last executing test programs: 14.992555045s ago: executing program 1 (id=2056): prctl$PR_GET_SPECULATION_CTRL(0x23, 0x4, 0x7fffffffefff) r0 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$XFS_IOC_AG_GEOMETRY(r1, 0xc080583d, &(0x7f0000000080)={0x0, 0xc0, 0xc, 0x9, 0x4, 0x10000, 0x7}) connect$unix(r1, &(0x7f0000000100)=@abs, 0x6e) epoll_pwait(r0, 0x0, 0x0, 0x2d516fb6, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) r2 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x4c, &(0x7f0000000300)=ANY=[@ANYRES8=r2, @ANYRES16=r2, @ANYRESOCT], 0x1, 0x3a2, &(0x7f0000000340)="$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") sched_setscheduler(0x0, 0x1, &(0x7f0000000700)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000800), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000840), 0x4000087, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) mknod$loop(&(0x7f0000000a00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0) link(&(0x7f0000000b00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000c00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 13.005394298s ago: executing program 4 (id=2058): prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000001c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000200), 0x4000087, 0x2, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000780), 0x800001d, 0x1c) getpeername$packet(0xffffffffffffffff, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000800)=0x14) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000840)={r3, @remote, @multicast2}, 0xc) syz_open_dev$tty1(0xc, 0x4, 0x1) unshare(0x42000080) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000380)='.\x00', 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f00000003c0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x3938700}, {0x77359400}}, 0x0) unshare(0x64000600) 12.929953995s ago: executing program 4 (id=2060): r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x4080, 0x11) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x240080, 0xe0) mkdirat(r0, 0x0, 0x16f) gettid() socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000400)=0x6) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000540)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000005c0), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000600)=0x2) recvmmsg(r2, &(0x7f0000000640), 0x80002c1, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x2e, 0x26, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000740)=@new_dev={0x4, 0x3ca, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000780)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) futex(0x0, 0x85, 0x80001000, 0x0, 0x0, 0xa0090199) syz_ublk_setup_queues(r6, r4, &(0x7f00000007c0)={0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x2f6}, &(0x7f0000000a40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x400, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1b70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='./file0\x00', 0x181) 10.730618569s ago: executing program 4 (id=2065): prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x80000008b}, 0x0) gettid() socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000440), 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000540)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000005c0), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000640), 0x80002c1, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x2e, 0x26, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000740)=@new_dev={0x4, 0x3ca, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000780)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f00000007c0)={0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x2f6}, &(0x7f0000000a40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x400, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1b70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 10.649173817s ago: executing program 0 (id=2066): socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f00000004c0)) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='cramfs\x00', 0x66820, 0x0) lstat(&(0x7f00000005c0)='./sys\x00', &(0x7f0000000600)) openat(0xffffffffffffff9c, &(0x7f0000000680)='./sys/bus/pci/devices/0000:00:00.0/remove\x00', 0x1, 0x0) setxattr$trusted_overlay_opaque(&(0x7f00000006c0)='./sys\x00', 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000700)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000740)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000780)=0x2) sched_setscheduler(r0, 0x2, &(0x7f00000007c0)=0x7) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xb635773f06ebbee1, 0x12, 0xffffffffffffffff, 0xa50eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000ac0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000b40), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000b80), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) flock(r3, 0x2) r4 = open(&(0x7f0000000100)='.\x00', 0x30000, 0x3) r5 = open(&(0x7f0000000180)='.\x00', 0x100000, 0x2) flock(r5, 0x1) flock(r4, 0x1) flock(r3, 0x1) 10.112502112s ago: executing program 3 (id=2067): mkdirat(0xffffffffffffff9c, 0x0, 0x1a) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0xe0400, 0x0) ioctl$TCGETA(r0, 0x5405, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000200), 0x318, 0x0) lstat(&(0x7f0000000e80)='./file0\x00', &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000240)='./file0\x00', r4, 0xffffffffffffffff) recvmmsg(r2, &(0x7f0000000240), 0x10106, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r5, 0x891b, &(0x7f0000000200)={'lo\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xa}}}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, &(0x7f0000000580)={0x0, 'bridge_slave_1\x00', {0x3}}) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000fc0)=0x400, 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="300e0000240001050000000000000000000000000100000000000100ffffffff00000000090001007072696f00000000180002000300000000000000000000000000000000000000e80d08001c0001000000000000000000000000000000000000000000e2060000c80d02"], 0xe30}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newqdisc={0x38, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x2}, {0x1, 0x1}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x100}}]}, 0x38}}, 0x0) 9.751631058s ago: executing program 0 (id=2069): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4080, 0x11) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x240080, 0xe0) mkdirat(r0, 0x0, 0x16f) prlimit64(0x0, 0xe, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000400)=0x6) bpf$ENABLE_STATS(0x20, &(0x7f0000000440), 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000540)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000005c0), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000600)=0x2) recvmmsg(r2, &(0x7f0000000640), 0x80002c1, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x2e, 0x26, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000740)=@new_dev={0x4, 0x3ca, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000780)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f00000007c0)={0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x2f6}, &(0x7f0000000a40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x400, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1b70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 9.580097516s ago: executing program 1 (id=2071): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x8840, 0xa2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000080)="d4", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) ioctl$XFS_IOC_FSINUMBERS(r0, 0xc0205867, &(0x7f0000001700)={&(0x7f00000000c0)=0x8000, 0x6, &(0x7f0000001180)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f00000016c0)}) syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca00090506020002"], 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x325400, 0x4a) mmap$IORING_OFF_SQ_RING(0x0, 0x350, 0x2000000, 0x810, r2, 0x0) 9.252604989s ago: executing program 3 (id=2072): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4080, 0x11) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x240080, 0xe0) mkdirat(r0, 0x0, 0x16f) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x80000008b}, 0x0) gettid() socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000400)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000540)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000005c0), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000600)=0x2) recvmmsg(r2, &(0x7f0000000640), 0x80002c1, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x2e, 0x26, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000740)=@new_dev={0x4, 0x3ca, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000780)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f00000007c0)={0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x2f6}, &(0x7f0000000a40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x400, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1b70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 7.606712916s ago: executing program 3 (id=2074): socket(0x10, 0x3, 0x0) socket(0x2c, 0x805, 0x7) openat$tun(0xffffffffffffff9c, 0x0, 0x40000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000300), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000340), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x3, @any, 0x1}, 0xe) bind$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @none}, 0xe) syz_open_procfs(0x0, 0x0) select(0x0, 0x0, 0x0, &(0x7f00000003c0)={0x100000000000000}, &(0x7f0000000400)) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000300)={'syz_tun\x00', &(0x7f0000000480)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xfffffffc}}) pipe(&(0x7f0000000500)) r5 = socket(0x10, 0x803, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000800)={0xe9e, {{0xa, 0x4e24, 0x6, @mcast2, 0x5}}, {{0xa, 0x4e21, 0x828b5f, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x36}}, 0xe57}}}, 0x108) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x12, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000750000008500000006000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000b704000000000000b705000000000000850000001c00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r6, 0x0, 0xe, 0x0, &(0x7f00000009c0)='\x00'/14, 0x0, 0x8000001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r6, 0x4058587a, &(0x7f0000000a00)={{r6, 0x0, 0xc0000, &(0x7f0000000a80)={@align=0x10000, {0x5, 0x8, 0x2ab39821, 0x9}}, 0x0, 0x0, &(0x7f0000000ac0)=0xd}, {[0xfffffff3, 0x40, 0x5, 0xffffffff]}, 0x1ff, 0x58, &(0x7f0000000b00)=""/88}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000640)={'ip6_vti0\x00', &(0x7f0000000680)={'syztnl1\x00', 0x0, 0x0, 0xc1, 0xfe, 0x7, 0x16, @dev={0xfe, 0x80, '\x00', 0x1f}, @remote, 0x802f, 0x10, 0xffff, 0x2aa1f953}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000700)={'syztnl1\x00', &(0x7f0000000740)={'ip6tnl0\x00', r7, 0x0, 0x82, 0x0, 0x1ac1ee85, 0x0, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8000, 0x1, 0x10, 0xa174}}) syz_open_procfs(0x0, &(0x7f00000007c0)='mounts\x00') 7.593238718s ago: executing program 2 (id=2075): r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x4080, 0x11) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x240080, 0xe0) mkdirat(r0, 0x0, 0x16f) gettid() socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000400)=0x6) bpf$ENABLE_STATS(0x20, &(0x7f0000000440), 0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000540)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000005c0), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000600)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000000640), 0x80002c1, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x2e, 0x26, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000740)=@new_dev={0x4, 0x3ca, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000780)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) futex(0x0, 0x85, 0x80001000, 0x0, 0x0, 0xa0090199) syz_ublk_setup_queues(r4, r2, &(0x7f00000007c0)={0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x2f6}, &(0x7f0000000a40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x400, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1b70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='./file0\x00', 0x181) 7.27747352s ago: executing program 2 (id=2076): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) (async) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000004c0)={0x2, &(0x7f0000000540)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x6, 0x0, 0xb, 0x63552b74}]}, 0x10) (async) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) (async) r3 = syz_open_dev$mouse(&(0x7f0000000000), 0x7, 0x480341) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xc, 0x8, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYRES64=r2], &(0x7f0000000c80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x1b, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf05f47b68fc91215, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000cc0)={r4, 0x3e8, 0xf, 0x0, &(0x7f0000000d40)="c1df07000000d30a298ee688655887", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) timerfd_create(0x0, 0x800) (async) connect$inet6(0xffffffffffffffff, &(0x7f0000001cc0)={0xa, 0x3, 0x2c, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmsg(0xffffffffffffffff, &(0x7f0000001d00)={0x0, 0x33, &(0x7f0000001d40)=[{&(0x7f0000001d80)=',', 0x588}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 6.740461904s ago: executing program 3 (id=2077): r0 = syz_mount_image$ext4(&(0x7f00000022c0)='ext4\x00', &(0x7f0000002300)='./file1\x00', 0x2200002, &(0x7f0000002340)={[{@discard}, {}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@dioread_nolock}]}, 0x1, 0x572, &(0x7f0000002400)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwIF6kCCIWxD/Au8fiH6B/RUELRUrQg5fIbGbbbZLNJunWbJ3PB6Z9b2ayb96++b79zs4uG0BhjWT/lCJejoivk4iDbdsGI984srLf0sNrk9mSxPLyJ38mkeTrWvsn+f/788pLEfHLFxHHS2vbrS8szlSq1XQur482Zi+P1hcWT1ycrUyn0+ml8YmJU29NjL/7zts96+vr5/7+7uO7H5z66ujStz/dP3Q7iTNxIN/W3o+ncKO9MhIj+XMyFGdW7TjWg8b6SbLTB8C2DORxPhTZHHAwBvKoB/7/rkfEMlBQifiHgmrlAa1r+x5dBz83Hry/cgG0tv+DK++NxJ7mtdG+peSJK6Psene4B+1nbfz8x53b2RJd3oe43oP2AFpu3IyIk4ODa+e/JJ//tu9k883jja1uo2ivP7CT7mb5zxvr5T+lR/lPrJP/7F8ndreje/yX7vegmY6y/O+9dfPfR1PX8EBee6GZ8w0lFy5W05MR8WJEHIuh3Vl9o/s5p5buLXfa1p7/ZUvWfisXzI/j/uDuJ/9mqtKoPE2f2z24GfHK4/w3iTXz/55mrrt6/LPn41xW+PXLrm0cSe+82mlb9/63630GvPxjxGvrjv/jO1rJxvcnR5vnw2jrrFjrr1tHfuvU/tb633vZ+O/buP/DSfv92vrW2/hhzz9pp23bPf93JZ82y7vydVcrjcbcWMSu5KO168cf/22r3to/6/+xoxvPf+ud/3sj4rNN9v/W4Vsdd+2H8Z/a0vhvvXDvw8+/79T+5sb/zWbpWL5mM/PfZg/waZ47AAAAAAAA6DeliDgQSan8qFwqlcsrn+84HPtK1Vq9cfxCbf7SVDS/KzscQ6XWne6DbZ+HGMs/D9uqj6+qT0TEoYj4ZmBvs16erFWndrrzAAAAAAAAAAAAAAAAAAAA0Cf2d/j+f+b3gZ0+OuCZ85PfUFxd478Xv/QE9CWv/1Bc4h+KS/xDcYl/KC7xD8Ul/qG4xD8Ul/gHAAAAAAAAAAAAAAAAAAAAAAAAAACAnjp39my2LC89vDaZ1aeuLMzP1K6cmErrM+XZ+cnyZG3ucnm6VpuupuXJ2my3x6vWapfHxmP+6mgjrTdG6wuL52dr85ca5y/OVqbT8+nQf9IrAAAAAAAAAAAAAAAAAAAAeL7UFxZnKtVqOqfQsXA6+uIwtl1Iuo3y6fxk2NIjR14Y3PkOKjyDwg5PTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQ5t8AAAD//8nLNLM=") r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000000000)=[{{&(0x7f0000000280)={0xa, 0x4e20, 0x10000, @mcast2, 0x7fff}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=[@rthdrdstopts={{0x18, 0x29, 0x37, {0x62}}}, @rthdrdstopts={{0x18}}, @dstopts={{0x18, 0x29, 0x37, {0xc}}}], 0x48}}], 0x1, 0x81) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000021000/0x3000)=nil, 0x3000, 0xb635773f03ebbee2, 0x1010, r0, 0xff73b000) mmap(&(0x7f0000a8c000/0x12000)=nil, 0x12000, 0xb635773f06ebbeef, 0x10010, r0, 0x0) munmap(&(0x7f0000583000/0x4000)=nil, 0x4000) mremap(&(0x7f0000fa4000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000fa2000/0x1000)=nil) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000140)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000200), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000940)={'filter\x00', 0x6001, 0x4, 0x3c8, 0x0, 0x0, 0xe8, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast2, @private}}}, {{@arp={@loopback, @remote, 0xffffffff, 0xffffffff, 0xf, 0xf, {@mac=@link_local, {[0xff, 0xff, 0xff, 0x0, 0xff, 0xff]}}, {@empty, {[0xff, 0x0, 0xff, 0x0, 0xff, 0xff]}}, 0x0, 0x0, 0x2, 0x9, 0xfb5, 0x5, 'syz_tun\x00', 'ip6erspan0\x00', {0xff}, {0xff}, 0x0, 0x20}, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x80102, 0x0) eventfd2(0xe5c, 0x80000) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0), 0x20000, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'syzkaller0\x00', 0x0}) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000680)={0x0, 0x30b5, 0x0, 0x0, 0x158}, &(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x9, '\x00', r7, 0xffffffffffffffff, 0x2, 0x3}, 0x50) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000480)=@generic={&(0x7f00000002c0)='./file0\x00', r8}, 0x18) 6.48761919s ago: executing program 0 (id=2078): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_lsm={0x6, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000b40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff34}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000b80)={r0}, 0x8) close(r1) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000001240)={r1, 0x1f, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x1) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000012c0)={r1, 0x0, 0x0}, 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x1010, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='blkio.bfq.time\x00', 0x0, 0x0) socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2) r3 = userfaultfd(0x80801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000240)={0xaa, 0x749}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000380)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000003c0)={0x1, &(0x7f0000000400)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x404, &(0x7f00000004c0), 