1.0: bind() failure [ 398.089000][ T2039] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 398.095629][ T2039] cdc_ncm 5-1:1.1: bind() failure [ 398.104749][ T4244] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 398.113092][ T4244] ext4 filesystem being mounted at /167/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 398.342290][ T293] EXT4-fs (loop0): unmounting filesystem. [ 398.351941][ T292] EXT4-fs (loop1): unmounting filesystem. [ 399.736551][ T2039] usb 5-1: USB disconnect, device number 13 [ 400.193190][ T4272] 9pnet_fd: Insufficient options for proto=fd [ 400.235056][ T4276] netlink: 'syz.1.864': attribute type 4 has an invalid length. [ 400.538119][ T4276] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.864'. [ 400.790043][ T4287] loop2: detected capacity change from 0 to 2048 [ 400.838435][ T4287] loop2: p1 < > p2 p3 < p5 > [ 400.842985][ T4287] loop2: partition table partially beyond EOD, truncated [ 400.856049][ T4287] loop2: p1 start 4278190080 is beyond EOD, truncated [ 400.869937][ T4287] loop2: p2 start 16908288 is beyond EOD, truncated [ 400.884638][ T4287] loop2: p5 start 16908288 is beyond EOD, truncated [ 400.898010][ T2039] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 401.032878][ T4291] loop0: detected capacity change from 0 to 256 [ 401.062066][ T4291] exfat: Bad value for 'uid' [ 401.089863][ T2039] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 401.107771][ T2039] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 401.133788][ T2039] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 401.152872][ T2039] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.166249][ T2039] usb 5-1: Product: syz [ 401.172451][ T2039] usb 5-1: Manufacturer: syz [ 401.178174][ T2039] usb 5-1: SerialNumber: syz [ 401.430772][ T2039] cdc_mbim 5-1:1.0: bind() failure [ 401.664178][ T4299] loop3: detected capacity change from 0 to 4096 [ 401.677663][ T2039] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 401.696330][ T2039] cdc_ncm 5-1:1.1: bind() failure [ 401.716145][ T2039] usb 5-1: USB disconnect, device number 14 [ 401.767488][ T4299] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 402.314117][ T4309] loop0: detected capacity change from 0 to 512 [ 402.473245][ T4314] loop2: detected capacity change from 0 to 1024 [ 402.631355][ T4309] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 402.663058][ T294] EXT4-fs (loop3): unmounting filesystem. [ 402.670006][ T4314] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 402.678371][ T4314] ext4 filesystem being mounted at /176/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 402.698167][ T4309] ext4 filesystem being mounted at /172/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 402.851182][ T4326] netlink: 'syz.1.875': attribute type 4 has an invalid length. [ 402.858760][ T4326] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.875'. [ 403.822298][ T295] EXT4-fs (loop2): unmounting filesystem. [ 403.846781][ T4334] netlink: 'syz.1.877': attribute type 4 has an invalid length. [ 403.865810][ T4334] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.877'. [ 403.880961][ T293] EXT4-fs (loop0): unmounting filesystem. [ 404.479768][ T4323] loop3: detected capacity change from 0 to 4096 [ 404.511012][ T4323] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 405.506182][ T4366] loop1: detected capacity change from 0 to 512 [ 405.529764][ T4366] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 405.546532][ T294] EXT4-fs (loop3): unmounting filesystem. [ 405.552333][ T4366] ext4 filesystem being mounted at /170/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 406.297935][ T4383] loop4: detected capacity change from 0 to 1024 [ 406.513928][ T4389] loop2: detected capacity change from 0 to 512 [ 406.520395][ T4389] EXT4-fs: Ignoring removed mblk_io_submit option [ 406.579673][ T4383] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 406.588133][ T4383] ext4 filesystem being mounted at /187/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 406.604629][ T4389] EXT4-fs error (device loop2): ext4_get_branch:178: inode #13: block 2: comm syz.2.890: invalid block [ 406.617589][ T4389] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.890: invalid indirect mapped block 10 (level 1) [ 406.631033][ T4389] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.890: invalid indirect mapped block 8 (level 1) [ 406.644745][ T4389] EXT4-fs (loop2): 1 truncate cleaned up [ 406.645040][ T292] EXT4-fs (loop1): unmounting filesystem. [ 406.650272][ T4389] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 406.757029][ T296] EXT4-fs (loop4): unmounting filesystem. [ 408.030881][ T4404] loop0: detected capacity change from 0 to 4096 [ 408.057606][ T295] EXT4-fs (loop2): unmounting filesystem. [ 408.106763][ T4404] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 408.768953][ T4409] loop4: detected capacity change from 0 to 256 [ 408.775307][ T4409] exfat: Bad value for 'uid' [ 408.981077][ T293] EXT4-fs (loop0): unmounting filesystem. [ 409.893365][ T4416] loop2: detected capacity change from 0 to 4096 [ 409.926000][ T4416] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 410.710742][ T349] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 412.466549][ T369] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 412.528154][ T4438] loop1: detected capacity change from 0 to 512 [ 412.613798][ T4438] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 412.638406][ T4438] ext4 filesystem being mounted at /173/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 412.979644][ T295] EXT4-fs (loop2): unmounting filesystem. [ 413.018027][ T369] usb 1-1: Using ep0 maxpacket: 32 [ 413.025556][ T369] usb 1-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 413.035546][ T369] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.043453][ T369] usb 1-1: Product: syz [ 413.047390][ T369] usb 1-1: Manufacturer: syz [ 413.069703][ T369] usb 1-1: SerialNumber: syz [ 413.088783][ T369] usb 1-1: config 0 descriptor?? [ 413.098997][ T369] usb 1-1: can't set config #0, error -71 [ 414.577257][ T369] usb 1-1: USB disconnect, device number 19 [ 414.639488][ T292] EXT4-fs (loop1): unmounting filesystem. [ 414.741175][ T4473] loop1: detected capacity change from 0 to 256 [ 414.747654][ T4473] exfat: Bad value for 'uid' [ 417.100349][ T4487] loop2: detected capacity change from 0 to 512 [ 417.148033][ T4487] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 417.168100][ T4487] ext4 filesystem being mounted at /183/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 417.242838][ T4499] loop0: detected capacity change from 0 to 512 [ 419.085884][ T4499] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 419.094882][ T4499] ext4 filesystem being mounted at /181/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 420.058298][ T4511] loop4: detected capacity change from 0 to 4096 [ 420.150315][ T295] EXT4-fs (loop2): unmounting filesystem. [ 420.434745][ T4511] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 421.527779][ T4521] loop2: detected capacity change from 0 to 4096 [ 421.577832][ T293] EXT4-fs (loop0): unmounting filesystem. [ 421.584962][ T296] EXT4-fs (loop4): unmounting filesystem. [ 421.677282][ T4521] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 422.297613][ T295] EXT4-fs (loop2): unmounting filesystem. [ 422.348872][ T4536] loop0: detected capacity change from 0 to 512 [ 422.418881][ T4539] loop4: detected capacity change from 0 to 256 [ 422.443470][ T4539] exfat: Bad value for 'uid' [ 422.466308][ T4543] loop1: detected capacity change from 0 to 256 [ 422.474965][ T4536] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 422.479000][ T4533] loop3: detected capacity change from 0 to 4096 [ 422.490544][ T4543] exfat: Bad value for 'uid' [ 422.495302][ T4536] ext4 filesystem being mounted at /182/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 422.497246][ T4540] loop2: detected capacity change from 0 to 1024 [ 422.533695][ T4540] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 422.542052][ T4540] ext4 filesystem being mounted at /185/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 422.556361][ T4533] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 422.858281][ T60] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 423.058057][ T60] usb 5-1: Using ep0 maxpacket: 32 [ 423.065312][ T60] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 423.125960][ T60] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 423.220697][ T60] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 423.230487][ T295] EXT4-fs (loop2): unmounting filesystem. [ 423.250026][ T60] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.265897][ T60] usb 5-1: Product: syz [ 423.272567][ T60] usb 5-1: Manufacturer: syz [ 423.281410][ T60] usb 5-1: SerialNumber: syz [ 423.290419][ T293] EXT4-fs (loop0): unmounting filesystem. [ 423.709874][ T4553] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 425.211522][ T4573] loop2: detected capacity change from 0 to 2048 [ 425.238613][ T4573] loop2: p1 < > p2 p3 < p5 > [ 425.243322][ T4573] loop2: partition table partially beyond EOD, truncated [ 425.250248][ T4573] loop2: p1 start 4278190080 is beyond EOD, truncated [ 425.256846][ T4573] loop2: p2 start 16908288 is beyond