last executing test programs: 12.35917982s ago: executing program 4 (id=566): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x408, 0xcd, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f0000000800)=""/163}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r3, 0x6, &(0x7f0000002000)) fcntl$lock(r3, 0x26, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9}) fcntl$lock(r3, 0x26, &(0x7f0000000180)={0x0, 0x0, 0xd18f}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)="72690addcf", 0x5}], 0x1, 0x1) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000140)={'macvlan1\x00'}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r9, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r9, 0x1, 0x19, &(0x7f0000000080)='wg2\x00', 0x4) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.parent_freezing\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f0000000100), 0xfffffd9d) ioctl$int_in(r9, 0x5421, &(0x7f0000000000)=0xdb42) sendfile(r9, r10, 0x0, 0x8000002b) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3}}, 0x20004044) splice(r5, 0x0, r7, 0x0, 0x10500, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x0, "2313"}, @global=@item_4={0x3, 0x1, 0x0, 'u\'Qg'}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x0, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4, @global=@item_4={0x3, 0x1, 0x8, "0f2779f5"}, @local=@item_012={0x2, 0x2, 0x0, "f018"}]}}, 0x0}, 0x0) 10.656356649s ago: executing program 0 (id=570): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000980)=ANY=[@ANYBLOB], 0x0, 0x50}, 0x20) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa210104, @local, {[@timestamp_addr={0x44, 0xc, 0xa, 0x1, 0x0, [{@remote}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000440)=0x7fffffff, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x3c, 0x10, 0x609, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0xfffe}]}}}]}, 0x3c}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) r3 = syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="05010900b24b6a10e6040300770100000001090224000b010000000904000302ccd4280009050b02000000040009058a02"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) 9.793695779s ago: executing program 4 (id=572): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5514, &(0x7f0000005d80)="$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") sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e00010200000000000000fd68000000", @ANYRES32=0x0, @ANYBLOB="0500"], 0x1c}}, 0x0) recvmmsg(r4, &(0x7f00000016c0)=[{{0x0, 0xa6, 0x0}}], 0x10, 0x200d0000, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB="2c726f6f746d9985653d30c1b18853a989303030303030", @ANYBLOB=',group', @ANYRESDEC=0x0, @ANYBLOB]) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='mountinfo\x00') read$FUSE(r5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 8.897071693s ago: executing program 4 (id=577): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x7, 0x0, 0x3fffd, 0x40b, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x2, 0x6}, 0x48) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x301) ioctl$USBDEVFS_SUBMITURB(r1, 0xc0105500, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x450, &(0x7f0000000f80)=ANY=[@ANYBLOB="5e51010f5fb21ccfb0719bd4490608024e37d1dc6d1933247bd97257135def91869c2522ff8d7b7cba735aed1a5b1ca9460b3c675582d19bf11e3a92689104c0720c6730cb40b1c16f86700b8718a37a20c4ba7478f76d9b37015cc2843aeeabebfdab0da744c3168f5f44c8143de35d61f4623a8af9c1646ad9cf3a3c3de6499b890f7206c1a7844f115096e3b90e3d8f6a01200ea50cca6d5ba35386e3a3d98478b2c1edc0a61d5db25552f8bfe55974be7641f189f18d9f57d38713359d0cfe0b811970365c60ceddaa0555fa0d06c2", @ANYRESHEX, @ANYRES64=r1, @ANYRESDEC=0xee00, @ANYBLOB="705f90be56b5a0c9b12338f280fed98d799d7474810b7b696c540e4c64bc2a1975489a58a4ff5c6040a104e4233a448221777838056ebb3f4d0206c594185e8ec00a2fba612a30d00f5203ea26d06be15af5aabe2fc8e512d62ea4629f85c5c04a2838c02b736b7ee84b55ec67ab694789a0742e82442cef3ebe340b53", @ANYRESDEC=r1, @ANYBLOB="73a94d164dd2811befdf598284f2e248ec7d35aa6b59ca95f4c8c4bfa93527413fe7e7485b104e3dab6cbc7344b5be47de36ea4d391eee712224631258294868e65ce56e3e4dc427a3fe4536ad4e9f85d48afade87e4a882246b2fcf560ca40b4cf6f4f924c0d5541e326cbbff49f536751f8539910a6ecbe81b27c464b3dd1a13d61cbfc9f886cb1078eb8e4a5a6c99cd090ce51ba65132658a3c3015a0647f292368ecba8049c8cad38a4414d450ee196fa3d98114b0a66c4b5aeda6830ece06de1f80d2d729e58e405c702af0c0415f3173e1e120bd60"], 0x0, 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040ef0ed07200000000000109022400010000000009040000010300000009210000000122050009058183"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_usb_control_io$hid(r2, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000380)=ANY=[], 0x0}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000800)=ANY=[], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x90) sendmsg$key(0xffffffffffffffff, &(0x7f0000000280)={0x3, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="022100830a0000000019030006000000000002000000ac1414bb00000000010000ea2f004300050000000008"], 0x50}, 0x1, 0x7}, 0x4000880) syz_usb_connect(0x0, 0x41, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000e518a708ac0501859d200000690109022f00010000000009040000000e0100001524"], 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x2, 0x6, 0x4, 0x1064, r0, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x45, '\x00', 0x0, 0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000008c0)=ANY=[@ANYRES16=r0, @ANYRESDEC, @ANYRESHEX=r5, @ANYRESOCT=r4, @ANYRES16=0x0, @ANYRES32, @ANYBLOB="b0d3a1ea3cf6a6187d3b9ea98b3a1568cedb4efdb759d951719b26c5a3686c593ce937db9543cb7f0ba2d451b2373ed05f9b11c2975dff1104c39ac596c8771e793a82", @ANYRES16], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000841) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$unix(r8, &(0x7f0000000000), 0x0, 0x20000000) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 7.368199128s ago: executing program 0 (id=579): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000022c0)=ANY=[@ANYBLOB="1400002c2affffffffffff00080000000180000008000000"], 0x18}}], 0x2, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x9}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) sched_setscheduler(0x0, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r6}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000380)={{r1}, &(0x7f00000001c0), &(0x7f0000000340)='%pB \x00'}, 0x20) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, 0x0, 0x38}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000002c0)={r7}, 0x69) 6.493891489s ago: executing program 0 (id=581): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x200}, 0xe) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r8, 0x0, 0xc, &(0x7f00000000c0)='H', 0x1) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) setsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f0000000080)={r10, @multicast1, @multicast2}, 0xc) getsockopt$inet_opts(r8, 0x0, 0x400000000000009, &(0x7f0000000140)=""/21, &(0x7f0000000100)=0x15) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f0000000200)={0x76, {{0xa, 0x4e24, 0x4, @local, 0x3}}, 0x0, 0x1, [{{0xa, 0x4e24, 0x4, @local, 0x7}}]}, 0x110) connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10) sendto$inet6(r7, &(0x7f0000000080)="03e1c6d9894c20f1ec3e51131de6fbd8d986975b38005643a7d6b505d580966139af528bd0d78e", 0x27, 0x5, &(0x7f00000000c0)={0xa, 0x4e24, 0x8c72, @local, 0x118}, 0x1c) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x8c}, 0x1, 0x0, 0x0, 0x11}, 0x4c841) 6.179118165s ago: executing program 3 (id=584): prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1810714, &(0x7f0000000440)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1}}, {@init_itable_val}, {@nolazytime}, {@grpid}, {@prjquota}, {@norecovery}, {@lazytime}, {@errors_continue}, {@auto_da_alloc}, {@test_dummy_encryption}]}, 0xff, 0x468, &(0x7f0000000780)="$eJzs289vFFUcAPDvzG4BQdmKiIIgVTRp/NHSgsrBxGg08aCJiR7wWNtCkIUaWhMhjVZj8GhIvBuPJv4FnjwZ9WTiFY8mhoQoMQG9uGZ2Z0q77JbWbtlN9/NJBt6befve+3bmzb6dtxtA3xrK/kki7o6IyxFRaWSXFxhq/Hfj2vzk39fmJ5Oo1d78I6mXu35tfrKWK163I69zOI1IP03yRmJgabWz5y+cnqhWp8/l+dG5M++Nzp6/8PSpMxMnp09Onx0/duzokbHnnh1/pkWvf7u01jiz+K7v+3Bm/95X3770+uTxS+/8+E3W3z0HGsezONZa5+0MZYH/2fjbNB97vNONddm/tZtxJuVu94bVKkVEOR+cl6MSpbh58irxyidd7RywobJ79tb2hxdqwCaWRLd7AHRH8Uafff4ttjs09egJV19sfADK4r6Rb40j5UjzMgMb2P5QRBxf+OfLbIum5xC1Fs8NAADW67ts/vNUq/lfGnuWlNuZrw0NRsS9EbErIu6LiN0RcX9EvewDEfHgGtsfasrfOv9Mr/yvwFYpm/89n69tLZ//FbO/GCzluXvq8Q8kJ05Vpw/nf5PhGNia5cdaVV5U8fIvn7drf+n8L9uy9ou5YF7JlXLjAd22Ys/UxNxEpyalVz+O2FduFX+yuBKQRMTeiNi3tqp3FolTT3y9v12h28e/gg6sM9W+KiqZX4im+AvJyuuTo9uiOn14tLgqbvXTzxffaNf+uuLvgOz8b19+/TeVqPyVLF2vnV088MJq27j462dtP1OWV3/9L8qu/y3JW/U13S35vg8m5ubOjUVsSV6r55ftH7/52iJflM/iHz7Uevzvyl+Txf9QRGQX8YGIeDgiDubn7pGIeDQiDq0Q/w8vPfZuu2O9cP6nWt7/Fq//weXnf+2J0unvv23X/uruf0frqeF8T/3+dxvtu1PcRpuuZgAAANjE0vp345N0ZDGdpiMjje/w747taXVmdu7JEzPvn51qfId+MAbS4klXZcnz0LFkIa+xkR/PnxUXx4/kz42/KN1Vz49MzlSnuhw79LsdbcZ/5vdSt3sHbDi/14L+1Tz+0y71A7jzvP9D/zL+oX8Z/9C/Wo3/j5ry1gJgM6pVut0DoHvM/6F/Gf/Qv4x/6Evr+V3/RiXKK/x6X6JXEpH2RDd6JnGwh0ZTuQOju8s3JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgA75LwAA///foPki") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="8bb177c20a7c0c4100ffa6f380d6f8b97ae2cf989619c4c6a3741628a38e59ce76f73bcd4623d6798a3234c32ef1fb6954cc0701000000acaea457f05e513b1a51d3"], 0xed) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) ioctl$HIDIOCGNAME(r0, 0x80404806, &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x6, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setitimer(0x0, 0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) ptrace$ARCH_GET_CPUID(0x1e, r1, 0x0, 0x1011) r6 = gettid() r7 = syz_open_dev$usbfs(&(0x7f00000007c0), 0x73, 0x82) ioctl$USBDEVFS_REAPURB(r7, 0x4008550c, 0x0) rt_sigqueueinfo(r6, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xfffffffb}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002b40)=[{{&(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f00000002c0)=[{0x0}, {&(0x7f0000000180)="21a4634e63bdf0b0f83f4b65940d2c4d305c62e1a09b778edd4fbaaaa02f0c9759125d50764ced8dc4b8e9209cce45156e7f2fb95feaf072e012b2f0f719ad9a29547fc9aa48500888a42c16b6019b8902b3f4f320a4da58c55c08cb3f24494d778c6b654f6c175313feb81f6bc1cbfead0f867013744b06d98022c9aab0f6a8f01392960d525a5b280e1c9789cf2dade495c35e", 0x94}, {&(0x7f0000000240)="4367ee5fcf6b5432c2777dc68975546f7675e87655535a6391829f", 0x1b}, {&(0x7f0000000280)="b22d368d25bc242a", 0x8}, {&(0x7f0000000600)="55282b0da0bb5f44ac63dc8c2562a4cc9829d3df3ad981374b8b0a8342d1a120769ce3035732e44e974eeac0327aad0136fa44bd9711b373e4a58457aaf3f2532e2a2f4692844a9ed42d6c6e374a4b68a177c6c80b6f302327ea175096a6a7d83f8cd314688fb079232fc400b725ae5fa54b153f38b72dfacc75a9f3e277bca0ef68baa0117d", 0x86}, {&(0x7f00000006c0)="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", 0xec0}], 0x6, &(0x7f00000003c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x1}}], 0x18}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000016c0)="71f4f4ab8817cd9c755a2d73174c2df7389f6fb4584fb6a8825358c041bf28f8cbf4285ae7251fdaca2460165b6fdacb4e5c58827b785c8488512476f50ac9b9adffb29f45b0b7c6728885c8aa8e7d72f465a710", 0x54}, {&(0x7f0000001780)="37d31c92a53b5f07dde0100c9661578a05be2b9a9d69665f618afce8d1050b5572f83cacfcfc0bb9192a1b03b04f397505ccd49edc1c8e9a709f1c1bb77b2c6f002e0ea127d817d53b6224c2cd297e44ad964a9cb8a456ea18bea1155f7cc50ac00529e572310514fb5aaf1780c8ad3edbb95011fb5796b75bdb37335c484d01860df15cdfab2b43c65f31aba116463d844f6de0751d1befa25fa4196e700e387b8e61a82171f9c50d3197bc052cd0adf7394fa026904d97a026367a15b6a366f5c79e05e2a834028116cd735cf14e583331", 0xd2}, {&(0x7f0000001880)="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", 0x1000}, {&(0x7f0000002880)="976e2bc2e0b96ae7cfe74a1836d925899bd723ff85e837a5628881704c9af4a561b49a2f34371d6f0d44733e2444285a7921b58f7b41daabae8be5d7cc", 0x3d}], 0x4, &(0x7f0000002d80)=ANY=[], 0x178}}], 0x2, 0x20040080) 5.75383458s ago: executing program 4 (id=585): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@bloom_filter={0x1e, 0x7f, 0x9, 0xff, 0x1000, 0x1, 0xffffffff, '\x00', 0x0, r0, 0x5, 0x1, 0x3, 0x1}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) epoll_create1(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b70800000000002c7b0af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8=r1, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e01f3440cee51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cad32b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337602d3e5a815232f5e16c1b30c3a6abc85018e5ff2c91018afc9ffc2cc788bee1b47683db012469398685211dfbbae3e2ed0a50e7393bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d300006aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7af22e30d46a9d26d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977fb536a9caab37d9ac4cfc1c7b400000000000007ffc826b956ba859ac8e3c177b91bd7d5e41ff83ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d000069a16203a967c1bbe09315c29877a308bcc87dc3addb08142bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8240000e3428d2129369ee1b85af9ffffff0d0df414b315f651c8412392191fa83ee830548f11be359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92000000000f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb74d4ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905de328c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a978ee56c83a3466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342e0eaf6f330e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea95ec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf81700cd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be3827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f969369de47422604e2fc5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293b6c833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b612272d40f522d8c98c879aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbe71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd46dbd61627a2e0a74b5e6aefb7eee403502734137ff47a57f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a125e3af1130d66a7b66837ae7e7123dde7404a067ad0a6a2d6bec9411b61cad4121be3c72ff3a04713042253d438e7becf8120de3895b8ce974958bde39cb8da3427a2e9e2de936431e67fed5ab5684db07de39083d8948cc4c8a2608100000000000000000000aecb8b0b7941088f971ce17427eec32a012295cc0cdd32955176b6ad5a4bb953e58ccfa9428f452cfb5a48a9fda26db3985c8be3c2f99827da074825b01c4a3a71fb59d5798100000000000000c76b05a45d2dd8c20d971e2f3e4369168f5cb83d6ff3a18733fec726034fbfa95624135bee374414b2c8c61f52357a520efd6a10aff244bc8a62ed367981fb4d5d77f7bc093958ff46527499957da4934cd4b370cf76f72dd05fa80cdfb68c836fd81be7a58532e041a87f9222f157610a4bcdc05b2a55308c8e7568b90f7a338557e816a16972aea79dff5becefa6f9c5ce6c58fb38da9e7532dc53cfdc2e789b76f7d32aca1bfea2aa62621b78dded30fc07171866bf3d552900000000a32dda61eeda1750e157c2d569b9d08f583c0ee28daec2e8bb85f3c8e91c4448096ee953def18dc73e55cb30f9cd069d8780b00eaba382f0c3ae391c30a5f1b0f36dd0c2193b791995d2890327a10d7abac76d1202f72e97f0105184d7aaaab8d3e29c9a8d263f076b55cf53c5bb9c0662a3d19a6722d7f83ae4331d3256f90af0857788b380ccc3b266c418e66d1d756d5df6423dd0cea67bc235d3776d22270fc19301ead09f156893e9"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r6 = dup(r1) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x8}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10) 5.443073456s ago: executing program 0 (id=586): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b708000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x9, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0xfffffeffffff7ffe, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000006180)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)}], 0x1}}], 0x1, 0x0) sendmsg$nl_netfilter(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000000b07010326bd7000fbdbdf250a0000016c7386187c4bc98f49c323e6797d82108fac14e4e0d43a207eb7c9e89dda98df7fc1e70a93204b718a119c62584a742160268ac9b8886facc374de43776b40d3f359ac3909"], 0x14}, 0x1, 0x0, 0x0, 0x4008020}, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000006480)={&(0x7f0000c2b000/0x4000)=nil, 0xc00, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}, &(0x7f00000064c0)=0x40) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001500)={0xffffffffffffffff, &(0x7f0000000500)="f4970e2c0873301b0f5d46eec8427fabe7ea068c0face18b6d966eed077db6af4d14ff9cf780147ce1313cb9674a364a5c247b04a8e21dce3550dd959e7dcd0759ce15a61dd85d12ebc2d3ee0b60ebec8828045c122a5d3095bd1a09ff31c753c3ff6e67eb7ee8b6"}, 0x20) syz_usb_connect(0x0, 0x2d, &(0x7f0000000540)=ANY=[@ANYBLOB="1201000074020440fd07010099480102030109021b0001000000000904000001c5b3e30009050b"], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) 5.313120576s ago: executing program 3 (id=588): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="1201000000000040ec13060000000000000109022400010000000009040000010300000009210000000122"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) read$FUSE(0xffffffffffffffff, &(0x7f000000ac40)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, 0x0, 0x0) syz_fuse_handle_req(r5, 0x0, 0x0, 0x0) close(r5) ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, 0x0) 4.916250829s ago: executing program 4 (id=590): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, r1, 0x0, '\x00', 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r1}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x90) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="022100830a0000000019030006000000000002000000"], 0x50}, 0x1, 0x7}, 0x4000080) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r5 = dup(r3) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) lgetxattr(0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x41, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000e518a708ac0501859d200000690109022f00010000000009040000000e0100001524"], 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = dup(r10) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) 4.493201383s ago: executing program 1 (id=591): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) read$FUSE(0xffffffffffffffff, &(0x7f0000002080)={0x2020}, 0x2020) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x146f}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='gid_map\x00') r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r5, 0x800448d4, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) clock_settime(0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0/../file0/../file0\x00', 0x0, 0x1322030, 0x0) 3.455312748s ago: executing program 1 (id=593): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5}, 0x48) (async, rerun: 32) r1 = socket$inet(0x2, 0x1, 0x0) (rerun: 32) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x169, 0x4) (async) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) (async) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100), 0x4) (async) connect$inet(r1, &(0x7f0000000340)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000080)=0x7ff, 0x4) (async) sendmmsg$inet(r1, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000002300)="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", 