0x1, 0x449, &(0x7f0000000c80)="$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") write$binfmt_script(r2, &(0x7f0000000900)={'#! ', './file0', [{0x20, 'nombcache'}, {0x20, 'max_batch_time'}, {0x20, '&-'}], 0xa, "7b2d106cd561e4face7bc4d06963e6c16df1519460d0e49eb63b8fb76ba48d72a7ef5959b8b4f4dce04529dfc1a4380bd1d113a8a1eeeca9923b6570e0a33739758a581a9140d72143b153843b7da80787f3e96c7f87c5c403285a02d26c5318251ded09d167a03ebf38c5841595529d3cbab80d978cd6d7654ef84b654507b37f961a4e4be9776ae0392d135a7d6107e90c1e618ecacd363ffcd2952becf1bb9f0c35915c33618b4f1bcbf646aef9c2c5445114d8da09e283da68d693e84a6dcadb183e86cc7c7c3d6a56fe0028f63f5e7d5922125ffaae98d7ff08dd63a935af3ea5ad4721e666a1f5a336a449a12c37c267e96974747f"}, 0x11f) r5 = openat(0xffffffffffffff9c, &(0x7f0000001180)='./file1\x00', 0x10b442, 0x79) r6 = openat(r1, &(0x7f0000001400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x442, 0x86) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000001200)={0x0, r6, 0x1, 0x5, 0xea75, 0x1000000000001}) close_range(r4, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x201013, &(0x7f0000000040)=ANY=[@ANYRESOCT=r1, @ANYRESHEX=r1, @ANYBLOB="ebd007c4e15388c181771fbd8c23a8dbcae54a5d5f575a602406f6ae048c74b96ceaf70536107234646a38b7320770aef54150994396d199aacfdab28059e18f58c4bdb82893176197f67ab5cc58899f5ac8ea6a1ea0079d75074db5f2d57c7c5d1207d894180db1644499d88a3935ae8a0e0d74b84e38f76949cd774e019256385b45f3bc53fbf758377fc00545e1dafa5f8d84a698b6093513c8f33aefcc5e41444190333e28bce43df93bf22f69e070579dd43a6a29e97f214b7f6ec3c2fb3588b83cf5"], 0xfd, 0x2c7, &(0x7f0000001640)="$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") fsconfig$FSCONFIG_SET_PATH_EMPTY(r5, 0x4, &(0x7f0000000580)='\\\\@#^\x00', &(0x7f00000005c0)='./bus/file0\x00', 0xffffffffffffffff) syz_mount_image$exfat(0x0, &(0x7f0000001500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x20020c0, 0x0, 0x1, 0x0, &(0x7f0000000600)) syz_mount_image$ext4(0x0, &(0x7f0000000c40)='./bus/file0\x00', 0x80008, 0x0, 0x0, 0x0, &(0x7f0000000c80)) rename(&(0x7f0000001940)='./bus/file0\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00') 6.473567701s ago: executing program 2 (id=2079): prctl$PR_GET_SPECULATION_CTRL(0x23, 0x4, 0x7fffffffefff) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = epoll_create1(0x80000) connect$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000009380)=[{{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f00000009c0)="14a5c24880ad40afa472e559e030cbe32336aba7d582431e", 0x18}], 0x1, 0x0, 0x0, 0x240000d4}}, {{0x0, 0x0, &(0x7f0000002180), 0x0, &(0x7f00000043c0)=[@rights={{0x10}}], 0x10, 0x4001}}, {{0x0, 0x0, &(0x7f0000006d80)=[{0x0}], 0x1, &(0x7f0000006e00)}}, {{&(0x7f0000006e80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000007040)=[{&(0x7f0000006fc0)="296e9ee7e7a129cbb562c5d98b95c8e5e1a3d7b207df5460aaf0d51828e3dab1ec5fb30b6424f927292f2ac38994950357c1c9fb68c42edd2e5b80469e", 0x3d}], 0x1, 0x0, 0x0, 0x1}}], 0x4, 0x0) epoll_pwait(r1, 0x0, 0x0, 0x2d516fb6, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x4c, &(0x7f0000000300)=ANY=[@ANYRES8=r3, @ANYRES16=r3, @ANYRESOCT], 0x1, 0x3a2, &(0x7f0000000340)="$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") sched_setscheduler(r2, 0x1, &(0x7f0000000700)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000780)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000800), 0x651, 0x0) recvmmsg(r4, &(0x7f0000000840), 0x4000087, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x3000042, 0x0, 0x1, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000880), &(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d091, 0x0, 0x40, 0x0, &(0x7f00000009c0)) mknod$loop(&(0x7f0000000a00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0) link(&(0x7f0000000b00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000c00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r6 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r6, 0x11b, 0x1, 0x0, &(0x7f0000000d00)=0x60) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000d40)=ANY=[]) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000e00)=@newtaction={0x5c, 0x30, 0x9, 0x0, 0x0, {}, [{0x48, 0x1, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x30000003}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) 6.363784373s ago: executing program 4 (id=2080): r0 = socket$unix(0x1, 0x5, 0x0) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000380)='./file2\x00', 0x3a0001c, &(0x7f00000007c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@barrier}, {@data_err_ignore}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nodiscard}, {@data_journal}]}, 0x1, 0x441, &(0x7f00000018c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000001140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001180)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000011c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000001200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000001280)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000001300), 0x651, 0x0) recvmmsg(r2, &(0x7f0000001340), 0x4000087, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/47, @ANYRES32, @ANYBLOB="0100000002"], 0x40) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 5.072389054s ago: executing program 0 (id=2081): r0 = socket$unix(0x1, 0x5, 0x0) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000380)='./file2\x00', 0x3a0001c, &(0x7f00000007c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@barrier}, {@data_err_ignore}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nodiscard}, {@data_journal}]}, 0x1, 0x441, &(0x7f00000018c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000001140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001180)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000011c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000001200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000001280)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000001300), 0x651, 0x0) recvmmsg(r2, &(0x7f0000001340), 0x4000087, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/47, @ANYRES32, @ANYBLOB="0100000002"], 0x40) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (fail_nth: 1) 5.071967534s ago: executing program 1 (id=2082): mkdirat(0xffffffffffffff9c, 0x0, 0x1a) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0xe0400, 0x0) ioctl$TCGETA(r0, 0x5405, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000200), 0x318, 0x0) lstat(&(0x7f0000000e80)='./file0\x00', &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000240)='./file0\x00', r4, 0xffffffffffffffff) recvmmsg(r2, &(0x7f0000000240), 0x10106, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r5, 0x891b, &(0x7f0000000200)={'lo\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xa}}}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, &(0x7f0000000580)={0x0, 'bridge_slave_1\x00', {0x3}}) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000fc0)=0x400, 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="300e0000240001050000000000000000000000000100000000000100ffffffff00000000090001007072696f00000000180002000300000000000000000000000000000000000000e80d08001c0001000000000000000000000000000000000000000000e2060000c80d02"], 0xe30}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newqdisc={0x38, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x2}, {0x1, 0x1}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x100}}]}, 0x38}}, 0x0) 4.239972269s ago: executing program 2 (id=2083): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000004c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000500), 0x10106, 0x2, 0x0) setpriority(0x0, 0x0, 0x2a14b58) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000100)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000140)={0x0, 0x0, 0x8000, 0x3ff}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=ANY=[@ANYRES16=r0, @ANYRES32=0x0, @ANYBLOB="fab0817dbcb5f31a2c001280030000000500200001000000141003006272697367655f736c6176652a178b648248226edc944f4ae59a8599531b7727ade02ad3a4fa1f7aa02d06909aa393fdb70bf5b3626b47a7c89e6fc743beb9c5854ad6bd580085513ecd9c9d84b5dc0772fc300d4cd358b11d197b9c062f15b17adfd749289d7be0877c276e8561c56d10f29c2d91de89ffbb9cab4060b9040c909dcc681fc031fd80696e54891a65f8c2"], 0x60}, 0x1, 0x0, 0x0, 0x20044010}, 0x44800) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r3, 0x1, &(0x7f0000000280)={{0x77359400}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYRES64=r2], 0x48) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000340)={0x200000, 0x40200003, 0x0, 0x1, 0x7}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x1c, &(0x7f0000001180)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70300001b0000008500000083000000bf09000000000000550901000078b8e2145b100a9423447e77f40000009500000000000000b7080000000000007b9af8ff00000000b5090500000000007baaf0ff00000000bda804000000000007080000f8ffffffbfa000000000000007000000f0ffffffb7020000080000001822000057f89ba666e6ca2aab75195912b99432881fe68a7d640e50", @ANYRESOCT=r3, @ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) r5 = syz_open_dev$evdev(&(0x7f00000007c0), 0x0, 0x3f) ioctl$EVIOCSCLOCKID(r5, 0x40084504, &(0x7f0000000800)) r6 = openat(0xffffffffffffff9c, &(0x7f0000000840)='.\x00', 0x0, 0x0) remap_file_pages(&(0x7f0000603000/0x3000)=nil, 0x3000, 0x0, 0x3, 0x100000) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x0, &(0x7f0000000900)={[{@mblk_io_submit}, {@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@noquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1200006}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x3a}}, {@min_batch_time={'min_batch_time', 0x3d, 0x3}}, {@jqfmt_vfsold}, {@nodelalloc}]}, 0x1, 0x4aa, &(0x7f0000000a00)="$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") syz_btf_id_by_name$bpf_lsm(0x0) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000ec0)={'\x00', 0x7, 0x88e6, 0x9, 0x10001, 0xa04f, 0xffffffffffffffff}) capget(&(0x7f0000000f40)={0x20071026, r7}, &(0x7f0000000f80)={0x800, 0x1, 0x7, 0x101, 0x15ff, 0x5b71}) prlimit64(0x0, 0xe, 0x0, &(0x7f0000001140)) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=@setneightbl={0x78, 0x43, 0x1, 0x70bd27, 0x25dfdbfb, {0x2}, [@NDTA_THRESH3={0x8, 0x4, 0x8}, @NDTA_THRESH2={0x8}, @NDTA_PARMS={0x4c, 0x6, 0x0, 0x1, [@NDTPA_LOCKTIME={0xc, 0xf, 0x3}, @NDTPA_QUEUE_LEN={0x8, 0x8, 0x1d9}, @NDTPA_IFINDEX={0x8, 0x1, r8}, @NDTPA_PROXY_DELAY={0xc, 0xd, 0x43}, @NDTPA_ANYCAST_DELAY={0xc, 0xc, 0x200}, @NDTPA_GC_STALETIME={0xc, 0x6, 0x3}, @NDTPA_UCAST_PROBES={0x8, 0xa, 0x47}]}, @NDTA_THRESH3={0x8, 0x4, 0x9}]}, 0x78}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 4.233786669s ago: executing program 4 (id=2084): r0 = syz_usb_connect(0x3, 0x50, &(0x7f0000000240)=ANY=[@ANYBLOB="12010002000000405205105500000102000109023e00010100803209040000040806620007050102000200042401000705820200020004240200070583020002000424030007050402000200042404"], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="3d000001"]) syz_usb_control_io(r0, 0x0, 0x0) 4.22607571s ago: executing program 3 (id=2085): r0 = syz_usb_connect(0x3, 0x39, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_write(r0, 0x82, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_write(r0, 0x82, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_write(r0, 0x82, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x10, &(0x7f0000000040)={[{0xc, 0x4e00, "ea430392bf13eede5624c4f3"}]}) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_write(r0, 0x82, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect(0x4, 0x0, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) 3.883184085s ago: executing program 0 (id=2086): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1e7d, 0x3264, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b86, 0x0, {0x9, 0x21, 0x1, 0x10, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x80, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000c80)={0x0, 0x30, 0x1, ':'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$hiddev(0x0, 0xa, 0x62080) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0) 3.857521017s ago: executing program 1 (id=2087): syz_usb_connect$uac3(0x3, 0x80, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x582, 0x8d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0xd8, 0x10, 0xc, {0x8, 0xb, 0x1, 0x2, 0x1, 0x1, 0x30, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xe, 0x0, 0x3, {0xa, 0x25, 0x25, 0x7fffffff, 0xc, 0x180}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x7f, 0x4, 0x0, {0xa, 0x25, 0x25, 0x400, 0x8f, 0x2}}}}}}}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) 3.016910963s ago: executing program 2 (id=2088): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002000000408680630b0001010203010902200001010080fa0904000002ffffff0007058102000200070502020002"], 0x0) syz_usb_ep_read(r0, 0x2, 0x0, 0x0) 2.460656s ago: executing program 1 (id=2089): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4b4, 0x7b1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x19}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x19, {[@global=@item_012={0x1, 0x1, 0x0, "01"}, @global=@item_012={0x1, 0x1, 0x1, '\x00'}, @global=@item_012={0x1, 0x1, 0x2, "ff"}, @local=@item_012={0x1, 0x2, 0x0, "04"}, @main=@item_012={0x1, 0x0, 0xa, "01"}, @local=@item_012={0x1, 0x2, 0x0, "01"}, @main=@item_012={0x1, 0x0, 0xa, '\x00'}, @global=@item_012={0x1, 0x1, 0x0, '\b'}, @global=@item_012={0x1, 0x1, 0x9, "01"}, @local=@item_012={0x1, 0x2, 0x0, '0'}, @main=@item_012={0x1, 0x0, 0x9, "02"}, @local=@item_012={0x1, 0x2, 0x3, '\x00'}, @main=@item_012={0x0, 0x0, 0xc}]}}, 0x0}, 0x0) 1.953515322s ago: executing program 4 (id=2090): r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x78, 0x73, 0x4d, 0x8, 0x10b8, 0x1e6e, 0x9d9d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x49, 0x8, 0x40, 0x81, "", [{{0x9, 0x4, 0xa5, 0xa, 0x0, 0x71, 0x1d, 0xd5, 0x9}}]}}]}}, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000003c00)={0x44, &(0x7f0000003980)={0x40, 0x31, 0x2, "00dd"}, &(0x7f0000003a40)={0x0, 0xa, 0x1, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000004d00)={0x1c, &(0x7f0000004c40)={0x20, 0x17}, 0x0, 0x0}) syz_usb_ep_write(r0, 0x0, 0x0, 0x0) syz_open_dev$hiddev(0x0, 0x7, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 893.478239ms ago: executing program 0 (id=2091): r0 = syz_usb_connect$uac2(0x5, 0x9e, &(0x7f0000000840)=ANY=[@ANYBLOB="12010102000000208c0d0c0040000202030109028c000301008008080b0101010c20060904000000010120000924010300042c000408240a05004000030c24030207030603050300010f2406030506ee0000080007000400090401"], &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x5, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x6f, 0x92, 0xdc, 0x20, 0x10b8, 0x1f98, 0x1fb4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xfe, 0x4, 0x90, 0x7, "", [{{0x9, 0x4, 0x24, 0x1f, 0x0, 0x56, 0xe3, 0x31, 0x4}}]}}]}}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(0xffffffffffffffff, 0x89, 0x0, 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x250, 0x49, 0x8, 0x9, 0x10, 0x1740, 0x9705, 0xb517, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5, 0x1, 0x80, 0x7, "", [{{0x9, 0x4, 0x29, 0xa, 0x0, 0xc5, 0x24, 0x68, 0x7}}]}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect$uac2(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$printer(r2, &(0x7f0000000200)={0x14, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2009}}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000340)={0x34, &(0x7f0000000380)={0x20, 0xf, 0x4, "a1a5fe13"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 824.674806ms ago: executing program 1 (id=2092): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004366b408c70b0800c84f010203010902"], 0x0) r1 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302"], 0x0) syz_usb_disconnect(r0) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d6c5552018161391"], 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000f80)={0x2c, &(0x7f0000000680)={0x0, 0x14}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000dc0)={0x1c, &(0x7f00000006c0)={0x20, 0x14, 0x2, "5fab"}, 0x0, 0x0}) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac3(r2, 0x0, &(0x7f0000000940)={0x44, &(0x7f00000005c0)={0x20, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000003c0)={0x20, 0xe}, 0x0, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000600), &(0x7f0000000640)}) syz_usb_connect(0x0, 0x24, &(0x7f0000000340)={{0x12, 0x1, 0x201, 0x9, 0x8f, 0xa0, 0x40, 0x45e, 0xc5e, 0x15a9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x45, 0x20, 0x8, "", [{{0x9, 0x4, 0x26, 0xc, 0x0, 0xf1, 0x15, 0x4a, 0x5e}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001280)={0x84, &(0x7f0000000e00)={0x0, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(r1) syz_usb_control_io(r0, 0x0, &(0x7f0000000fc0)={0x84, &(0x7f0000000a80)={0x0, 0xf, 0x14, "6dab8204c0fed031083aa02dd93ab896d302adfb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)={0x40, 0x13, 0x6, @link_local}, &(0x7f0000000d80)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 732.667165ms ago: executing program 3 (id=2093): r0 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004057a213200100000000010902200001010080fa0904000002ff00000007058102000200070502020002"], 0x0) syz_usb_ep_read(r0, 0x2, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0xe, &(0x7f0000000200)="0e003000000001007c0900000000") 0s ago: executing program 2 (id=2094): r0 = syz_usb_connect$hid(0x0, 0x34, &(0x7f0000000180)=ANY=[@ANYBLOB="12010002000000406d042bc500240102000109022200010100a03209040000010300000009211101000122150007058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0022150000000600ff0901a10185201500260c017508910e8102c0"], 0x0}, 0x0) kernel console output (not intermixed with test programs): 8] EXT4-fs: Ignoring removed mblk_io_submit option [ 594.756085][ T6008] EXT4-fs error (device loop4): __ext4_iget:5104: inode #2: block 