EOD, truncated [ 425.281816][ T4573] loop2: p5 start 16908288 is beyond EOD, truncated [ 425.301771][ T60] cdc_ncm 5-1:1.0: failed GET_NTB_PARAMETERS [ 425.307678][ T60] cdc_ncm 5-1:1.0: bind() failure [ 425.327117][ T60] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 425.344135][ T60] cdc_ncm 5-1:1.1: bind() failure [ 426.216856][ T4591] loop0: detected capacity change from 0 to 512 [ 426.356480][ T4595] loop1: detected capacity change from 0 to 2048 [ 426.409365][ T4595] loop1: p1 < > p2 p3 < p5 > [ 426.414024][ T4595] loop1: partition table partially beyond EOD, truncated [ 426.421247][ T4595] loop1: p1 start 4278190080 is beyond EOD, truncated [ 426.427875][ T4595] loop1: p2 start 16908288 is beyond EOD, truncated [ 426.489071][ T4595] loop1: p5 start 16908288 is beyond EOD, truncated [ 426.729170][ T60] usb 5-1: USB disconnect, device number 15 [ 426.838802][ T4591] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 426.864024][ T4591] ext4 filesystem being mounted at /185/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 426.882058][ T4600] netlink: 'syz.4.938': attribute type 4 has an invalid length. [ 427.014568][ T4600] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.938'. [ 427.529897][ T293] EXT4-fs (loop0): unmounting filesystem. [ 427.648893][ T4604] loop4: detected capacity change from 0 to 1024 [ 427.659951][ T4604] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 427.668545][ T4604] ext4 filesystem being mounted at /202/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 427.680021][ T294] EXT4-fs (loop3): unmounting filesystem. [ 428.296728][ T595] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 428.337267][ T296] EXT4-fs (loop4): unmounting filesystem. [ 428.431871][ T4636] loop1: detected capacity change from 0 to 512 [ 428.450055][ T4636] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 428.459895][ T4636] ext4 filesystem being mounted at /184/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 428.523418][ T595] usb 3-1: Using ep0 maxpacket: 32 [ 428.531417][ T595] usb 3-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 428.544195][ T595] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.586504][ T595] usb 3-1: Product: syz [ 428.590566][ T595] usb 3-1: Manufacturer: syz [ 428.624342][ T595] usb 3-1: SerialNumber: syz [ 428.633379][ T595] usb 3-1: config 0 descriptor?? [ 428.913726][ T595] rtl8150 3-1:0.0: couldn't reset the device [ 428.919742][ T595] rtl8150: probe of 3-1:0.0 failed with error -5 [ 428.926902][ T595] usb 3-1: USB disconnect, device number 18 [ 429.937822][ T292] EXT4-fs (loop1): unmounting filesystem. [ 430.745186][ T4674] loop1: detected capacity change from 0 to 4096 [ 430.865934][ T595] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 430.893626][ T4674] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 430.933204][ T4680] 9pnet_fd: Insufficient options for proto=fd [ 431.203409][ T4687] netlink: 'syz.2.958': attribute type 4 has an invalid length. [ 431.222070][ T4687] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.958'. [ 431.238072][ T736] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 431.308011][ T595] usb 1-1: Using ep0 maxpacket: 32 [ 431.314731][ T595] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 431.337980][ T595] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 431.452234][ T595] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 431.461966][ T595] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.469830][ T595] usb 1-1: Product: syz [ 431.473888][ T595] usb 1-1: Manufacturer: syz [ 431.478331][ T595] usb 1-1: SerialNumber: syz [ 431.699695][ T4665] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 432.571980][ T292] EXT4-fs (loop1): unmounting filesystem. [ 432.609242][ T736] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 432.622586][ T736] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 432.634540][ T736] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 432.643954][ T736] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.652430][ T736] usb 5-1: Product: syz [ 432.656545][ T736] usb 5-1: Manufacturer: syz [ 432.661321][ T736] usb 5-1: SerialNumber: syz [ 432.683763][ T4665] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 432.858037][ T60] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 432.893664][ T595] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 432.913610][ T595] cdc_ncm 1-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 432.929791][ T595] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 433.100665][ T60] usb 4-1: Using ep0 maxpacket: 32 [ 433.110169][ T60] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 433.139870][ T595] cdc_ncm 1-1:1.0 eth1: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 433.151388][ T60] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 433.171090][ T595] usb 1-1: USB disconnect, device number 20 [ 433.180911][ T60] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 433.191598][ T595] cdc_ncm 1-1:1.0 eth1: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 433.202589][ T60] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.227837][ T60] usb 4-1: Product: syz [ 433.233192][ T60] usb 4-1: Manufacturer: syz [ 433.237866][ T60] usb 4-1: SerialNumber: syz [ 433.330324][ T736] cdc_mbim 5-1:1.0: bind() failure [ 433.336005][ T736] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 433.342647][ T736] cdc_ncm 5-1:1.1: bind() failure [ 433.348394][ T736] usb 5-1: USB disconnect, device number 16 [ 433.524750][ T4696] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 434.293253][ T4719] loop4: detected capacity change from 0 to 512 [ 434.300161][ T4719] EXT4-fs: Ignoring removed mblk_io_submit option [ 434.865720][ T4720] loop1: detected capacity change from 0 to 512 [ 434.872480][ T4720] EXT4-fs: Ignoring removed mblk_io_submit option [ 435.160206][ T4719] EXT4-fs error (device loop4): ext4_get_branch:178: inode #13: block 2: comm syz.4.966: invalid block [ 435.172645][ T4720] EXT4-fs error (device loop1): ext4_get_branch:178: inode #13: block 2: comm syz.1.967: invalid block [ 435.185668][ T4719] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.966: invalid indirect mapped block 10 (level 1) [ 435.199593][ T4720] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.967: invalid indirect mapped block 10 (level 1) [ 435.213770][ T4719] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.966: invalid indirect mapped block 8 (level 1) [ 435.227978][ T4720] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.967: invalid indirect mapped block 8 (level 1) [ 435.242755][ T4720] EXT4-fs (loop1): 1 truncate cleaned up [ 435.248284][ T4720] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 435.296460][ T4696] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 435.304261][ T4719] EXT4-fs (loop4): 1 truncate cleaned up [ 435.309766][ T4719] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 435.346794][ T4727] loop2: detected capacity change from 0 to 256 [ 435.355495][ T28] audit: type=1400 audit(1737886035.365:467): avc: denied { mount } for pid=4724 comm="syz.0.969" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 435.369747][ T4727] exfat: Bad value for 'uid' [ 435.382179][ T28] audit: type=1400 audit(1737886035.395:468): avc: denied { setattr } for pid=4724 comm="syz.0.969" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 435.440741][ T28] audit: type=1400 audit(1737886035.455:469): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 435.504326][ T60] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 435.518000][ T60] cdc_ncm 4-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 435.525248][ T60] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 435.532571][ T292] EXT4-fs (loop1): unmounting filesystem. [ 435.539736][ T296] EXT4-fs (loop4): unmounting filesystem. [ 435.879723][ T4742] loop4: detected capacity change from 0 to 4096 [ 436.918509][ T4743] loop1: detected capacity change from 0 to 4096 [ 439.680213][ T4742] EXT4-fs: failed to create workqueue [ 439.685422][ T4742] EXT4-fs (loop4): mount failed [ 439.692320][ T60] cdc_ncm 4-1:1.0 eth1: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 439.709508][ T60] usb 4-1: USB disconnect, device number 12 [ 439.715529][ T60] cdc_ncm 4-1:1.0 eth1: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 439.732188][ T4743] EXT4-fs: failed to create workqueue [ 439.737417][ T4743] EXT4-fs (loop1): mount failed [ 440.529143][ T4769] 9pnet_fd: Insufficient options for proto=fd [ 440.864738][ T6] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 440.962176][ T4783] loop2: detected capacity change from 0 to 512 [ 440.970235][ T4783] EXT4-fs: Ignoring removed mblk_io_submit option [ 441.021783][ T4783] EXT4-fs error (device loop2): ext4_get_branch:178: inode #13: block 2: comm syz.2.980: invalid block [ 441.034832][ T4783] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.980: invalid indirect mapped block 10 (level 1) [ 441.049611][ T4783] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.980: invalid indirect mapped block 8 (level 1) [ 441.065792][ T4783] EXT4-fs (loop2): 1 truncate cleaned up [ 441.071342][ T4783] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 441.168113][ T736] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 