0xda3}], 0x1}}, {{&(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000001600)="7f1d272325f1d24d5a0e9652dbdb7d8c1c9342c275527457f2680570e102f5aef9b63477de13cd9117623bd33753743771548745e144c492ffafe01599639f5cadef597640c5e278b280d7c5b78184bd6d73973d07be2d5a5f59779e80c675ff63ce7c6a5a8c68422110eb14f8590b56edbb255d9ffe2e686bbd0b3686d2fe9630b7f3e0bd77f2f52a4675a5873d3469cda651346f116b084e0cc0f4007dcb1042ab53ffd7d60bfd4b4b3f55d27414a632", 0xb1}, {&(0x7f00000016c0)="c27d147bae8b305dfc7c670f07d2bea90862acdbd7699bf9d0c0ead3c2f8a4e9b9ba0bda31ff03cc687a87e3692b27426a7bfaa5897e901b35e18a77f7d894aafd91cd9cc88ef2ba77abf75b04959b", 0xffb9}, {&(0x7f0000001740)="fc350aa33c569ed937d6ca3f40ef604844f267201ae96d6e0df98a4adda228b781722f326a52e05ab1a541814ce9f807ee101e9be1ce95a1c00e2cc7f79c443300c15a8e023baf2019445115ce58b20fee4a48471c6b3902fcb38d114ef48bdebce28a9194c9ac480025823772d92002d3169a1dfd1d463222622cce1cc803b31b87aeb5ffd9cfb146ce4aafec843e451c67e47bacfb6b1e6e6da759d9ba", 0x9e}], 0x3}}], 0x2, 0x44084) ppoll(&(0x7f0000000000)=[{r1}], 0x1, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000539d00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffcfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x20000000000002ab, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r2}, 0x10) (async) syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000580)='./file2\x00', 0x2000000, &(0x7f00000004c0)=ANY=[], 0x1, 0x21d, &(0x7f0000000b40)="$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") (async, rerun: 32) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async, rerun: 32) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async, rerun: 64) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x89101a, 0x0) (rerun: 64) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x1217880, 0x0) (async, rerun: 32) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (rerun: 32) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') read$FUSE(r4, &(0x7f0000002140)={0x2020}, 0x2100) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r5}, 0x10) (async) io_setup(0x3, &(0x7f0000000340)) 3.404590382s ago: executing program 1 (id=594): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000240000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='mm_page_alloc\x00', r0}, 0x10) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[], 0x1c}}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f00000001c0)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$fuse(0x0, &(0x7f0000006340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) ioctl$sock_bt_hci(r1, 0x800448d2, &(0x7f0000000100)) 3.404128732s ago: executing program 1 (id=595): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='mountinfo\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000240)={0x60000003}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0xb}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000800000000000000000001801000020bd342100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x11c2, 0x2208, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f0000000240)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x5, {0x5, 0x0, "6874a7"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x28}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000010000280012000900010076657468"], 0x48}}, 0x0) r8 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents(r8, &(0x7f00000001c0)=""/4089, 0xff9) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x4, 0x9, 0xae8, 0x4, r0, 0x0, '\x00', r7, r8, 0x4, 0x2, 0x3, 0x3}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYRES64=r9, @ANYRES16=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r10}, 0x10) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='tlb_flush\x00', r11}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f00000011c0)=0x0) getresuid(&(0x7f0000001200), &(0x7f0000001240)=0x0, &(0x7f0000001280)) setreuid(r12, r13) 2.832747569s ago: executing program 0 (id=597): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000401e04012810000000000109022400010000000009040000020300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f000000"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 2.536387383s ago: executing program 2 (id=598): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, 0x0, &(0x7f0000000040)) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, 0x0, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) socket(0x24, 0x0, 0x0) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r8, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=@newtfilter={0x68, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_FLAGS={0x8}]}}, @filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x8, 0x5}}]}}, @TCA_CHAIN={0x8, 0xb, 0x5}]}, 0x68}}, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x204410, &(0x7f0000000740), 0xfe, 0x4a1, &(0x7f00000001c0)="$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") creat(&(0x7f0000000300)='./bus\x00', 0x0) 2.029366065s ago: executing program 3 (id=599): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = io_uring_setup(0x371e, &(0x7f0000000100)={0x0, 0x28be, 0x10, 0x2, 0x75}) r1 = eventfd(0x1ff) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000180)=r1, 0x1) 2.029032115s ago: executing program 4 (id=600): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000401e04012810000000000109022400010000000009040000020300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000030000008500000086000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 2.023883835s ago: executing program 3 (id=601): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000e9ff20850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000c00)='skb_copy_datagram_iovec\x00', r0}, 0x10) r1 = syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f0000000280)='./file0\x00', 0x804810, &(0x7f0000000a40), 0x26, 0x756, &(0x7f00000002c0)="$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") chdir(0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = openat(r1, &(0x7f0000000bc0)='./file0\x00', 0x20000, 0x0) syz_mount_image$ext4(&(0x7f0000000800)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2040d0, &(0x7f0000000c40)={[{@jqfmt_vfsv0}, {@abort}, {@barrier}, {@barrier}, {@test_dummy_encryption}, {@nomblk_io_submit}]}, 0xfb, 0x49f, &(0x7f0000001440)="$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") r3 = add_key$user(&(0x7f0000000100), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$set_timeout(0xf, r3, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) getxattr(&(0x7f0000000b00)='./bus\x00', &(0x7f0000000b40)=@known='security.selinux\x00', &(0x7f0000000b80)=""/27, 0x1b) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x3ff, 0x3, 0xe37, 0x1200, r2, 0xffff, '\x00', 0x0, r6, 0x2, 0x2, 0x0, 0x4}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mount$incfs(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, &(0x7f0000000d00)={0x1, 0x10001, 0xd8, &(0x7f0000000e40)=""/216}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r8, 0x2000012, 0x100e, 0x7ffe, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.690450142s ago: executing program 2 (id=602): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = io_uring_setup(0x371e, &(0x7f0000000100)={0x0, 0x28be, 0x10, 0x2, 0x75}) r1 = eventfd(0x1ff) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000180)=r1, 0x1) (fail_nth: 3) 1.337184011s ago: executing program 2 (id=603): syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000340)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x55a, &(0x7f0000000a00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x4, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r4) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r5 = inotify_init1(0x0) fcntl$setown(r5, 0x8, 0xffffffffffffffff) fcntl$getownex(r5, 0x10, &(0x7f0000000140)={0x0, 0x0}) r7 = syz_open_procfs(r6, &(0x7f0000000600)='fd/4\x00') ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000380)=0x4000) r8 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) 977.39854ms ago: executing program 3 (id=604): syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000340)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x55a, &(0x7f0000000a00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x4, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r4) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r5 = inotify_init1(0x0) fcntl$setown(r5, 0x8, 0xffffffffffffffff) fcntl$getownex(r5, 0x10, &(0x7f0000000140)={0x0, 0x0}) r7 = syz_open_procfs(r6, &(0x7f0000000600)='fd/4\x00') ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000380)=0x4000) r8 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) 958.141692ms ago: executing program 1 (id=605): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x380, 0x1c0, 0x12, 0x60a, 0x1c0, 0x202, 0x2b0, 0x2e8, 0x2e8, 0x2b0, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @ipv4={'\x00', '\xff\xff', @private}, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "000000000000000617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x2, 0x3}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) syz_clone3(&(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000640)=[0x0], 0x1}, 0x58) 504.951489ms ago: executing program 2 (id=606): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x810, &(0x7f0000000040)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$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") r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@setlink={0x3c, 0x13, 0x501, 0x0, 0x0, {}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth0_vlan\x00'}, @IFLA_OPERSTATE={0x5, 0x10, 0x5}]}, 0x3c}}, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x1}], 0x1, 0x7a00, 0x0, 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x143142, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a00)={{{@in=@private, @in=@local}}, {{@in=@remote}, 0x0, @in=@private}}, &(0x7f0000000b00)=0xe8) getgroups(0x8, &(0x7f0000000b40)=[0xee01, 0x0, 0xffffffffffffffff, 0xee00, 0xffffffffffffffff, 0xee00, 0x0, 0x0]) mount$fuseblk(0x0, 0x0, &(0x7f0000000980), 0x80, &(0x7f0000000b80)={{}, 0x2c, {}, 0x2c, {}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1400}}, {@max_read={'max_read', 0x3d, 0x80}}, {@blksize}, {}], [{@audit}]}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='tlb_flush\x00', r5}, 0x10) process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x5, 0x1, 0x8e, 0xe7c9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r6, 0x0, 0x0}, 0x20) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) signalfd4(r2, &(0x7f0000000100)={[0x10]}, 0x8, 0x800) r7 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r7, 0x0) fallocate(r7, 0x0, 0x0, 0x1000f4) r8 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r8, 0x6628) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000001900)=""/4121, 0x1019) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r9, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, "ef359f413bb90152f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a01000000000000004faa2ad9c084a003ea00", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00"}) ftruncate(r2, 0x3) 346.920402ms ago: executing program 0 (id=607): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='mountinfo\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000240)={0x60000003}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0xb}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000800000000000000000001801000020bd342100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x11c2, 0x2208, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f0000000240)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x5, {0x5, 0x0, "6874a7"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x28}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000010000280012000900010076657468"], 0x48}}, 0x0) r8 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents(r8, &(0x7f00000001c0)=""/4089, 0xff9) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x4, 0x9, 0xae8, 0x4, r0, 0x0, '\x00', r7, r8, 0x4, 0x2, 0x3, 0x3}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYRES64=r9, @ANYRES16=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r10}, 0x10) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='tlb_flush\x00', r11}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f00000011c0)=0x0) getresuid(&(0x7f0000001200), &(0x7f0000001240)=0x0, &(0x7f0000001280)) setreuid(r12, r13) 211.200853ms ago: executing program 2 (id=608): syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000340)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x55a, &(0x7f0000000a00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x4, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r4, 0x0, 0x8008000000010, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r5) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r6 = inotify_init1(0x0) fcntl$setown(r6, 0x8, 0xffffffffffffffff) fcntl$getownex(r6, 0x10, &(0x7f0000000140)={0x0, 0x0}) r8 = syz_open_procfs(r7, &(0x7f0000000600)='fd/4\x00') ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000000380)=0x4000) r9 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) 76.316924ms ago: executing program 2 (id=609): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="1201000000000040ec13060000000000000109022400010000000009040000010300000009210000000122"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) read$FUSE(0xffffffffffffffff, &(0x7f000000ac40)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, 0x0, 0x0) syz_fuse_handle_req(r5, 0x0, 0x0, 0x0) close(r5) ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, 0x0) 60.551626ms ago: executing program 1 (id=611): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$netlink(0x10, 0x3, 0x8ab0117d794ff86) preadv(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000080), 0x1, 0x7a9, &(0x7f0000001a00)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_sys\x00', 0x275a, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xb) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000980)) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) write$binfmt_script(r1, &(0x7f0000000040)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x800082}, 0x10}, 0x90) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000640)='./file0/../file0/file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) rmdir(0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) 0s ago: executing program 3 (id=612): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018400110800395032303030"], 0x15) r2 = dup(r1) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) write$FUSE_BMAP(r2, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x29, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) close(r6) r7 = socket$unix(0x1, 0x1, 0x0) bind$unix(r7, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) ioctl$SIOCGETMIFCNT_IN6(r6, 0x89e0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r8}, 0x0, &(0x7f00000002c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000000f800b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r10}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x2, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x9}, 0x48) syz_usb_control_io(r5, 0x0, 0x0) kernel console output (not intermixed with test programs): SB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.187757][ T1151] ums-sddr09 5-1:1.0: USB Mass Storage device detected [ 132.473351][ T1151] scsi host1: usb-storage 5-1:1.0 [ 132.847354][ T312] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 132.909498][ T2136] loop3: detected capacity change from 0 to 40427 [ 132.916351][ T2136] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 132.924270][ T2136] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 132.934198][ T2136] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 132.969071][ T2136] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 132.975988][ T2136] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 132.992348][ T2143] syz.3.407: attempt to access beyond end of device [ 132.992348][ T2143] loop3: rw=10241, sector=53248, nr_sectors = 8 limit=40427 [ 133.257897][ T312] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.272330][ T312] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.285208][ T312] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 133.299901][ T312] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 133.309137][ T312] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.317587][ T312] usb 2-1: config 0 descriptor?? [ 133.354451][ T2149] loop0: detected capacity change from 0 to 16 [ 133.361120][ T2149] erofs: (device loop0): mounted with root inode @ nid 36. [ 133.370477][ T2149] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 133.379904][ T2149] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -4 in[53, 4043] out[1851] [ 133.391891][ T2149] erofs: (device loop0): z_erofs_read_folio: failed to read, err [-117] [ 133.417974][ T2151] loop0: detected capacity change from 0 to 2048 [ 133.424914][ T2151] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 133.455597][ T2151] loop0: detected capacity change from 0 to 512 [ 133.462268][ T2151] EXT4-fs: Ignoring removed nomblk_io_submit option [ 133.469082][ T2151] EXT4-fs (loop0): Test dummy encryption mode enabled [ 133.477314][ T2151] EXT4-fs error (device loop0): ext4_orphan_get:1396: inode #17: comm syz.0.410: iget: bogus i_mode (0) [ 133.488509][ T2151] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz.0.410: couldn't read orphan inode 17 (err -117) [ 133.498946][ T24] scsi 1:0:0:0: Direct-Access Sandisk ImageMate SDDR09 0177 PQ: 0 ANSI: 0 [ 133.500404][ T2151] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 133.620677][ T2153] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.410: bg 0: block 7: invalid block bitmap [ 133.633089][ T2153] incfs: Can't find or create .index dir in ./file0 [ 133.639610][ T2153] incfs: mount failed -28 [ 133.675210][ T1488] syz-executor: attempt to access beyond end of device [ 133.675210][ T1488] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 133.751132][ T418] usb 5-1: USB disconnect, device number 21 [ 133.761112][ T2155] loop3: detected capacity change from 0 to 512 [ 133.769656][ T2155] EXT4-fs (loop3): 1 truncate cleaned up [ 133.775198][ T2155] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 133.783480][ T2129] sddr09: could not read card info [ 133.789406][ T10] sd 1:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 133.796354][ T10] sd 1:0:0:0: [sdb] 0-byte physical blocks [ 133.802040][ T10] sd 1:0:0:0: [sdb] Test WP failed, assume Write Enabled [ 133.809033][ T10] sd 1:0:0:0: [sdb] Asking for cache data failed [ 133.809630][ T312] prodikeys 0003:041E:2801.001B: unknown main item tag 0x0 [ 133.815178][ T10] sd 1:0:0:0: [sdb] Assuming drive cache: write through [ 133.831297][ T10] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 133.934189][ T312] prodikeys 0003:041E:2801.001B: unknown main item tag 0x0 [ 133.943055][ T312] prodikeys 0003:041E:2801.001B: unknown main item tag 0x0 [ 133.950384][ T312] prodikeys 0003:041E:2801.001B: unknown main item tag 0x0 [ 133.957439][ T312] prodikeys 0003:041E:2801.001B: unknown main item tag 0x0 [ 133.965122][ T312] prodikeys 0003:041E:2801.001B: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.1-1/input0 [ 133.987364][ T28] audit: type=1400 audit(1724199095.722:230): avc: denied { write } for pid=2154 comm="syz.3.411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 133.996406][ T2164] netlink: 12 bytes leftover after parsing attributes in process `syz.2.412'. [ 134.038289][ T690] usb 2-1: USB disconnect, device number 22 [ 134.262976][ T2050] EXT4-fs (loop0): unmounting filesystem. [ 134.621191][ T1488] EXT4-fs (loop3): unmounting filesystem. [ 134.650661][ T690] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 134.652735][ T2174] netlink: 12 bytes leftover after parsing attributes in process `syz.1.415'. [ 134.762688][ T2174] loop1: detected capacity change from 0 to 512 [ 134.833386][ T2174] EXT4-fs error (device loop1): ext4_orphan_get:1396: inode #15: comm syz.1.415: casefold flag without casefold feature [ 134.846940][ T2174] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: inode #2: comm syz.1.415: missing EA_INODE flag [ 134.859680][ T2174] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.415: error while reading EA inode 2 err=-117 [ 134.872520][ T2174] EXT4-fs (loop1): 1 orphan inode deleted [ 134.878224][ T2174] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 135.098028][ T2184] fuse: Bad value for 'group_id' [ 135.420936][ T289] EXT4-fs (loop1): unmounting filesystem. [ 135.447691][ T690] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.465838][ T690] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.475534][ T690] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 135.484657][ T690] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.496070][ T690] usb 5-1: config 0 descriptor?? [ 135.787336][ T1832] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 136.027349][ T1151] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 136.179234][ T2168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.187600][ T2168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.199079][ T1832] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.209941][ T1832] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.219598][ T690] usb 5-1: string descriptor 0 read error: -71 [ 136.225572][ T1832] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 136.238135][ T690] uclogic 0003:256C:006D.001C: failed retrieving string descriptor #200: -71 [ 136.246666][ T690] uclogic 0003:256C:006D.001C: failed retrieving pen parameters: -71 [ 136.254695][ T1832] usb 1-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.00 [ 136.263545][ T1832] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.267308][ T1151] usb 4-1: Using ep0 maxpacket: 16 [ 136.271536][ T690] uclogic 0003:256C:006D.001C: failed probing pen v2 parameters: -71 [ 136.312341][ T1832] usb 1-1: config 0 descriptor?? [ 136.317208][ T690] uclogic 0003:256C:006D.001C: failed probing parameters: -71 [ 136.327684][ T690] uclogic: probe of 0003:256C:006D.001C failed with error -71 [ 136.339779][ T690] usb 5-1: USB disconnect, device number 22 [ 136.417412][ T1151] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 136.534385][ T2199] tipc: Started in network mode [ 136.539221][ T2199] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 136.548334][ T2199] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0001 [ 136.556654][ T2199] tipc: Enabled bearer , priority 10 [ 136.572262][ T28] audit: type=1326 audit(1724199098.242:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2193 comm="syz.1.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22c7379e79 code=0x7ffc0000 [ 136.674760][ T28] audit: type=1326 audit(1724199098.242:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2193 comm="syz.1.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22c7379e79 code=0x7ffc0000 [ 136.698711][ T1151] usb 4-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 136.711831][ T28] audit: type=1326 audit(1724199098.242:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2193 comm="syz.1.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f22c7379e79 code=0x7ffc0000 [ 136.712965][ T1151] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.735135][ T28] audit: type=1326 audit(1724199098.242:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2193 comm="syz.1.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22c7379e79 code=0x7ffc0000 [ 136.765950][ T28] audit: type=1326 audit(1724199098.242:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2193 comm="syz.1.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22c7379e79 code=0x7ffc0000 [ 136.769336][ T1151] usb 4-1: Product: syz [ 136.793228][ T28] audit: type=1326 audit(1724199098.242:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2193 comm="syz.1.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f22c7379e79 code=0x7ffc0000 [ 136.818420][ T1151] usb 4-1: Manufacturer: syz [ 136.820964][ T28] audit: type=1326 audit(1724199098.252:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2193 comm="syz.1.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22c7379e79 code=0x7ffc0000 [ 136.827312][ T1151] usb 4-1: SerialNumber: syz [ 136.848007][ T1832] betop 0003:11C2:2208.001D: item fetching failed at offset 4/5 [ 136.865275][ T1832] betop 0003:11C2:2208.001D: parse failed [ 136.871360][ T1151] usb 4-1: config 0 descriptor?? [ 136.875998][ T1832] betop: probe of 0003:11C2:2208.001D failed with error -22 [ 136.895640][ T28] audit: type=1326 audit(1724199098.252:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2193 comm="syz.1.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22c7379e79 code=0x7ffc0000 [ 136.907759][ T1151] usb 4-1: Found UVC 0.00 device syz (045e:0721) [ 136.933275][ T1151] usb 4-1: No valid video chain found. [ 136.937202][ T28] audit: type=1326 audit(1724199098.252:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2193 comm="syz.1.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f22c737bd97 code=0x7ffc0000 [ 136.985121][ T28] audit: type=1326 audit(1724199098.252:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2193 comm="syz.1.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f22c737bd0c code=0x7ffc0000 [ 137.059728][ T2186] netlink: 24 bytes leftover after parsing attributes in process `syz.0.419'. [ 137.128612][ T2191] netlink: 12 bytes leftover after parsing attributes in process `syz.3.420'. [ 137.152989][ T511] usb 4-1: USB disconnect, device number 25 [ 137.194019][ T2202] loop4: detected capacity change from 0 to 40427 [ 137.200793][ T2202] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 137.207993][ T2202] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 137.240752][ T690] usb 1-1: USB disconnect, device number 30 [ 137.269005][ T2202] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 137.291571][ T2202] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 137.298527][ T2202] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 137.312994][ T2211] syz.4.423: attempt to access beyond end of device [ 137.312994][ T2211] loop4: rw=10241, sector=53248, nr_sectors = 8 limit=40427 [ 137.704784][ T511] tipc: Node number set to 1 [ 137.818820][ T1611] syz-executor: attempt to access beyond end of device [ 137.818820][ T1611] loop4: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 137.838981][ T1611] syz-executor: attempt to access beyond end of device [ 137.838981][ T1611] loop4: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 138.143107][ T1611] syz-executor: attempt to access beyond end of device [ 138.143107][ T1611] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 138.654049][ T2219] loop2: detected capacity change from 0 to 40427 [ 138.707116][ T2219] F2FS-fs (loop2): Found nat_bits in checkpoint [ 138.748210][ T2219] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 138.777361][ T327] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 138.819955][ T2237] netlink: 12 bytes leftover after parsing attributes in process `syz.0.430'. [ 139.113186][ T2239] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.139337][ T2239] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.161159][ T2239] device bridge_slave_0 entered promiscuous mode [ 139.183639][ T2239] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.195977][ T2239] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.196683][ T926] syz-executor: attempt to access beyond end of device [ 139.196683][ T926] loop2: rw=2049, sector=45096, nr_sectors = 24 limit=40427 [ 139.203312][ T2239] device bridge_slave_1 entered promiscuous mode [ 139.367384][ T24] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 139.375248][ T690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 139.387667][ T690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 139.398867][ T2248] loop2: detected capacity change from 0 to 2048 [ 139.419423][ T1832] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 139.427477][ T327] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.438301][ T2248] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 139.447981][ T1832] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 139.456000][ T1832] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.462854][ T1832] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.470066][ T327] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.479821][ T327] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 139.492467][ T1832] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 139.500408][ T327] usb 4-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.00 [ 139.509525][ T1832] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 139.517357][ T327] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.525773][ T1832] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.532636][ T1832] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.539998][ T327] usb 4-1: config 0 descriptor?? [ 139.544920][ T1832] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 139.552827][ T1832] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 139.561351][ T601] device bridge_slave_1 left promiscuous mode [ 139.569390][ T601] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.576818][ T601] device bridge_slave_0 left promiscuous mode [ 139.583180][ T601] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.601195][ T2248] loop2: detected capacity change from 0 to 512 [ 139.609816][ T601] device veth0_vlan left promiscuous mode [ 139.633729][ T2250] loop0: detected capacity change from 0 to 1024 [ 139.634909][ T2248] EXT4-fs: Ignoring removed nomblk_io_submit option [ 139.646375][ T2250] EXT4-fs: Mount option(s) incompatible with ext2 [ 139.652981][ T2248] EXT4-fs (loop2): Test dummy encryption mode enabled [ 139.661651][ T2248] EXT4-fs error (device loop2): ext4_orphan_get:1396: inode #17: comm syz.2.434: iget: bogus i_mode (0) [ 139.672823][ T2248] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.434: couldn't read orphan inode 17 (err -117) [ 139.684767][ T2248] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 139.750639][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.767411][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.786424][ T690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 139.787351][ T24] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 139.804143][ T690] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 139.813465][ T2239] device veth0_vlan entered promiscuous mode [ 139.817368][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.821176][ T690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 139.860491][ T24] usb 2-1: config 0 descriptor?? [ 140.047022][ T2255] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.434: bg 0: block 7: invalid block bitmap [ 140.070720][ T2255] incfs: Can't find or create .index dir in ./file0 [ 140.078263][ T2255] incfs: mount failed -28 [ 140.091092][ T327] betop 0003:11C2:2208.001E: item fetching failed at offset 4/5 [ 140.098765][ T327] betop 0003:11C2:2208.001E: parse failed [ 140.104309][ T327] betop: probe of 0003:11C2:2208.001E failed with error -22 [ 140.113079][ T690] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 140.120464][ T690] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 140.132231][ T2239] device veth1_macvtap entered promiscuous mode [ 140.139796][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 140.150295][ T690] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 140.158634][ T690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 140.173221][ T690] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 140.182038][ T690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 140.247980][ T926] EXT4-fs (loop2): unmounting filesystem. [ 140.268935][ T2226] netlink: 24 bytes leftover after parsing attributes in process `syz.3.428'. [ 140.629908][ T2245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.641608][ T511] usb 4-1: USB disconnect, device number 26 [ 140.655744][ T2245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.697423][ T24] usb 2-1: string descriptor 0 read error: -71 [ 140.717330][ T24] uclogic 0003:256C:006D.001F: failed retrieving string descriptor #200: -71 [ 140.725954][ T24] uclogic 0003:256C:006D.001F: failed retrieving pen parameters: -71 [ 140.734072][ T24] uclogic 0003:256C:006D.001F: failed probing pen v2 parameters: -71 [ 140.742259][ T24] uclogic 0003:256C:006D.001F: failed probing parameters: -71 [ 140.749848][ T24] uclogic: probe of 0003:256C:006D.001F failed with error -71 [ 140.762589][ T24] usb 2-1: USB disconnect, device number 23 [ 140.788756][ T2265] loop0: detected capacity change from 0 to 40427 [ 140.795562][ T2265] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 140.802071][ T2265] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 140.807405][ T6] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 140.812748][ T2265] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 140.838755][ T2265] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 140.845667][ T2265] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 140.860875][ T2270] syz.0.437: attempt to access beyond end of device [ 140.860875][ T2270] loop0: rw=10241, sector=53248, nr_sectors = 8 limit=40427 [ 141.551519][ T2281] loop1: detected capacity change from 0 to 512 [ 141.558773][ T2050] syz-executor: attempt to access beyond end of device [ 141.558773][ T2050] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 141.568895][ T2281] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 141.581511][ T2281] ext4 filesystem being mounted at /89/file0 supports timestamps until 2038 (0x7fffffff) [ 141.659608][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.707158][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.727040][ T6] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 141.739935][ T6] usb 3-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.00 [ 141.767437][ T24] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 142.078982][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.093762][ T6] usb 3-1: config 0 descriptor?? [ 142.187321][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 142.280474][ T2290] netlink: 12 bytes leftover after parsing attributes in process `syz.0.441'. [ 142.346020][ T2290] loop0: detected capacity change from 0 to 512 [ 142.605344][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 142.618447][ T289] EXT4-fs (loop1): unmounting filesystem. [ 142.625701][ T2290] EXT4-fs error (device loop0): ext4_orphan_get:1396: inode #15: comm syz.0.441: casefold flag without casefold feature [ 142.638730][ T2290] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #2: comm syz.0.441: missing EA_INODE flag [ 142.648064][ T6] betop 0003:11C2:2208.0020: item fetching failed at offset 4/5 [ 142.657600][ T6] betop 0003:11C2:2208.0020: parse failed [ 142.663140][ T2290] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.441: error while reading EA inode 2 err=-117 [ 142.675586][ T2290] EXT4-fs (loop0): 1 orphan inode deleted [ 142.681181][ T2290] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 142.688567][ T2295] loop1: detected capacity change from 0 to 1024 [ 142.689666][ T6] betop: probe of 0003:11C2:2208.0020 failed with error -22 [ 142.722538][ T2295] EXT4-fs: Mount option(s) incompatible with ext2 [ 142.757543][ T1233] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 142.837380][ T24] usb 5-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 142.846293][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.862686][ T24] usb 5-1: Product: syz [ 142.866777][ T24] usb 5-1: Manufacturer: syz [ 142.871163][ T24] usb 5-1: SerialNumber: syz [ 142.878795][ T24] usb 5-1: config 0 descriptor?? [ 142.960895][ T24] usb 5-1: Found UVC 0.00 device syz (045e:0721) [ 142.967228][ T24] usb 5-1: No valid video chain found. [ 143.027851][ T2050] EXT4-fs (loop0): unmounting filesystem. [ 143.051063][ T2260] netlink: 24 bytes leftover after parsing attributes in process `syz.2.436'. [ 143.160070][ T2278] netlink: 12 bytes leftover after parsing attributes in process `syz.4.439'. [ 143.169776][ T327] usb 5-1: USB disconnect, device number 23 [ 143.197333][ T6] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 143.291781][ T690] usb 3-1: USB disconnect, device number 23 [ 143.323464][ T2304] netlink: 12 bytes leftover after parsing attributes in process `syz.0.444'. [ 143.578090][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.588804][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.598533][ T6] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 143.607466][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.616734][ T6] usb 4-1: config 0 descriptor?? [ 143.621763][ T2307] loop1: detected capacity change from 0 to 512 [ 143.638736][ T2307] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 143.647582][ T2307] ext4 filesystem being mounted at /91/bus/file1 supports timestamps until 2038 (0x7fffffff) [ 143.957339][ T690] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 144.005946][ T2318] loop0: detected capacity change from 0 to 2048 [ 144.012862][ T2318] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 144.065179][ T2318] loop0: detected capacity change from 0 to 512 [ 144.071594][ T2318] EXT4-fs: Ignoring removed nomblk_io_submit option [ 144.078370][ T2318] EXT4-fs (loop0): Test dummy encryption mode enabled [ 144.086250][ T2318] EXT4-fs error (device loop0): ext4_orphan_get:1396: inode #17: comm syz.0.448: iget: bogus i_mode (0) [ 144.097537][ T2318] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz.0.448: couldn't read orphan