2147483648: comm syz.4.1331: invalid block [ 595.324341][ T6019] loop2: detected capacity change from 0 to 512 [ 595.448196][ T6008] EXT4-fs (loop4): get root inode failed [ 596.534750][ T6023] loop1: detected capacity change from 0 to 512 [ 596.541088][ T6008] EXT4-fs (loop4): mount failed [ 596.554213][ T6023] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 597.341868][ T6027] xt_CT: You must specify a L4 protocol and not use inversions on it [ 597.353169][ T6027] loop1: detected capacity change from 0 to 512 [ 597.920161][ T6036] loop3: detected capacity change from 0 to 512 [ 597.952294][ T6036] ext3: Unknown parameter '.' [ 597.957759][ T6027] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 598.120587][ T289] EXT4-fs (loop1): unmounting filesystem. [ 598.340770][ T6046] loop3: detected capacity change from 0 to 256 [ 598.349311][ T6046] FAT-fs (loop3): Unrecognized mount option "O”dir" or missing value [ 598.548035][ T6048] loop1: detected capacity change from 0 to 128 [ 598.660237][ T334] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 598.678559][ T6043] loop4: detected capacity change from 0 to 512 [ 599.287810][ T6048] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 600.984554][ T6079] netlink: 3328 bytes leftover after parsing attributes in process `syz.0.1347'. [ 601.181517][ T6078] loop1: detected capacity change from 0 to 512 [ 601.188519][ T6078] EXT4-fs: Ignoring removed mblk_io_submit option [ 601.197793][ T6078] EXT4-fs error (device loop1): __ext4_iget:5104: inode #2: block 2147483648: comm syz.1.1348: invalid block [ 601.211511][ T6078] EXT4-fs (loop1): get root inode failed [ 601.222338][ T6078] EXT4-fs (loop1): mount failed [ 601.439326][ T6085] loop4: detected capacity change from 0 to 512 [ 601.453901][ T6085] ext3: Unknown parameter '.' [ 601.482286][ T6090] loop1: detected capacity change from 0 to 256 [ 601.519336][ T6090] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 602.364591][ T6106] loop4: detected capacity change from 0 to 256 [ 603.335120][ T6106] FAT-fs (loop4): Unrecognized mount option "O”dir" or missing value [ 604.018673][ T334] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 606.302134][ T6136] futex_wake_op: syz.3.1361 tries to shift op by 144; fix this program [ 606.588268][ T6137] netlink: 3328 bytes leftover after parsing attributes in process `syz.2.1363'. [ 607.465381][ T6146] loop3: detected capacity change from 0 to 512 [ 607.508734][ T6146] EXT4-fs: Ignoring removed mblk_io_submit option [ 607.530612][ T6146] EXT4-fs error (device loop3): __ext4_iget:5104: inode #2: block 2147483648: comm syz.3.1365: invalid block [ 607.572860][ T6146] EXT4-fs (loop3): get root inode failed [ 607.586272][ T6146] EXT4-fs (loop3): mount failed [ 608.068420][ T6157] loop4: detected capacity change from 0 to 256 [ 608.084428][ T6159] loop3: detected capacity change from 0 to 512 [ 608.126065][ T6157] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 609.757199][ T6170] loop2: detected capacity change from 0 to 128 [ 609.775570][ T6170] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 610.874847][ T6174] futex_wake_op: syz.1.1370 tries to shift op by 144; fix this program [ 612.145037][ T6185] loop1: detected capacity change from 0 to 1024 [ 612.173126][ T6185] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 612.733922][ T6185] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 612.775086][ T6196] netlink: 3328 bytes leftover after parsing attributes in process `syz.3.1377'. [ 612.821809][ T6198] loop2: detected capacity change from 0 to 512 [ 613.846236][ T6212] xt_CT: You must specify a L4 protocol and not use inversions on it [ 614.187569][ T6218] loop3: detected capacity change from 0 to 512 [ 615.918067][ T6229] loop4: detected capacity change from 0 to 512 [ 616.045341][ T6149] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 616.271922][ T6229] loop4: detected capacity change from 0 to 128 [ 616.304225][ T6149] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 616.452933][ T6238] loop4: detected capacity change from 0 to 512 [ 617.007733][ T6242] loop2: detected capacity change from 0 to 256 [ 617.190171][ T6242] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 617.250582][ T289] EXT4-fs (loop1): unmounting filesystem. [ 617.637870][ T6251] futex_wake_op: syz.4.1390 tries to shift op by 144; fix this program [ 618.733389][ T6257] loop2: detected capacity change from 0 to 512 [ 618.774525][ T6257] ext3: Unknown parameter '.' [ 618.884151][ T6261] netlink: 3328 bytes leftover after parsing attributes in process `syz.4.1392'. [ 619.013595][ T663] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 619.070423][ T6265] loop2: detected capacity change from 0 to 256 [ 619.095975][ T6265] FAT-fs (loop2): Unrecognized mount option "O”dir" or missing value [ 619.234562][ T663] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 619.253354][ T663] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 619.277188][ T663] usb 2-1: config 0 interface 0 has no altsetting 0 [ 619.287754][ T663] usb 2-1: New USB device found, idVendor=05ac, idProduct=0220, bcdDevice= 0.00 [ 619.303423][ T663] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.327047][ T663] usb 2-1: config 0 descriptor?? [ 619.594012][ T6270] futex_wake_op: syz.3.1395 tries to shift op by 144; fix this program [ 620.622139][ T6275] loop3: detected capacity change from 0 to 256 [ 620.652051][ T6275] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 620.797783][ T663] usbhid 2-1:0.0: can't add hid device: -71 [ 620.803804][ T663] usbhid: probe of 2-1:0.0 failed with error -71 [ 620.814286][ T663] usb 2-1: USB disconnect, device number 17 [ 623.992850][ T6309] loop3: detected capacity change from 0 to 256 [ 624.018862][ T6309] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 624.553608][ T4220] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 624.624591][ T292] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 624.627989][ T6326] xt_CT: You must specify a L4 protocol and not use inversions on it [ 624.843148][ T6328] loop3: detected capacity change from 0 to 256 [ 624.852598][ T6328] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 624.934632][ T4220] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 624.946020][ T4220] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 624.959173][ T4220] usb 2-1: config 0 interface 0 has no altsetting 0 [ 624.991343][ T4220] usb 2-1: New USB device found, idVendor=05ac, idProduct=0220, bcdDevice= 0.00 [ 625.000635][ T4220] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.010265][ T4220] usb 2-1: config 0 descriptor?? [ 625.024501][ T292] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 625.035687][ T292] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 625.048505][ T292] usb 3-1: config 0 interface 0 has no altsetting 0 [ 625.055186][ T292] usb 3-1: New USB device found, idVendor=05ac, idProduct=0220, bcdDevice= 0.00 [ 626.026309][ T6333] loop4: detected capacity change from 0 to 512 [ 626.046235][ T6333] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 626.073538][ T292] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 626.096551][ T292] usb 3-1: config 0 descriptor?? [ 626.184257][ T4220] usbhid 2-1:0.0: can't add hid device: -71 [ 626.189348][ T6333] EXT4-fs (loop4): 1 truncate cleaned up [ 626.190253][ T4220] usbhid: probe of 2-1:0.0 failed with error -71 [ 626.202255][ T6333] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 626.204069][ T4220] usb 2-1: USB disconnect, device number 18 [ 626.304703][ T6344] loop3: detected capacity change from 0 to 256 [ 626.312844][ T6344] FAT-fs (loop3): Unrecognized mount option "O”dir" or missing value [ 627.348057][ T6351] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 627.568969][ T6356] loop3: detected capacity change from 0 to 512 [ 627.614938][ T6356] EXT4-fs: Ignoring removed mblk_io_submit option [ 627.669211][ T6356] EXT4-fs error (device loop3): __ext4_iget:5104: inode #2: block 2147483648: comm syz.3.1415: invalid block [ 627.733783][ T6356] EXT4-fs (loop3): get root inode failed [ 627.743576][ T6356] EXT4-fs (loop3): mount failed [ 627.810291][ T6361] loop1: detected capacity change from 0 to 512 [ 627.828912][ T6361] ext3: Unknown parameter '.' [ 627.830459][ T291] EXT4-fs (loop4): unmounting filesystem. [ 627.924979][ T6363] loop4: detected capacity change from 0 to 128 [ 627.955175][ T6363] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 628.026475][ T6365] loop1: detected capacity change from 0 to 256 [ 628.034396][ T6365] FAT-fs (loop1): Unrecognized mount option "O”dir" or missing value [ 628.989637][ T6377] loop1: detected capacity change from 0 to 256 [ 629.116176][ T292] usbhid 3-1:0.0: can't add hid device: -71 [ 629.122209][ T292] usbhid: probe of 3-1:0.0 failed with error -71 [ 629.129546][ T292] usb 3-1: USB disconnect, device number 16 [ 629.142972][ T6377] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 629.168077][ T6379] loop3: detected capacity change from 0 to 512 [ 629.175016][ T6379] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 629.187537][ T6379] EXT4-fs (loop3): 1 truncate cleaned up [ 629.193276][ T6379] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 629.650004][ T6385] loop4: detected capacity change from 0 to 512 [ 630.191748][ T290] EXT4-fs (loop3): unmounting filesystem. [ 630.343621][ T663] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 630.393106][ T6391] loop2: detected capacity change from 0 to 512 [ 630.754128][ T6391] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 630.807122][ T6391] EXT4-fs (loop2): 1 truncate cleaned up [ 630.812828][ T6391] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 630.822550][ T663] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 630.834079][ T663] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 630.857403][ T663] usb 2-1: config 0 interface 0 has no altsetting 0 [ 630.893636][ T663] usb 2-1: New USB device found, idVendor=05ac, idProduct=0220, bcdDevice= 0.00 [ 630.902693][ T663] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.939172][ T663] usb 2-1: config 0 descriptor?? [ 631.052983][ T6404] futex_wake_op: syz.0.1427 tries to shift op by 144; fix this program [ 631.728892][ T6406] loop4: detected capacity change from 0 to 512 [ 632.104593][ T288] EXT4-fs (loop2): unmounting filesystem. [ 633.040061][ T6410] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 633.235637][ T6414] loop4: detected capacity change from 0 to 512 [ 634.224865][ T6425] loop4: detected capacity change from 0 to 256 [ 634.260748][ T6425] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 634.472850][ T663] usbhid 2-1:0.0: can't add hid device: -71 [ 634.496824][ T801] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 634.557598][ T663] usbhid: probe of 2-1:0.0 failed with error -71 [ 634.565028][ T663] usb 2-1: USB disconnect, device number 19 [ 634.684653][ T801] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 634.695936][ T801] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 634.709010][ T801] usb 3-1: config 0 interface 0 has no altsetting 0 [ 634.715783][ T801] usb 3-1: New USB device found, idVendor=05ac, idProduct=0220, bcdDevice= 0.00 [ 634.725056][ T801] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 634.736909][ T801] usb 3-1: config 0 descriptor?? [ 635.141672][ T6435] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 635.234104][ T6437] loop3: detected capacity change from 0 to 512 [ 635.325101][ T6437] ext3: Unknown parameter '.' [ 635.447486][ T6149] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 635.553037][ T6447] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 636.016613][ T6452] loop3: detected capacity change from 0 to 256 [ 636.073850][ T6452] FAT-fs (loop3): Unrecognized mount option "O”dir" or missing value [ 636.430837][ T801] usbhid 3-1:0.0: can't add hid device: -71 [ 636.436853][ T801] usbhid: probe of 3-1:0.0 failed with error -71 [ 636.456495][ T801] usb 3-1: USB disconnect, device number 17 [ 636.517338][ T6458] loop2: detected capacity change from 0 to 512 [ 636.547175][ T6458] EXT4-fs: Ignoring removed mblk_io_submit option [ 636.567138][ T6458] EXT4-fs error (device loop2): __ext4_iget:5104: inode #2: block 2147483648: comm syz.2.1439: invalid block [ 636.587978][ T6458] EXT4-fs (loop2): get root inode failed [ 636.598791][ T6458] EXT4-fs (loop2): mount failed [ 636.739720][ T6462] loop4: detected capacity change from 0 to 512 [ 636.780288][ T6462] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 636.818681][ T6462] EXT4-fs (loop4): 1 truncate cleaned up [ 636.828603][ T6462] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 637.042874][ T291] EXT4-fs (loop4): unmounting filesystem. [ 637.103091][ T6469] xt_CT: You must specify a L4 protocol and not use inversions on it [ 637.371411][ T6471] loop4: detected capacity change from 0 to 512 [ 637.381060][ T6473] loop1: detected capacity change from 0 to 512 [ 637.460559][ T6478] loop3: detected capacity change from 0 to 256 [ 637.461287][ T6475] loop2: detected capacity change from 0 to 128 [ 637.491256][ T6478] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 637.536699][ T6475] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 638.398170][ T6486] loop1: detected capacity change from 0 to 512 [ 638.571131][ T6493] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 639.414700][ T6486] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 639.460953][ T6486] EXT4-fs (loop1): 1 truncate cleaned up [ 639.472915][ T6501] xt_CT: You must specify a L4 protocol and not use inversions on it [ 639.493558][ T6486] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 639.518437][ T6501] set_capacity_and_notify: 1 callbacks suppressed [ 639.518453][ T6501] loop3: detected capacity change from 0 to 512 [ 639.639097][ T6501] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 640.538111][ T289] EXT4-fs (loop1): unmounting filesystem. [ 641.281735][ T290] EXT4-fs (loop3): unmounting filesystem. [ 641.693948][ T6530] loop1: detected capacity change from 0 to 512 [ 641.717334][ T6532] loop3: detected capacity change from 0 to 512 [ 641.756163][ T6534] loop2: detected capacity change from 0 to 256 [ 641.765006][ T6534] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 643.820397][ T6544] loop1: detected capacity change from 0 to 512 [ 643.895108][ T6547] loop2: detected capacity change from 0 to 512 [ 643.934076][ T6544] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 644.010454][ T6544] EXT4-fs (loop1): 1 truncate cleaned up [ 644.023557][ T6544] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 645.110151][ T6560] loop2: detected capacity change from 0 to 512 [ 646.675184][ T6569] loop4: detected capacity change from 0 to 512 [ 646.703440][ T289] EXT4-fs (loop1): unmounting filesystem. [ 646.866303][ T6580] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 646.953135][ T6569] EXT4-fs: Ignoring removed mblk_io_submit option [ 647.067062][ T6569] EXT4-fs error (device loop4): __ext4_iget:5104: inode #2: block 2147483648: comm syz.4.1465: invalid block [ 647.205314][ T6569] EXT4-fs (loop4): get root inode failed [ 647.314322][ T6569] EXT4-fs (loop4): mount failed [ 647.786716][ T6597] loop2: detected capacity change from 0 to 256 [ 647.823893][ T6597] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 647.887208][ T6599] loop4: detected capacity change from 0 to 512 [ 649.556875][ T6613] loop4: detected capacity change from 0 to 512 [ 650.068870][ T6620] futex_wake_op: syz.3.1476 tries to shift op by 144; fix this program [ 650.949599][ T6632] loop1: detected capacity change from 0 to 512 [ 651.008568][ T6632] ext3: Unknown parameter '.' [ 651.215356][ T6614] loop2: detected capacity change from 0 to 40427 [ 651.233640][ T6614] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 651.241912][ T6614] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 651.253971][ T6614] F2FS-fs (loop2): Wrong CP boundary, start(512) end(67110400) blocks(1024) [ 651.265867][ T6614] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 651.483695][ T6641] loop1: detected capacity change from 0 to 256 [ 651.490339][ T6641] FAT-fs (loop1): Unrecognized mount option "O”dir" or missing value [ 651.537373][ T6149] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 656.195742][ T6673] loop4: detected capacity change from 0 to 256 [ 656.272638][ T6673] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 657.136528][ T6688] loop2: detected capacity change from 0 to 512 [ 657.173240][ T6688] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 657.224732][ T6688] EXT4-fs (loop2): 1 truncate cleaned up [ 657.230427][ T6688] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 657.407569][ T6694] loop3: detected capacity change from 0 to 128 [ 657.428353][ T6694] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 657.516339][ T6702] loop1: detected capacity change from 0 to 256 [ 657.544350][ T6702] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 658.712410][ T6710] loop1: detected capacity change from 0 to 512 [ 658.727913][ T288] EXT4-fs (loop2): unmounting filesystem. [ 658.781406][ T6713] loop3: detected capacity change from 0 to 512 [ 658.790747][ T6715] loop4: detected capacity change from 0 to 512 [ 661.163602][ T317] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 661.455333][ T317] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 661.527450][ T317] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 661.533801][ T6740] loop4: detected capacity change from 0 to 512 [ 661.553771][ T6740] EXT4-fs: Ignoring removed mblk_io_submit option [ 661.893528][ T317] usb 1-1: config 0 interface 0 has no altsetting 0 [ 661.930498][ T317] usb 1-1: New USB device found, idVendor=05ac, idProduct=0220, bcdDevice= 0.00 [ 661.969908][ T317] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 661.982577][ T6740] EXT4-fs error (device loop4): __ext4_iget:5104: inode #2: block 2147483648: comm syz.4.1504: invalid block [ 662.019383][ T317] usb 1-1: config 0 descriptor?? [ 662.043729][ T6740] EXT4-fs (loop4): get root inode failed [ 662.058053][ T6740] EXT4-fs (loop4): mount failed [ 662.067597][ T6742] loop3: detected capacity change from 0 to 40427 [ 662.074704][ T6742] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 662.082802][ T6742] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 662.091112][ T6742] F2FS-fs (loop3): Wrong CP boundary, start(512) end(67110400) blocks(1024) [ 662.099914][ T6742] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 663.459953][ T6750] futex_wake_op: syz.1.1508 tries to shift op by 144; fix this program [ 664.013572][ T39] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 664.109770][ T6768] loop3: detected capacity change from 0 to 256 [ 664.118383][ T6768] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 664.224619][ T39] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 664.235937][ T39] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 664.248790][ T39] usb 2-1: config 0 interface 0 has no altsetting 0 [ 664.255461][ T39] usb 2-1: New USB device found, idVendor=05ac, idProduct=0220, bcdDevice= 0.00 [ 664.264687][ T39] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.273648][ T39] usb 2-1: config 0 descriptor?? [ 664.448849][ T6773] netlink: 3328 bytes leftover after parsing attributes in process `syz.4.1514'. [ 664.914096][ T6779] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 665.229876][ T317] usbhid 1-1:0.0: can't add hid device: -71 [ 665.236677][ T317] usbhid: probe of 1-1:0.0 failed with error -71 [ 665.310214][ T317] usb 1-1: USB disconnect, device number 22 [ 666.308355][ T6794] loop2: detected capacity change from 0 to 512 [ 666.386163][ T6792] loop4: detected capacity change from 0 to 512 [ 666.405390][ T6792] EXT4-fs: Ignoring removed mblk_io_submit option [ 666.412759][ T6792] EXT4-fs error (device loop4): __ext4_iget:5104: inode #2: block 2147483648: comm syz.4.1517: invalid block [ 666.484585][ T6792] EXT4-fs (loop4): get root inode failed [ 666.496446][ T6792] EXT4-fs (loop4): mount failed [ 666.930195][ T39] usbhid 2-1:0.0: can't add hid device: -71 [ 666.978642][ T39] usbhid: probe of 2-1:0.0 failed with error -71 [ 667.047683][ T6812] loop1: detected capacity change from 0 to 512 [ 667.492747][ T39] usb 2-1: USB disconnect, device number 20 [ 669.783545][ T292] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 670.802189][ T6844] loop4: detected capacity change from 0 to 512 [ 670.811549][ T6844] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 670.903524][ T326] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 670.950788][ T6850] xt_CT: You must specify a L4 protocol and not use inversions on it [ 670.984640][ T6850] loop4: detected capacity change from 0 to 512 [ 671.054252][ T6850] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 671.097052][ T326] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 671.113654][ T326] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 671.142212][ T326] usb 2-1: config 0 interface 0 has no altsetting 0 [ 671.149058][ T326] usb 2-1: New USB device found, idVendor=05ac, idProduct=0220, bcdDevice= 0.00 [ 671.158239][ T326] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.172338][ T326] usb 2-1: config 0 descriptor?? [ 672.179316][ T291] EXT4-fs (loop4): unmounting filesystem. [ 672.225888][ T6861] loop4: detected capacity change from 0 to 512 [ 672.262122][ T6861] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 672.285294][ T6861] EXT4-fs (loop4): 1 truncate cleaned up [ 672.297106][ T6861] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 672.478376][ T6865] loop2: detected capacity change from 0 to 512 [ 673.747970][ T326] usbhid 2-1:0.0: can't add hid device: -71 [ 673.754161][ T326] usbhid: probe of 2-1:0.0 failed with error -71 [ 673.761572][ T326] usb 2-1: USB disconnect, device number 21 [ 673.779156][ T6876] loop3: detected capacity change from 0 to 512 [ 673.798045][ T6877] loop2: detected capacity change from 0 to 512 [ 673.882712][ T291] EXT4-fs (loop4): unmounting filesystem. [ 674.555035][ T6889] loop1: detected capacity change from 0 to 512 [ 674.699984][ T6889] EXT4-fs: Ignoring removed mblk_io_submit option [ 674.789595][ T6889] EXT4-fs error (device loop1): __ext4_iget:5104: inode #2: block 2147483648: comm syz.1.1535: invalid block [ 674.921119][ T6889] EXT4-fs (loop1): get root inode failed [ 674.953539][ T6889] EXT4-fs (loop1): mount failed [ 675.998317][ T6904] netlink: 3328 bytes leftover after parsing attributes in process `syz.4.1540'. [ 676.048271][ T6906] loop2: detected capacity change from 0 to 512 [ 677.264941][ T6921] loop1: detected capacity change from 0 to 512 [ 678.523711][ T6921] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 678.586082][ T6930] loop2: detected capacity change from 0 to 512 [ 678.596225][ T6921] EXT4-fs (loop1): 1 truncate cleaned up [ 678.612230][ T6921] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 680.133829][ T6939] loop2: detected capacity change from 0 to 512 [ 680.946785][ T6944] loop4: detected capacity change from 0 to 512 [ 681.173242][ T292] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 681.399763][ T289] EXT4-fs (loop1): unmounting filesystem. [ 681.558232][ T6950] loop1: detected capacity change from 0 to 512 [ 683.277942][ T292] usb 1-1: device not accepting address 23, error -71 [ 683.363192][ T6961] futex_wake_op: syz.4.1554 tries to shift op by 144; fix this program [ 683.661141][ T6948] loop2: detected capacity change from 0 to 40427 [ 683.685534][ T6948] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 683.854167][ T6948] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 683.882656][ T6948] F2FS-fs (loop2): Wrong CP boundary, start(512) end(67110400) blocks(1024) [ 684.536104][ T6948] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 684.970308][ T6973] netlink: 3328 bytes leftover after parsing attributes in process `syz.4.1561'. [ 684.989583][ T6977] loop3: detected capacity change from 0 to 512 [ 686.089841][ T6989] loop2: detected capacity change from 0 to 128 [ 686.102076][ T6989] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 687.090422][ T6992] loop3: detected capacity change from 0 to 512 [ 687.103937][ T6992] EXT4-fs: Ignoring removed mblk_io_submit option [ 687.117571][ T6992] EXT4-fs error (device loop3): __ext4_iget:5104: inode #2: block 2147483648: comm syz.3.1564: invalid block [ 687.134705][ T7006] loop2: detected capacity change from 0 to 256 [ 687.154523][ T6992] EXT4-fs (loop3): get root inode failed [ 687.160184][ T6992] EXT4-fs (loop3): mount failed [ 687.174640][ T7006] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 688.533553][ T348] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 689.543532][ T7022] loop4: detected capacity change from 0 to 512 [ 689.567421][ T7022] EXT4-fs: Ignoring removed mblk_io_submit option [ 689.652120][ T7024] loop2: detected capacity change from 0 to 512 [ 689.774603][ T7022] EXT4-fs error (device loop4): __ext4_iget:5104: inode #2: block 2147483648: comm syz.4.1569: invalid block [ 689.786962][ T7022] EXT4-fs (loop4): get root inode failed [ 690.549335][ T348] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 690.566229][ T348] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 690.658821][ T7035] futex_wake_op: syz.0.1573 tries to shift op by 144; fix this program [ 691.530464][ T348] usb 2-1: config 0 interface 0 has no altsetting 0 [ 691.537366][ T348] usb 2-1: New USB device found, idVendor=05ac, idProduct=0220, bcdDevice= 0.00 [ 691.544330][ T7022] EXT4-fs (loop4): mount failed [ 691.548058][ T348] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 691.552783][ T7039] loop1: detected capacity change from 0 to 256 [ 691.560812][ T348] usb 2-1: config 0 descriptor?? [ 691.572176][ T348] usb 2-1: can't set config #0, error -71 [ 691.637858][ T348] usb 2-1: USB disconnect, device number 22 [ 691.675348][ T7039] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 691.720194][ T7043] loop4: detected capacity change from 0 to 512 [ 691.827922][ T7043] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 692.123642][ T7047] netlink: 3328 bytes leftover after parsing attributes in process `syz.2.1576'. [ 693.303795][ T7043] EXT4-fs (loop4): 1 truncate cleaned up [ 693.314463][ T7043] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 694.865720][ T291] EXT4-fs (loop4): unmounting filesystem. [ 694.897837][ T7070] loop3: detected capacity change from 0 to 512 [ 694.911897][ T7078] loop4: detected capacity change from 0 to 512 [ 694.973064][ T7081] futex_wake_op: syz.2.1583 tries to shift op by 144; fix this program [ 696.142524][ T7070] EXT4-fs: Ignoring removed mblk_io_submit option [ 696.151501][ T7086] loop2: detected capacity change from 0 to 512 [ 696.209133][ T7070] EXT4-fs error (device loop3): __ext4_iget:5104: inode #2: block 2147483648: comm syz.3.1582: invalid block [ 696.226499][ T7093] loop4: detected capacity change from 0 to 512 [ 697.367389][ T7070] EXT4-fs (loop3): get root inode failed [ 697.388152][ T7070] EXT4-fs (loop3): mount failed [ 698.785520][ T7122] loop2: detected capacity change from 0 to 512 [ 698.802221][ T7122] ext3: Unknown parameter '.' [ 699.072495][ T7128] loop2: detected capacity change from 0 to 256 [ 699.080820][ T7128] FAT-fs (loop2): Unrecognized mount option "O”dir" or missing value [ 699.984895][ T7094] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 700.062705][ T7134] loop3: detected capacity change from 0 to 512 [ 700.084264][ T7135] xt_CT: You must specify a L4 protocol and not use inversions on it [ 701.550420][ T7149] loop2: detected capacity change from 0 to 512 [ 701.553855][ T7150] loop3: detected capacity change from 0 to 512 [ 701.564765][ T7150] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 701.573214][ T7149] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 701.670351][ T7151] xt_CT: You must specify a L4 protocol and not use inversions on it [ 701.681475][ T7151] loop3: detected capacity change from 0 to 512 [ 702.018978][ T7149] EXT4-fs (loop2): 1 truncate cleaned up [ 702.029084][ T7149] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 702.071339][ T7158] loop4: detected capacity change from 0 to 512 [ 702.093898][ T7158] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 702.125617][ T7151] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 702.197339][ T7160] xt_CT: You must specify a L4 protocol and not use inversions on it [ 702.208481][ T7160] loop4: detected capacity change from 0 to 512 [ 702.234782][ T7160] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 702.301410][ T288] EXT4-fs (loop2): unmounting filesystem. [ 702.413990][ T290] EXT4-fs (loop3): unmounting filesystem. [ 703.441380][ T291] EXT4-fs (loop4): unmounting filesystem. [ 705.364930][ T7182] loop4: detected capacity change from 0 to 512 [ 705.546332][ T7182] EXT4-fs: Ignoring removed mblk_io_submit option [ 705.683975][ T7182] EXT4-fs error (device loop4): __ext4_iget:5104: inode #2: block 2147483648: comm syz.4.1607: invalid block [ 705.739920][ T7182] EXT4-fs (loop4): get root inode failed [ 705.758001][ T7182] EXT4-fs (loop4): mount failed [ 706.002388][ T7207] loop1: detected capacity change from 0 to 128 [ 706.039609][ T7207] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 706.279622][ T7210] loop4: detected capacity change from 0 to 1024 [ 706.300431][ T7210] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 706.348012][ T7210] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 706.526101][ T7220] loop3: detected capacity change from 0 to 512 [ 706.559149][ T7220] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 706.583522][ T7220] EXT4-fs (loop3): 1 truncate cleaned up [ 706.628437][ T7220] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 706.886805][ T290] EXT4-fs (loop3): unmounting filesystem. [ 707.406668][ T291] EXT4-fs (loop4): unmounting filesystem. [ 708.882004][ T7243] futex_wake_op: syz.4.1619 tries to shift op by 144; fix this program [ 709.093140][ T7246] loop2: detected capacity change from 0 to 512 [ 709.118236][ T7246] ext3: Unknown parameter '.' [ 709.316403][ T7252] loop2: detected capacity change from 0 to 256 [ 709.324957][ T7252] FAT-fs (loop2): Unrecognized mount option "O”dir" or missing value [ 709.523490][ T292] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 711.543356][ T7270] loop3: detected capacity change from 0 to 256 [ 711.552083][ T7270] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 711.564577][ T292] usb 2-1: device descriptor read/all, error -61 [ 711.574009][ T7094] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 711.640043][ T7264] loop4: detected capacity change from 0 to 512 [ 712.277710][ T7277] loop2: detected capacity change from 0 to 512 [ 712.573503][ T292] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 713.561627][ T7291] loop3: detected capacity change from 0 to 1024 [ 713.745429][ T7291] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 713.771410][ T7291] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 715.627916][ T7313] futex_wake_op: syz.4.1635 tries to shift op by 144; fix this program [ 717.013508][ T292] usb 2-1: device descriptor read/64, error -71 [ 717.087596][ T290] EXT4-fs (loop3): unmounting filesystem. [ 717.116225][ T7330] loop3: detected capacity change from 0 to 512 [ 717.163047][ T7328] loop2: detected capacity change from 0 to 512 [ 717.177854][ T7328] EXT4-fs: Ignoring removed mblk_io_submit option [ 717.191047][ T7328] EXT4-fs error (device loop2): __ext4_iget:5104: inode #2: block 2147483648: comm syz.2.1640: invalid block [ 717.203687][ T7328] EXT4-fs (loop2): get root inode failed [ 717.209336][ T7328] EXT4-fs (loop2): mount failed [ 718.122111][ T317] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 718.144517][ T292] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 718.145676][ T7342] loop3: detected capacity change from 0 to 512 [ 718.168786][ T292] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 719.543532][ T292] usb 2-1: config 0 interface 0 has no altsetting 0 [ 719.551755][ T292] usb 2-1: New USB device found, idVendor=05ac, idProduct=0220, bcdDevice= 0.00 [ 719.560997][ T292] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 719.564551][ T317] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 719.852731][ T317] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 719.875932][ T317] usb 5-1: config 0 interface 0 has no altsetting 0 [ 719.886022][ T317] usb 5-1: New USB device found, idVendor=05ac, idProduct=0220, bcdDevice= 0.00 [ 720.088680][ T317] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.119214][ T7355] netlink: 3328 bytes leftover after parsing attributes in process `syz.1.1646'. [ 720.153283][ T7359] loop2: detected capacity change from 0 to 256 [ 720.929480][ T317] usb 5-1: config 0 descriptor?? [ 720.943918][ T292] usb 2-1: config 0 descriptor?? [ 721.000087][ T317] usb 5-1: can't set config #0, error -71 [ 721.064422][ T7366] futex_wake_op: syz.0.1650 tries to shift op by 144; fix this program [ 721.530663][ T292] usb 2-1: can't set config #0, error -71 [ 721.544256][ T292] usb 2-1: USB disconnect, device number 24 [ 721.571773][ T7359] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 722.202502][ T317] usb 5-1: USB disconnect, device number 11 [ 723.102635][ T7385] loop2: detected capacity change from 0 to 512 [ 724.563687][ T7390] loop3: detected capacity change from 0 to 512 [ 724.572760][ T7390] EXT4-fs: Ignoring removed mblk_io_submit option [ 724.879323][ T7390] EXT4-fs error (device loop3): __ext4_iget:5104: inode #2: block 2147483648: comm syz.3.1654: invalid block [ 724.905240][ T7390] EXT4-fs (loop3): get root inode failed [ 725.046273][ T7390] EXT4-fs (loop3): mount failed [ 725.261264][ T7404] loop2: detected capacity change from 0 to 40427 [ 725.274343][ T7404] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 725.282118][ T7404] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 725.290380][ T7404] F2FS-fs (loop2): Wrong CP boundary, start(512) end(67110400) blocks(1024) [ 725.299140][ T7404] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 726.542476][ T7417] loop2: detected capacity change from 0 to 512 [ 726.551753][ T7417] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 726.642298][ T7419] loop4: detected capacity change from 0 to 512 [ 727.563208][ T7094] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 728.013983][ T7427] futex_wake_op: syz.3.1663 tries to shift op by 144; fix this program [ 728.171458][ T7428] loop2: detected capacity change from 0 to 512 [ 728.264372][ T7433] loop1: detected capacity change from 0 to 256 [ 728.287984][ T7433] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 729.655303][ T7440] loop3: detected capacity change from 0 to 512 [ 729.781826][ T7428] EXT4-fs: error -4 creating inode table initialization thread [ 729.789554][ T7428] EXT4-fs (loop2): mount failed [ 729.964741][ T7450] loop4: detected capacity change from 0 to 512 [ 730.544407][ T7450] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 730.793377][ T7094] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 730.803196][ T4150] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 730.912515][ T7458] loop1: detected capacity change from 0 to 512 [ 730.972876][ T7460] loop4: detected capacity change from 0 to 512 [ 732.556950][ T4150] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 732.568132][ T4150] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 732.616401][ T4150] usb 1-1: config 0 interface 0 has no altsetting 0 [ 732.630095][ T4150] usb 1-1: New USB device found, idVendor=05ac, idProduct=0220, bcdDevice= 0.00 [ 732.648593][ T4150] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 