441.199160][ T6] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 441.210178][ T6] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 441.222392][ T6] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 441.231321][ T6] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.239082][ T6] usb 5-1: Product: syz [ 441.243076][ T6] usb 5-1: Manufacturer: syz [ 441.247480][ T6] usb 5-1: SerialNumber: syz [ 441.368000][ T736] usb 4-1: Using ep0 maxpacket: 32 [ 441.375964][ T736] usb 4-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 441.384944][ T736] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.392844][ T736] usb 4-1: Product: syz [ 441.396795][ T736] usb 4-1: Manufacturer: syz [ 441.401239][ T736] usb 4-1: SerialNumber: syz [ 441.406222][ T736] usb 4-1: config 0 descriptor?? [ 441.454291][ T6] cdc_mbim 5-1:1.0: bind() failure [ 441.460012][ T6] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 441.466647][ T6] cdc_ncm 5-1:1.1: bind() failure [ 441.472548][ T6] usb 5-1: USB disconnect, device number 17 [ 441.632371][ T4787] loop0: detected capacity change from 0 to 40427 [ 441.639288][ T4787] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 441.645459][ T4787] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 441.655832][ T4787] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 441.668073][ T295] EXT4-fs (loop2): unmounting filesystem. [ 441.700522][ T4787] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 441.732826][ T4787] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 441.830992][ T736] rtl8150 4-1:0.0: couldn't reset the device [ 441.837042][ T736] rtl8150: probe of 4-1:0.0 failed with error -5 [ 441.844006][ T736] usb 4-1: USB disconnect, device number 13 [ 442.215100][ T4801] syz.0.982: attempt to access beyond end of device [ 442.215100][ T4801] loop0: rw=2049, sector=53248, nr_sectors = 136 limit=40427 [ 442.740796][ T4811] loop3: detected capacity change from 0 to 4096 [ 442.785171][ T293] syz-executor: attempt to access beyond end of device [ 442.785171][ T293] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 442.816632][ T4811] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 442.844826][ T28] audit: type=1400 audit(1737886042.855:470): avc: denied { create } for pid=4815 comm="syz.2.989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 442.946313][ T4820] netlink: 'syz.2.991': attribute type 4 has an invalid length. [ 442.956259][ T4820] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.991'. [ 444.015310][ T4828] loop1: detected capacity change from 0 to 512 [ 444.114611][ T4828] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 444.123569][ T4828] ext4 filesystem being mounted at /194/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 444.147364][ T292] EXT4-fs (loop1): unmounting filesystem. [ 444.173501][ T28] audit: type=1400 audit(1737886044.185:471): avc: denied { load_policy } for pid=4831 comm="syz.0.988" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 444.194979][ T4832] SELinux: policydb version 1243330090 does not match my version range 15-33 [ 444.218294][ T4832] SELinux: failed to load policy [ 444.406063][ T4834] tipc: Started in network mode [ 444.410900][ T4834] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 444.419690][ T4834] tipc: Enabling of bearer rejected, failed to enable media [ 444.552429][ T294] EXT4-fs (loop3): unmounting filesystem. [ 444.588614][ T4839] loop2: detected capacity change from 0 to 2048 [ 444.611452][ T4839] loop2: p1 < > p2 p3 < p5 > [ 444.630392][ T4839] loop2: partition table partially beyond EOD, truncated [ 444.645806][ T4839] loop2: p1 start 4278190080 is beyond EOD, truncated [ 444.659744][ T4839] loop2: p2 start 16908288 is beyond EOD, truncated [ 444.687844][ T4839] loop2: p5 start 16908288 is beyond EOD, truncated [ 444.814127][ T4845] loop4: detected capacity change from 0 to 2048 [ 444.843490][ T4845] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 444.858013][ T4845] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 444.931031][ T4847] loop1: detected capacity change from 0 to 2048 [ 444.998221][ T4847] loop1: p1 < > p2 p3 < p5 > [ 445.002750][ T4847] loop1: partition table partially beyond EOD, truncated [ 445.009679][ T4847] loop1: p1 start 4278190080 is beyond EOD, truncated [ 445.016221][ T4847] loop1: p2 start 16908288 is beyond EOD, truncated [ 445.037992][ T4847] loop1: p5 start 16908288 is beyond EOD, truncated [ 445.045998][ T736] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 445.058414][ T4845] EXT4-fs (loop4): failed to initialize system zone (-117) [ 445.067606][ T4845] EXT4-fs (loop4): mount failed [ 445.238152][ T736] usb 4-1: Using ep0 maxpacket: 32 [ 445.250367][ T736] usb 4-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 445.262131][ T736] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.270138][ T736] usb 4-1: Product: syz [ 445.274213][ T736] usb 4-1: Manufacturer: syz [ 445.278736][ T736] usb 4-1: SerialNumber: syz [ 445.291698][ T736] usb 4-1: config 0 descriptor?? [ 446.790710][ T736] rtl8150 4-1:0.0: couldn't reset the device [ 446.796607][ T736] rtl8150: probe of 4-1:0.0 failed with error -5 [ 446.808390][ T736] usb 4-1: USB disconnect, device number 14 [ 446.988172][ T4876] loop1: detected capacity change from 0 to 2048 [ 447.046553][ T3611] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 447.126227][ T4876] loop1: p1 < > p2 p3 < p5 > [ 447.130788][ T4876] loop1: partition table partially beyond EOD, truncated [ 447.137655][ T4876] loop1: p1 start 4278190080 is beyond EOD, truncated [ 447.144223][ T4876] loop1: p2 start 16908288 is beyond EOD, truncated [ 447.152041][ T4876] loop1: p5 start 16908288 is beyond EOD, truncated [ 447.318827][ T3611] usb 5-1: Using ep0 maxpacket: 32 [ 447.325628][ T3611] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 447.338373][ T3611] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 447.359488][ T3611] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 447.369099][ T3611] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.377309][ T3611] usb 5-1: Product: syz [ 447.396079][ T3611] usb 5-1: Manufacturer: syz [ 447.401506][ T3611] usb 5-1: SerialNumber: syz [ 447.618137][ T4868] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 447.732823][ T4887] loop1: detected capacity change from 0 to 256 [ 447.739767][ T4887] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 447.752979][ T4887] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010364, chksum : 0x43f9f21b, utbl_chksum : 0xe619d30d) [ 447.769996][ T28] audit: type=1400 audit(1737886047.785:472): avc: denied { read write } for pid=4886 comm="syz.1.1007" name="file1" dev="loop1" ino=1049015 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 447.792922][ T28] audit: type=1400 audit(1737886047.785:473): avc: denied { open } for pid=4886 comm="syz.1.1007" path="/198/file2/file1" dev="loop1" ino=1049015 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 448.865793][ T4898] loop0: detected capacity change from 0 to 4096 [ 448.882045][ T28] audit: type=1400 audit(1737886048.015:474): avc: denied { bind } for pid=4891 comm="syz.1.1010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 448.938804][ T4898] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 449.075664][ T4868] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 449.129457][ T28] audit: type=1400 audit(1737886048.015:475): avc: denied { name_bind } for pid=4891 comm="syz.1.1010" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 449.150241][ T28] audit: type=1400 audit(1737886048.015:476): avc: denied { node_bind } for pid=4891 comm="syz.1.1010" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 450.318970][ T3611] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 450.336257][ T3611] cdc_ncm 5-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 450.343775][ T28] audit: type=1400 audit(1737886048.025:477): avc: denied { bind } for pid=4891 comm="syz.1.1010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 450.373320][ T3611] cdc_ncm 5-1:1.0: setting rx_max = 2048 [ 450.557315][ T4910] loop1: detected capacity change from 0 to 2048 [ 450.639018][ T19] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 450.668321][ T4910] loop1: p1 < > p2 p3 < p5 > [ 450.672876][ T4910] loop1: partition table partially beyond EOD, truncated [ 450.679765][ T4910] loop1: p1 start 4278190080 is beyond EOD, truncated [ 450.686279][ T4910] loop1: p2 start 16908288 is beyond EOD, truncated [ 450.712555][ T3611] cdc_ncm 5-1:1.0 eth1: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 450.723518][ T4910] loop1: p5 start 16908288 is beyond EOD, truncated [ 450.738952][ T6] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 450.821055][ T3611] usb 5-1: USB disconnect, device number 18 [ 450.827168][ T3611] cdc_ncm 5-1:1.0 eth1: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP) [ 450.852607][ T4916] loop3: detected capacity change from 0 to 4096 [ 450.861101][ T4916] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 450.927732][ T293] EXT4-fs (loop0): unmounting filesystem. [ 451.372044][ T4926] loop4: detected capacity change from 0 to 512 [ 451.462242][ T4926] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 451.527475][ T4926] ext4 filesystem being mounted at /215/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 451.909739][ T294] EXT4-fs (loop3): unmounting filesystem. [ 451.996160][ T4936] loop2: detected capacity change from 0 to 2048 [ 452.087476][ T4938] loop3: detected capacity change from 0 to 256 [ 452.093845][ T4938] exfat: Bad value for 'uid' [ 452.098762][ T4936] loop2: p1 < > p2 p3 < p5 > [ 452.103483][ T4936] loop2: partition table partially beyond EOD, truncated [ 452.110534][ T4936] loop2: p1 start 4278190080 is beyond EOD, truncated [ 452.117128][ T4936] loop2: p2 start 16908288 is beyond EOD, truncated [ 452.124982][ T4936] loop2: p5 start 16908288 is beyond EOD, truncated [ 452.364680][ T736] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 452.460896][ T296] EXT4-fs (loop4): unmounting filesystem. [ 452.598002][ T736] usb 1-1: Using ep0 maxpacket: 32 [ 452.605490][ T736] usb 1-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 452.624817][ T736] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.654514][ T736] usb 1-1: Product: syz [ 452.666926][ T736] usb 1-1: Manufacturer: syz [ 452.680815][ T736] usb 1-1: SerialNumber: syz [ 452.737922][ T736] usb 1-1: config 0 descriptor?? [ 453.443859][ T736] rtl8150 1-1:0.0: couldn't reset the device [ 453.482727][ T736] rtl8150: probe of 1-1:0.0 failed with error -5 [ 453.490217][ T736] usb 1-1: USB disconnect, device number 21 [ 453.600482][ T4964] netlink: 'syz.3.1027': attribute type 4 has an invalid length. [ 453.608201][ T4964] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.1027'. [ 453.870399][ T4977] loop4: detected capacity change from 0 to 4096 [ 453.878947][ T4977] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 454.648307][ T4986] loop0: detected capacity change from 0 to 2048 [ 454.678765][ T4986] loop0: p1 < > p2 p3 < p5 > [ 454.683337][ T4986] loop0: partition table partially beyond EOD, truncated [ 454.690372][ T4986] loop0: p1 start 4278190080 is beyond EOD, truncated [ 454.696996][ T4986] loop0: p2 start 16908288 is beyond EOD, truncated [ 454.802020][ T4986] loop0: p5 start 16908288 is beyond EOD, truncated [ 454.818279][ T296] EXT4-fs (loop4): unmounting filesystem. [ 454.890564][ T4991] loop4: detected capacity change from 0 to 512 [ 454.949858][ T4991] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 454.958886][ T4991] ext4 filesystem being mounted at /218/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 455.145796][ T4997] loop3: detected capacity change from 0 to 4096 [ 455.154475][ T4997] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 456.371048][ T5010] syz.0.1036[5010] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 456.371242][ T5010] syz.0.1036[5010] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 456.744823][ T296] EXT4-fs (loop4): unmounting filesystem. [ 456.807482][ T294] EXT4-fs (loop3): unmounting filesystem. [ 456.868014][ T369] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 457.735475][ T5028] loop3: detected capacity change from 0 to 512 [ 457.931954][ T5028] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 457.941155][ T5028] ext4 filesystem being mounted at /198/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 458.692555][ T294] EXT4-fs (loop3): unmounting filesystem. [ 458.855649][ T5027] loop0: detected capacity change from 0 to 4096 [ 458.875963][ T5044] loop2: detected capacity change from 0 to 4096 [ 458.879846][ T5042] loop3: detected capacity change from 0 to 4096 [ 458.923547][ T5044] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 458.934035][ T5027] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 458.960055][ T5042] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 459.450718][ T369] usb 2-1: device not accepting address 17, error -71 [ 459.488732][ T5054] loop1: detected capacity change from 0 to 512 [ 459.507004][ T5054] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 459.516026][ T5054] ext4 filesystem being mounted at /206/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 459.618258][ T294] EXT4-fs (loop3): unmounting filesystem. [ 459.737032][ T5060] loop4: detected capacity change from 0 to 1024 [ 459.758281][ T5060] EXT4-fs: Ignoring removed orlov option [ 459.812968][ T5060] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 459.860766][ T28] audit: type=1400 audit(1737886059.875:478): avc: denied { mounton } for pid=5059 comm="syz.4.1047" path="/221/bus/file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 459.911768][ T28] audit: type=1400 audit(1737886059.915:479): avc: denied { remove_name } for pid=5059 comm="syz.4.1047" name="file0" dev="incremental-fs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 459.936297][ T28] audit: type=1400 audit(1737886059.915:480): avc: denied { unlink } for pid=5059 comm="syz.4.1047" name="file0" dev="incremental-fs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 459.960925][ T296] EXT4-fs (loop4): unmounting filesystem. [ 459.996214][ T28] audit: type=1400 audit(1737886060.005:481): avc: denied { append } for pid=5067 comm="syz.4.1048" name="snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 459.996334][ T5068] random: crng reseeded on system resumption [ 460.037993][ T28] audit: type=1400 audit(1737886060.005:482): avc: denied { open } for pid=5067 comm="syz.4.1048" path="/dev/snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 460.767326][ T28] audit: type=1400 audit(1737886060.775:483): avc: denied { create } for pid=5072 comm="syz.3.1049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 461.075324][ T293] EXT4-fs (loop0): unmounting filesystem. [ 461.099795][ T292] EXT4-fs (loop1): unmounting filesystem. [ 461.121413][ T5078] loop0: detected capacity change from 0 to 4096 [ 461.134603][ T5078] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 461.135336][ T295] EXT4-fs (loop2): unmounting filesystem. [ 461.864565][ T5088] loop2: detected capacity change from 0 to 4096 [ 461.899835][ T5088] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 462.539793][ T5093] loop3: detected capacity change from 0 to 256 [ 462.546173][ T5093] exfat: Bad value for 'uid' [ 462.742459][ T295] EXT4-fs (loop2): unmounting filesystem. [ 462.844518][ T293] EXT4-fs (loop0): unmounting filesystem. [ 462.865288][ T5104] loop4: detected capacity change from 0 to 512 [ 462.879984][ T5104] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 462.888924][ T5104] ext4 filesystem being mounted at /223/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 464.531306][ T316] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 464.735978][ T5119] loop2: detected capacity change from 0 to 1024 [ 464.745533][ T28] audit: type=1400 audit(1737886064.755:484): avc: denied { connect } for pid=5120 comm="syz.0.1059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 464.775904][ T28] audit: type=1326 audit(1737886064.775:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5120 comm="syz.0.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94c998cd29 code=0x7ffc0000 [ 464.808217][ T316] usb 4-1: Using ep0 maxpacket: 32 [ 464.814408][ T28] audit: type=1326 audit(1737886064.775:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5120 comm="syz.0.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94c998cd29 code=0x7ffc0000 [ 464.839709][ T316] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 464.860365][ T316] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 464.876603][ T5119] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 464.885048][ T5119] ext4 filesystem being mounted at /215/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 464.914207][ T28] audit: type=1326 audit(1737886064.775:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5120 comm="syz.0.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f94c998cd29 code=0x7ffc0000 [ 464.940013][ T295] EXT4-fs (loop2): unmounting filesystem. [ 464.946259][ T296] EXT4-fs (loop4): unmounting filesystem. [ 464.946932][ T28] audit: type=1326 audit(1737886064.775:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5120 comm="syz.0.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94c998cd29 code=0x7ffc0000 [ 464.975992][ T28] audit: type=1326 audit(1737886064.775:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5120 comm="syz.0.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94c998cd29 code=0x7ffc0000 [ 465.000190][ T28] audit: type=1326 audit(1737886064.775:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5120 comm="syz.0.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f94c998cd29 code=0x7ffc0000 [ 465.023701][ T316] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 465.039345][ T316] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.050753][ T28] audit: type=1326 audit(1737886064.775:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5120 comm="syz.0.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94c998cd29 code=0x7ffc0000 [ 465.074453][ T28] audit: type=1326 audit(1737886064.775:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5120 comm="syz.0.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94c998cd29 code=0x7ffc0000 [ 465.098890][ T28] audit: type=1326 audit(1737886064.775:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5120 comm="syz.0.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f94c998cd29 code=0x7ffc0000 [ 465.122527][ T28] audit: type=1326 audit(1737886064.775:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5120 comm="syz.0.