inode 17 (err -117) [ 144.109617][ T2318] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 144.216612][ T2320] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.448: bg 0: block 7: invalid block bitmap [ 144.229027][ T2320] incfs: Can't find or create .index dir in ./file0 [ 144.235513][ T2320] incfs: mount failed -28 [ 144.237461][ T690] usb 5-1: Using ep0 maxpacket: 16 [ 144.299959][ T2297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.308399][ T2297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.347516][ T6] usb 4-1: string descriptor 0 read error: -71 [ 144.367366][ T690] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 144.376199][ T6] uclogic 0003:256C:006D.0021: failed retrieving string descriptor #200: -71 [ 144.386895][ T690] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 144.396519][ T6] uclogic 0003:256C:006D.0021: failed retrieving pen parameters: -71 [ 144.397883][ T289] EXT4-fs (loop1): unmounting filesystem. [ 144.404357][ T690] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 144.419458][ T6] uclogic 0003:256C:006D.0021: failed probing pen v2 parameters: -71 [ 144.427400][ T6] uclogic 0003:256C:006D.0021: failed probing parameters: -71 [ 144.434635][ T690] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid maxpacket 17408, setting to 1024 [ 144.445596][ T6] uclogic: probe of 0003:256C:006D.0021 failed with error -71 [ 144.452860][ T690] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 1024 [ 144.463552][ T6] usb 4-1: USB disconnect, device number 27 [ 144.470518][ T690] usb 5-1: config 1 interface 0 has no altsetting 0 [ 144.477171][ T690] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 144.486038][ T690] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.528539][ T690] ums-sddr09 5-1:1.0: USB Mass Storage device detected [ 144.621136][ T2322] loop1: detected capacity change from 0 to 40427 [ 144.627832][ T2322] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 144.635408][ T2322] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 144.645403][ T2322] F2FS-fs (loop1): Found nat_bits in checkpoint [ 144.669338][ T2322] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 144.676249][ T2322] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 144.690626][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 144.690639][ T28] audit: type=1400 audit(1724199106.432:250): avc: denied { setattr } for pid=2321 comm="syz.1.449" name="file0" dev="loop1" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 144.738042][ T690] scsi host1: usb-storage 5-1:1.0 [ 144.817325][ T24] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 144.854009][ T28] audit: type=1400 audit(1724199106.592:251): avc: denied { write } for pid=2321 comm="syz.1.449" name="bus" dev="loop1" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 144.874176][ T2337] overlayfs: failed to resolve './file1': -2 [ 144.881021][ T28] audit: type=1400 audit(1724199106.592:252): avc: denied { add_name } for pid=2321 comm="syz.1.449" name="work" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 144.881052][ T28] audit: type=1400 audit(1724199106.612:253): avc: denied { remove_name } for pid=2321 comm="syz.1.449" name="#5" dev="loop1" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 144.881072][ T28] audit: type=1400 audit(1724199106.612:254): avc: denied { rename } for pid=2321 comm="syz.1.449" name="#5" dev="loop1" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 144.881090][ T28] audit: type=1400 audit(1724199106.612:255): avc: denied { unlink } for pid=2321 comm="syz.1.449" name="#5" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 144.881110][ T28] audit: type=1400 audit(1724199106.612:256): avc: denied { unlink } for pid=2321 comm="syz.1.449" name="#6" dev="loop1" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 144.987953][ T2050] EXT4-fs (loop0): unmounting filesystem. [ 145.035888][ T2341] loop3: detected capacity change from 0 to 1024 [ 145.045210][ T2341] EXT4-fs: Mount option(s) incompatible with ext2 [ 145.058256][ T1233] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 145.165930][ T2343] syz.0.452[2343] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 145.166230][ T2343] syz.0.452[2343] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 145.352764][ T2342] netlink: 8 bytes leftover after parsing attributes in process `syz.0.452'. [ 145.404655][ T2343] syz.0.452 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 145.457641][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.486874][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.535905][ T24] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 145.548967][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.565588][ T24] usb 3-1: config 0 descriptor?? [ 145.817648][ T690] scsi 1:0:0:0: Direct-Access Sandisk ImageMate SDDR09 0177 PQ: 0 ANSI: 0 [ 145.915386][ T2354] loop3: detected capacity change from 0 to 1024 [ 145.922112][ T2354] EXT4-fs: Mount option(s) incompatible with ext2 [ 146.078829][ T418] usb 5-1: USB disconnect, device number 24 [ 146.101606][ T2332] sddr09: could not read card info [ 146.143485][ T10] sd 1:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 146.160459][ T10] sd 1:0:0:0: [sdb] 0-byte physical blocks [ 146.200629][ T10] sd 1:0:0:0: [sdb] Test WP failed, assume Write Enabled [ 146.232621][ T10] sd 1:0:0:0: [sdb] Asking for cache data failed [ 146.232819][ T10] sd 1:0:0:0: [sdb] Assuming drive cache: write through [ 146.251595][ T2326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.251709][ T2326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.255902][ T10] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 146.280332][ T1233] udevd[1233]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 146.293900][ T24] usb 3-1: string descriptor 0 read error: -71 [ 146.305841][ T1233] udevd[1233]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 146.307348][ T24] uclogic 0003:256C:006D.0022: failed retrieving string descriptor #200: -71 [ 146.307376][ T24] uclogic 0003:256C:006D.0022: failed retrieving pen parameters: -71 [ 146.307390][ T24] uclogic 0003:256C:006D.0022: failed probing pen v2 parameters: -71 [ 146.307409][ T24] uclogic 0003:256C:006D.0022: failed probing parameters: -71 [ 146.307433][ T24] uclogic: probe of 0003:256C:006D.0022 failed with error -71 [ 146.309911][ T24] usb 3-1: USB disconnect, device number 24 [ 146.769234][ T28] audit: type=1400 audit(1724199108.512:257): avc: denied { unmount } for pid=1488 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 147.061887][ T2377] loop2: detected capacity change from 0 to 1024 [ 147.069320][ T2377] ext4: Unknown parameter 'smackfsfloor' [ 147.165601][ T2377] loop2: detected capacity change from 0 to 512 [ 147.174221][ T2377] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 147.184239][ T2377] EXT4-fs error (device loop2): ext4_get_journal_inode:5720: comm syz.2.457: inode #67108864: comm syz.2.457: iget: illegal inode # [ 147.199151][ T2377] EXT4-fs (loop2): no journal found [ 147.230383][ T2379] netlink: 12 bytes leftover after parsing attributes in process `syz.3.458'. [ 147.247302][ T690] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 147.637365][ T690] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.667326][ T690] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.687036][ T690] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 147.720240][ T690] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 147.740403][ T690] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.763361][ T690] usb 5-1: config 0 descriptor?? [ 147.838973][ T2393] loop1: detected capacity change from 0 to 512 [ 147.865842][ T2393] EXT4-fs (loop1): Test dummy encryption mode enabled [ 147.896443][ T2393] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:164: inode #12: comm syz.1.465: inline data xattr refers to an external xattr inode [ 147.916070][ T2393] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.465: couldn't read orphan inode 12 (err -117) [ 147.928173][ T2393] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 147.945419][ T2398] loop0: detected capacity change from 0 to 256 [ 147.956143][ T2398] FAT-fs (loop0): Directory bread(block 64) failed [ 147.962950][ T2398] FAT-fs (loop0): Directory bread(block 65) failed [ 147.969358][ T2398] FAT-fs (loop0): Directory bread(block 66) failed [ 147.975665][ T2398] FAT-fs (loop0): Directory bread(block 67) failed [ 147.982045][ T2398] FAT-fs (loop0): Directory bread(block 68) failed [ 147.991710][ T2398] FAT-fs (loop0): Directory bread(block 69) failed [ 147.998447][ T2398] FAT-fs (loop0): Directory bread(block 70) failed [ 148.004854][ T2398] FAT-fs (loop0): Directory bread(block 71) failed [ 148.011734][ T2398] FAT-fs (loop0): Directory bread(block 72) failed [ 148.018284][ T2398] FAT-fs (loop0): Directory bread(block 73) failed [ 148.027325][ T327] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 148.034819][ T28] audit: type=1400 audit(1724199109.772:258): avc: denied { mount } for pid=2397 comm="syz.0.466" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 148.058735][ T28] audit: type=1400 audit(1724199109.802:259): avc: denied { ioctl } for pid=2390 comm="syz.3.464" path="socket:[26113]" dev="sockfs" ino=26113 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 148.091762][ T2399] netlink: 8 bytes leftover after parsing attributes in process `syz.3.464'. [ 148.248195][ T690] prodikeys 0003:041E:2801.0023: unknown main item tag 0x0 [ 148.261409][ T690] prodikeys 0003:041E:2801.0023: unknown main item tag 0x0 [ 148.278654][ T690] prodikeys 0003:041E:2801.0023: unknown main item tag 0x0 [ 148.297957][ T690] prodikeys 0003:041E:2801.0023: unknown main item tag 0x0 [ 148.317312][ T690] prodikeys 0003:041E:2801.0023: unknown main item tag 0x0 [ 148.387659][ T690] prodikeys 0003:041E:2801.0023: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.4-1/input0 [ 148.451791][ T690] usb 5-1: USB disconnect, device number 25 [ 148.457647][ T327] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 148.484684][ T327] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.514756][ T327] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.538628][ T327] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 148.657456][ T327] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 148.672503][ T327] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 148.694552][ T327] usb 3-1: Manufacturer: syz [ 148.710583][ T327] usb 3-1: config 0 descriptor?? [ 149.034539][ T2407] loop3: detected capacity change from 0 to 1024 [ 149.058327][ T2407] EXT4-fs: Mount option(s) incompatible with ext2 [ 149.257585][ T6] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 149.629936][ T2411] overlayfs: './bus' not a directory [ 149.975030][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.072579][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.097382][ T6] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 150.121603][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.137336][ T327] usbhid 3-1:0.0: can't add hid device: -71 [ 150.143173][ T327] usbhid: probe of 3-1:0.0 failed with error -71 [ 150.157505][ T6] usb 5-1: config 0 descriptor?? [ 150.171522][ T327] usb 3-1: USB disconnect, device number 25 [ 150.375452][ T2414] loop3: detected capacity change from 0 to 40427 [ 150.402726][ T2414] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 150.413048][ T2414] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 150.441962][ T2414] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 150.471009][ T2414] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 150.478034][ T2414] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 150.623936][ T2419] syz.3.470: attempt to access beyond end of device [ 150.623936][ T2419] loop3: rw=10241, sector=53248, nr_sectors = 8 limit=40427 [ 150.630468][ T28] audit: type=1400 audit(1724199112.372:260): avc: denied { unmount } for pid=2050 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 150.918113][ T1488] syz-executor: attempt to access beyond end of device [ 150.918113][ T1488] loop3: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 150.981390][ T1488] syz-executor: attempt to access beyond end of device [ 150.981390][ T1488] loop3: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 151.040984][ T1488] syz-executor: attempt to access beyond end of device [ 151.040984][ T1488] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 151.190858][ T2423] loop2: detected capacity change from 0 to 40427 [ 151.218056][ T2423] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 151.252405][ T2423] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 151.288796][ T2423] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 151.357711][ T2423] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 151.367935][ T2423] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 151.840807][ T2405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.853771][ T2436] syz.2.472: attempt to access beyond end of device [ 151.853771][ T2436] loop2: rw=10241, sector=53248, nr_sectors = 8 limit=40427 [ 151.862920][ T2405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.880168][ T2435] loop3: detected capacity change from 0 to 2048 [ 151.905944][ T2435] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 151.941637][ T6] usb 5-1: string descriptor 0 read error: -71 [ 151.967324][ T6] uclogic 0003:256C:006D.0024: failed retrieving string descriptor #200: -71 [ 152.124827][ T2435] loop3: detected capacity change from 0 to 512 [ 152.256763][ T6] uclogic 0003:256C:006D.0024: failed retrieving pen parameters: -71 [ 152.264724][ T6] uclogic 0003:256C:006D.0024: failed probing pen v2 parameters: -71 [ 152.277631][ T2435] EXT4-fs: Ignoring removed nomblk_io_submit option [ 152.299344][ T6] uclogic 0003:256C:006D.0024: failed probing parameters: -71 [ 152.308022][ T926] syz-executor: attempt to access beyond end of device [ 152.308022][ T926] loop2: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 152.322255][ T6] uclogic: probe of 0003:256C:006D.0024 failed with error -71 [ 152.329818][ T2435] EXT4-fs (loop3): Test dummy encryption mode enabled [ 152.334004][ T6] usb 5-1: USB disconnect, device number 26 [ 152.344076][ T926] syz-executor: attempt to access beyond end of device [ 152.344076][ T926] loop2: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 152.382485][ T926] syz-executor: attempt to access beyond end of device [ 152.382485][ T926] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 152.448833][ T2435] EXT4-fs error (device loop3): ext4_orphan_get:1396: inode #17: comm syz.3.473: iget: bogus i_mode (0) [ 152.460263][ T2435] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.473: couldn't read orphan inode 17 (err -117) [ 152.472619][ T2435] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 153.534858][ T2459] loop2: detected capacity change from 0 to 2048 [ 153.547780][ T2459] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 153.619316][ T2460] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.473: bg 0: block 7: invalid block bitmap [ 153.634313][ T2459] loop2: detected capacity change from 0 to 512 [ 153.641507][ T2460] incfs: Can't find or create .index dir in ./file0 [ 153.648642][ T2459] EXT4-fs: Ignoring removed nomblk_io_submit option [ 153.655361][ T2460] incfs: mount failed -28 [ 153.660423][ T2459] EXT4-fs (loop2): Test dummy encryption mode enabled [ 153.682049][ T2459] EXT4-fs error (device loop2): ext4_orphan_get:1396: inode #17: comm syz.2.479: iget: bogus i_mode (0) [ 153.700607][ T2459] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.479: couldn't read orphan inode 17 (err -117) [ 153.717507][ T2459] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 153.850576][ T1488] EXT4-fs (loop3): unmounting filesystem. [ 153.868606][ T2467] loop3: detected capacity change from 0 to 1024 [ 153.878646][ T2467] EXT4-fs: Mount option(s) incompatible with ext2 [ 153.895323][ T2465] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.479: bg 0: block 7: invalid block bitmap [ 153.922083][ T2465] incfs: Can't find or create .index dir in ./file0 [ 153.929989][ T2465] incfs: mount failed -28 [ 154.388203][ T926] EXT4-fs (loop2): unmounting filesystem. [ 154.534310][ T2479] loop0: detected capacity change from 0 to 40427 [ 154.581895][ T2479] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 154.588291][ T2479] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 154.607371][ T24] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 154.675161][ T2479] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 154.794827][ T2479] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 154.801776][ T2479] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 154.821565][ T2488] syz.0.483: attempt to access beyond end of device [ 154.821565][ T2488] loop0: rw=10241, sector=53248, nr_sectors = 8 limit=40427 [ 155.037344][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.048182][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.058332][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 155.071178][ T24] usb 5-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.00 [ 155.080096][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.088451][ T24] usb 5-1: config 0 descriptor?? [ 155.236774][ T2050] syz-executor: attempt to access beyond end of device [ 155.236774][ T2050] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 155.319601][ T2496] loop0: detected capacity change from 0 to 512 [ 155.326226][ T2496] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 155.338611][ T2496] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 155.353335][ T2496] EXT4-fs (loop0): 1 truncate cleaned up [ 155.359107][ T2496] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 155.571236][ T24] betop 0003:11C2:2208.0025: item fetching failed at offset 4/5 [ 155.579789][ T24] betop 0003:11C2:2208.0025: parse failed [ 155.591876][ T24] betop: probe of 0003:11C2:2208.0025 failed with error -22 [ 155.667420][ T28] audit: type=1326 audit(1724199117.392:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2495 comm="syz.0.486" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2d4a979e79 code=0x0 [ 155.770744][ T2472] netlink: 24 bytes leftover after parsing attributes in process `syz.4.481'. [ 155.972889][ T24] usb 5-1: USB disconnect, device number 27 [ 156.175041][ T28] audit: type=1400 audit(1724199117.912:262): avc: denied { remove_name } for pid=2495 comm="syz.0.486" name=".index" dev="loop0" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 156.197558][ T28] audit: type=1400 audit(1724199117.912:263): avc: denied { rmdir } for pid=2495 comm="syz.0.486" name=".index" dev="loop0" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 156.198431][ T2050] EXT4-fs (loop0): unmounting filesystem. [ 156.347239][ T2520] loop4: detected capacity change from 0 to 512 [ 156.372389][ T2520] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 156.382491][ T2520] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 156.392615][ T2520] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 156.601253][ T2520] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 156.609034][ T2520] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c040e118, mo2=0000] [ 156.616649][ T2520] EXT4-fs (loop4): too many log groups per flexible block group [ 156.624368][ T2520] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 156.631041][ T2520] EXT4-fs (loop4): mount failed [ 156.802430][ T28] audit: type=1400 audit(1724199118.542:264): avc: denied { remount } for pid=2524 comm="syz.3.492" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 156.947313][ T690] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 157.347345][ T690] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.358742][ T690] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.367318][ T24] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 157.368367][ T690] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 157.388211][ T690] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 157.397009][ T690] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.405672][ T690] usb 3-1: config 0 descriptor?? [ 157.727336][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.738065][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.747300][ T327] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 157.747588][ T24] usb 5-1: New USB device found, idVendor=056a, idProduct=0029, bcdDevice= 0.00 [ 157.763799][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.772089][ T24] usb 5-1: config 0 descriptor?? [ 157.888057][ T690] prodikeys 0003:041E:2801.0026: unknown main item tag 0x0 [ 157.895111][ T690] prodikeys 0003:041E:2801.0026: unknown main item tag 0x0 [ 157.902455][ T690] prodikeys 0003:041E:2801.0026: unknown main item tag 0x0 [ 157.909506][ T690] prodikeys 0003:041E:2801.0026: unknown main item tag 0x0 [ 157.916505][ T690] prodikeys 0003:041E:2801.0026: unknown main item tag 0x0 [ 157.924117][ T690] prodikeys 0003:041E:2801.0026: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.2-1/input0 [ 157.965395][ T289] EXT4-fs (loop1): unmounting filesystem. [ 158.065449][ T2541] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.072879][ T2541] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.082817][ T2541] device bridge_slave_0 entered promiscuous mode [ 158.091937][ T2541] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.104019][ T2541] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.113794][ T2541] device bridge_slave_1 entered promiscuous mode [ 158.198565][ T1151] usb 3-1: USB disconnect, device number 26 [ 158.234288][ T10] tipc: Disabling bearer [ 158.287016][ T10] tipc: Left network mode [ 158.317356][ T327] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.318051][ T2541] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.334893][ T2541] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.342024][ T327] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.342129][ T2541] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.351867][ T327] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 158.358440][ T2541] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.371242][ T327] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 158.378339][ T24] usbhid 5-1:0.0: can't add hid device: -71 [ 158.387225][ T327] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.394044][ T24] usbhid: probe of 5-1:0.0 failed with error -71 [ 158.401462][ T327] usb 4-1: config 0 descriptor?? [ 158.413769][ T24] usb 5-1: USB disconnect, device number 28 [ 158.432285][ T418] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.439553][ T418] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.446727][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 158.454021][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 158.463870][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 158.472066][ T6] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.478924][ T6] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.487181][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 158.495628][ T418] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.502698][ T418] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.519840][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 158.528452][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 158.541138][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 158.552039][ T2541] device veth0_vlan entered promiscuous mode [ 158.558445][ T511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 158.566402][ T511] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 158.573726][ T511] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 158.586199][ T2541] device veth1_macvtap entered promiscuous mode [ 158.592936][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 158.605482][ T511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 158.613693][ T511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 159.047506][ T24] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 159.057741][ T327] prodikeys 0003:041E:2801.0027: unknown main item tag 0x0 [ 159.066649][ T327] prodikeys 0003:041E:2801.0027: unknown main item tag 0x0 [ 159.071018][ T2561] loop4: detected capacity change from 0 to 512 [ 159.079908][ T327] prodikeys 0003:041E:2801.0027: unknown main item tag 0x0 [ 159.093850][ T327] prodikeys 0003:041E:2801.0027: unknown main item tag 0x0 [ 159.101346][ T327] prodikeys 0003:041E:2801.0027: unknown main item tag 0x0 [ 159.101942][ T2561] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 159.123262][ T327] prodikeys 0003:041E:2801.0027: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.3-1/input0 [ 159.146160][ T2561] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 159.148500][ T327] usb 4-1: USB disconnect, device number 28 [ 159.169075][ T2561] EXT4-fs (loop4): 1 truncate cleaned up [ 159.179785][ T2561] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 159.292587][ T10] device bridge_slave_1 left promiscuous mode [ 159.299515][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.309032][ T10] device bridge_slave_0 left promiscuous mode [ 159.315488][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.317363][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 159.330461][ T10] device veth1_macvtap left promiscuous mode [ 159.336660][ T10] device veth0_vlan left promiscuous mode [ 159.487573][ T28] audit: type=1400 audit(1724199121.192:265): avc: denied { read append } for pid=2560 comm="syz.4.501" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 159.511901][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 159.546756][ T28] audit: type=1400 audit(1724199121.192:266): avc: denied { open } for pid=2560 comm="syz.4.501" path="/10/file1/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 159.571479][ T28] audit: type=1400 audit(1724199121.192:267): avc: denied { write } for pid=2560 comm="syz.4.501" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 159.594940][ T28] audit: type=1326 audit(1724199121.212:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2560 comm="syz.4.501" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f415c179e79 code=0x0 [ 159.727336][ T24] usb 3-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 159.736247][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.744051][ T24] usb 3-1: Product: syz [ 159.748136][ T24] usb 3-1: Manufacturer: syz [ 159.752513][ T24] usb 3-1: SerialNumber: syz [ 159.757461][ T24] usb 3-1: config 0 descriptor?? [ 159.932924][ T2239] EXT4-fs (loop4): unmounting filesystem. [ 160.023204][ T2555] netlink: 12 bytes leftover after parsing attributes in process `syz.2.500'. [ 160.047952][ T327] usb 3-1: USB disconnect, device number 27 [ 160.377949][ T690] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 160.477324][ T511] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 160.727389][ T511] usb 2-1: Using ep0 maxpacket: 16 [ 160.767403][ T690] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.778288][ T690] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.821842][ T690] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 160.835444][ T690] usb 4-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.00 [ 160.844821][ T690] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.849155][ T2589] loop0: detected capacity change from 0 to 40427 [ 160.853422][ T690] usb 4-1: config 0 descriptor?? [ 160.859168][ T418] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 160.864636][ T2589] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 160.873405][ T511] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 160.877315][ T2589] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 160.890087][ T511] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 160.900225][ T2589] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 160.903572][ T511] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 160.924123][ T511] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid maxpacket 17408, setting to 1024 [ 160.933248][ T2589] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 160.935432][ T511] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 1024 [ 160.941988][ T2589] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 160.951975][ T511] usb 2-1: config 1 interface 0 has no altsetting 0 [ 160.965690][ T511] usb 2-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 160.975540][ T2596] syz.0.508: attempt to access beyond end of device [ 160.975540][ T2596] loop0: rw=10241, sector=53248, nr_sectors = 8 limit=40427 [ 160.989595][ T511] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.107713][ T511] ums-sddr09 2-1:1.0: USB Mass Storage device detected [ 161.307542][ T418] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 161.334796][ T418] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 161.347019][ T1832] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 161.347777][ T418] usb 3-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 161.363989][ T418] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.371857][ T511] scsi host1: usb-storage 2-1:1.0 [ 161.379175][ T690] betop 0003:11C2:2208.0028: item fetching failed at offset 4/5 [ 161.386941][ T690] betop 0003:11C2:2208.0028: parse failed [ 161.389462][ T418] usb 3-1: config 0 descriptor?? [ 161.392762][ T690] betop: probe of 0003:11C2:2208.0028 failed with error -22 [ 161.438116][ T418] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 161.575088][ T2050] syz-executor: attempt to access beyond end of device [ 161.575088][ T2050] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 161.593642][ T2570] netlink: 24 bytes leftover after parsing attributes in process `syz.3.503'. [ 161.747336][ T1832] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.758062][ T1832] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.767950][ T1832] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 161.770757][ T1151] usb 4-1: USB disconnect, device number 29 [ 161.968760][ T1832] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.977685][ T1832] usb 5-1: config 0 descriptor?? [ 162.127295][ T6] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 162.397345][ T690] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 162.457596][ T1151] scsi 1:0:0:0: Direct-Access Sandisk ImageMate SDDR09 0177 PQ: 0 ANSI: 0 [ 162.517580][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.528448][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.538040][ T6] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 162.550636][ T6] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 162.559429][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.567867][ T6] usb 1-1: config 0 descriptor?? [ 162.657302][ T690] usb 4-1: Using ep0 maxpacket: 16 [ 162.670702][ T2591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.679027][ T2591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.720924][ T19] usb 2-1: USB disconnect, device number 24 [ 162.737311][ T2602] sddr09: could not read card info [ 162.737357][ T1832] usb 5-1: string descriptor 0 read error: -71 [ 162.742375][ T10] sd 1:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 162.755191][ T10] sd 1:0:0:0: [sdb] 0-byte physical blocks [ 162.760962][ T10] sd 1:0:0:0: [sdb] Write Protect is off [ 162.766505][ T10] sd 1:0:0:0: [sdb] Asking for cache data failed [ 162.772690][ T10] sd 1:0:0:0: [sdb] Assuming drive cache: write through [ 162.772702][ T1832] uclogic 0003:256C:006D.0029: failed retrieving string descriptor #200: -71 [ 162.782136][ T10] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 162.789396][ T1832] uclogic 0003:256C:006D.0029: failed retrieving pen parameters: -71 [ 162.802730][ T1832] uclogic 0003:256C:006D.0029: failed probing pen v2 parameters: -71 [ 162.813351][ T317] udevd[317]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 162.814149][ T690] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 162.831559][ T1832] uclogic 0003:256C:006D.0029: failed probing parameters: -71 [ 162.839564][ T1233] udevd[1233]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 162.849174][ T690] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 162.858754][ T1832] uclogic: probe of 0003:256C:006D.0029 failed with error -71 [ 162.867747][ T690] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 162.878162][ T1832] usb 5-1: USB disconnect, device number 29 [ 162.885119][ T690] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid maxpacket 17408, setting to 1024 [ 162.897444][ T690] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 1024 [ 162.907842][ T690] usb 4-1: config 1 interface 0 has no altsetting 0 [ 162.914263][ T690] usb 4-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 162.923183][ T690] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.967917][ T690] ums-sddr09 4-1:1.0: USB Mass Storage device detected [ 163.038045][ T6] prodikeys 0003:041E:2801.002A: unknown main item tag 0x0 [ 163.045087][ T6] prodikeys 0003:041E:2801.002A: unknown main item tag 0x0 [ 163.052290][ T6] prodikeys 0003:041E:2801.002A: unknown main item tag 0x0 [ 163.059375][ T6] prodikeys 0003:041E:2801.002A: unknown main item tag 0x0 [ 163.066341][ T6] prodikeys 0003:041E:2801.002A: unknown main item tag 0x0 [ 163.073986][ T6] prodikeys 0003:041E:2801.002A: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.0-1/input0 [ 163.177812][ T690] scsi host1: usb-storage 4-1:1.0 [ 163.237344][ T2618] loop4: detected capacity change from 0 to 2048 [ 163.245234][ T690] usb 1-1: USB disconnect, device number 31 [ 163.253204][ T2618] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 163.296479][ T2618] loop4: detected capacity change from 0 to 512 [ 163.302880][ T2618] EXT4-fs: Ignoring removed nomblk_io_submit option [ 163.309715][ T2618] EXT4-fs (loop4): Test dummy encryption mode enabled [ 163.317967][ T2618] EXT4-fs error (device loop4): ext4_orphan_get:1396: inode #17: comm syz.4.513: iget: bogus i_mode (0) [ 163.329307][ T2618] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.513: couldn't read orphan inode 17 (err -117) [ 163.341785][ T2618] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 163.397708][ T2625] netlink: 12 bytes leftover after parsing attributes in process `syz.1.514'. [ 163.465020][ T2625] loop1: detected capacity change from 0 to 512 [ 163.580199][ T2625] EXT4-fs error (device loop1): ext4_orphan_get:1396: inode #15: comm syz.1.514: casefold flag without casefold feature [ 163.593304][ T2625] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: inode #2: comm syz.1.514: missing EA_INODE flag [ 163.668567][ T2625] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.514: error while reading EA inode 2 err=-117 [ 163.680956][ T2625] EXT4-fs (loop1): 1 orphan inode deleted [ 163.681314][ T418] usb 3-1: USB disconnect, device number 28 [ 163.686508][ T2625] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 163.800339][ T2631] loop0: detected capacity change from 0 to 1024 [ 163.821075][ T2631] EXT4-fs: Mount option(s) incompatible with ext2 [ 163.850418][ T2629] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.513: bg 0: block 7: invalid block bitmap [ 163.862972][ T2629] incfs: Can't find or create .index dir in ./file0 [ 163.870680][ T2628] loop2: detected capacity change from 0 to 40427 [ 163.876461][ T2629] incfs: mount failed -28 [ 163.889029][ T2628] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 163.895313][ T2628] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 163.906040][ T2628] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 163.936334][ T2628] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 163.943243][ T2628] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 163.956656][ T2636] syz.2.515: attempt to access beyond end of device [ 163.956656][ T2636] loop2: rw=10241, sector=53248, nr_sectors = 8 limit=40427 [ 164.143740][ T2541] EXT4-fs (loop1): unmounting filesystem. [ 164.246838][ T6] scsi 1:0:0:0: Direct-Access Sandisk ImageMate SDDR09 0177 PQ: 0 ANSI: 0 [ 164.285476][ T2239] EXT4-fs (loop4): unmounting filesystem. [ 164.492338][ T690] usb 4-1: USB disconnect, device number 30 [ 164.507332][ T2616] sddr09: could not read card info [ 164.512503][ T597] sd 1:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 164.519409][ T597] sd 1:0:0:0: [sdb] 0-byte physical blocks [ 164.525081][ T597] sd 1:0:0:0: [sdb] Write Protect is off [ 164.527442][ T418] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 164.538184][ T597] sd 1:0:0:0: [sdb] Asking for cache data failed [ 164.544362][ T597] sd 1:0:0:0: [sdb] Assuming drive cache: write through [ 164.559544][ T597] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 164.567295][ T1832] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 164.576610][ T926] syz-executor: attempt to access beyond end of device [ 164.576610][ T926] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 164.598044][ T1233] udevd[1233]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 164.628440][ T1233] udevd[1233]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 164.837293][ T418] usb 2-1: Using ep0 maxpacket: 16 [ 164.957484][ T418] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 164.997323][ T1832] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.008027][ T1832] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.017588][ T1832] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 165.030248][ T1832] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 165.039098][ T1832] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.047327][ T1832] usb 5-1: config 0 descriptor?? [ 165.127347][ T418] usb 2-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 165.136254][ T418] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.144093][ T418] usb 2-1: Product: syz [ 165.148024][ T418] usb 2-1: Manufacturer: syz [ 165.152427][ T418] usb 2-1: SerialNumber: syz [ 165.159831][ T418] usb 2-1: config 0 descriptor?? [ 165.173471][ T2656] loop3: detected capacity change from 0 to 2048 [ 165.179957][ T2656] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 165.307515][ T2657] raw_sendmsg: syz.3.521 forgot to set AF_INET. Fix it! [ 165.314995][ T2657] fuse: Bad value for 'fd' [ 165.319607][ T28] audit: type=1400 audit(1724199127.062:269): avc: denied { read } for pid=2655 comm="syz.3.521" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 165.371461][ T2659] loop3: detected capacity change from 0 to 256 [ 165.410079][ T2642] netlink: 12 bytes leftover after parsing attributes in process `syz.1.517'. [ 165.420159][ T19] usb 2-1: USB disconnect, device number 25 [ 165.428049][ T1233] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 165.528203][ T1832] prodikeys 0003:041E:2801.002B: unknown main item tag 0x0 [ 165.537091][ T1832] prodikeys 0003:041E:2801.002B: unknown main item tag 0x0 [ 165.544439][ T1832] prodikeys 0003:041E:2801.002B: unknown main item tag 0x0 [ 165.556654][ T1832] prodikeys 0003:041E:2801.002B: unknown main item tag 0x0 [ 165.568863][ T1832] prodikeys 0003:041E:2801.002B: unknown main item tag 0x0 [ 165.594761][ T1832] prodikeys 0003:041E:2801.002B: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.4-1/input0 [ 165.624014][ T2663] loop2: detected capacity change from 0 to 512 [ 165.630384][ T2663] EXT4-fs: Ignoring removed mblk_io_submit option [ 165.637047][ T2663] EXT4-fs: journaled quota format not specified [ 165.805484][ T418] usb 5-1: USB disconnect, device number 30 [ 166.020984][ T28] audit: type=1400 audit(1724199127.762:270): avc: denied { write } for pid=2669 comm="syz.3.525" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 166.170733][ T2674] netlink: 12 bytes leftover after parsing attributes in process `syz.3.526'. [ 166.233276][ T2674] loop3: detected capacity change from 0 to 512 [ 166.307369][ T1151] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 166.308442][ T2674] EXT4-fs error (device loop3): ext4_orphan_get:1396: inode #15: comm syz.3.526: casefold flag without casefold feature [ 166.352328][ T2674] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: inode #2: comm syz.3.526: missing EA_INODE flag [ 166.406467][ T2674] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.526: error while reading EA inode 2 err=-117 [ 166.419747][ T2674] EXT4-fs (loop3): 1 orphan inode deleted [ 166.425352][ T2674] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 166.441077][ T690] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 166.717373][ T1151] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.728215][ T418] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 166.740722][ T1151] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.837328][ T1151] usb 3-1: New USB device found, idVendor=056a, idProduct=032c, bcdDevice= 0.00 [ 166.846253][ T1151] usb 3-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 166.854217][ T1151] usb 3-1: Product: syz [ 166.883327][ T1151] usb 3-1: config 0 descriptor?? [ 167.293882][ T2688] fuse: Unknown parameter 'grou00000000000000000000' [ 167.319294][ T1488] EXT4-fs (loop3): unmounting filesystem. [ 167.330507][ T690] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 167.340454][ T690] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 167.347293][ T418] usb 1-1: Using ep0 maxpacket: 32 [ 167.349183][ T690] usb 2-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 167.362977][ T690] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.371657][ T690] usb 2-1: config 0 descriptor?? [ 167.467343][ T418] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 167.475649][ T418] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 167.484095][ T418] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 167.492926][ T418] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 167.502468][ T418] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 167.511963][ T418] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 167.524873][ T418] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 167.533778][ T418] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.534362][ T418] usb 1-1: config 0 descriptor?? [ 167.817916][ T418] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 32 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 168.085263][ T2679] fuse: Bad value for 'fd' [ 168.175576][ T2698] fuse: Unknown parameter 'grour*”•700000000000000000000' [ 168.407768][ T28] audit: type=1400 audit(1724199130.152:271): avc: denied { create } for pid=2666 comm="syz.1.524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 168.467316][ T690] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 168.727303][ T690] usb 5-1: Using ep0 maxpacket: 16 [ 168.877364][ T690] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 168.886461][ T690] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 168.895986][ T690] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 168.905574][ T690] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid maxpacket 17408, setting to 1024 [ 168.916631][ T690] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 1024 [ 168.926420][ T690] usb 5-1: config 1 interface 0 has no altsetting 0 [ 168.932859][ T690] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 168.942032][ T690] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.997665][ T690] ums-sddr09 5-1:1.0: USB Mass Storage device detected [ 169.098298][ T2710] loop3: detected capacity change from 0 to 2048 [ 169.105030][ T2710] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 169.177349][ T1151] usbhid 3-1:0.0: can't add hid device: -71 [ 169.183119][ T1151] usbhid: probe of 3-1:0.0 failed with error -71 [ 169.190158][ T1151] usb 3-1: USB disconnect, device number 29 [ 169.217812][ T690] scsi host1: usb-storage 5-1:1.0 [ 169.421255][ T690] usb 2-1: USB disconnect, device number 26 [ 169.500010][ T418] usb 1-1: USB disconnect, device number 32 [ 169.510012][ T418] usblp0: removed [ 169.537291][ T1151] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 169.667592][ T28] audit: type=1400 audit(1724199131.332:272): avc: denied { set_context_mgr } for pid=2718 comm="syz.0.536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 169.688946][ T28] audit: type=1400 audit(1724199131.342:273): avc: denied { bind } for pid=2718 comm="syz.0.536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 169.708363][ T28] audit: type=1400 audit(1724199131.352:274): avc: denied { write } for pid=2718 comm="syz.0.536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 169.807298][ T1151] usb 3-1: Using ep0 maxpacket: 16 [ 169.927368][ T1151] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 170.269358][ T1151] usb 3-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 170.278319][ T1151] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.286073][ T1151] usb 3-1: Product: syz [ 170.290087][ T1151] usb 3-1: Manufacturer: syz [ 170.294504][ T1151] usb 3-1: SerialNumber: syz [ 170.306057][ T1151] usb 3-1: config 0 descriptor?? [ 170.311014][ T19] scsi 1:0:0:0: Direct-Access Sandisk ImageMate SDDR09 0177 PQ: 0 ANSI: 0 [ 170.370433][ T2735] loop0: detected capacity change from 0 to 2048 [ 170.377997][ T2735] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 170.405280][ T2735] loop0: detected capacity change from 0 to 512 [ 170.411746][ T2735] EXT4-fs: Ignoring removed nomblk_io_submit option [ 170.418711][ T2735] EXT4-fs (loop0): Test dummy encryption mode enabled [ 170.435488][ T2735] EXT4-fs error (device loop0): ext4_orphan_get:1396: inode #17: comm syz.0.540: iget: bogus i_mode (0) [ 170.448469][ T2735] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz.0.540: couldn't read orphan inode 17 (err -117) [ 170.461310][ T2735] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 170.517531][ T28] audit: type=1400 audit(1724199132.242:275): avc: denied { mount } for pid=2733 comm="syz.0.540" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 170.572944][ T1151] usb 5-1: USB disconnect, device number 31 [ 170.592455][ T2713] sddr09: could not read card info [ 170.597529][ T597] sd 1:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 170.598511][ T2712] netlink: 12 bytes leftover after parsing attributes in process `syz.2.534'. [ 170.605450][ T597] sd 1:0:0:0: [sdb] 0-byte physical blocks [ 170.622894][ T24] usb 3-1: USB disconnect, device number 30 [ 170.625021][ T597] sd 1:0:0:0: [sdb] Write Protect is off [ 170.634530][ T597] sd 1:0:0:0: [sdb] Asking for cache data failed [ 170.641297][ T597] sd 1:0:0:0: [sdb] Assuming drive cache: write through [ 170.656281][ T597] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 170.676679][ T1233] udevd[1233]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 170.705404][ T1233] udevd[1233]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 170.764324][ T2741] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.540: bg 0: block 7: invalid block bitmap [ 170.777075][ T2741] incfs: Can't find or create .index dir in ./file0 [ 170.783787][ T2741] incfs: mount failed -28 [ 170.958414][ T2745] fuse: Unknown parameter 'grou00000000000000000000' [ 171.226183][ T28] audit: type=1400 audit(1724199132.962:276): avc: denied { unmount } for pid=2050 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 171.227807][ T2050] EXT4-fs (loop0): unmounting filesystem. [ 171.407332][ T418] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 171.527363][ T19] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 171.534771][ T690] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 171.677301][ T418] usb 3-1: device descriptor read/64, error -71 [ 171.817324][ T19] usb 1-1: Using ep0 maxpacket: 32 [ 171.987367][ T690] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.998099][ T19] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 172.009020][ T690] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.018546][ T19] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 172.018587][ T19] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 172.018605][ T19] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.018926][ T690] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 172.018956][ T690] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 172.018975][ T690] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.019217][ T19] usb 1-1: config 0 descriptor?? [ 172.067293][ T418] usb 3-1: device descriptor read/64, error -71 [ 172.087049][ T690] usb 5-1: config 0 descriptor?? [ 172.097340][ T2755] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 172.112620][ T2760] loop1: detected capacity change from 0 to 2048 [ 172.119368][ T2760] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 172.128056][ T19] hub 1-1:0.0: USB hub found [ 172.347287][ T418] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 172.427336][ T19] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 172.568018][ T690] prodikeys 0003:041E:2801.002C: unknown main item tag 0x0 [ 172.575069][ T690] prodikeys 0003:041E:2801.002C: unknown main item tag 0x0 [ 172.582187][ T19] usbhid 1-1:0.0: can't add hid device: -71 [ 172.587862][ T19] usbhid: probe of 1-1:0.0 failed with error -71 [ 172.594028][ T690] prodikeys 0003:041E:2801.002C: unknown main item tag 0x0 [ 172.601613][ T690] prodikeys 0003:041E:2801.002C: unknown main item tag 0x0 [ 172.608705][ T690] prodikeys 0003:041E:2801.002C: unknown main item tag 0x0 [ 172.616120][ T690] prodikeys 0003:041E:2801.002C: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.4-1/input0 [ 172.618224][ T418] usb 3-1: device descriptor read/64, error -71 [ 172.638108][ T19] usb 1-1: USB disconnect, device number 33 [ 172.768514][ T690] usb 5-1: USB disconnect, device number 32 [ 173.017335][ T418] usb 3-1: device descriptor read/64, error -71 [ 173.137470][ T418] usb usb3-port1: attempt power cycle [ 173.177309][ T19] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 173.217319][ T1151] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 173.327342][ T24] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 173.457342][ T1151] usb 2-1: Using ep0 maxpacket: 16 [ 173.547322][ T418] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 173.547330][ T1832] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 173.567396][ T19] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.577363][ T1151] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 173.578178][ T19] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.586963][ T1151] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 173.596475][ T19] usb 1-1: New USB device found, idVendor=05ac, idProduct=0262, bcdDevice= 0.00 [ 173.606440][ T1151] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 173.614962][ T19] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.624654][ T1151] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid maxpacket 17408, setting to 1024 [ 173.635399][ T19] usb 1-1: config 0 descriptor?? [ 173.643250][ T1151] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 1024 [ 173.657907][ T1151] usb 2-1: config 1 interface 0 has no altsetting 0 [ 173.664313][ T1151] usb 2-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 173.673259][ T1151] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.697403][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 173.707335][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 173.720077][ T418] usb 3-1: device descriptor read/8, error -71 [ 173.726330][ T1151] ums-sddr09 2-1:1.0: USB Mass Storage device detected [ 173.733118][ T24] usb 4-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 173.742057][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.752539][ T24] usb 4-1: config 0 descriptor?? [ 173.798364][ T24] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 173.927729][ T1151] scsi host1: usb-storage 2-1:1.0 [ 173.987321][ T418] usb 3-1: device descriptor read/8, error -71 [ 173.997322][ T1832] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.008172][ T1832] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.017712][ T1832] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 174.026576][ T1832] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.034942][ T1832] usb 5-1: config 0 descriptor?? [ 174.267408][ T418] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 174.357039][ T19] apple 0003:05AC:0262.002D: bogus close delimiter [ 174.363499][ T19] apple 0003:05AC:0262.002D: item 0 1 2 10 parsing failed [ 174.370604][ T19] apple 0003:05AC:0262.002D: parse failed [ 174.376180][ T19] apple: probe of 0003:05AC:0262.002D failed with error -22 [ 174.485282][ T19] usb 1-1: USB disconnect, device number 34 [ 174.709295][ T2777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.717628][ T2777] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.757334][ T1832] usb 5-1: string descriptor 0 read error: -71 [ 174.777398][ T1832] uclogic 0003:256C:006D.002E: failed retrieving string descriptor #200: -71 [ 174.786057][ T1832] uclogic 0003:256C:006D.002E: failed retrieving pen parameters: -71 [ 174.787293][ T418] usb 3-1: device not accepting address 34, error -71 [ 174.793969][ T1832] uclogic 0003:256C:006D.002E: failed probing pen v2 parameters: -71 [ 174.800841][ T418] usb usb3-port1: unable to enumerate USB device [ 174.808579][ T1832] uclogic 0003:256C:006D.002E: failed probing parameters: -71 [ 174.821865][ T1832] uclogic: probe of 0003:256C:006D.002E failed with error -71 [ 174.832952][ T1832] usb 5-1: USB disconnect, device number 33 [ 174.937544][ T1151] scsi 1:0:0:0: Direct-Access Sandisk ImageMate SDDR09 0177 PQ: 0 ANSI: 0 [ 175.033165][ T28] audit: type=1400 audit(1724199136.772:277): avc: denied { create } for pid=2791 comm="syz.0.556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 175.053219][ T2792] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.199166][ T2796] netlink: 12 bytes leftover after parsing attributes in process `syz.0.557'. [ 175.287007][ T2796] loop0: detected capacity change from 0 to 512 [ 175.331782][ T418] usb 2-1: USB disconnect, device number 27 [ 175.357373][ T2781] sddr09: could not read card info [ 175.387659][ T597] sd 1:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 175.413401][ T597] sd 1:0:0:0: [sdb] 0-byte physical blocks [ 175.426929][ T597] sd 1:0:0:0: [sdb] Write Protect is off [ 175.432485][ T2796] EXT4-fs error (device loop0): ext4_orphan_get:1396: inode #15: comm syz.0.557: casefold flag without casefold feature [ 175.444898][ T2796] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #2: comm syz.0.557: missing EA_INODE flag [ 175.449468][ T597] sd 1:0:0:0: [sdb] Asking for cache data failed [ 175.463153][ T2796] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.557: error while reading EA inode 2 err=-117 [ 175.484255][ T597] sd 1:0:0:0: [sdb] Assuming drive cache: write through [ 175.491889][ T2796] EXT4-fs (loop0): 1 orphan inode deleted [ 175.497473][ T2796] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 175.527824][ T597] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 175.551389][ T1233] udevd[1233]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 175.637479][ T2807] fuse: Unknown parameter 'grou00000000000000000000' [ 175.705135][ T1233] udevd[1233]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 175.915910][ T2050] EXT4-fs (loop0): unmounting filesystem. [ 176.094483][ T6] usb 4-1: USB disconnect, device number 31 [ 176.417868][ T1832] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 176.450133][ T2824] loop2: detected capacity change from 0 to 1024 [ 176.457007][ T2824] EXT4-fs: Mount option(s) incompatible with ext2 [ 176.567306][ T19] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 176.729530][ T1832] usb 1-1: Using ep0 maxpacket: 16 [ 176.837337][ T19] usb 2-1: Using ep0 maxpacket: 16 [ 176.857981][ T1832] usb 1-1: config 0 has no interfaces? [ 176.997333][ T19] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 177.006144][ T19] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 177.015802][ T19] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 177.025514][ T19] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid maxpacket 17408, setting to 1024 [ 177.036579][ T19] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 1024 [ 177.046568][ T19] usb 2-1: config 1 interface 0 has no altsetting 0 [ 177.053174][ T19] usb 2-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 177.062228][ T1832] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 177.071185][ T19] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.079224][ T1832] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.087865][ T1832] usb 1-1: Product: syz [ 177.091883][ T1832] usb 1-1: Manufacturer: syz [ 177.096293][ T1832] usb 1-1: SerialNumber: syz [ 177.101549][ T1832] r8152-cfgselector 1-1: config 0 descriptor?? [ 177.108856][ T2831] loop3: detected capacity change from 0 to 40427 [ 177.117444][ T2831] F2FS-fs (loop3): Found nat_bits in checkpoint [ 177.127327][ T418] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 177.137865][ T19] ums-sddr09 2-1:1.0: USB Mass Storage device detected [ 177.147301][ T2831] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 177.580380][ T2838] FAULT_INJECTION: forcing a failure. [ 177.580380][ T2838] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 177.593279][ T2838] CPU: 0 PID: 2838 Comm: syz.3.567 Not tainted 6.1.90-syzkaller-00023-gedca080b95df #0 [ 177.602689][ T2838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 177.612583][ T2838] Call Trace: [ 177.615705][ T2838] [ 177.618482][ T2838] dump_stack_lvl+0x151/0x1b7 [ 177.622994][ T2838] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 177.628288][ T2838] ? arch_stack_walk+0xf3/0x140 [ 177.632975][ T2838] dump_stack+0x15/0x1c [ 177.636964][ T2838] should_fail_ex+0x3d0/0x520 [ 177.641485][ T2838] should_fail+0xb/0x10 [ 177.645469][ T2838] should_fail_usercopy+0x1a/0x20 [ 177.650330][ T2838] _copy_from_user+0x1e/0xc0 [ 177.654756][ T2838] copy_msghdr_from_user+0xaa/0x670 [ 177.659791][ T2838] ? __sys_recvmsg_sock+0x50/0x50 [ 177.664653][ T2838] ? sendmsg_copy_msghdr+0x70/0x70 [ 177.669601][ T2838] do_recvmmsg+0x408/0xab0 [ 177.673853][ T2838] ? __sys_recvmmsg+0x270/0x270 [ 177.678543][ T2838] ? vfs_write+0xbb3/0xeb0 [ 177.682792][ T2838] ? __kasan_slab_free+0x11/0x20 [ 177.687568][ T2838] ? __kasan_check_write+0x14/0x20 [ 177.692510][ T2838] ? mutex_unlock+0xb2/0x260 [ 177.696941][ T2838] ? fput+0x15b/0x1b0 [ 177.700756][ T2838] ? ksys_write+0x260/0x2c0 [ 177.705097][ T2838] __x64_sys_recvmmsg+0x195/0x240 [ 177.709956][ T2838] ? do_recvmmsg+0xab0/0xab0 [ 177.714382][ T2838] ? debug_smp_processor_id+0x17/0x20 [ 177.719591][ T2838] ? exit_to_user_mode_prepare+0x39/0xa0 [ 177.725060][ T2838] x64_sys_call+0x7e5/0x9a0 [ 177.729402][ T2838] do_syscall_64+0x3b/0xb0 [ 177.733649][ T2838] ? clear_bhb_loop+0x55/0xb0 [ 177.738164][ T2838] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 177.743893][ T2838] RIP: 0033:0x7f0e3a979e79 [ 177.748145][ T2838] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.767590][ T2838] RSP: 002b:00007f0e3b7f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 177.775830][ T2838] RAX: ffffffffffffffda RBX: 00007f0e3ab16058 RCX: 00007f0e3a979e79 [ 177.783642][ T2838] RDX: 0000000000000010 RSI: 00000000200016c0 RDI: 0000000000000009 [ 177.791460][ T2838] RBP: 00007f0e3b7f7090 R08: 0000000000000000 R09: 0000000000000000 [ 177.799267][ T2838] R10: 00000000200d0000 R11: 0000000000000246 R12: 0000000000000001 [ 177.807078][ T2838] R13: 0000000000000000 R14: 00007f0e3ab16058 R15: 00007ffce7bb0d28 [ 177.814895][ T2838] [ 177.828119][ T19] scsi host1: usb-storage 2-1:1.0 [ 177.847336][ T418] usb 5-1: Using ep0 maxpacket: 16 [ 177.847345][ T1832] r8152-cfgselector 1-1: Unknown version 0x0000 [ 177.933926][ T1488] syz-executor: attempt to access beyond end of device [ 177.933926][ T1488] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 177.978131][ T418] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.989187][ T418] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.003369][ T418] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 178.016093][ T418] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 178.025145][ T418] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.035271][ T418] usb 5-1: config 0 descriptor?? [ 178.055643][ T1832] r8152-cfgselector 1-1: USB disconnect, device number 35 [ 178.097308][ T511] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 178.477334][ T511] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.488083][ T511] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.497587][ T511] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 178.506417][ T511] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.516344][ T511] usb 3-1: config 0 descriptor?? [ 178.587940][ T418] microsoft 0003:045E:07DA.002F: unknown main item tag 0x0 [ 178.594999][ T418] microsoft 0003:045E:07DA.002F: report_id 4118357775 is invalid [ 178.602544][ T418] microsoft 0003:045E:07DA.002F: item 0 4 1 8 parsing failed [ 178.610086][ T418] microsoft 0003:045E:07DA.002F: parse failed [ 178.615958][ T418] microsoft: probe of 0003:045E:07DA.002F failed with error -22 [ 178.789034][ T418] usb 5-1: USB disconnect, device number 34 [ 178.847317][ T1151] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 178.857865][ T1832] scsi 1:0:0:0: Direct-Access Sandisk ImageMate SDDR09 0177 PQ: 0 ANSI: 0 [ 178.966900][ T2857] netlink: 12 bytes leftover after parsing attributes in process `syz.3.571'. [ 179.008082][ T2857] loop3: detected capacity change from 0 to 512 [ 179.094165][ T2857] EXT4-fs error (device loop3): ext4_orphan_get:1396: inode #15: comm syz.3.571: casefold flag without casefold feature [ 179.108016][ T2857] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: inode #2: comm syz.3.571: missing EA_INODE flag [ 179.120689][ T2857] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.571: error while reading EA inode 2 err=-117 [ 179.133754][ T2857] EXT4-fs (loop3): 1 orphan inode deleted [ 179.139351][ T2857] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 179.155363][ T1151] usb 1-1: Using ep0 maxpacket: 16 [ 179.207338][ T2841] sddr09: could not read card info [ 179.212331][ T418] usb 2-1: USB disconnect, device number 28 [ 179.214772][ T10] sd 1:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 179.225181][ T10] sd 1:0:0:0: [sdb] 0-byte physical blocks [ 179.231077][ T10] sd 1:0:0:0: [sdb] Test WP failed, assume Write Enabled [ 179.238238][ T10] sd 1:0:0:0: [sdb] Asking for cache data failed [ 179.244422][ T10] sd 1:0:0:0: [sdb] Assuming drive cache: write through [ 179.254334][ T10] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 179.275282][ T317] udevd[317]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 179.286300][ T2844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.294722][ T2844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.302656][ T1233] udevd[1233]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 179.327373][ T511] usb 3-1: string descriptor 0 read error: -71 [ 179.333419][ T1151] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 179.342229][ T1151] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 179.351670][ T511] uclogic 0003:256C:006D.0030: failed retrieving string descriptor #200: -71 [ 179.360617][ T1151] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 179.371204][ T511] uclogic 0003:256C:006D.0030: failed retrieving pen parameters: -71 [ 179.379199][ T1151] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid maxpacket 17408, setting to 1024 [ 179.390220][ T511] uclogic 0003:256C:006D.0030: failed probing pen v2 parameters: -71 [ 179.398123][ T511] uclogic 0003:256C:006D.0030: failed probing parameters: -71 [ 179.405387][ T511] uclogic: probe of 0003:256C:006D.0030 failed with error -71 [ 179.412844][ T1151] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 1024 [ 179.423030][ T1151] usb 1-1: config 1 interface 0 has no altsetting 0 [ 179.430876][ T511] usb 3-1: USB disconnect, device number 35 [ 179.437294][ T1151] usb 1-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 179.446227][ T1151] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.507745][ T1151] ums-sddr09 1-1:1.0: USB Mass Storage device detected [ 179.536254][ T2863] loop4: detected capacity change from 0 to 40427 [ 179.545344][ T2863] F2FS-fs (loop4): Found nat_bits in checkpoint [ 179.569544][ T2863] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 179.796502][ T1488] EXT4-fs (loop3): unmounting filesystem. [ 179.898391][ T1151] scsi host1: usb-storage 1-1:1.0 [ 180.267349][ T1832] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 180.274064][ T1151] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 180.282438][ T2239] syz-executor: attempt to access beyond end of device [ 180.282438][ T2239] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 180.507315][ T1832] usb 4-1: Using ep0 maxpacket: 16 [ 180.547348][ T1151] usb 2-1: Using ep0 maxpacket: 16 [ 180.617323][ T511] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 180.627464][ T1832] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 180.636297][ T1832] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 180.645714][ T1832] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 180.655218][ T1832] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid maxpacket 17408, setting to 1024 [ 180.666158][ T1832] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 1024 [ 180.675936][ T1832] usb 4-1: config 1 interface 0 has no altsetting 0 [ 180.682394][ T1832] usb 4-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 180.687326][ T1151] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 180.691213][ T1832] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.747909][ T1832] ums-sddr09 4-1:1.0: USB Mass Storage device detected [ 180.867356][ T1151] usb 2-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 180.876273][ T1151] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.884126][ T1151] usb 2-1: Product: syz [ 180.888070][ T1151] usb 2-1: Manufacturer: syz [ 180.892431][ T1151] usb 2-1: SerialNumber: syz [ 180.897326][ T1151] usb 2-1: config 0 descriptor?? [ 180.967753][ T1832] scsi host2: usb-storage 4-1:1.0 [ 180.997370][ T511] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.008163][ T511] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.017683][ T511] usb 5-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 181.026453][ T511] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.035026][ T511] usb 5-1: config 0 descriptor?? [ 181.040223][ T359] scsi 1:0:0:0: Direct-Access Sandisk ImageMate SDDR09 0177 PQ: 0 ANSI: 0 [ 181.107386][ T418] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 181.290178][ T312] usb 1-1: USB disconnect, device number 36 [ 181.307372][ T2873] sddr09: could not read card info [ 181.312484][ T326] sd 1:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 181.319896][ T326] sd 1:0:0:0: [sdb] 0-byte physical blocks [ 181.325760][ T326] sd 1:0:0:0: [sdb] Write Protect is off [ 181.331362][ T326] sd 1:0:0:0: [sdb] Asking for cache data failed [ 181.337867][ T326] sd 1:0:0:0: [sdb] Assuming drive cache: write through [ 181.346403][ T326] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 181.352611][ T418] usb 3-1: Using ep0 maxpacket: 16 [ 181.363461][ T320] udevd[320]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 181.378026][ T2882] SELinux: security_context_str_to_sid (¯/) failed with errno=-22 [ 181.390281][ T28] audit: type=1400 audit(1724199143.132:278): avc: denied { create } for pid=2881 comm="syz.1.576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 181.410082][ T28] audit: type=1400 audit(1724199143.132:279): avc: denied { setopt } for pid=2881 comm="syz.1.576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 181.413321][ T317] udevd[317]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 181.440786][ T28] audit: type=1400 audit(1724199143.132:280): avc: denied { getopt } for pid=2881 comm="syz.1.576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 181.460240][ T1151] usb 2-1: Found UVC 0.00 device syz (045e:0721) [ 181.466691][ T1151] usb 2-1: No valid video chain found. [ 181.475551][ T1151] usb 2-1: USB disconnect, device number 29 [ 181.498656][ T2886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.506989][ T2886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.517456][ T418] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 181.556463][ T418] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 181.566127][ T418] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 181.575733][ T418] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid maxpacket 17408, setting to 1024 [ 181.586759][ T418] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 1024 [ 181.596557][ T418] usb 3-1: config 1 interface 0 has no altsetting 0 [ 181.603258][ T418] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 181.612117][ T418] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.657831][ T418] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 181.897516][ T418] scsi host1: usb-storage 3-1:1.0 [ 181.928146][ T2904] loop1: detected capacity change from 0 to 1024 [ 181.934951][ T2904] EXT4-fs: Mount option(s) incompatible with ext2 [ 182.172553][ T19] scsi 2:0:0:0: Direct-Access Sandisk ImageMate SDDR09 0177 PQ: 0 ANSI: 0 [ 182.457299][ T2893] sddr09: could not read card info [ 182.462862][ T597] sd 2:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 182.469899][ T19] usb 4-1: USB disconnect, device number 32 [ 182.476601][ T597] sd 2:0:0:0: [sdb] 0-byte physical blocks [ 182.482599][ T597] sd 2:0:0:0: [sdb] Write Protect is off [ 182.488301][ T597] sd 2:0:0:0: [sdb] Asking for cache data failed [ 182.494517][ T597] sd 2:0:0:0: [sdb] Assuming drive cache: write through [ 182.506485][ T597] sd 2:0:0:0: [sdb] Attached SCSI removable disk [ 182.522618][ T1233] udevd[1233]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 182.545464][ T1233] udevd[1233]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 182.807700][ T2916] loop1: detected capacity change from 0 to 1024 [ 182.821487][ T2916] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:477: comm syz.1.582: Invalid block bitmap block 0 in block_group 0 [ 182.835117][ T2916] Quota error (device loop1): write_blk: dquota write failed [ 182.847474][ T2916] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 182.857214][ T2916] EXT4-fs error (device loop1): ext4_acquire_dquot:6764: comm syz.1.582: Failed to acquire dquot type 0 [ 182.868598][ T2916] EXT4-fs error (device loop1): ext4_free_blocks:6211: comm syz.1.582: Freeing blocks not in datazone - block = 0, count = 4096 [ 182.882542][ T2916] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.582: Invalid inode bitmap blk 0 in block_group 0 [ 182.895287][ T597] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-8 [ 182.904176][ T597] EXT4-fs error (device loop1): ext4_release_dquot:6787: comm kworker/u4:5: Failed to release dquot type 0 [ 182.915919][ T2916] EXT4-fs error (device loop1) in ext4_free_inode:362: Corrupt filesystem [ 182.924899][ T2916] EXT4-fs (loop1): 1 orphan inode deleted [ 182.930768][ T2916] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 182.947575][ T312] scsi 1:0:0:0: Direct-Access Sandisk ImageMate SDDR09 0177 PQ: 0 ANSI: 0 [ 182.965666][ T2916] syz.1.582 (2916) used greatest stack depth: 20552 bytes left [ 182.974259][ T2541] EXT4-fs (loop1): unmounting filesystem. [ 182.980082][ T326] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-8 [ 182.989043][ T326] EXT4-fs error (device loop1): ext4_release_dquot:6787: comm kworker/u4:4: Failed to release dquot type 0 [ 183.043239][ T2923] loop3: detected capacity change from 0 to 512 [ 183.049917][ T2923] EXT4-fs (loop3): Test dummy encryption mode enabled [ 183.057618][ T2923] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:164: inode #12: comm syz.3.584: inline data xattr refers to an external xattr inode [ 183.072781][ T2923] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.584: couldn't read orphan inode 12 (err -117) [ 183.084808][ T2923] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 183.122559][ T2926] netlink: 12 bytes leftover after parsing attributes in process `syz.1.583'. [ 183.157198][ T2926] loop1: detected capacity change from 0 to 512 [ 183.203819][ T2926] EXT4-fs error (device loop1): ext4_orphan_get:1396: inode #15: comm syz.1.583: casefold flag without casefold feature [ 183.216903][ T2926] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: inode #2: comm syz.1.583: missing EA_INODE flag [ 183.229727][ T2926] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.583: error while reading EA inode 2 err=-117 [ 183.243658][ T2926] EXT4-fs (loop1): 1 orphan inode deleted [ 183.249428][ T2926] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 183.270557][ T418] usb 3-1: USB disconnect, device number 36 [ 183.288791][ T2902] sddr09: could not read card info [ 183.289207][ T2923] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 183.314595][ T10] sd 1:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 183.341186][ T10] sd 1:0:0:0: [sdb] 0-byte physical blocks [ 183.406540][ T10] sd 1:0:0:0: [sdb] Write Protect is off [ 183.412218][ T10] sd 1:0:0:0: [sdb] Asking for cache data failed [ 183.418583][ T10] sd 1:0:0:0: [sdb] Assuming drive cache: write through [ 183.442730][ T10] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 183.472368][ T317] udevd[317]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 183.487310][ T511] usbhid 5-1:0.0: can't add hid device: -71 [ 183.493067][ T511] usbhid: probe of 5-1:0.0 failed with error -71 [ 183.499986][ T1233] udevd[1233]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 183.508162][ T511] usb 5-1: USB disconnect, device number 35 [ 183.858332][ T2541] EXT4-fs (loop1): unmounting filesystem. [ 183.867557][ T1488] EXT4-fs (loop3): unmounting filesystem. [ 183.889089][ T2941] loop1: detected capacity change from 0 to 2048 [ 183.895847][ T2941] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 183.944914][ T2941] loop1: detected capacity change from 0 to 512 [ 183.951479][ T2941] EXT4-fs: Ignoring removed nomblk_io_submit option [ 183.958388][ T2941] EXT4-fs (loop1): Test dummy encryption mode enabled [ 183.966268][ T2941] EXT4-fs error (device loop1): ext4_orphan_get:1396: inode #17: comm syz.1.587: iget: bogus i_mode (0) [ 183.977608][ T2941] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.587: couldn't read orphan inode 17 (err -117) [ 183.989570][ T2941] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 184.047338][ T1832] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 184.103518][ T2947] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.587: bg 0: block 7: invalid block bitmap [ 184.116090][ T2947] incfs: Can't find or create .index dir in ./file0 [ 184.122624][ T2947] incfs: mount failed -28 [ 184.167597][ T418] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 184.426479][ T2948] loop2: detected capacity change from 0 to 512 [ 184.433260][ T2948] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 184.449721][ T2948] EXT4-fs error (device loop2): ext4_do_update_inode:5212: inode #16: comm syz.2.589: corrupted inode contents [ 184.461586][ T2948] EXT4-fs error (device loop2): ext4_dirty_inode:6074: inode #16: comm syz.2.589: mark_inode_dirty error [ 184.472905][ T2948] EXT4-fs error (device loop2): ext4_do_update_inode:5212: inode #16: comm syz.2.589: corrupted inode contents [ 184.484700][ T2948] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #16: comm syz.2.589: mark_inode_dirty error [ 184.495888][ T2948] EXT4-fs error (device loop2): ext4_do_update_inode:5212: inode #16: comm syz.2.589: corrupted inode contents [ 184.507821][ T2948] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 184.516498][ T2948] EXT4-fs error (device loop2): ext4_do_update_inode:5212: inode #16: comm syz.2.589: corrupted inode contents [ 184.528446][ T2948] EXT4-fs error (device loop2): ext4_truncate:4302: inode #16: comm syz.2.589: mark_inode_dirty error [ 184.539599][ T2948] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 184.548911][ T2948] EXT4-fs (loop2): 1 truncate cleaned up [ 184.554362][ T2948] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 184.563274][ T2948] ext4 filesystem being mounted at /88/file1 supports timestamps until 2038 (0x7fffffff) [ 184.576798][ T326] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 184.586739][ T326] EXT4-fs error (device loop2): ext4_release_dquot:6787: comm kworker/u4:4: Failed to release dquot type 1 [ 184.657346][ T1832] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.668190][ T1832] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.677822][ T1832] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 184.686668][ T1832] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.687317][ T2896] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 184.698685][ T1832] usb 1-1: config 0 descriptor?? [ 184.722538][ T2541] EXT4-fs (loop1): unmounting filesystem. [ 184.728220][ T418] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 184.738551][ T418] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 184.751738][ T418] usb 4-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 184.760850][ T418] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.777685][ T418] usb 4-1: config 0 descriptor?? [ 184.837723][ T418] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 184.889572][ T2948] syz.2.589 (2948) used greatest stack depth: 20232 bytes left [ 184.924466][ T926] EXT4-fs (loop2): unmounting filesystem. [ 185.011631][ T2896] usb 5-1: Using ep0 maxpacket: 8 [ 185.126446][ T2962] x_tables: duplicate underflow at hook 1 [ 185.677682][ T2896] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 185.811005][ T2896] usb 5-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 185.820325][ T2896] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 185.824416][ T2976] loop2: detected capacity change from 0 to 1024 [ 185.829218][ T2896] usb 5-1: SerialNumber: syz [ 185.840052][ T2976] EXT4-fs: Mount option(s) incompatible with ext2 [ 185.846469][ T2896] usb 5-1: config 0 descriptor?? [ 185.859248][ T2939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.867599][ T2939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.887674][ T2896] usb 5-1: Found UVC 0.00 device (05ac:8501) [ 185.894344][ T2896] usb 5-1: No valid video chain found. [ 185.897450][ T1832] usb 1-1: string descriptor 0 read error: -71 [ 185.927360][ T1832] uclogic 0003:256C:006D.0031: failed retrieving string descriptor #200: -71 [ 185.936104][ T1832] uclogic 0003:256C:006D.0031: failed retrieving pen parameters: -71 [ 185.944239][ T1832] uclogic 0003:256C:006D.0031: failed probing pen v2 parameters: -71 [ 185.952303][ T1832] uclogic 0003:256C:006D.0031: failed probing parameters: -71 [ 185.959840][ T1832] uclogic: probe of 0003:256C:006D.0031 failed with error -71 [ 185.969053][ T1832] usb 1-1: USB disconnect, device number 37 [ 186.063289][ T6] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 186.327639][ T2896] usb 5-1: USB disconnect, device number 36 [ 186.567335][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.578265][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.587758][ T6] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 186.600369][ T6] usb 2-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.00 [ 186.609283][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.617566][ T6] usb 2-1: config 0 descriptor?? [ 186.671457][ T511] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 186.823570][ T2985] netlink: 12 bytes leftover after parsing attributes in process `syz.2.598'. [ 186.942564][ T2985] loop2: detected capacity change from 0 to 512 [ 187.135354][ T2896] usb 4-1: USB disconnect, device number 33 [ 187.172355][ T2985] EXT4-fs error (device loop2): ext4_orphan_get:1396: inode #15: comm syz.2.598: casefold flag without casefold feature [ 187.184918][ T2985] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: inode #2: comm syz.2.598: missing EA_INODE flag [ 187.196308][ T2985] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.598: error while reading EA inode 2 err=-117 [ 187.208468][ T2985] EXT4-fs (loop2): 1 orphan inode deleted [ 187.214014][ T2985] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 187.225192][ T6] betop 0003:11C2:2208.0032: item fetching failed at offset 4/5 [ 187.233197][ T6] betop 0003:11C2:2208.0032: parse failed [ 187.238943][ T6] betop: probe of 0003:11C2:2208.0032 failed with error -22 [ 187.258553][ T2994] loop3: detected capacity change from 0 to 2048 [ 187.265390][ T2994] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 187.324967][ T2994] loop3: detected capacity change from 0 to 512 [ 187.331446][ T2994] EXT4-fs: Ignoring removed nomblk_io_submit option [ 187.338450][ T2994] EXT4-fs (loop3): Test dummy encryption mode enabled [ 187.346479][ T2994] EXT4-fs error (device loop3): ext4_orphan_get:1396: inode #17: comm syz.3.601: iget: bogus i_mode (0) [ 187.357644][ T511] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.357833][ T2994] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.601: couldn't read orphan inode 17 (err -117) [ 187.368399][ T511] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.380422][ T2994] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 187.390142][ T511] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 187.410730][ T511] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 187.425870][ T2974] netlink: 24 bytes leftover after parsing attributes in process `syz.1.595'. [ 187.432952][ T511] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.450323][ T511] usb 1-1: config 0 descriptor?? [ 187.467324][ T418] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 187.525579][ T926] EXT4-fs (loop2): unmounting filesystem. [ 187.538554][ T2999] FAULT_INJECTION: forcing a failure. [ 187.538554][ T2999] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 187.545262][ T2997] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.601: bg 0: block 7: invalid block bitmap [ 187.551596][ T2999] CPU: 0 PID: 2999 Comm: syz.2.602 Not tainted 6.1.90-syzkaller-00023-gedca080b95df #0 [ 187.563958][ T2997] incfs: Can't find or create .index dir in ./file0 [ 187.572819][ T2999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 187.572833][ T2999] Call Trace: [ 187.572838][ T2999] [ 187.572845][ T2999] dump_stack_lvl+0x151/0x1b7 [ 187.572874][ T2999] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 187.579910][ T2997] incfs: mount failed -28 [ 187.589139][ T2999] ? kasan_set_track+0x60/0x70 [ 187.589166][ T2999] ? kasan_set_track+0x4b/0x70 [ 187.589184][ T2999] ? kasan_save_alloc_info+0x1f/0x30 [ 187.623337][ T2999] dump_stack+0x15/0x1c [ 187.627330][ T2999] should_fail_ex+0x3d0/0x520 [ 187.631835][ T2999] should_fail+0xb/0x10 [ 187.635825][ T2999] should_fail_usercopy+0x1a/0x20 [ 187.640686][ T2999] _copy_to_user+0x1e/0x90 [ 187.644940][ T2999] simple_read_from_buffer+0xc7/0x150 [ 187.650152][ T2999] proc_fail_nth_read+0x1a3/0x210 [ 187.655006][ T2999] ? proc_fault_inject_write+0x390/0x390 [ 187.660476][ T2999] ? fsnotify_perm+0x470/0x5d0 [ 187.665076][ T2999] ? security_file_permission+0x86/0xb0 [ 187.670454][ T2999] ? proc_fault_inject_write+0x390/0x390 [ 187.675925][ T2999] vfs_read+0x26c/0xad0 [ 187.679919][ T2999] ? kernel_read+0x1f0/0x1f0 [ 187.684341][ T2999] ? mutex_unlock+0xb2/0x260 [ 187.688769][ T2999] ? __mutex_lock_slowpath+0x10/0x10 [ 187.693889][ T2999] ? __kasan_check_read+0x11/0x20 [ 187.698836][ T2999] ? __kasan_check_read+0x11/0x20 [ 187.703698][ T2999] ? __fdget_pos+0x2e9/0x390 [ 187.708129][ T2999] ksys_read+0x199/0x2c0 [ 187.712205][ T2999] ? vfs_write+0xeb0/0xeb0 [ 187.716453][ T2999] ? debug_smp_processor_id+0x17/0x20 [ 187.721669][ T2999] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 187.727656][ T2999] __x64_sys_read+0x7b/0x90 [ 187.731990][ T2999] x64_sys_call+0x28/0x9a0 [ 187.736244][ T2999] do_syscall_64+0x3b/0xb0 [ 187.740499][ T2999] ? clear_bhb_loop+0x55/0xb0 [ 187.745103][ T2999] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 187.750826][ T2999] RIP: 0033:0x7f81319788bc [ 187.755079][ T2999] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 187.774519][ T2999] RSP: 002b:00007f8132792030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 187.782764][ T2999] RAX: ffffffffffffffda RBX: 00007f8131b15f80 RCX: 00007f81319788bc [ 187.790574][ T2999] RDX: 000000000000000f RSI: 00007f81327920a0 RDI: 0000000000000005 [ 187.798410][ T2999] RBP: 00007f8132792090 R08: 0000000000000000 R09: 0000000000000000 [ 187.806285][ T2999] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 187.814094][ T2999] R13: 0000000000000000 R14: 00007f8131b15f80 R15: 00007ffd7704a7b8 [ 187.821916][ T2999] [ 187.835918][ T6] usb 2-1: USB disconnect, device number 30 [ 187.855185][ T3001] loop2: detected capacity change from 0 to 1024 [ 187.862387][ T3001] EXT4-fs: Mount option(s) incompatible with ext2 [ 188.116844][ T511] prodikeys 0003:041E:2801.0033: unknown main item tag 0x0 [ 188.124253][ T511] prodikeys 0003:041E:2801.0033: unknown main item tag 0x0 [ 188.132692][ T511] prodikeys 0003:041E:2801.0033: unknown main item tag 0x0 [ 188.140950][ T511] prodikeys 0003:041E:2801.0033: unknown main item tag 0x0 [ 188.152799][ T511] prodikeys 0003:041E:2801.0033: unknown main item tag 0x0 [ 188.160673][ T418] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.184425][ T511] prodikeys 0003:041E:2801.0033: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.0-1/input0 [ 188.220455][ T418] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 188.237980][ T1488] EXT4-fs (loop3): unmounting filesystem. [ 188.240361][ T418] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 188.258599][ T418] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 188.267559][ T418] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.305621][ T418] usb 5-1: config 0 descriptor?? [ 188.328420][ T3008] loop3: detected capacity change from 0 to 1024 [ 188.335130][ T3008] EXT4-fs: Mount option(s) incompatible with ext2 [ 188.354689][ T19] usb 1-1: USB disconnect, device number 38 [ 188.716274][ T3014] loop2: detected capacity change from 0 to 256 [ 188.724974][ T3014] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 188.793034][ T28] audit: type=1400 audit(1724199150.532:281): avc: denied { mounton } for pid=3013 comm="syz.2.606" path="/94/file2/bus" dev="loop2" ino=1048617 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 188.816937][ T28] audit: type=1400 audit(1724199150.532:282): avc: denied { map } for pid=3013 comm="syz.2.606" path="/94/file2/bus" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 188.840959][ T28] audit: type=1400 audit(1724199150.532:283): avc: denied { execute } for pid=3013 comm="syz.2.606" path="/94/file2/bus" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 188.887340][ T3014] loop2: detected capacity change from 256 to 0 [ 188.893550][ T10] loop: Write error at byte offset 9223372036854857727, length 512. [ 188.901482][ C0] I/O error, dev loop2, sector 160 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 188.902477][ T10] loop: Write error at byte offset 9223372036854858239, length 512. [ 188.910951][ C0] Buffer I/O error on dev loop2, logical block 160, lost sync page write [ 188.927045][ C0] I/O error, dev loop2, sector 161 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 188.936414][ C0] Buffer I/O error on dev loop2, logical block 161, lost sync page write [ 188.956351][ C1] I/O error, dev loop2, sector 160 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 188.958013][ C0] I/O error, dev loop2, sector 161 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 188.968203][ C1] I/O error, dev loop2, sector 160 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 188.984835][ C1] I/O error, dev loop2, sector 161 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 188.996563][ T8] loop: Write error at byte offset 9223372036854882303, length 512. [ 189.004507][ C1] I/O error, dev loop2, sector 208 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 189.013770][ C1] I/O error, dev loop2, sector 160 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 189.023085][ T10] loop: Write error at byte offset 9223372036854775807, length 512. [ 189.030982][ C1] I/O error, dev loop2, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 189.040117][ C1] I/O error, dev loop2, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 189.049289][ C1] Buffer I/O error on dev loop2, logical block 0, lost sync page write [ 189.097420][ T418] usbhid 5-1:0.0: can't add hid device: -71 [ 189.133019][ T418] usbhid: probe of 5-1:0.0 failed with error -71 [ 189.144318][ T418] usb 5-1: USB disconnect, device number 37 [ 189.147362][ T6] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 189.188448][ T3020] loop1: detected capacity change from 0 to 2048 [ 189.225371][ T3020] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 189.241661][ T3026] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 189.280267][ T597] ------------[ cut here ]------------ [ 189.285574][ T597] kernel BUG at fs/ext4/inode.c:2749! [ 189.291248][ T597] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 189.297132][ T597] CPU: 1 PID: 597 Comm: kworker/u4:5 Not tainted 6.1.90-syzkaller-00023-gedca080b95df #0 [ 189.306766][ T597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 189.316658][ T597] Workqueue: writeback wb_workfn (flush-7:1) [ 189.322472][ T597] RIP: 0010:ext4_writepages+0x3fab/0x3fd0 [ 189.328029][ T597] Code: a2 80 ff 31 ff 89 de e8 a3 a2 80 ff 45 84 f6 75 2a e8 09 a0 80 ff 49 bc 00 00 00 00 00 fc ff df e9 6e f6 ff ff e8 f5 9f 80 ff <0f> 0b e8 ee 9f 80 ff e8 05 84 0b ff e9 46 c3 ff ff e8 df 9f 80 ff [ 189.347466][ T597] RSP: 0018:ffffc9000b267000 EFLAGS: 00010293 [ 189.353367][ T597] RAX: ffffffff81f5059b RBX: 0000008000000000 RCX: ffff88811be9d100 [ 189.361181][ T597] RDX: 0000000000000000 RSI: 0000008000000000 RDI: 0000000000000000 [ 189.368992][ T597] RBP: ffffc9000b267410 R08: ffffffff81f4ccfb R09: ffffed10238c6455 [ 189.376801][ T597] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8881109f8000 [ 189.384615][ T597] R13: ffff88811c6323e0 R14: 000000c410000000 R15: ffffc9000b2672e0 [ 189.392424][ T597] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 189.401276][ T597] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 189.407699][ T597] CR2: 00007fff04e6bdc8 CR3: 0000000006e0f000 CR4: 00000000003506a0 [ 189.415513][ T597] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 189.423325][ T597] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 189.431133][ T597] Call Trace: [ 189.434258][ T597] [ 189.437038][ T597] ? __die_body+0x62/0xb0 [ 189.441202][ T597] ? die+0x88/0xb0 [ 189.444759][ T597] ? do_trap+0x103/0x330 [ 189.448843][ T597] ? ext4_writepages+0x3fab/0x3fd0 [ 189.453796][ T597] ? handle_invalid_op+0x95/0xc0 [ 189.458563][ T597] ? ext4_writepages+0x3fab/0x3fd0 [ 189.463513][ T597] ? exc_invalid_op+0x32/0x50 [ 189.468020][ T597] ? asm_exc_invalid_op+0x1b/0x20 [ 189.472882][ T597] ? ext4_writepages+0x70b/0x3fd0 [ 189.477738][ T597] ? ext4_writepages+0x3fab/0x3fd0 [ 189.482689][ T597] ? ext4_writepages+0x3fab/0x3fd0 [ 189.487646][ T597] ? psi_task_change+0x1d3/0x360 [ 189.492413][ T597] ? ext4_read_folio+0x240/0x240 [ 189.497181][ T597] ? cpudl_cleanup+0x40/0x40 [ 189.501608][ T597] ? xas_load+0x39d/0x3b0 [ 189.505775][ T597] ? __update_load_avg_cfs_rq+0xb1/0x2f0 [ 189.511244][ T597] ? __kasan_check_write+0x14/0x20 [ 189.516189][ T597] ? enqueue_task_fair+0xe57/0x24c0 [ 189.521225][ T597] ? ext4_read_folio+0x240/0x240 [ 189.525996][ T597] do_writepages+0x385/0x620 [ 189.530425][ T597] ? __writepage+0x130/0x130 [ 189.534852][ T597] ? enqueue_task_fair+0xe57/0x24c0 [ 189.539883][ T597] ? __kasan_check_write+0x14/0x20 [ 189.544830][ T597] __writeback_single_inode+0xdc/0xb80 [ 189.550128][ T597] writeback_sb_inodes+0xb32/0x1910 [ 189.555159][ T597] ? _raw_spin_lock+0xa4/0x1b0 [ 189.559763][ T597] ? queue_io+0x520/0x520 [ 189.563923][ T597] ? __writeback_inodes_wb+0x3f0/0x3f0 [ 189.569222][ T597] ? queue_io+0x3d0/0x520 [ 189.573384][ T597] ? memset+0x35/0x40 [ 189.577203][ T597] wb_writeback+0x3b9/0x9f0 [ 189.581562][ T597] ? inode_cgwb_move_to_attached+0x3c0/0x3c0 [ 189.587357][ T597] ? set_worker_desc+0x158/0x1c0 [ 189.592133][ T597] ? cpudl_cleanup+0x40/0x40 [ 189.596558][ T597] ? __kasan_check_write+0x14/0x20 [ 189.601507][ T597] wb_workfn+0x399/0x1030 [ 189.605791][ T597] ? inode_wait_for_writeback+0x280/0x280 [ 189.611434][ T597] ? kthread_data+0x53/0xc0 [ 189.615770][ T597] ? _raw_spin_unlock+0x4c/0x70 [ 189.620453][ T597] ? finish_task_switch+0x167/0x7b0 [ 189.625490][ T597] ? __kasan_check_read+0x11/0x20 [ 189.630348][ T597] ? read_word_at_a_time+0x12/0x20 [ 189.635294][ T597] ? strscpy+0x9c/0x260 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 189.639288][ T597] process_one_work+0x73d/0xcb0 [ 189.643979][ T597] worker_thread+0xa60/0x1260 [ 189.648494][ T597] kthread+0x26d/0x300 [ 189.652392][ T597] ? worker_clr_flags+0x1a0/0x1a0 [ 189.657255][ T597] ? kthread_blkcg+0xd0/0xd0 [ 189.661684][ T597] ret_from_fork+0x1f/0x30 [ 189.665937][ T597] [ 189.668808][ T597] Modules linked in: [ 189.692252][ T597] ---[ end trace 0000000000000000 ]--- [ 189.713827][ T597] RIP: 0010:ext4_writepages+0x3fab/0x3fd0 [ 189.729257][ T597] Code: a2 80 ff 31 ff 89 de e8 a3 a2 80 ff 45 84 f6 75 2a e8 09 a0 80 ff 49 bc 00 00 00 00 00 fc ff df e9 6e f6 ff ff e8 f5 9f 80 ff <0f> 0b e8 ee 9f 80 ff e8 05 84 0b ff e9 46 c3 ff ff e8 df 9f 80 ff [ 189.797465][ T597] RSP: 0018:ffffc9000b267000 EFLAGS: 00010293 [ 189.803374][ T597] RAX: ffffffff81f5059b RBX: 0000008000000000 RCX: ffff88811be9d100 [ 189.811499][ T597] RDX: 0000000000000000 RSI: 0000008000000000 RDI: 0000000000000000 [ 189.819424][ T597] RBP: ffffc9000b267410 R08: ffffffff81f4ccfb R09: ffffed10238c6455 [ 189.827227][ T597] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8881109f8000 [ 189.827311][ T511] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 189.842486][ T597] R13: ffff88811c6323e0 R14: 000000c410000000 R15: ffffc9000b2672e0 [ 189.850419][ T597] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 189.860573][ T597] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 189.867009][ T597] CR2: 00007ffd20777b58 CR3: 000000010ebd0000 CR4: 00000000003506b0 [ 189.875165][ T597] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 189.883386][ T597] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 189.891212][ T597] Kernel panic - not syncing: Fatal exception [ 189.897307][ T597] Kernel Offset: disabled [ 189.901428][ T597] Rebooting in 86400 seconds..