733.346024][ T4150] usb 1-1: config 0 descriptor?? [ 733.356970][ T7460] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 733.385885][ T4150] usb 1-1: can't set config #0, error -71 [ 733.413096][ T4150] usb 1-1: USB disconnect, device number 25 [ 733.477763][ T291] EXT4-fs (loop4): unmounting filesystem. [ 733.564746][ T7482] loop2: detected capacity change from 0 to 256 [ 733.574754][ T7486] loop4: detected capacity change from 0 to 256 [ 733.594410][ T7482] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 733.608721][ T7486] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 736.351358][ T7519] netlink: 3328 bytes leftover after parsing attributes in process `syz.3.1683'. [ 737.577206][ T7532] futex_wake_op: syz.4.1687 tries to shift op by 144; fix this program [ 738.733073][ T7540] loop4: detected capacity change from 0 to 512 [ 739.850441][ T7550] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 740.564582][ T7553] loop3: detected capacity change from 0 to 256 [ 740.590394][ T7553] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 741.149334][ T7536] loop2: detected capacity change from 0 to 512 [ 741.235384][ T7536] EXT4-fs: Ignoring removed mblk_io_submit option [ 741.337380][ T7536] EXT4-fs error (device loop2): __ext4_iget:5104: inode #2: block 2147483648: comm syz.2.1688: invalid block [ 741.708480][ T7536] EXT4-fs (loop2): get root inode failed [ 741.718586][ T7536] EXT4-fs (loop2): mount failed [ 742.700032][ T7573] loop1: detected capacity change from 0 to 512 [ 742.833170][ T7577] loop4: detected capacity change from 0 to 512 [ 743.840849][ T7577] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 744.011633][ T7585] loop1: detected capacity change from 0 to 512 [ 745.310383][ T7598] futex_wake_op: syz.1.1701 tries to shift op by 144; fix this program [ 746.533492][ T4150] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 748.257501][ T7622] loop4: detected capacity change from 0 to 512 [ 748.266997][ T7622] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 748.281723][ T4150] usb 3-1: device descriptor read/all, error -71 [ 748.305870][ T7622] EXT4-fs (loop4): 1 truncate cleaned up [ 748.311687][ T7622] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 749.309934][ T7632] futex_wake_op: syz.2.1710 tries to shift op by 144; fix this program [ 749.533486][ T6] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 750.705433][ T7643] loop2: detected capacity change from 0 to 512 [ 750.742571][ T291] EXT4-fs (loop4): unmounting filesystem. [ 753.523474][ T6] usb 2-1: device not accepting address 25, error -71 [ 754.694223][ T7668] loop1: detected capacity change from 0 to 512 [ 754.764649][ T325] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 757.496313][ T7686] futex_wake_op: syz.2.1722 tries to shift op by 144; fix this program [ 758.124336][ T7689] loop3: detected capacity change from 0 to 512 [ 759.856853][ T325] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 760.545700][ T7709] loop3: detected capacity change from 0 to 512 [ 760.556196][ T7709] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 760.954569][ T325] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 760.965920][ T7709] EXT4-fs (loop3): 1 truncate cleaned up [ 760.973106][ T7709] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 760.982501][ T325] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 761.053508][ T325] usb 3-1: config 0 interface 0 has no altsetting 0 [ 761.060154][ T325] usb 3-1: New USB device found, idVendor=05ac, idProduct=0220, bcdDevice= 0.00 [ 761.069315][ T325] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 761.078297][ T325] usb 3-1: config 0 descriptor?? [ 762.146028][ T325] usbhid 3-1:0.0: can't add hid device: -71 [ 762.152067][ T325] usbhid: probe of 3-1:0.0 failed with error -71 [ 762.223543][ T325] usb 3-1: USB disconnect, device number 21 [ 762.337286][ T7736] futex_wake_op: syz.1.1735 tries to shift op by 144; fix this program [ 763.712152][ T7748] futex_wake_op: syz.1.1737 tries to shift op by 144; fix this program [ 764.945356][ T290] EXT4-fs (loop3): unmounting filesystem. [ 765.163324][ T7763] loop1: detected capacity change from 0 to 512 [ 765.208341][ T7759] loop2: detected capacity change from 0 to 512 [ 765.221944][ T7763] ext3: Unknown parameter '.' [ 765.715400][ T7768] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1741'. [ 765.739069][ T7768] loop1: detected capacity change from 0 to 256 [ 765.747574][ T7768] FAT-fs (loop1): Unrecognized mount option "O”dir" or missing value [ 766.556836][ T7759] EXT4-fs: Ignoring removed mblk_io_submit option [ 766.777874][ T7759] EXT4-fs error (device loop2): __ext4_iget:5104: inode #2: block 2147483648: comm syz.2.1739: invalid block [ 766.789768][ T7759] EXT4-fs (loop2): get root inode failed [ 766.795777][ T7759] EXT4-fs (loop2): mount failed [ 766.919541][ T7773] netlink: 3576 bytes leftover after parsing attributes in process `syz.0.1742'. [ 766.944895][ T7075] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 767.244054][ T7780] loop1: detected capacity change from 0 to 256 [ 767.263068][ T7780] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 768.683717][ T7802] loop1: detected capacity change from 0 to 512 [ 768.777953][ T7802] EXT4-fs: Ignoring removed mblk_io_submit option [ 768.893927][ T7802] EXT4-fs error (device loop1): __ext4_iget:5104: inode #2: block 2147483648: comm syz.1.1749: invalid block [ 768.913747][ T7802] EXT4-fs (loop1): get root inode failed [ 768.919453][ T7802] EXT4-fs (loop1): mount failed [ 769.892403][ T7815] loop4: detected capacity change from 0 to 512 [ 771.345752][ T7831] loop4: detected capacity change from 0 to 512 [ 771.414316][ T7833] futex_wake_op: syz.1.1756 tries to shift op by 144; fix this program [ 772.516834][ T7831] EXT4-fs: Ignoring removed mblk_io_submit option [ 772.540048][ T7831] EXT4-fs error (device loop4): __ext4_iget:5104: inode #2: block 2147483648: comm syz.4.1755: invalid block [ 773.538870][ T7831] EXT4-fs (loop4): get root inode failed [ 774.248656][ T7853] loop2: detected capacity change from 0 to 512 [ 774.273374][ T7853] ext3: Unknown parameter '.' [ 774.523864][ T7831] EXT4-fs (loop4): mount failed [ 775.529002][ T7861] netlink: 3328 bytes leftover after parsing attributes in process `syz.1.1760'. [ 775.545978][ T7865] loop2: detected capacity change from 0 to 512 [ 777.507737][ T7874] loop3: detected capacity change from 0 to 512 [ 777.519539][ T7869] loop4: detected capacity change from 0 to 512 [ 777.687323][ T7878] loop2: detected capacity change from 0 to 512 [ 779.216910][ T7878] EXT4-fs: Ignoring removed mblk_io_submit option [ 779.321178][ T7887] loop1: detected capacity change from 0 to 512 [ 779.410269][ T7878] EXT4-fs error (device loop2): __ext4_iget:5104: inode #2: block 2147483648: comm syz.2.1766: invalid block [ 779.730184][ T7878] EXT4-fs (loop2): get root inode failed [ 780.408439][ T39] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 780.460529][ T7878] EXT4-fs (loop2): mount failed [ 780.666749][ T7900] loop1: detected capacity change from 0 to 512 [ 781.016175][ T39] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 781.066657][ T39] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 781.151757][ T7904] loop4: detected capacity change from 0 to 256 [ 781.324384][ T7904] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 781.352420][ T39] usb 4-1: config 0 interface 0 has no altsetting 0 [ 781.565429][ T39] usb 4-1: New USB device found, idVendor=05ac, idProduct=0220, bcdDevice= 0.00 [ 781.579271][ T39] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 781.590918][ T39] usb 4-1: config 0 descriptor?? [ 782.209151][ T7911] loop2: detected capacity change from 0 to 512 [ 782.234538][ T7911] EXT4-fs: Ignoring removed mblk_io_submit option [ 782.316262][ T7918] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 782.380217][ T7911] EXT4-fs error (device loop2): __ext4_iget:5104: inode #2: block 2147483648: comm syz.2.1773: invalid block [ 782.495272][ T7911] EXT4-fs (loop2): get root inode failed [ 782.507704][ T7911] EXT4-fs (loop2): mount failed [ 782.973517][ T4005] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 783.165355][ T4005] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 783.239478][ T4005] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 783.346742][ T4005] usb 2-1: config 0 interface 0 has no altsetting 0 [ 783.384507][ T4005] usb 2-1: New USB device found, idVendor=05ac, idProduct=0220, bcdDevice= 0.00 [ 783.496616][ T4005] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 783.675712][ T39] usbhid 4-1:0.0: can't add hid device: -71 [ 783.863807][ T39] usbhid: probe of 4-1:0.0 failed with error -71 [ 783.905774][ T39] usb 4-1: USB disconnect, device number 20 [ 783.912858][ T4005] usb 2-1: config 0 descriptor?? [ 783.936516][ T7926] loop2: detected capacity change from 0 to 40427 [ 783.953516][ T7926] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 783.961278][ T7926] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 783.969644][ T7926] F2FS-fs (loop2): Wrong CP boundary, start(512) end(67110400) blocks(1024) [ 783.978471][ T7926] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 784.009362][ T7934] loop4: detected capacity change from 0 to 512 [ 784.097496][ T7935] netlink: 3528 bytes leftover after parsing attributes in process `syz.0.1780'. [ 784.239956][ T7935] netlink: 3328 bytes leftover after parsing attributes in process `syz.0.1780'. [ 784.293551][ T39] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 785.041413][ T7939] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 785.105405][ T39] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 785.270904][ T39] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 785.327380][ T39] usb 4-1: config 0 interface 0 has no altsetting 0 [ 785.365448][ T39] usb 4-1: New USB device found, idVendor=05ac, idProduct=0220, bcdDevice= 0.00 [ 786.488408][ T4005] usbhid 2-1:0.0: can't add hid device: -71 [ 786.494456][ T4005] usbhid: probe of 2-1:0.0 failed with error -71 [ 786.541841][ T39] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 786.550434][ T4005] usb 2-1: USB disconnect, device number 27 [ 786.560905][ T39] usb 4-1: config 0 descriptor?? [ 788.732921][ T39] usbhid 4-1:0.0: can't add hid device: -71 [ 788.739213][ T39] usbhid: probe of 4-1:0.0 failed with error -71 [ 788.750329][ T7966] netlink: 3328 bytes leftover after parsing attributes in process `syz.4.1785'. [ 788.762402][ T7968] loop3: detected capacity change from 0 to 512 [ 788.856771][ T39] usb 4-1: USB disconnect, device number 21 [ 788.896742][ T7972] netlink: 3544 bytes leftover after parsing attributes in process `syz.2.1787'. [ 789.616424][ T7983] loop4: detected capacity change from 0 to 512 [ 789.823610][ T24] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 790.015259][ T24] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 790.096687][ T24] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 790.256441][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 790.316983][ T24] usb 3-1: New USB device found, idVendor=05ac, idProduct=0220, bcdDevice= 0.00 [ 790.399590][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 790.524945][ T24] usb 3-1: config 0 descriptor?? [ 790.793497][ T39] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 790.985212][ T39] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 791.319357][ T39] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 791.333413][ T39] usb 2-1: config 0 interface 0 has no altsetting 0 [ 791.340616][ T39] usb 2-1: New USB device found, idVendor=05ac, idProduct=0220, bcdDevice= 0.00 [ 791.350514][ T39] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 791.782652][ T7998] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 791.880890][ T39] usb 2-1: config 0 descriptor?? [ 791.998022][ T8006] netlink: 3528 bytes leftover after parsing attributes in process `syz.4.1798'. [ 792.020896][ T8006] netlink: 3328 bytes leftover after parsing attributes in process `syz.4.1798'. [ 792.033657][ T317] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 792.225247][ T317] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 792.237171][ T317] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 792.251489][ T317] usb 1-1: config 0 interface 0 has no altsetting 0 [ 792.258862][ T317] usb 1-1: New USB device found, idVendor=05ac, idProduct=0220, bcdDevice= 0.00 [ 792.269039][ T317] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 792.280543][ T317] usb 1-1: config 0 descriptor?? [ 792.476875][ T8010] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 792.834501][ T8015] loop4: detected capacity change from 0 to 512 [ 794.268750][ T8021] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 794.412437][ T24] usbhid 3-1:0.0: can't add hid device: -71 [ 794.420513][ T24] usbhid: probe of 3-1:0.0 failed with error -71 [ 794.433318][ T24] usb 3-1: USB disconnect, device number 22 [ 794.441201][ T39] usbhid 2-1:0.0: can't add hid device: -71 [ 794.449331][ T39] usbhid: probe of 2-1:0.0 failed with error -71 [ 794.463032][ T39] usb 2-1: USB disconnect, device number 28 [ 795.843617][ T317] usbhid 1-1:0.0: can't add hid device: -71 [ 795.849630][ T317] usbhid: probe of 1-1:0.0 failed with error -71 [ 796.147476][ T317] usb 1-1: USB disconnect, device number 26 [ 796.219442][ T8042] loop3: detected capacity change from 0 to 512 [ 797.141931][ T8054] loop2: detected capacity change from 0 to 512 [ 797.195073][ T8054] ext3: Unknown parameter '.' [ 797.242118][ T8045] loop0: detected capacity change from 0 to 512 [ 797.249000][ T8045] EXT4-fs: Ignoring removed mblk_io_submit option [ 797.431824][ T8060] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1810'. [ 797.455695][ T8060] loop2: detected capacity change from 0 to 256 [ 797.464801][ T8060] FAT-fs (loop2): Unrecognized mount option "O”dir" or missing value [ 798.485758][ T8063] loop2: detected capacity change from 0 to 512 [ 798.564353][ T8045] EXT4-fs error (device loop0): __ext4_iget:5104: inode #2: block 2147483648: comm syz.0.1805: invalid block [ 799.556550][ T8045] EXT4-fs (loop0): get root inode failed [ 799.562261][ T8045] EXT4-fs (loop0): mount failed [ 799.891318][ T8073] loop1: detected capacity change from 0 to 512 [ 799.910786][ T8075] loop2: detected capacity change from 0 to 512 [ 799.938665][ T8073] EXT4-fs: Ignoring removed mblk_io_submit option [ 801.433367][ T8073] EXT4-fs error (device loop1): __ext4_iget:5104: inode #2: block 2147483648: comm syz.1.1813: invalid block [ 801.457799][ T8073] EXT4-fs (loop1): get root inode failed [ 801.463667][ T8073] EXT4-fs (loop1): mount failed [ 806.567388][ T8133] loop2: detected capacity change from 0 to 512 [ 806.824748][ T8133] EXT4-fs: Ignoring removed mblk_io_submit option [ 806.851832][ T8133] EXT4-fs error (device loop2): __ext4_iget:5104: inode #2: block 2147483648: comm syz.2.1822: invalid block [ 807.699526][ T8147] loop3: detected capacity change from 0 to 512 [ 807.855673][ T8133] EXT4-fs (loop2): get root inode failed [ 807.882333][ T8133] EXT4-fs (loop2): mount failed [ 808.806980][ T8166] loop3: detected capacity change from 0 to 512 [ 809.896494][ T8168] loop1: detected capacity change from 0 to 512 [ 809.905936][ T8168] EXT4-fs: Ignoring removed mblk_io_submit option [ 809.925910][ T8174] loop2: detected capacity change from 0 to 512 [ 810.006420][ T8175] loop3: detected capacity change from 0 to 512 [ 810.013018][ T8175] ext3: Unknown parameter '.' [ 810.042872][ T8179] loop4: detected capacity change from 0 to 512 [ 810.073837][ T8168] EXT4-fs error (device loop1): __ext4_iget:5104: inode #2: block 2147483648: comm syz.1.1831: invalid block [ 811.099592][ T8153] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 811.348384][ T8168] EXT4-fs (loop1): get root inode failed [ 811.372741][ T8168] EXT4-fs (loop1): mount failed [ 811.603985][ T8190] loop3: detected capacity change from 0 to 256 [ 811.610623][ T8190] FAT-fs (loop3): Unrecognized mount option "O”dir" or missing value [ 813.455196][ T8205] futex_wake_op: syz.4.1839 tries to shift op by 144; fix this program [ 815.266978][ T8230] loop1: detected capacity change from 0 to 512 [ 815.293702][ T8230] ext3: Unknown parameter '.' [ 815.390391][ T8176] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 816.387183][ T8236] loop1: detected capacity change from 0 to 256 [ 816.393870][ T8236] FAT-fs (loop1): Unrecognized mount option "O”dir" or missing value [ 820.258482][ T8275] netlink: 3528 bytes leftover after parsing attributes in process `syz.2.1854'. [ 820.415509][ T8275] netlink: 3328 bytes leftover after parsing attributes in process `syz.2.1854'. [ 821.466845][ T8289] loop1: detected capacity change from 0 to 512 [ 823.541429][ T8308] loop1: detected capacity change from 0 to 512 [ 823.598384][ T8308] EXT4-fs: Ignoring removed mblk_io_submit option [ 823.653632][ T8314] loop4: detected capacity change from 0 to 512 [ 823.670447][ T8308] EXT4-fs error (device loop1): __ext4_iget:5104: inode #2: block 2147483648: comm syz.1.1861: invalid block [ 823.768329][ T8308] EXT4-fs (loop1): get root inode failed [ 823.781390][ T8308] EXT4-fs (loop1): mount failed [ 825.631703][ T8340] loop1: detected capacity change from 0 to 512 [ 827.256987][ T8355] loop4: detected capacity change from 0 to 512 [ 827.279911][ T8355] EXT4-fs: Ignoring removed mblk_io_submit option [ 827.311342][ T8355] EXT4-fs error (device loop4): __ext4_iget:5104: inode #2: block 2147483648: comm syz.4.1871: invalid block [ 827.367867][ T8355] EXT4-fs (loop4): get root inode failed [ 827.402100][ T8355] EXT4-fs (loop4): mount failed [ 827.500955][ T8362] loop2: detected capacity change from 0 to 512 [ 827.556807][ T8360] loop3: detected capacity change from 0 to 512 [ 827.610588][ T8360] EXT4-fs: Ignoring removed mblk_io_submit option [ 828.553566][ T8360] EXT4-fs error (device loop3): __ext4_iget:5104: inode #2: block 2147483648: comm syz.3.1873: invalid block [ 828.751850][ T8360] EXT4-fs (loop3): get root inode failed [ 828.779018][ T8360] EXT4-fs (loop3): mount failed [ 828.807523][ T8367] loop1: detected capacity change from 0 to 40427 [ 828.863337][ T8367] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 828.873063][ T8367] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 828.882986][ T8367] F2FS-fs (loop1): Wrong CP boundary, start(512) end(67110400) blocks(1024) [ 828.892010][ T8367] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 831.100957][ T8405] loop3: detected capacity change from 0 to 512 [ 831.152452][ T8405] EXT4-fs: Ignoring removed mblk_io_submit option [ 831.170454][ T8405] EXT4-fs error (device loop3): __ext4_iget:5104: inode #2: block 2147483648: comm syz.3.1882: invalid block [ 831.184477][ T8405] EXT4-fs (loop3): get root inode failed [ 831.190136][ T8405] EXT4-fs (loop3): mount failed [ 831.586781][ T8414] loop1: detected capacity change from 0 to 512 [ 833.717818][ T8429] loop3: detected capacity change from 0 to 512 [ 835.681099][ T325] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 837.042071][ T8448] loop3: detected capacity change from 0 to 512 [ 838.060341][ T8471] loop3: detected capacity change from 0 to 512 [ 838.074214][ T8471] ext3: Unknown parameter '.' [ 838.082363][ T8465] loop2: detected capacity change from 0 to 512 [ 838.167822][ T8465] EXT4-fs: Ignoring removed mblk_io_submit option [ 838.174378][ T325] usb 2-1: device not accepting address 29, error -71 [ 838.214826][ T8475] loop4: detected capacity change from 0 to 512 [ 839.129040][ T8479] loop3: detected capacity change from 0 to 256 [ 839.135717][ T8479] FAT-fs (loop3): Unrecognized mount option "O”dir" or missing value [ 840.265626][ T8465] EXT4-fs error (device loop2): __ext4_iget:5104: inode #2: block 2147483648: comm syz.2.1895: invalid block [ 840.553710][ T8465] EXT4-fs (loop2): get root inode failed [ 840.559384][ T8465] EXT4-fs (loop2): mount failed [ 840.977429][ T8498] loop4: detected capacity change from 0 to 512 [ 842.505462][ T8507] loop3: detected capacity change from 0 to 512 [ 842.988811][ T8512] loop4: detected capacity change from 0 to 512 [ 844.401154][ T8530] loop4: detected capacity change from 0 to 512 [ 844.417454][ T8530] ext3: Unknown parameter '.' [ 844.653683][ T8532] loop4: detected capacity change from 0 to 256 [ 844.662123][ T8532] FAT-fs (loop4): Unrecognized mount option "O”dir" or missing value [ 845.212381][ T8527] loop2: detected capacity change from 0 to 512 [ 845.493723][ T8527] EXT4-fs: Ignoring removed mblk_io_submit option [ 845.646481][ T8527] EXT4-fs error (device loop2): __ext4_iget:5104: inode #2: block 2147483648: comm syz.2.1910: invalid block [ 846.737925][ T8527] EXT4-fs (loop2): get root inode failed [ 846.763464][ T8527] EXT4-fs (loop2): mount failed [ 846.776086][ T8549] loop4: detected capacity change from 0 to 512 [ 846.788794][ T8549] EXT4-fs: Ignoring removed mblk_io_submit option [ 846.829281][ T8549] EXT4-fs error (device loop4): __ext4_iget:5104: inode #2: block 2147483648: comm syz.4.1914: invalid block [ 846.863659][ T8549] EXT4-fs (loop4): get root inode failed [ 846.869430][ T8549] EXT4-fs (loop4): mount failed [ 846.876652][ T8552] loop1: detected capacity change from 0 to 512 [ 848.314982][ T8568] loop3: detected capacity change from 0 to 512 [ 849.456956][ T8578] loop1: detected capacity change from 0 to 256 [ 849.487994][ T8570] loop4: detected capacity change from 0 to 512 [ 849.543840][ T8578] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 851.571425][ T8599] loop3: detected capacity change from 0 to 512 [ 852.545723][ T8604] loop2: detected capacity change from 0 to 512 [ 852.558657][ T8604] ext3: Unknown parameter '.' [ 853.060231][ T8615] loop2: detected capacity change from 0 to 256 [ 853.068730][ T8615] FAT-fs (loop2): Unrecognized mount option "O”dir" or missing value [ 854.039437][ T8436] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 854.098703][ T8613] loop1: detected capacity change from 0 to 40427 [ 854.174362][ T8613] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 854.403476][ T8613] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 854.413641][ T8613] F2FS-fs (loop1): Wrong CP boundary, start(512) end(67110400) blocks(1024) [ 854.433515][ T8613] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 854.547706][ T8617] loop3: detected capacity change from 0 to 40427 [ 854.569638][ T8617] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 854.597470][ T8617] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 854.650121][ T8617] F2FS-fs (loop3): Wrong CP boundary, start(512) end(67110400) blocks(1024) [ 855.573492][ T8617] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 858.226810][ T8646] loop3: detected capacity change from 0 to 512 [ 858.254835][ T8646] EXT4-fs: Ignoring removed mblk_io_submit option [ 858.270334][ T8646] EXT4-fs error (device loop3): __ext4_iget:5104: inode #2: block 2147483648: comm syz.3.1938: invalid block [ 858.292461][ T8646] EXT4-fs (loop3): get root inode failed [ 858.342630][ T8646] EXT4-fs (loop3): mount failed [ 858.468145][ T8667] loop4: detected capacity change from 0 to 512 [ 859.551118][ T8675] loop1: detected capacity change from 0 to 512 [ 859.588827][ T8675] ext3: Unknown parameter '.' [ 859.875434][ T8678] loop1: detected capacity change from 0 to 256 [ 859.883853][ T8678] FAT-fs (loop1): Unrecognized mount option "O”dir" or missing value [ 860.554603][ T60] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 860.888137][ T8685] loop1: detected capacity change from 0 to 512 [ 860.915018][ T60] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 861.971298][ T8691] loop1: detected capacity change from 0 to 512 [ 861.983726][ T60] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 861.997596][ T60] usb 5-1: config 0 interface 0 has no altsetting 0 [ 862.004343][ T60] usb 5-1: New USB device found, idVendor=05ac, idProduct=0220, bcdDevice= 0.00 [ 862.013371][ T60] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 862.022373][ T60] usb 5-1: config 0 descriptor?? [ 862.030604][ T8691] ext3: Unknown parameter '.' [ 862.290756][ T8693] loop1: detected capacity change from 0 to 256 [ 862.299475][ T8693] FAT-fs (loop1): Unrecognized mount option "O”dir" or missing value [ 863.149723][ T8699] loop3: detected capacity change from 0 to 512 [ 863.288191][ T8704] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1945'. [ 864.389502][ T8712] loop1: detected capacity change from 0 to 512 [ 865.479623][ T60] usbhid 5-1:0.0: can't add hid device: -71 [ 865.522688][ T60] usbhid: probe of 5-1:0.0 failed with error -71 [ 865.531490][ T8717] loop3: detected capacity change from 0 to 512 [ 865.613880][ T60] usb 5-1: USB disconnect, device number 12 [ 866.161795][ T8731] loop1: detected capacity change from 0 to 512 [ 867.383027][ T8736] loop2: detected capacity change from 0 to 512 [ 869.445703][ T8765] loop2: detected capacity change from 0 to 512 [ 872.726956][ T8794] loop3: detected capacity change from 0 to 512 [ 872.819492][ T28] audit: type=1400 audit(1794139194.073:174): avc: denied { setopt } for pid=8799 comm="syz.4.1975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 872.840439][ T28] audit: type=1400 audit(1794139194.103:175): avc: denied { read } for pid=8799 comm="syz.4.1975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 873.522493][ T28] audit: type=1400 audit(1794139194.773:176): avc: denied { write } for pid=8799 comm="syz.4.1975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 873.543337][ T28] audit: type=1400 audit(1794139194.773:177): avc: denied { read } for pid=8799 comm="syz.4.1975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 873.992271][ T8803] loop4: detected capacity change from 0 to 512 [ 875.175624][ T8810] loop1: detected capacity change from 0 to 512 [ 878.028150][ T8835] netlink: 3544 bytes leftover after parsing attributes in process `syz.1.1980'. [ 879.280913][ T8829] netlink: 3544 bytes leftover after parsing attributes in process `syz.2.1981'. [ 879.583511][ T652] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 880.480228][ T8838] loop4: detected capacity change from 0 to 40427 [ 880.504149][ T8838] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 880.526551][ T8838] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 880.552212][ T8838] F2FS-fs (loop4): Wrong CP boundary, start(512) end(67110400) blocks(1024) [ 880.568048][ T652] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 880.583946][ T652] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 880.599007][ T8838] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 880.620791][ T652] usb 1-1: config 0 interface 0 has no altsetting 0 [ 880.627784][ T652] usb 1-1: New USB device found, idVendor=05ac, idProduct=0220, bcdDevice= 0.00 [ 880.637291][ T652] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 880.649122][ T652] usb 1-1: config 0 descriptor?? [ 880.677449][ T8861] loop2: detected capacity change from 0 to 512 [ 880.754466][ T8863] loop1: detected capacity change from 0 to 512 [ 884.569094][ T8903] loop3: detected capacity change from 0 to 2048 [ 884.926957][ T8907] loop1: detected capacity change from 0 to 2048 [ 884.938789][ T8903] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 885.085827][ T28] audit: type=1400 audit(1794139206.343:178): avc: denied { read write } for pid=8902 comm="syz.3.1997" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 885.152016][ T8907] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 885.184244][ T8905] loop2: detected capacity change from 0 to 512 [ 885.229819][ T8907] FAULT_INJECTION: forcing a failure. [ 885.229819][ T8907] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 885.252872][ T8903] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 885.355007][ T652] usbhid 1-1:0.0: can't add hid device: -71 [ 885.361015][ T652] usbhid: probe of 1-1:0.0 failed with error -71 [ 885.381155][ T28] audit: type=1400 audit(1794139206.363:179): avc: denied { open } for pid=8902 comm="syz.3.1997" path="/389/file0/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 885.413688][ T8905] EXT4-fs: Ignoring removed mblk_io_submit option [ 885.423802][ T652] usb 1-1: USB disconnect, device number 27 [ 885.433995][ T8907] CPU: 1 PID: 8907 Comm: syz.1.1999 Not tainted syzkaller #0 [ 885.434654][ T8903] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 885.441377][ T8907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 885.463501][ T8903] EXT4-fs (loop3): This should not happen!! Data will be lost [ 885.463501][ T8903] [ 885.463556][ T8907] Call Trace: [ 885.473154][ T8903] EXT4-fs (loop3): Total free blocks count 0 [ 885.476412][ T8907] [ 885.476420][ T8907] __dump_stack+0x21/0x24 [ 885.482752][ T8903] EXT4-fs (loop3): Free/Dirty block details [ 885.485326][ T8907] dump_stack_lvl+0x110/0x170 [ 885.485347][ T8907] ? __cfi_dump_stack_lvl+0x8/0x8 [ 885.485390][ T8907] dump_stack+0x15/0x24 [ 885.503442][ T8903] EXT4-fs (loop3): free_blocks=66060288 [ 885.505395][ T8907] should_fail_ex+0x3bf/0x510 [ 885.509545][ T8903] EXT4-fs (loop3): dirty_blocks=32 [ 885.515068][ T8907] should_fail+0xb/0x10 [ 885.515086][ T8907] should_fail_usercopy+0x1a/0x20 [ 885.515102][ T8907] _copy_from_user+0x1e/0xc0 [ 885.538552][ T8907] iovec_from_user+0x1aa/0x2e0 [ 885.543409][ T8907] __import_iovec+0x6d/0x460 [ 885.547988][ T8907] import_iovec+0x7c/0xb0 [ 885.552296][ T8907] do_preadv+0x1f8/0x390 [ 885.556584][ T8907] ? vfs_writev+0x5f0/0x5f0 [ 885.561074][ T8907] ? __this_cpu_preempt_check+0x13/0x20 [ 885.566635][ T8907] ? xfd_validate_state+0x70/0x150 [ 885.571733][ T8907] ? __kasan_check_write+0x14/0x20 [ 885.576948][ T8907] ? fpregs_restore_userregs+0x128/0x260 [ 885.582564][ T8907] __x64_sys_preadv2+0xd7/0x100 [ 885.587403][ T8907] x64_sys_call+0x243/0x9a0 [ 885.591888][ T8907] do_syscall_64+0x4c/0xa0 [ 885.596283][ T8907] ? clear_bhb_loop+0x30/0x80 [ 885.601008][ T8907] ? clear_bhb_loop+0x30/0x80 [ 885.605669][ T8907] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 885.611553][ T8907] RIP: 0033:0x7f4586f9fb19 [ 885.615959][ T8907] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 885.635548][ T8907] RSP: 002b:00007f4587f18028 EFLAGS: 00000246 ORIG_RAX: 0000000000000147 [ 885.644087][ T8907] RAX: ffffffffffffffda RBX: 00007f4587225fa0 RCX: 00007f4586f9fb19 [ 885.652042][ T8907] RDX: 0000000000000001 RSI: 0000200000000840 RDI: 0000000000000006 [ 885.659994][ T8907] RBP: 00007f4587f18090 R08: 0000000000000000 R09: 0000000000000007 [ 885.667947][ T8907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 885.675898][ T8907] R13: 00007f4587226038 R14: 00007f4587225fa0 R15: 00007ffea89858c8 [ 885.683854][ T8907] [ 885.688970][ T28] audit: type=1400 audit(1794139206.473:180): avc: denied { map } for pid=8902 comm="syz.3.1997" path="/389/file0/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 885.703435][ T8903] EXT4-fs (loop3): Block reservation details [ 885.718728][ T8916] loop4: detected capacity change from 0 to 2048 [ 885.731656][ T8905] EXT4-fs error (device loop2): __ext4_iget:5104: inode #2: block 2147483648: comm syz.2.1995: invalid block [ 885.737858][ T8903] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 885.763799][ T8922] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 144 with error 28 [ 885.764380][ T8916] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 885.808165][ T8905] EXT4-fs (loop2): get root inode failed [ 885.815851][ T8914] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 885.820719][ T8903] syz.3.1997 (8903) used greatest stack depth: 20776 bytes left [ 885.832354][ T8914] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 885.840200][ T8905] EXT4-fs (loop2): mount failed [ 885.850729][ T8914] EXT4-fs (loop1): This should not happen!! Data will be lost [ 885.850729][ T8914] [ 885.865477][ T8914] EXT4-fs (loop1): Total free blocks count 0 [ 885.876112][ T8914] EXT4-fs (loop1): Free/Dirty block details [ 885.882080][ T8914] EXT4-fs (loop1): free_blocks=66060288 [ 885.966951][ T28] audit: type=1400 audit(1794139207.153:181): avc: denied { append } for pid=8915 comm="syz.4.2000" path="/384/file0/pids.events" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 886.003828][ T8914] EXT4-fs (loop1): dirty_blocks=32 [ 886.224021][ T8914] EXT4-fs (loop1): Block reservation details [ 886.291390][ T8914] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 886.371598][ T28] audit: type=1400 audit(1794139207.563:182): avc: denied { create } for pid=8915 comm="syz.4.2000" name="loop0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=blk_file permissive=1 [ 886.449094][ T488] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28 [ 886.972652][ T28] audit: type=1400 audit(1794139208.223:183): avc: denied { bind } for pid=8934 comm="syz.1.2004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 886.997910][ T308] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 887.012637][ T308] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 887.025221][ T308] EXT4-fs (loop4): This should not happen!! Data will be lost [ 887.025221][ T308] [ 887.035870][ T308] EXT4-fs (loop4): Total free blocks count 0 [ 887.041895][ T308] EXT4-fs (loop4): Free/Dirty block details [ 887.053516][ T308] EXT4-fs (loop4): free_blocks=66060288 [ 887.059132][ T308] EXT4-fs (loop4): dirty_blocks=8224 [ 887.065065][ T308] EXT4-fs (loop4): Block reservation details [ 887.071146][ T308] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 887.080515][ T8941] loop3: detected capacity change from 0 to 512 [ 887.140493][ T8944] futex_wake_op: syz.0.2005 tries to shift op by 144; fix this program [ 887.150462][ T308] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 888.585760][ T8950] loop1: detected capacity change from 0 to 512 [ 888.698038][ T8953] loop4: detected capacity change from 0 to 512 [ 889.539845][ T8954] netlink: 3544 bytes leftover after parsing attributes in process `syz.3.2009'. [ 891.479452][ T8977] loop1: detected capacity change from 0 to 512 [ 891.545949][ T8978] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 891.592402][ T8978] FAT-fs (loop1): Filesystem has been set read-only [ 891.611804][ T8981] FAULT_INJECTION: forcing a failure. [ 891.611804][ T8981] name failslab, interval 1, probability 0, space 0, times 1 [ 891.624460][ T8981] CPU: 1 PID: 8981 Comm: syz.4.2014 Not tainted syzkaller #0 [ 891.631836][ T8981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 891.641872][ T8981] Call Trace: [ 891.645167][ T8981] [ 891.648094][ T8981] __dump_stack+0x21/0x24 [ 891.652417][ T8981] dump_stack_lvl+0x110/0x170 [ 891.657085][ T8981] ? __cfi_dump_stack_lvl+0x8/0x8 [ 891.662093][ T8981] ? stack_trace_save+0xa6/0xf0 [ 891.667000][ T8981] dump_stack+0x15/0x24 [ 891.671137][ T8981] should_fail_ex+0x3bf/0x510 [ 891.675804][ T8981] ? flock_lock_inode+0x211/0x1380 [ 891.681047][ T8981] __should_failslab+0xac/0xf0 [ 891.685824][ T8981] should_failslab+0x9/0x20 [ 891.690340][ T8981] kmem_cache_alloc+0x3b/0x320 [ 891.695117][ T8981] ? locks_get_lock_context+0x57/0x2d0 [ 891.700558][ T8981] flock_lock_inode+0x211/0x1380 [ 891.705478][ T8981] ? avc_has_perm+0x163/0x250 [ 891.710179][ T8981] ? __cfi_avc_has_perm+0x10/0x10 [ 891.715184][ T8981] ? check_conflicting_open+0x260/0x260 [ 891.720719][ T8981] locks_lock_inode_wait+0xfd/0x430 [ 891.725902][ T8981] ? __cfi_locks_lock_inode_wait+0x10/0x10 [ 891.731698][ T8981] ? security_file_lock+0x8a/0xb0 [ 891.736756][ T8981] __se_sys_flock+0x48f/0x5b0 [ 891.741436][ T8981] ? __x64_sys_flock+0x70/0x70 [ 891.746184][ T8981] ? mutex_unlock+0x8f/0x230 [ 891.750812][ T8981] ? __cfi_ksys_write+0x10/0x10 [ 891.755651][ T8981] ? do_user_addr_fault+0x9a5/0x1030 [ 891.760940][ T8981] ? debug_smp_processor_id+0x17/0x20 [ 891.766318][ T8981] __x64_sys_flock+0x5b/0x70 [ 891.770909][ T8981] x64_sys_call+0x10f/0x9a0 [ 891.775406][ T8981] do_syscall_64+0x4c/0xa0 [ 891.779820][ T8981] ? clear_bhb_loop+0x30/0x80 [ 891.784748][ T8981] ? clear_bhb_loop+0x30/0x80 [ 891.789421][ T8981] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 891.795298][ T8981] RIP: 0033:0x7fd69bf9fb19 [ 891.799695][ T8981] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 891.819282][ T8981] RSP: 002b:00007fd69ce7d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000049 [ 891.827679][ T8981] RAX: ffffffffffffffda RBX: 00007fd69c226360 RCX: 00007fd69bf9fb19 [ 891.835636][ T8981] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000006 [ 891.843591][ T8981] RBP: 00007fd69ce7d090 R08: 0000000000000000 R09: 0000000000000000 [ 891.851548][ T8981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 891.859501][ T8981] R13: 00007fd69c2263f8 R14: 00007fd69c226360 R15: 00007ffe09945f68 [ 891.867458][ T8981] [ 891.879977][ T8977] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 891.890202][ T28] audit: type=1400 audit(1794139213.143:184): avc: denied { read write } for pid=8976 comm="syz.1.2015" name="fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 891.903905][ T8982] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 891.913854][ T28] audit: type=1400 audit(1794139213.143:185): avc: denied { open } for pid=8976 comm="syz.1.2015" path="/dev/fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 891.946892][ T8983] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 891.988341][ T28] audit: type=1400 audit(1794139213.243:186): avc: denied { read write } for pid=8976 comm="syz.1.2015" name="vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 892.019745][ T8978] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 892.030152][ T28] audit: type=1400 audit(1794139213.273:187): avc: denied { open } for pid=8976 comm="syz.1.2015" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 892.059367][ T8977] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 892.084763][ T28] audit: type=1400 audit(1794139213.273:188): avc: denied { ioctl } for pid=8976 comm="syz.1.2015" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 892.231016][ T8988] loop2: detected capacity change from 0 to 40427 [ 892.252496][ T28] audit: type=1400 audit(1794139213.503:189): avc: denied { create } for pid=8989 comm="syz.1.2018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 892.258101][ T8988] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 892.281945][ T8988] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 892.291320][ T8988] F2FS-fs (loop2): invalid crc value [ 892.305120][ T28] audit: type=1400 audit(1794139213.533:190): avc: denied { connect } for pid=8989 comm="syz.1.2018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 892.325651][ T28] audit: type=1400 audit(1794139213.533:191): avc: denied { write } for pid=8989 comm="syz.1.2018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 892.337559][ T8986] loop3: detected capacity change from 0 to 40427 [ 892.349196][ T8988] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 892.353502][ T8994] loop1: detected capacity change from 0 to 512 [ 892.388051][ T8988] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 892.395260][ T8988] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 892.433121][ T8986] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 892.460777][ T8986] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 892.479702][ T8986] F2FS-fs (loop3): invalid crc value [ 892.485836][ T288] syz-executor: attempt to access beyond end of device [ 892.485836][ T288] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 892.583476][ T652] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 892.677656][ T8986] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 892.785213][ T652] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 892.871265][ T652] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 893.040538][ T652] usb 5-1: config 0 interface 0 has no altsetting 0 [ 893.118972][ T652] usb 5-1: New USB device found, idVendor=05ac, idProduct=0220, bcdDevice= 0.00 [ 893.137187][ T8986] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 893.233470][ T8986] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 893.243767][ T652] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 893.270904][ T652] usb 5-1: config 0 descriptor?? [ 893.373804][ T9013] loop1: detected capacity change from 0 to 512 [ 893.433824][ T8986] fuse: Unknown parameter '0x0000000000000007' [ 893.440456][ T28] audit: type=1400 audit(1794139214.683:192): avc: denied { mounton } for pid=8984 comm="syz.3.2017" path="/393/file1/file0" dev="loop3" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 893.564514][ T28] audit: type=1400 audit(1794139214.803:193): avc: denied { create } for pid=8984 comm="syz.3.2017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 893.713323][ T290] syz-executor: attempt to access beyond end of device [ 893.713323][ T290] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 894.387446][ T9023] loop2: detected capacity change from 0 to 128 [ 894.418542][ T9023] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 894.513530][ T9025] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 894.709836][ T9027] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2026'. [ 894.725091][ T9027] device xfrm1 entered promiscuous mode [ 894.730795][ T9027] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2026'. [ 894.827323][ T9032] loop3: detected capacity change from 0 to 128 [ 894.836491][ T9032] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 894.858594][ T9030] FAULT_INJECTION: forcing a failure. [ 894.858594][ T9030] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 894.881795][ T9030] CPU: 1 PID: 9030 Comm: syz.2.2025 Not tainted syzkaller #0 [ 894.889200][ T9030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 894.899348][ T9030] Call Trace: [ 894.902623][ T9030] [ 894.905551][ T9030] __dump_stack+0x21/0x24 [ 894.909882][ T9030] dump_stack_lvl+0x110/0x170 [ 894.914554][ T9030] ? __cfi_dump_stack_lvl+0x8/0x8 [ 894.919575][ T9030] dump_stack+0x15/0x24 [ 894.923726][ T9030] should_fail_ex+0x3bf/0x510 [ 894.928398][ T9030] should_fail+0xb/0x10 [ 894.932551][ T9030] should_fail_usercopy+0x1a/0x20 [ 894.937576][ T9030] _copy_from_user+0x1e/0xc0 [ 894.942169][ T9030] __sys_bpf+0x2a0/0x850 [ 894.946481][ T9030] ? bpf_link_show_fdinfo+0x330/0x330 [ 894.951851][ T9030] ? __cfi_ksys_write+0x10/0x10 [ 894.956700][ T9030] ? debug_smp_processor_id+0x17/0x20 [ 894.962077][ T9030] __x64_sys_bpf+0x7c/0x90 [ 894.966488][ T9030] x64_sys_call+0x488/0x9a0 [ 894.970990][ T9030] do_syscall_64+0x4c/0xa0 [ 894.975402][ T9030] ? clear_bhb_loop+0x30/0x80 [ 894.981470][ T9030] ? clear_bhb_loop+0x30/0x80 [ 894.986155][ T9030] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 894.992052][ T9030] RIP: 0033:0x7f7a6039fb19 [ 894.996462][ T9030] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 895.016075][ T9030] RSP: 002b:00007f7a612ba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 895.024499][ T9030] RAX: ffffffffffffffda RBX: 00007f7a60626090 RCX: 00007f7a6039fb19 [ 895.032475][ T9030] RDX: 0000000000000040 RSI: 0000200000001380 RDI: 0000000000000000 [ 895.040448][ T9030] RBP: 00007f7a612ba090 R08: 0000000000000000 R09: 0000000000000000 [ 895.043437][ T737] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 895.048423][ T9030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 895.048438][ T9030] R13: 00007f7a60626128 R14: 00007f7a60626090 R15: 00007ffde33fc398 [ 895.048454][ T9030] [ 895.336490][ T9044] FAULT_INJECTION: forcing a failure. [ 895.336490][ T9044] name failslab, interval 1, probability 0, space 0, times 0 [ 895.349197][ T9044] CPU: 1 PID: 9044 Comm: syz.0.2028 Not tainted syzkaller #0 [ 895.356575][ T9044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 895.366643][ T9044] Call Trace: [ 895.369934][ T9044] [ 895.372871][ T9044] __dump_stack+0x21/0x24 [ 895.377202][ T9044] dump_stack_lvl+0x110/0x170 [ 895.381874][ T9044] ? __cfi_dump_stack_lvl+0x8/0x8 [ 895.386897][ T9044] ? switch_mm_irqs_off+0x2fb/0x960 [ 895.392095][ T9044] dump_stack+0x15/0x24 [ 895.396267][ T9044] should_fail_ex+0x3bf/0x510 [ 895.400993][ T9044] ? getname_flags+0xba/0x510 [ 895.405752][ T9044] __should_failslab+0xac/0xf0 [ 895.410529][ T9044] should_failslab+0x9/0x20 [ 895.415037][ T9044] kmem_cache_alloc+0x3b/0x320 [ 895.419806][ T9044] getname_flags+0xba/0x510 [ 895.424307][ T9044] __x64_sys_mkdirat+0x7c/0xa0 [ 895.429078][ T9044] x64_sys_call+0x73d/0x9a0 [ 895.433578][ T9044] do_syscall_64+0x4c/0xa0 [ 895.437990][ T9044] ? clear_bhb_loop+0x30/0x80 [ 895.442671][ T9044] ? clear_bhb_loop+0x30/0x80 [ 895.447352][ T9044] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 895.453243][ T9044] RIP: 0033:0x7f252b39e987 [ 895.457653][ T9044] Code: 00 66 90 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 db f7 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 895.477257][ T9044] RSP: 002b:00007f252c196e58 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 895.485682][ T9044] RAX: ffffffffffffffda RBX: 00007f252c196ee0 RCX: 00007f252b39e987 [ 895.493654][ T9044] RDX: 00000000000001ff RSI: 00002000000008c0 RDI: 00000000ffffff9c [ 895.501624][ T9044] RBP: 0000200000000880 R08: 00002000000009c0 R09: 0000000000000000 [ 895.509598][ T9044] R10: 0000200000000880 R11: 0000000000000246 R12: 00002000000008c0 [ 895.517565][ T9044] R13: 00007f252c196ea0 R14: 0000000000000000 R15: 0000000000000000 [ 895.525549][ T9044] [ 895.845866][ T652] usbhid 5-1:0.0: can't add hid device: -71 [ 895.886451][ T652] usbhid: probe of 5-1:0.0 failed with error -71 [ 895.917708][ T9046] loop4: detected capacity change from 0 to 512 [ 895.921147][ T737] usb 2-1: too many endpoints for config 0 interface 0 altsetting 171: 105, using maximum allowed: 30 [ 895.946365][ T737] usb 2-1: config 0 interface 0 altsetting 171 has 0 endpoint descriptors, different from the interface descriptor's value: 105 [ 895.990434][ T737] usb 2-1: config 0 interface 0 has no altsetting 0 [ 895.991462][ T652] usb 5-1: USB disconnect, device number 13 [ 896.015916][ T737] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 896.046075][ T9037] loop2: detected capacity change from 0 to 40427 [ 896.055547][ T9037] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 896.176086][ T9037] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 896.462809][ T9037] F2FS-fs (loop2): invalid crc value [ 896.920923][ T9055] futex_wake_op: syz.3.2031 tries to shift op by 144; fix this program [ 896.998621][ T9037] F2FS-fs (loop2): Failed to start F2FS issue_checkpoint_thread (-4) [ 897.030832][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 897.030853][ T28] audit: type=1400 audit(1794139218.283:195): avc: denied { create } for pid=9053 comm="syz.0.2033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 897.187897][ T28] audit: type=1400 audit(1794139218.333:196): avc: denied { bind } for pid=9053 comm="syz.0.2033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 897.208902][ T28] audit: type=1326 audit(1794139218.343:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9053 comm="syz.0.2033" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f252b39fb19 code=0x7ff00000 [ 897.527289][ T737] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 897.537118][ T28] audit: type=1326 audit(1794139218.413:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9053 comm="syz.0.2033" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f252b39fb19 code=0x7ff00000 [ 897.562641][ T737] usb 2-1: config 0 descriptor?? [ 897.568537][ T28] audit: type=1326 audit(1794139218.413:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9053 comm="syz.0.2033" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f252b39f7ab code=0x7ff00000 [ 897.618764][ T28] audit: type=1326 audit(1794139218.423:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9053 comm="syz.0.2033" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f252b39f7ab code=0x7ff00000 [ 897.632295][ T9064] loop3: detected capacity change from 0 to 512 [ 897.740120][ T28] audit: type=1326 audit(1794139218.423:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9053 comm="syz.0.2033" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f252b39f7ab code=0x7ff00000 [ 898.631854][ T9070] FAULT_INJECTION: forcing a failure. [ 898.631854][ T9070] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 898.635413][ T28] audit: type=1326 audit(1794139218.423:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9053 comm="syz.0.2033" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f252b39f7ab code=0x7ff00000 [ 898.669598][ T9070] CPU: 1 PID: 9070 Comm: syz.2.2035 Not tainted syzkaller #0 [ 898.676976][ T9070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 898.687037][ T9070] Call Trace: [ 898.690318][ T9070] [ 898.693247][ T9070] __dump_stack+0x21/0x24 [ 898.697575][ T9070] dump_stack_lvl+0x110/0x170 [ 898.702253][ T9070] ? __cfi_dump_stack_lvl+0x8/0x8 [ 898.707281][ T9070] ? vfs_write+0xa51/0xd00 [ 898.711701][ T9070] dump_stack+0x15/0x24 [ 898.715856][ T9070] should_fail_ex+0x3bf/0x510 [ 898.720532][ T9070] should_fail+0xb/0x10 [ 898.724686][ T9070] should_fail_usercopy+0x1a/0x20 [ 898.729712][ T9070] _copy_from_user+0x1e/0xc0 [ 898.734293][ T9070] __sys_bind+0x1fb/0x460 [ 898.738720][ T9070] ? __cfi___sys_bind+0x10/0x10 [ 898.743571][ T9070] ? __kasan_check_write+0x14/0x20 [ 898.748686][ T9070] ? debug_smp_processor_id+0x17/0x20 [ 898.754075][ T9070] __x64_sys_bind+0x7a/0x90 [ 898.758619][ T9070] x64_sys_call+0x70c/0x9a0 [ 898.763131][ T9070] do_syscall_64+0x4c/0xa0 [ 898.767545][ T9070] ? clear_bhb_loop+0x30/0x80 [ 898.772225][ T9070] ? clear_bhb_loop+0x30/0x80 [ 898.776906][ T9070] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 898.782796][ T9070] RIP: 0033:0x7f7a6039fb19 [ 898.787204][ T9070] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 898.806806][ T9070] RSP: 002b:00007f7a61299028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 898.815234][ T9070] RAX: ffffffffffffffda RBX: 00007f7a60626180 RCX: 00007f7a6039fb19 [ 898.823212][ T9070] RDX: 000000000000000e RSI: 0000200000000040 RDI: 0000000000000007 [ 898.831182][ T9070] RBP: 00007f7a61299090 R08: 0000000000000000 R09: 0000000000000000 [ 898.839153][ T9070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 898.847119][ T9070] R13: 00007f7a60626218 R14: 00007f7a60626180 R15: 00007ffde33fc398 [ 898.855088][ T9070] [ 898.871422][ T652] usb 2-1: USB disconnect, device number 31 [ 898.892618][ T28] audit: type=1326 audit(1794139218.423:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9053 comm="syz.0.2033" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f252b39f7ab code=0x7ff00000 [ 898.931543][ T28] audit: type=1326 audit(1794139218.423:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9053 comm="syz.0.2033" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f252b39f7ab code=0x7ff00000 [ 899.058738][ T9080] netlink: 'syz.4.2039': attribute type 7 has an invalid length. [ 899.092632][ T9080] netlink: 'syz.4.2039': attribute type 8 has an invalid length. [ 899.274769][ T9087] FAULT_INJECTION: forcing a failure. [ 899.274769][ T9087] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 899.288149][ T9087] CPU: 0 PID: 9087 Comm: syz.0.2040 Not tainted syzkaller #0 [ 899.295543][ T9087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 899.305590][ T9087] Call Trace: [ 899.308856][ T9087] [ 899.311771][ T9087] __dump_stack+0x21/0x24 [ 899.316083][ T9087] dump_stack_lvl+0x110/0x170 [ 899.320743][ T9087] ? __cfi_dump_stack_lvl+0x8/0x8 [ 899.325752][ T9087] dump_stack+0x15/0x24 [ 899.329907][ T9087] should_fail_ex+0x3bf/0x510 [ 899.334598][ T9087] should_fail_alloc_page+0x61/0x90 [ 899.339871][ T9087] prepare_alloc_pages+0x131/0x570 [ 899.344966][ T9087] ? avc_has_perm_noaudit+0x390/0x490 [ 899.350324][ T9087] ? __alloc_pages_bulk+0x9d0/0x9d0 [ 899.355516][ T9087] ? avc_has_perm_noaudit+0x30a/0x490 [ 899.360872][ T9087] __alloc_pages+0x15b/0x610 [ 899.365447][ T9087] ? __cfi___alloc_pages+0x10/0x10 [ 899.370538][ T9087] ? __kasan_check_write+0x14/0x20 [ 899.375632][ T9087] ? mutex_lock+0x93/0x1b0 [ 899.380038][ T9087] ? __cfi_avc_has_perm+0x10/0x10 [ 899.385046][ T9087] pipe_write+0x588/0x1960 [ 899.389464][ T9087] ? __cfi_pipe_write+0x10/0x10 [ 899.394297][ T9087] ? selinux_file_permission+0x3ef/0x510 [ 899.399983][ T9087] ? fsnotify_perm+0x67/0x5b0 [ 899.404681][ T9087] ? security_file_permission+0x8a/0xb0 [ 899.410216][ T9087] vfs_write+0x5ef/0xd00 [ 899.414448][ T9087] ? __cfi_vfs_write+0x10/0x10 [ 899.419205][ T9087] ? __fget_files+0x2d1/0x330 [ 899.423908][ T9087] ? __fdget_pos+0x1f2/0x380 [ 899.428578][ T9087] ? ksys_write+0x70/0x260 [ 899.432984][ T9087] ksys_write+0x14a/0x260 [ 899.437295][ T9087] ? __cfi_ksys_write+0x10/0x10 [ 899.442129][ T9087] ? debug_smp_processor_id+0x17/0x20 [ 899.447485][ T9087] __x64_sys_write+0x7b/0x90 [ 899.452059][ T9087] x64_sys_call+0x27b/0x9a0 [ 899.456548][ T9087] do_syscall_64+0x4c/0xa0 [ 899.460945][ T9087] ? clear_bhb_loop+0x30/0x80 [ 899.465607][ T9087] ? clear_bhb_loop+0x30/0x80 [ 899.470268][ T9087] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 899.476147][ T9087] RIP: 0033:0x7f252b39fb19 [ 899.480542][ T9087] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 899.500129][ T9087] RSP: 002b:00007f252c1b8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 899.508523][ T9087] RAX: ffffffffffffffda RBX: 00007f252b626090 RCX: 00007f252b39fb19 [ 899.516475][ T9087] RDX: 000000000001000c RSI: 0000200000003040 RDI: 0000000000000007 [ 899.524430][ T9087] RBP: 00007f252c1b8090 R08: 0000000000000000 R09: 0000000000000000 [ 899.532379][ T9087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 899.540328][ T9087] R13: 00007f252b626128 R14: 00007f252b626090 R15: 00007ffd7666dcf8 [ 899.548287][ T9087] [ 899.551390][ T317] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 