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94c998cd29 code=0x7ffc0000 [ 465.145705][ T316] usb 4-1: Product: syz [ 465.149831][ T316] usb 4-1: Manufacturer: syz [ 465.150873][ T28] audit: type=1326 audit(1737886064.785:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5120 comm="syz.0.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f94c998cd29 code=0x7ffc0000 [ 465.154606][ T316] usb 4-1: SerialNumber: syz [ 465.183000][ T28] audit: type=1326 audit(1737886064.785:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5120 comm="syz.0.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94c998cd29 code=0x7ffc0000 [ 465.335053][ T5137] loop4: detected capacity change from 0 to 4096 [ 465.391434][ T5137] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 465.448894][ T5098] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 466.098916][ T5098] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 466.306572][ T316] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 466.318603][ T316] cdc_ncm 4-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 466.346143][ T316] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 466.434839][ T5139] loop1: detected capacity change from 0 to 4096 [ 466.470332][ T5139] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 466.510235][ T316] cdc_ncm 4-1:1.0 eth1: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 466.537168][ T316] usb 4-1: USB disconnect, device number 16 [ 466.568661][ T316] cdc_ncm 4-1:1.0 eth1: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 467.220118][ T296] EXT4-fs (loop4): unmounting filesystem. [ 467.808537][ T5152] loop2: detected capacity change from 0 to 4096 [ 467.853141][ T5152] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 468.827331][ T5181] loop3: detected capacity change from 0 to 256 [ 468.843130][ T5181] exfat: Bad value for 'uid' [ 468.845641][ T5174] loop4: detected capacity change from 0 to 4096 [ 468.869541][ T5174] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 469.247694][ T5187] loop0: detected capacity change from 0 to 1024 [ 469.279551][ T5187] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 469.287896][ T5187] ext4 filesystem being mounted at /210/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 469.305974][ T293] EXT4-fs (loop0): unmounting filesystem. [ 469.338010][ T369] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 469.567966][ T369] usb 4-1: Using ep0 maxpacket: 32 [ 469.575393][ T369] usb 4-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 469.594347][ T369] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.007875][ T369] usb 4-1: Product: syz [ 470.012039][ T369] usb 4-1: Manufacturer: syz [ 470.016421][ T369] usb 4-1: SerialNumber: syz [ 470.046686][ T369] usb 4-1: config 0 descriptor?? [ 470.103328][ T292] EXT4-fs (loop1): unmounting filesystem. [ 470.279518][ T369] rtl8150 4-1:0.0: couldn't reset the device [ 470.285479][ T369] rtl8150: probe of 4-1:0.0 failed with error -5 [ 470.310507][ T369] usb 4-1: USB disconnect, device number 17 [ 470.904715][ T5209] loop1: detected capacity change from 0 to 4096 [ 471.005076][ T5209] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 471.445591][ T5220] netlink: 'syz.0.1077': attribute type 4 has an invalid length. [ 471.458081][ T5220] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.1077'. [ 471.504825][ T295] EXT4-fs (loop2): unmounting filesystem. [ 471.685515][ T5230] loop0: detected capacity change from 0 to 4096 [ 471.695085][ T5230] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 472.290488][ T296] EXT4-fs (loop4): unmounting filesystem. [ 472.657693][ T293] EXT4-fs (loop0): unmounting filesystem. [ 472.837879][ T5249] loop0: detected capacity change from 0 to 256 [ 472.845957][ T5249] exfat: Bad value for 'uid' [ 474.608436][ T5268] Zero length message leads to an empty skb [ 475.083541][ T5293] loop3: detected capacity change from 0 to 4096 [ 475.121518][ T5293] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 475.240112][ T292] EXT4-fs (loop1): unmounting filesystem. [ 476.218421][ T5302] loop4: detected capacity change from 0 to 40427 [ 476.225324][ T5302] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 476.233328][ T5302] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 476.244243][ T5302] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 476.277613][ T5302] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 476.284603][ T5302] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 476.377972][ T369] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 476.388749][ T5316] syz.1.1100[5316] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 476.388830][ T5316] syz.1.1100[5316] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 476.436696][ T294] EXT4-fs (loop3): unmounting filesystem. [ 476.488244][ T28] kauditd_printk_skb: 189 callbacks suppressed [ 476.488265][ T28] audit: type=1400 audit(1737886076.495:686): avc: denied { name_bind } for pid=5300 comm="syz.4.1097" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 476.628095][ T369] usb 3-1: Using ep0 maxpacket: 32 [ 476.640705][ T369] usb 3-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 476.676027][ T369] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.705565][ T369] usb 3-1: Product: syz [ 476.718039][ T369] usb 3-1: Manufacturer: syz [ 476.728868][ T369] usb 3-1: SerialNumber: syz [ 477.479026][ T369] usb 3-1: config 0 descriptor?? [ 477.913421][ T369] rtl8150 3-1:0.0: couldn't reset the device [ 477.919467][ T369] rtl8150: probe of 3-1:0.0 failed with error -5 [ 477.933555][ T369] usb 3-1: USB disconnect, device number 20 [ 478.653183][ T5361] loop0: detected capacity change from 0 to 2048 [ 478.743381][ T5363] loop4: detected capacity change from 0 to 2048 [ 479.602386][ T736] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 479.655496][ T5374] 9pnet_fd: Insufficient options for proto=fd [ 480.266767][ T5377] loop0: detected capacity change from 0 to 4096 [ 480.343078][ T5377] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 480.658243][ T60] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 481.259148][ T60] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 481.259448][ T5370] loop4: detected capacity change from 0 to 40427 [ 481.270094][ T60] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 481.276893][ T5370] F2FS-fs (loop4): Invalid segment/section count (31, 24 x 1) [ 481.288108][ T60] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 481.347833][ T5370] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 481.350233][ T60] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.403794][ T5388] loop3: detected capacity change from 0 to 4096 [ 481.410489][ T736] usb 2-1: Using ep0 maxpacket: 32 [ 481.411130][ T60] usb 3-1: Product: syz [ 481.426169][ T60] usb 3-1: Manufacturer: syz [ 481.426287][ T293] EXT4-fs (loop0): unmounting filesystem. [ 481.430958][ T60] usb 3-1: SerialNumber: syz [ 481.442368][ T5388] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 481.459955][ T736] usb 2-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 481.470117][ T736] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.471316][ T5370] F2FS-fs (loop4): invalid crc value [ 481.488593][ T736] usb 2-1: Product: syz [ 481.489611][ T5370] F2FS-fs (loop4): Found nat_bits in checkpoint [ 481.499700][ T736] usb 2-1: Manufacturer: syz [ 481.504156][ T736] usb 2-1: SerialNumber: syz [ 481.510518][ T736] usb 2-1: config 0 descriptor?? [ 481.746422][ T60] cdc_mbim 3-1:1.0: bind() failure [ 481.754474][ T60] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 481.761274][ T60] cdc_ncm 3-1:1.1: bind() failure [ 481.768889][ T60] usb 3-1: USB disconnect, device number 21 [ 481.771424][ T736] rtl8150 2-1:0.0: couldn't reset the device [ 481.786909][ T736] rtl8150: probe of 2-1:0.0 failed with error -5 [ 481.790360][ T5370] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 481.800137][ T5370] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 481.801397][ T736] usb 2-1: USB disconnect, device number 19 [ 481.924433][ T5400] capability: warning: `syz.4.1109' uses 32-bit capabilities (legacy support in use) [ 481.937863][ T5391] f2fs_ckpt-7:4: attempt to access beyond end of device [ 481.937863][ T5391] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 482.473085][ T28] audit: type=1400 audit(1737886082.485:687): avc: denied { nlmsg_read } for pid=5410 comm="syz.1.1119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 482.495682][ T5411] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1119'. [ 482.612984][ T5413] loop4: detected capacity change from 0 to 4096 [ 482.637364][ T294] EXT4-fs (loop3): unmounting filesystem. [ 482.650768][ T5413] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 482.793954][ T5421] loop0: detected capacity change from 0 to 4096 [ 482.833103][ T5420] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1121'. [ 482.852026][ T5421] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 482.878083][ T60] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 483.215447][ T60] usb 2-1: Using ep0 maxpacket: 32 [ 483.224879][ T60] usb 2-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 483.251472][ T60] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.268250][ T60] usb 2-1: Product: syz [ 483.276520][ T5428] loop3: detected capacity change from 0 to 2048 [ 483.284527][ T60] usb 2-1: Manufacturer: syz [ 483.301298][ T60] usb 2-1: SerialNumber: syz [ 483.438486][ T5428] loop3: p1 < > p2 p3 < p5 > [ 483.443031][ T5428] loop3: partition table partially beyond EOD, truncated [ 483.449997][ T5428] loop3: p1 start 4278190080 is beyond EOD, truncated [ 483.456578][ T5428] loop3: p2 start 16908288 is beyond EOD, truncated [ 483.488630][ T5428] loop3: p5 start 16908288 is beyond EOD, truncated [ 483.500646][ T60] usb 2-1: config 0 descriptor?? [ 483.520952][ T5430] loop2: detected capacity change from 0 to 256 [ 483.529821][ T5430] exfat: Bad value for 'uid' [ 483.704487][ T5433] loop2: detected capacity change from 0 to 512 [ 483.725683][ T5433] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 483.734585][ T5433] ext4 filesystem being mounted at /229/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 483.985038][ T60] rtl8150 2-1:0.0: couldn't reset the device [ 483.992110][ T60] rtl8150: probe of 2-1:0.0 failed with error -5 [ 483.999656][ T60] usb 2-1: USB disconnect, device number 20 [ 484.095803][ T293] EXT4-fs (loop0): unmounting filesystem. [ 486.227584][ T5465] loop0: detected capacity change from 0 to 2048 [ 486.269153][ T5465] loop0: p1 < > p2 p3 < p5 > [ 486.273670][ T5465] loop0: partition table partially beyond EOD, truncated [ 486.280769][ T5465] loop0: p1 start 4278190080 is beyond EOD, truncated [ 486.287365][ T5465] loop0: p2 start 16908288 is beyond EOD, truncated [ 486.294352][ T5465] loop0: p5 start 16908288 is beyond EOD, truncated [ 486.498097][ T295] EXT4-fs (loop2): unmounting filesystem. [ 486.635739][ T296] EXT4-fs (loop4): unmounting filesystem. [ 486.658948][ T5474] loop0: detected capacity change from 0 to 4096 [ 486.667599][ T5474] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 486.787983][ T369] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 486.945206][ T5480] loop4: detected capacity change from 0 to 1024 [ 486.969063][ T369] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 486.987743][ T369] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 487.007353][ T5480] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 487.027679][ T369] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 487.041906][ T369] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.048180][ T5480] ext4 filesystem being mounted at /232/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 487.049843][ T369] usb 3-1: Product: syz [ 487.064012][ T369] usb 3-1: Manufacturer: syz [ 487.068514][ T369] usb 3-1: SerialNumber: syz [ 487.280235][ T369] cdc_mbim 3-1:1.0: bind() failure [ 487.285980][ T369] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 487.300154][ T369] cdc_ncm 3-1:1.1: bind() failure [ 487.313886][ T369] usb 3-1: USB disconnect, device number 22 [ 487.347972][ T60] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 487.538118][ T60] usb 4-1: Using ep0 maxpacket: 32 [ 487.547742][ T60] usb 4-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 487.627394][ T60] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.645595][ T60] usb 4-1: Product: syz [ 487.655715][ T60] usb 4-1: Manufacturer: syz [ 487.660896][ T60] usb 4-1: SerialNumber: syz [ 487.671085][ T60] usb 4-1: config 0 descriptor?? [ 487.724973][ T296] EXT4-fs (loop4): unmounting filesystem. [ 487.749625][ T5496] loop4: detected capacity change from 0 to 512 [ 487.761181][ T5496] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 487.770246][ T5496] ext4 filesystem being mounted at /233/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 487.957615][ T60] rtl8150 4-1:0.0: couldn't reset the device [ 487.963613][ T60] rtl8150: probe of 4-1:0.0 failed with error -5 [ 487.970700][ T60] usb 4-1: USB disconnect, device number 18 [ 488.615511][ T296] EXT4-fs (loop4): unmounting filesystem. [ 488.704193][ T5511] loop4: detected capacity change from 0 to 2048 [ 488.722858][ T293] EXT4-fs (loop0): unmounting filesystem. [ 488.749503][ T5511] loop4: p1 < > p2 p3 < p5 > [ 488.754023][ T5511] loop4: partition table partially beyond EOD, truncated [ 488.760978][ T5511] loop4: p1 start 4278190080 is beyond EOD, truncated [ 488.767575][ T5511] loop4: p2 start 16908288 is beyond EOD, truncated [ 488.774835][ T5511] loop4: p5 start 16908288 is beyond EOD, truncated [ 488.935826][ T5526] 9pnet_fd: Insufficient options for proto=fd [ 489.102959][ T5527] loop0: detected capacity change from 0 to 2048 [ 489.198591][ T5527] loop0: p1 < > p2 p3 < p5 > [ 489.203254][ T5527] loop0: partition table partially beyond EOD, truncated [ 489.210566][ T5527] loop0: p1 start 4278190080 is beyond EOD, truncated [ 489.217370][ T5527] loop0: p2 start 16908288 is beyond EOD, truncated [ 489.227852][ T5527] loop0: p5 start 16908288 is beyond EOD, truncated [ 489.496404][ T5533] loop1: detected capacity change from 0 to 512 [ 489.630588][ T5533] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 489.639530][ T5533] ext4 filesystem being mounted at /222/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 490.202160][ T5543] loop4: detected capacity change from 0 to 4096 [ 490.210831][ T5543] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 492.632535][ T296] EXT4-fs (loop4): unmounting filesystem. [ 492.717236][ T292] EXT4-fs (loop1): unmounting filesystem. [ 492.736961][ T349] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 492.761491][ T5558] loop4: detected capacity change from 0 to 512 [ 492.779777][ T5558] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 492.788655][ T5558] ext4 filesystem being mounted at /237/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 492.928051][ T316] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 493.005219][ T5565] loop3: detected capacity change from 0 to 4096 [ 493.019067][ T5565] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 493.077959][ T19] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 493.117974][ T316] usb 3-1: Using ep0 maxpacket: 32 [ 493.124943][ T316] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 493.136479][ T316] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 493.149906][ T316] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 493.159221][ T316] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.167121][ T316] usb 3-1: Product: syz [ 493.173225][ T316] usb 3-1: Manufacturer: syz [ 493.177728][ T316] usb 3-1: SerialNumber: syz [ 493.258227][ T19] usb 2-1: Using ep0 maxpacket: 32 [ 493.266541][ T19] usb 2-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 493.276044][ T19] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.284244][ T19] usb 2-1: Product: syz [ 493.288803][ T19] usb 2-1: Manufacturer: syz [ 493.293257][ T19] usb 2-1: SerialNumber: syz [ 493.298604][ T19] usb 2-1: config 0 descriptor?? [ 493.367976][ T349] usb 1-1: device not accepting address 22, error -71 [ 493.387343][ T5552] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 493.528622][ T19] rtl8150 2-1:0.0: couldn't reset the device [ 493.534633][ T19] rtl8150: probe of 2-1:0.0 failed with error -5 [ 493.541928][ T19] usb 2-1: USB disconnect, device number 21 [ 493.631079][ T296] EXT4-fs (loop4): unmounting filesystem. [ 493.995868][ T5552] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 494.224987][ T316] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 494.278947][ T316] cdc_ncm 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 494.365866][ T316] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 494.549588][ T316] cdc_ncm 3-1:1.0 eth1: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 494.635893][ T316] usb 3-1: USB disconnect, device number 23 [ 494.642285][ T316] cdc_ncm 3-1:1.0 eth1: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 494.862219][ T5594] 9pnet_fd: Insufficient options for proto=fd [ 496.783385][ T5604] loop1: detected capacity change from 0 to 2048 [ 496.959598][ T5604] loop1: p1 < > p2 p3 < p5 > [ 496.964129][ T5604] loop1: partition table partially beyond EOD, truncated [ 496.971110][ T5604] loop1: p1 start 4278190080 is beyond EOD, truncated [ 496.977689][ T5604] loop1: p2 start 16908288 is beyond EOD, truncated [ 496.998279][ T5604] loop1: p5 start 16908288 is beyond EOD, truncated [ 497.052565][ T294] EXT4-fs (loop3): unmounting filesystem. [ 497.239368][ T5620] loop3: detected capacity change from 0 to 512 [ 497.246497][ T5620] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 497.265013][ T5620] EXT4-fs (loop3): 1 truncate cleaned up [ 497.270639][ T5620] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 497.365050][ T5628] loop4: detected capacity change from 0 to 4096 [ 497.375719][ T5628] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 497.422343][ T294] EXT4-fs (loop3): unmounting filesystem. [ 497.987365][ T5641] syz.3.1173[5641] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 497.987790][ T5641] syz.3.1173[5641] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 498.920420][ T19] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 499.117955][ T19] usb 3-1: Using ep0 maxpacket: 32 [ 499.125413][ T19] usb 3-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 499.142121][ T19] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.157596][ T19] usb 3-1: Product: syz [ 499.167817][ T19] usb 3-1: Manufacturer: syz [ 499.174341][ T19] usb 3-1: SerialNumber: syz [ 499.183930][ T19] usb 3-1: config 0 descriptor?? [ 499.207972][ T3252] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 499.738266][ T3252] usb 4-1: Using ep0 maxpacket: 32 [ 499.747876][ T3252] usb 4-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 499.767083][ T3252] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.781416][ T19] rtl8150 3-1:0.0: couldn't reset the device [ 499.787406][ T19] rtl8150: probe of 3-1:0.0 failed with error -5 [ 499.797942][ T3252] usb 4-1: Product: syz [ 499.801926][ T3252] usb 4-1: Manufacturer: syz [ 499.806360][ T3252] usb 4-1: SerialNumber: syz [ 499.818854][ T19] usb 3-1: USB disconnect, device number 24 [ 499.829321][ T3252] usb 4-1: config 0 descriptor?? [ 500.162882][ T296] EXT4-fs (loop4): unmounting filesystem. [ 500.541804][ T5680] loop4: detected capacity change from 0 to 512 [ 500.543087][ T3252] rtl8150 4-1:0.0: couldn't reset the device [ 500.553957][ T3252] rtl8150: probe of 4-1:0.0 failed with error -5 [ 500.561786][ T3252] usb 4-1: USB disconnect, device number 19 [ 500.570568][ T5680] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 500.579397][ T5680] ext4 filesystem being mounted at /240/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 500.939338][ T5686] loop1: detected capacity change from 0 to 4096 [ 500.968498][ T5686] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 501.197968][ T595] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 501.299608][ T5694] loop3: detected capacity change from 0 to 512 [ 501.408052][ T595] usb 3-1: Using ep0 maxpacket: 32 [ 501.414935][ T595] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 501.469424][ T5694] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 501.478651][ T5694] ext4 filesystem being mounted at /229/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 501.642578][ T595] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 501.766717][ T595] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 502.359043][ T595] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.366866][ T595] usb 3-1: Product: syz [ 502.408006][ T595] usb 3-1: Manufacturer: syz [ 502.418147][ T595] usb 3-1: SerialNumber: syz [ 502.690700][ T5688] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 502.887956][ T349] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 503.077966][ T349] usb 1-1: Using ep0 maxpacket: 32 [ 503.098216][ T349] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 503.127977][ T349] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 503.139194][ T294] EXT4-fs (loop3): unmounting filesystem. [ 503.156603][ T349] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 503.178042][ T349] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.206024][ T349] usb 1-1: Product: syz [ 503.210283][ T349] usb 1-1: Manufacturer: syz [ 503.214721][ T349] usb 1-1: SerialNumber: syz [ 503.309658][ T5688] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 503.338638][ T296] EXT4-fs (loop4): unmounting filesystem. [ 503.430289][ T5699] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 503.498076][ T645] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 503.517317][ T595] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 503.523651][ T595] cdc_ncm 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 503.531146][ T595] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 503.637982][ T3611] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 503.677975][ T645] usb 4-1: Using ep0 maxpacket: 32 [ 503.685794][ T645] usb 4-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 503.695045][ T645] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.703058][ T645] usb 4-1: Product: syz [ 503.707146][ T645] usb 4-1: Manufacturer: syz [ 503.711830][ T645] usb 4-1: SerialNumber: syz [ 503.717101][ T645] usb 4-1: config 0 descriptor?? [ 503.725535][ T595] cdc_ncm 3-1:1.0 eth1: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 503.739222][ T595] usb 3-1: USB disconnect, device number 25 [ 503.745293][ T595] cdc_ncm 3-1:1.0 eth1: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 503.818003][ T3611] usb 5-1: Using ep0 maxpacket: 32 [ 503.825979][ T3611] usb 5-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 503.835293][ T3611] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.843545][ T3611] usb 5-1: Product: syz [ 503.847806][ T3611] usb 5-1: Manufacturer: syz [ 503.852624][ T3611] usb 5-1: SerialNumber: syz [ 503.858219][ T3611] usb 5-1: config 0 descriptor?? [ 504.052530][ T5699] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 504.162826][ T292] EXT4-fs (loop1): unmounting filesystem. [ 504.170133][ T645] rtl8150 4-1:0.0: couldn't reset the device [ 504.176191][ T645] rtl8150: probe of 4-1:0.0 failed with error -5 [ 504.183524][ T645] usb 4-1: USB disconnect, device number 20 [ 504.260376][ T349] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 504.268039][ T349] cdc_ncm 1-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 504.275598][ T349] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 504.310306][ T3611] rtl8150 5-1:0.0: couldn't reset the device [ 504.316311][ T3611] rtl8150: probe of 5-1:0.0 failed with error -5 [ 504.323728][ T3611] usb 5-1: USB disconnect, device number 19 [ 504.463508][ T349] cdc_ncm 1-1:1.0 eth1: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 504.479333][ T349] usb 1-1: USB disconnect, device number 24 [ 504.485339][ T349] cdc_ncm 1-1:1.0 eth1: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 504.650106][ T5723] loop2: detected capacity change from 0 to 4096 [ 504.683106][ T5723] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 506.235158][ T5741] loop3: detected capacity change from 0 to 2048 [ 506.268608][ T5741] loop3: p1 < > p2 p3 < p5 > [ 506.273124][ T5741] loop3: partition table partially beyond EOD, truncated [ 506.280207][ T5741] loop3: p1 start 4278190080 is beyond EOD, truncated [ 506.286787][ T5741] loop3: p2 start 16908288 is beyond EOD, truncated [ 506.294010][ T5741] loop3: p5 start 16908288 is beyond EOD, truncated [ 506.428132][ T349] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 506.578053][ T645] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 506.607977][ T349] usb 1-1: Using ep0 maxpacket: 32 [ 506.614236][ T349] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 506.626194][ T349] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 506.637982][ T349] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 506.646989][ T349] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.655060][ T349] usb 1-1: Product: syz [ 506.659485][ T349] usb 1-1: Manufacturer: syz [ 506.663935][ T349] usb 1-1: SerialNumber: syz [ 506.757993][ T645] usb 5-1: Using ep0 maxpacket: 32 [ 506.764329][ T645] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 506.776049][ T645] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 506.788827][ T645] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 506.797898][ T645] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.806062][ T645] usb 5-1: Product: syz [ 506.810350][ T645] usb 5-1: Manufacturer: syz [ 506.814815][ T645] usb 5-1: SerialNumber: syz [ 506.870391][ T5736] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 507.022100][ T5742] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 507.509072][ T5736] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 507.667141][ T295] EXT4-fs (loop2): unmounting filesystem. [ 507.709266][ T5742] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 507.716630][ T349] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 507.723289][ T349] cdc_ncm 1-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 507.731037][ T349] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 507.927252][ T645] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 507.944518][ T349] cdc_ncm 1-1:1.0 eth1: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 508.009377][ T5766] loop2: detected capacity change from 0 to 2048 [ 508.017040][ T645] cdc_ncm 5-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 508.049358][ T5766] loop2: p1 < > p2 p3 < p5 > [ 508.053890][ T5766] loop2: partition table partially beyond EOD, truncated [ 508.061017][ T5766] loop2: p1 start 4278190080 is beyond EOD, truncated [ 508.067641][ T5766] loop2: p2 start 16908288 is beyond EOD, truncated [ 508.139014][ T5766] loop2: p5 start 16908288 is beyond EOD, truncated [ 508.176449][ T645] cdc_ncm 5-1:1.0: setting rx_max = 2048 [ 508.197776][ T349] usb 1-1: USB disconnect, device number 25 [ 508.261142][ T349] cdc_ncm 1-1:1.0 eth1: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 508.277178][ T645] cdc_ncm 5-1:1.0 eth2: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 508.398263][ T645] usb 5-1: USB disconnect, device number 20 [ 508.455928][ T645] cdc_ncm 5-1:1.0 eth2: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP) [ 508.541206][ T316] ================================================================== [ 508.549117][ T316] BUG: KASAN: use-after-free in __list_del_entry_valid+0xa6/0x130 [ 508.556848][ T316] Read of size 8 at addr ffff88813058ecf0 by task kworker/1:3/316 [ 508.564486][ T316] [ 508.566655][ T316] CPU: 1 PID: 316 Comm: kworker/1:3 Not tainted 6.1.118-syzkaller-00025-gef4fb40b87a9 #0 [ 508.576286][ T316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 508.586184][ T316] Workqueue: events_power_efficient neigh_managed_work [ 508.592865][ T316] Call Trace: [ 508.595987][ T316] [ 508.598769][ T316] dump_stack_lvl+0x151/0x1b7 [ 508.603282][ T316] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 508.608573][ T316] ? _printk+0xd1/0x111 [ 508.612566][ T316] ? __virt_addr_valid+0x242/0x2f0 [ 508.617516][ T316] print_report+0x158/0x4e0 [ 508.621854][ T316] ? __virt_addr_valid+0x242/0x2f0 [ 508.626811][ T316] ? kasan_complete_mode_report_info+0x90/0x1b0 [ 508.632879][ T316] ? __list_del_entry_valid+0xa6/0x130 [ 508.638172][ T316] kasan_report+0x13c/0x170 [ 508.642509][ T316] ? __list_del_entry_valid+0xa6/0x130 [ 508.647810][ T316] __asan_report_load8_noabort+0x14/0x20 [ 508.653274][ T316] __list_del_entry_valid+0xa6/0x130 [ 508.658394][ T316] process_one_work+0x4d7/0xcb0 [ 508.663090][ T316] worker_thread+0xa60/0x1260 [ 508.667611][ T316] kthread+0x26d/0x300 [ 508.671498][ T316] ? worker_clr_flags+0x1a0/0x1a0 [ 508.676364][ T316] ? kthread_blkcg+0xd0/0xd0 [ 508.680794][ T316] ret_from_fork+0x1f/0x30 [ 508.685129][ T316] [ 508.687989][ T316] [ 508.690165][ T316] Allocated by task 349: [ 508.694243][ T316] kasan_set_track+0x4b/0x70 [ 508.698664][ T316] kasan_save_alloc_info+0x1f/0x30 [ 508.703612][ T316] __kasan_kmalloc+0x9c/0xb0 [ 508.708038][ T316] __kmalloc_node+0xb4/0x1e0 [ 508.712463][ T316] kvmalloc_node+0x221/0x640 [ 508.716886][ T316] alloc_netdev_mqs+0x8c/0xf90 [ 508.721489][ T316] alloc_etherdev_mqs+0x36/0x40 [ 508.726182][ T316] usbnet_probe+0x213/0x28a0 [ 508.730601][ T316] usb_probe_interface+0x5b6/0xa90 [ 508.735547][ T316] really_probe+0x2b8/0x920 [ 508.739890][ T316] __driver_probe_device+0x1a0/0x310 [ 508.745017][ T316] driver_probe_device+0x54/0x3d0 [ 508.749965][ T316] __device_attach_driver+0x2e3/0x490 [ 508.755167][ T316] bus_for_each_drv+0x183/0x200 [ 508.759854][ T316] __device_attach+0x312/0x510 [ 508.764452][ T316] device_initial_probe+0x1a/0x20 [ 508.769314][ T316] bus_probe_device+0xbe/0x1e0 [ 508.773916][ T316] device_add+0xb60/0xf10 [ 508.778077][ T316] usb_set_configuration+0x190f/0x1e80 [ 508.783457][ T316] usb_generic_driver_probe+0x8b/0x150 [ 508.788861][ T316] usb_probe_device+0x144/0x260 [ 508.793622][ T316] really_probe+0x2b8/0x920 [ 508.797966][ T316] __driver_probe_device+0x1a0/0x310 [ 508.803087][ T316] driver_probe_device+0x54/0x3d0 [ 508.807945][ T316] __device_attach_driver+0x2e3/0x490 [ 508.813164][ T316] bus_for_each_drv+0x183/0x200 [ 508.817864][ T316] __device_attach+0x312/0x510 [ 508.822442][ T316] device_initial_probe+0x1a/0x20 [ 508.827300][ T316] bus_probe_device+0xbe/0x1e0 [ 508.831907][ T316] device_add+0xb60/0xf10 [ 508.836073][ T316] usb_new_device+0xf2f/0x1820 [ 508.840670][ T316] hub_event+0x2db1/0x4830 [ 508.844923][ T316] process_one_work+0x73d/0xcb0 [ 508.849607][ T316] worker_thread+0xa60/0x1260 [ 508.854127][ T316] kthread+0x26d/0x300 [ 508.858026][ T316] ret_from_fork+0x1f/0x30 [ 508.862281][ T316] [ 508.864451][ T316] Freed by task 349: [ 508.868183][ T316] kasan_set_track+0x4b/0x70 [ 508.872609][ T316] kasan_save_free_info+0x2b/0x40 [ 508.877467][ T316] ____kasan_slab_free+0x131/0x180 [ 508.877842][ T5771] loop3: detected capacity change from 0 to 2048 [ 508.882410][ T316] __kasan_slab_free+0x11/0x20 [ 508.882441][ T316] __kmem_cache_free+0x21d/0x410 [ 508.897951][ T316] kfree+0x7a/0xf0 [ 508.901512][ T316] kvfree+0x35/0x40 [ 508.905172][ T316] netdev_freemem+0x3f/0x60 [ 508.909495][ T316] netdev_release+0x7f/0xb0 [ 508.913848][ T316] device_release+0x95/0x1c0 [ 508.918264][ T316] kobject_put+0x178/0x260 [ 508.922514][ T316] put_device+0x1f/0x30 [ 508.926506][ T316] free_netdev+0x393/0x480 [ 508.930771][ T316] usbnet_disconnect+0x25f/0x3b0 [ 508.935535][ T316] usb_unbind_interface+0x1fa/0x8c0 [ 508.940569][ T316] device_release_driver_internal+0x53e/0x870 [ 508.946469][ T316] device_release_driver+0x19/0x20 [ 508.951418][ T316] bus_remove_device+0x2fa/0x360 [ 508.956186][ T316] device_del+0x663/0xe90 [ 508.960350][ T316] usb_disable_device+0x380/0x720 [ 508.965211][ T316] usb_disconnect+0x32a/0x890 [ 508.969812][ T316] hub_event+0x1ed8/0x4830 [ 508.974063][ T316] process_one_work+0x73d/0xcb0 [ 508.979028][ T316] worker_thread+0xd71/0x1260 [ 508.983545][ T316] kthread+0x26d/0x300 [ 508.987444][ T316] ret_from_fork+0x1f/0x30 [ 508.991700][ T316] [ 508.993871][ T316] Last potentially related work creation: [ 508.999423][ T316] kasan_save_stack+0x3b/0x60 [ 509.003938][ T316] __kasan_record_aux_stack+0xb4/0xc0 [ 509.009148][ T316] kasan_record_aux_stack_noalloc+0xb/0x10 [ 509.014812][ T316] insert_work+0x56/0x310 [ 509.019067][ T316] __queue_work+0x9b6/0xd70 [ 509.023381][ T316] queue_work_on+0x105/0x170 [ 509.027810][ T316] usbnet_link_change+0x182/0x1a0 [ 509.032666][ T316] usbnet_probe+0x1e1e/0x28a0 [ 509.037177][ T316] usb_probe_interface+0x5b6/0xa90 [ 509.042127][ T316] really_probe+0x2b8/0x920 [ 509.046466][ T316] __driver_probe_device+0x1a0/0x310 [ 509.051587][ T316] driver_probe_device+0x54/0x3d0 [ 509.056449][ T316] __device_attach_driver+0x2e3/0x490 [ 509.061654][ T316] bus_for_each_drv+0x183/0x200 [ 509.066339][ T316] __device_attach+0x312/0x510 [ 509.070942][ T316] device_initial_probe+0x1a/0x20 [ 509.075810][ T316] bus_probe_device+0xbe/0x1e0 [ 509.080400][ T316] device_add+0xb60/0xf10 [ 509.084569][ T316] usb_set_configuration+0x190f/0x1e80 [ 509.089863][ T316] usb_generic_driver_probe+0x8b/0x150 [ 509.095155][ T316] usb_probe_device+0x144/0x260 [ 509.099846][ T316] really_probe+0x2b8/0x920 [ 509.104180][ T316] __driver_probe_device+0x1a0/0x310 [ 509.109303][ T316] driver_probe_device+0x54/0x3d0 [ 509.114251][ T316] __device_attach_driver+0x2e3/0x490 [ 509.119456][ T316] bus_for_each_drv+0x183/0x200 [ 509.124145][ T316] __device_attach+0x312/0x510 [ 509.128744][ T316] device_initial_probe+0x1a/0x20 [ 509.133625][ T316] bus_probe_device+0xbe/0x1e0 [ 509.138203][ T316] device_add+0xb60/0xf10 [ 509.142470][ T316] usb_new_device+0xf2f/0x1820 [ 509.147057][ T316] hub_event+0x2db1/0x4830 [ 509.151309][ T316] process_one_work+0x73d/0xcb0 [ 509.156084][ T316] worker_thread+0xa60/0x1260 [ 509.160598][ T316] kthread+0x26d/0x300 [ 509.164503][ T316] ret_from_fork+0x1f/0x30 [ 509.168762][ T316] [ 509.170926][ T316] The buggy address belongs to the object at ffff88813058e000 [ 509.170926][ T316] which belongs to the cache kmalloc-4k of size 4096 [ 509.184817][ T316] The buggy address is located 3312 bytes inside of [ 509.184817][ T316] 4096-byte region [ffff88813058e000, ffff88813058f000) [ 509.198091][ T316] [ 509.200260][ T316] The buggy address belongs to the physical page: [ 509.206514][ T316] page:ffffea0004c16200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x130588 [ 509.216576][ T316] head:ffffea0004c16200 order:3 compound_mapcount:0 compound_pincount:0 [ 509.224863][ T316] flags: 0x4000000000010200(slab|head|zone=1) [ 509.230764][ T316] raw: 4000000000010200 0000000000000000 dead000000000001 ffff888100043380 [ 509.239183][ T316] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 509.247594][ T316] page dumped because: kasan: bad access detected [ 509.253855][ T316] page_owner tracks the page as allocated [ 509.259401][ T316] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 292, tgid 292 (syz-executor), ts 23661221440, free_ts 0 [ 509.279711][ T316] post_alloc_hook+0x213/0x220 [ 509.284309][ T316] prep_new_page+0x1b/0x110 [ 509.288649][ T316] get_page_from_freelist+0x2f41/0x2fc0 [ 509.294033][ T316] __alloc_pages+0x234/0x610 [ 509.298454][ T316] alloc_slab_page+0x6c/0xf0 [ 509.302883][ T316] new_slab+0x90/0x3e0 [ 509.306788][ T316] ___slab_alloc+0x6f9/0xb80 [ 509.311213][ T316] __slab_alloc+0x5d/0xa0 [ 509.315379][ T316] __kmem_cache_alloc_node+0x207/0x2a0 [ 509.320795][ T316] kmalloc_trace+0x2a/0xa0 [ 509.325038][ T316] kobject_uevent_env+0x262/0x720 [ 509.329923][ T316] kobject_uevent+0x1f/0x30 [ 509.334237][ T316] net_rx_queue_update_kobjects+0x239/0x4a0 [ 509.339970][ T316] netdev_register_kobject+0x231/0x320 [ 509.345260][ T316] register_netdevice+0xe43/0x1490 [ 509.350218][ T316] veth_newlink+0x7fc/0xc70 [ 509.354553][ T316] page_owner free stack trace missing [ 509.359756][ T316] [ 509.361923][ T316] Memory state around the buggy address: [ 509.367396][ T316] ffff88813058eb80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 509.375301][ T316] ffff88813058ec00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 509.383192][ T316] >ffff88813058ec80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 509.391085][ T316] ^ [ 509.398638][ T316] ffff88813058ed00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 509.406540][ T316] ffff88813058ed80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 509.414440][ T316] ================================================================== [ 509.422332][ T316] Disabling lock debugging due to kernel taint [ 509.518417][ T5771] loop3: p1 < > p2 p3 < p5 > [ 509.523165][ T5771] loop3: partition table partially beyond EOD, truncated [ 509.530121][ T5771] loop3: p1 start 4278190080 is beyond EOD, truncated [ 509.536738][ T5771] loop3: p2 start 16908288 is beyond EOD, truncated [ 509.543564][ T5771] loop3: p5 start 16908288 is beyond EOD, truncated