899.741640][ T9091] fuse: Bad value for 'fd' [ 899.746578][ T9093] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 899.748234][ T317] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 899.767357][ T317] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 899.800940][ T317] usb 3-1: config 0 interface 0 has no altsetting 0 [ 899.807744][ T317] usb 3-1: New USB device found, idVendor=05ac, idProduct=0220, bcdDevice= 0.00 [ 899.816323][ T9103] FAULT_INJECTION: forcing a failure. [ 899.816323][ T9103] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 899.822123][ T317] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 899.831597][ T9103] CPU: 0 PID: 9103 Comm: syz.1.2045 Not tainted syzkaller #0 [ 899.842536][ T317] usb 3-1: config 0 descriptor?? [ 899.845134][ T9103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 899.845147][ T9103] Call Trace: [ 899.845152][ T9103] [ 899.845157][ T9103] __dump_stack+0x21/0x24 [ 899.845178][ T9103] dump_stack_lvl+0x110/0x170 [ 899.875296][ T9103] ? __cfi_dump_stack_lvl+0x8/0x8 [ 899.880309][ T9103] dump_stack+0x15/0x24 [ 899.884446][ T9103] should_fail_ex+0x3bf/0x510 [ 899.889109][ T9103] should_fail+0xb/0x10 [ 899.893258][ T9103] should_fail_usercopy+0x1a/0x20 [ 899.898266][ T9103] _copy_from_user+0x1e/0xc0 [ 899.902841][ T9103] iovec_from_user+0x1aa/0x2e0 [ 899.907585][ T9103] __import_iovec+0x6d/0x460 [ 899.912163][ T9103] ? kstrtoull+0x137/0x1d0 [ 899.916574][ T9103] import_iovec+0x7c/0xb0 [ 899.920900][ T9103] process_vm_rw+0x1e8/0xbe0 [ 899.925485][ T9103] ? __ia32_sys_process_vm_writev+0x100/0x100 [ 899.931530][ T9103] ? proc_fail_nth_write+0x180/0x200 [ 899.936876][ T9103] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 899.942505][ T9103] ? security_file_permission+0x8a/0xb0 [ 899.948054][ T9103] ? vfs_write+0xa51/0xd00 [ 899.952464][ T9103] ? __kasan_check_write+0x14/0x20 [ 899.957569][ T9103] ? __kasan_check_write+0x14/0x20 [ 899.962667][ T9103] ? fput+0x154/0x1a0 [ 899.966663][ T9103] ? __cfi_ksys_write+0x10/0x10 [ 899.971513][ T9103] __x64_sys_process_vm_writev+0xe7/0x100 [ 899.977233][ T9103] x64_sys_call+0x40a/0x9a0 [ 899.981727][ T9103] do_syscall_64+0x4c/0xa0 [ 899.986129][ T9103] ? clear_bhb_loop+0x30/0x80 [ 899.990789][ T9103] ? clear_bhb_loop+0x30/0x80 [ 899.995461][ T9103] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 900.001335][ T9103] RIP: 0033:0x7f4586f9fb19 [ 900.005733][ T9103] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 900.025326][ T9103] RSP: 002b:00007f4587f18028 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 900.033741][ T9103] RAX: ffffffffffffffda RBX: 00007f4587225fa0 RCX: 00007f4586f9fb19 [ 900.041693][ T9103] RDX: 0000000000000001 RSI: 00002000000013c0 RDI: 0000000000000637 [ 900.049736][ T9103] RBP: 00007f4587f18090 R08: 0000000000000001 R09: 0000000000000000 [ 900.057696][ T9103] R10: 0000200000001f00 R11: 0000000000000246 R12: 0000000000000001 [ 900.065658][ T9103] R13: 00007f4587226038 R14: 00007f4587225fa0 R15: 00007ffea89858c8 [ 900.073632][ T9103] [ 900.238061][ T9115] futex_wake_op: syz.3.2046 tries to shift op by 144; fix this program [ 900.445553][ T9113] loop1: detected capacity change from 0 to 512 [ 900.541762][ T9118] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2041'. [ 901.092021][ T9123] fuse: Bad value for 'fd' [ 901.099842][ T9124] loop4: detected capacity change from 0 to 256 [ 901.108755][ T9124] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 901.471676][ T9130] FAULT_INJECTION: forcing a failure. [ 901.471676][ T9130] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 901.500761][ T9130] CPU: 0 PID: 9130 Comm: syz.4.2051 Not tainted syzkaller #0 [ 901.508161][ T9130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 901.518212][ T9130] Call Trace: [ 901.521582][ T9130] [ 901.524505][ T9130] __dump_stack+0x21/0x24 [ 901.528835][ T9130] dump_stack_lvl+0x110/0x170 [ 901.533506][ T9130] ? __cfi_dump_stack_lvl+0x8/0x8 [ 901.538526][ T9130] dump_stack+0x15/0x24 [ 901.542672][ T9130] should_fail_ex+0x3bf/0x510 [ 901.547344][ T9130] should_fail_alloc_page+0x61/0x90 [ 901.552541][ T9130] prepare_alloc_pages+0x131/0x570 [ 901.557655][ T9130] ? __alloc_pages_bulk+0x9d0/0x9d0 [ 901.562851][ T9130] ? vfs_write+0xa51/0xd00 [ 901.567262][ T9130] __alloc_pages+0x15b/0x610 [ 901.571857][ T9130] ? __cfi___alloc_pages+0x10/0x10 [ 901.576973][ T9130] ? mutex_unlock+0x8f/0x230 [ 901.581565][ T9130] ? __cfi_mutex_unlock+0x10/0x10 [ 901.586589][ T9130] ? __kasan_check_write+0x14/0x20 [ 901.591696][ T9130] ? fput+0x154/0x1a0 [ 901.595689][ T9130] ? ksys_write+0x1fa/0x260 [ 901.600191][ T9130] __get_free_pages+0xe/0x30 [ 901.604779][ T9130] __se_sys_mincore+0xdb/0x5b0 [ 901.609645][ T9130] __x64_sys_mincore+0x7b/0x90 [ 901.614408][ T9130] x64_sys_call+0x32a/0x9a0 [ 901.618909][ T9130] do_syscall_64+0x4c/0xa0 [ 901.623317][ T9130] ? clear_bhb_loop+0x30/0x80 [ 901.627995][ T9130] ? clear_bhb_loop+0x30/0x80 [ 901.632667][ T9130] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 901.638556][ T9130] RIP: 0033:0x7fd69bf9fb19 [ 901.642963][ T9130] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 901.662564][ T9130] RSP: 002b:00007fd69cebf028 EFLAGS: 00000246 ORIG_RAX: 000000000000001b [ 901.670976][ T9130] RAX: ffffffffffffffda RBX: 00007fd69c226180 RCX: 00007fd69bf9fb19 [ 901.678948][ T9130] RDX: 0000200000002040 RSI: 0000000000c00000 RDI: 00002000003fd000 [ 901.686923][ T9130] RBP: 00007fd69cebf090 R08: 0000000000000000 R09: 0000000000000000 [ 901.694899][ T9130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 901.702872][ T9130] R13: 00007fd69c226218 R14: 00007fd69c226180 R15: 00007ffe09945f68 [ 901.710850][ T9130] [ 901.783436][ T19] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 901.804939][ T9136] loop1: detected capacity change from 0 to 256 [ 901.822193][ T9136] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 901.985695][ T19] usb 1-1: config 15 has an invalid interface number: 10 but max is 0 [ 901.998290][ T19] usb 1-1: config 15 has no interface number 0 [ 902.013633][ T19] usb 1-1: config 15 interface 10 has no altsetting 0 [ 902.044230][ T19] usb 1-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=dd.83 [ 902.053364][ T19] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 902.093854][ T19] usb 1-1: Product: syz [ 902.097620][ T28] kauditd_printk_skb: 65 callbacks suppressed [ 902.097647][ T28] audit: type=1400 audit(1794139223.353:270): avc: denied { name_bind } for pid=9140 comm="syz.4.2053" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 902.098047][ T19] usb 1-1: Manufacturer: syz [ 902.106696][ T28] audit: type=1400 audit(1794139223.363:271): avc: denied { node_bind } for pid=9140 comm="syz.4.2053" saddr=172.20.20.24 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 902.151897][ T19] usb 1-1: SerialNumber: syz [ 902.182657][ T317] usbhid 3-1:0.0: can't add hid device: -71 [ 902.189700][ T317] usbhid: probe of 3-1:0.0 failed with error -71 [ 902.213873][ T317] usb 3-1: USB disconnect, device number 23 [ 902.757925][ T9151] loop1: detected capacity change from 0 to 512 [ 904.850801][ T28] audit: type=1400 audit(1794139226.103:272): avc: denied { create } for pid=9169 comm="syz.2.2061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 904.874893][ T19] usb 1-1: Found UVC 0.00 device syz (05ac:8501) [ 904.881363][ T19] usb 1-1: No valid video chain found. [ 904.911171][ T19] usb 1-1: USB disconnect, device number 28 [ 904.972518][ T9173] loop3: detected capacity change from 0 to 512 [ 905.095637][ T9177] loop2: detected capacity change from 0 to 256 [ 906.446535][ T9181] futex_wake_op: syz.4.2060 tries to shift op by 144; fix this program [ 906.584481][ T28] audit: type=1400 audit(1794139227.843:273): avc: denied { create } for pid=9169 comm="syz.2.2061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 906.778177][ T9183] loop3: detected capacity change from 0 to 128 [ 906.789955][ T9185] loop2: detected capacity change from 0 to 128 [ 906.825890][ T9183] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 906.854876][ T9185] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 907.857391][ T28] audit: type=1400 audit(1794139229.113:274): avc: denied { wake_alarm } for pid=9210 comm="syz.2.2068" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 908.042712][ T9215] loop2: detected capacity change from 0 to 512 [ 908.079538][ T9215] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 908.243224][ T9223] loop2: detected capacity change from 0 to 512 [ 908.278004][ T9223] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 908.543456][ T19] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 908.553727][ T9227] EXT4-fs error (device loop2): ext4_validate_block_bitmap:420: comm ext4lazyinit: bg 0: bad block bitmap checksum [ 908.847898][ T19] usb 2-1: Using ep0 maxpacket: 32 [ 908.905934][ T288] EXT4-fs (loop2): unmounting filesystem. [ 909.101837][ T9233] loop2: detected capacity change from 0 to 512 [ 910.172546][ T19] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 910.188017][ T19] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 910.204525][ T9240] futex_wake_op: syz.2.2075 tries to shift op by 144; fix this program [ 910.458531][ T19] usb 2-1: config 0 has no interface number 0 [ 910.483109][ T19] usb 2-1: config 0 interface 184 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 910.504256][ T9243] xt_hashlimit: size too large, truncated to 1048576 [ 910.553761][ T19] usb 2-1: config 0 interface 184 has no altsetting 0 [ 910.614526][ T19] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 910.641014][ T19] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 910.683454][ T19] usb 2-1: Product: syz [ 910.704977][ T19] usb 2-1: Manufacturer: syz [ 910.728970][ T19] usb 2-1: SerialNumber: syz [ 910.759195][ T19] usb 2-1: config 0 descriptor?? [ 910.788221][ T19] smsc75xx v1.0.0 [ 910.804763][ T19] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 910.857756][ T19] smsc75xx: probe of 2-1:0.184 failed with error -22 [ 911.001867][ T9248] loop3: detected capacity change from 0 to 1024 [ 911.056499][ T9248] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 911.121000][ T9248] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 911.143833][ T28] audit: type=1400 audit(1794139232.403:275): avc: denied { map } for pid=9247 comm="syz.3.2077" path="/407/file1" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 911.216542][ T28] audit: type=1400 audit(1794139232.423:276): avc: denied { execute } for pid=9247 comm="syz.3.2077" path="/407/file1" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 911.303313][ T28] audit: type=1400 audit(1794139232.553:277): avc: denied { ioctl } for pid=9253 comm="syz.0.2078" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=50081 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 911.315816][ T9256] loop2: detected capacity change from 0 to 512 [ 911.418001][ T9260] loop4: detected capacity change from 0 to 512 [ 911.432339][ T9260] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 911.449464][ T9260] EXT4-fs (loop4): 1 truncate cleaned up [ 911.455448][ T9260] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 912.549135][ T325] usb 2-1: USB disconnect, device number 32 [ 913.091809][ T9269] FAULT_INJECTION: forcing a failure. [ 913.091809][ T9269] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 913.104878][ T9269] CPU: 0 PID: 9269 Comm: syz.0.2081 Not tainted syzkaller #0 [ 913.112340][ T9269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 913.122391][ T9269] Call Trace: [ 913.125669][ T9269] [ 913.128597][ T9269] __dump_stack+0x21/0x24 [ 913.132930][ T9269] dump_stack_lvl+0x110/0x170 [ 913.137608][ T9269] ? __cfi_dump_stack_lvl+0x8/0x8 [ 913.142632][ T9269] dump_stack+0x15/0x24 [ 913.146974][ T9269] should_fail_ex+0x3bf/0x510 [ 913.151651][ T9269] should_fail+0xb/0x10 [ 913.155813][ T9269] should_fail_usercopy+0x1a/0x20 [ 913.160835][ T9269] _copy_from_user+0x1e/0xc0 [ 913.165426][ T9269] __sys_bpf+0x2a0/0x850 [ 913.169662][ T9269] ? bpf_link_show_fdinfo+0x330/0x330 [ 913.175029][ T9269] ? __cfi_ksys_write+0x10/0x10 [ 913.179879][ T9269] ? debug_smp_processor_id+0x17/0x20 [ 913.185252][ T9269] __x64_sys_bpf+0x7c/0x90 [ 913.189661][ T9269] x64_sys_call+0x488/0x9a0 [ 913.194158][ T9269] do_syscall_64+0x4c/0xa0 [ 913.198569][ T9269] ? clear_bhb_loop+0x30/0x80 [ 913.203242][ T9269] ? clear_bhb_loop+0x30/0x80 [ 913.207915][ T9269] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 913.213808][ T9269] RIP: 0033:0x7f252b39fb19 [ 913.218218][ T9269] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 913.237818][ T9269] RSP: 002b:00007f252c197028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 913.246228][ T9269] RAX: ffffffffffffffda RBX: 00007f252b626180 RCX: 00007f252b39fb19 [ 913.254192][ T9269] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000020 [ 913.262156][ T9269] RBP: 00007f252c197090 R08: 0000000000000000 R09: 0000000000000000 [ 913.270119][ T9269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 913.278081][ T9269] R13: 00007f252b626218 R14: 00007f252b626180 R15: 00007ffd7666dcf8 [ 913.286049][ T9269] [ 913.829535][ T291] EXT4-fs (loop4): unmounting filesystem. [ 913.879494][ T290] EXT4-fs (loop3): unmounting filesystem. [ 914.004782][ T9283] loop2: detected capacity change from 0 to 512 [ 914.023717][ T9283] EXT4-fs: Ignoring removed mblk_io_submit option [ 914.031183][ T9283] EXT4-fs error (device loop2): __ext4_iget:5104: inode #2: block 2147483648: comm syz.2.2083: invalid block [ 914.053161][ T9283] EXT4-fs (loop2): get root inode failed [ 914.060230][ T9283] EXT4-fs (loop2): mount failed [ 914.173424][ T801] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 914.173444][ T325] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 914.203429][ T19] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 914.211063][ T415] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 914.353430][ T801] usb 1-1: Using ep0 maxpacket: 8 [ 914.359471][ T801] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 914.370722][ T801] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 914.375527][ T325] usb 5-1: New USB device found, idVendor=0552, idProduct=5510, bcdDevice= 0.00 [ 914.383741][ T801] usb 1-1: config 0 interface 0 has no altsetting 0 [ 914.392642][ T325] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 914.399247][ T801] usb 1-1: New USB device found, idVendor=1e7d, idProduct=3264, bcdDevice= 0.00 [ 914.407498][ T325] usb 5-1: Product: syz [ 914.416270][ T19] usb 2-1: Using ep0 maxpacket: 8 [ 914.420591][ T325] usb 5-1: Manufacturer: syz [ 914.425435][ T801] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 914.438727][ T415] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 914.449402][ T801] usb 1-1: config 0 descriptor?? [ 914.454525][ T19] usb 2-1: unable to get BOS descriptor or descriptor too short [ 914.462206][ T415] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 914.475210][ T415] usb 4-1: New USB device found, idVendor=0bda, idProduct=0129, bcdDevice= 1.00 [ 914.484365][ T415] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 914.493316][ T19] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 914.507671][ T19] usb 2-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice= 0.40 [ 914.516802][ T19] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 914.524834][ T19] usb 2-1: Product: syz [ 914.529002][ T19] usb 2-1: Manufacturer: syz [ 914.533635][ T19] usb 2-1: SerialNumber: syz [ 914.748029][ T19] usb 2-1: USB disconnect, device number 33 [ 914.897128][ T801] input: HID 1e7d:3264 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:1E7D:3264.0001/input/input4 [ 914.974380][ T28] audit: type=1400 audit(1794139236.233:278): avc: denied { read } for pid=88 comm="acpid" name="event3" dev="devtmpfs" ino=2957 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 914.977726][ T801] isku 0003:1E7D:3264.0001: input,hiddev96,hidraw0: USB HID v0.01 Device [HID 1e7d:3264] on usb-dummy_hcd.0-1/input0 [ 914.996753][ T28] audit: type=1400 audit(1794139236.233:279): avc: denied { open } for pid=88 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=2957 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 915.034981][ T447] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 915.039312][ T28] audit: type=1400 audit(1794139236.233:280): avc: denied { ioctl } for pid=88 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=2957 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 915.045206][ T325] scsi host1: uas [ 915.095555][ C1] scsi 1:0:0:0: tag#12 bogus IU 61 uas-tag 1 inflight: CMD [ 915.103002][ C1] scsi 1:0:0:0: tag#12 CDB: opcode=0x12 12 00 00 00 24 00 [ 915.215789][ T447] usb 3-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice= 1.00 [ 915.224949][ T447] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 915.232994][ T447] usb 3-1: Product: syz [ 915.237472][ T447] usb 3-1: Manufacturer: syz [ 915.242084][ T447] usb 3-1: SerialNumber: syz [ 915.311523][ C1] usb 5-1: cmd cmplt err -71 [ 915.317882][ T447] usb 5-1: USB disconnect, device number 14 [ 915.324512][ T447] scsi 1:0:0:0: tag#12 uas_zap_pending 0 uas-tag 1 inflight: CMD [ 915.332326][ T447] scsi 1:0:0:0: tag#12 CDB: opcode=0x12 12 00 00 00 24 00 [ 915.553420][ T19] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 915.734387][ T19] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 915.745357][ T19] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 915.755111][ T19] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 915.767961][ T19] usb 2-1: config 0 interface 0 has no altsetting 0 [ 915.774586][ T19] usb 2-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 915.783652][ T19] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 915.792115][ T19] usb 2-1: config 0 descriptor?? [ 916.093422][ T447] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 916.199923][ T19] cypress 0003:04B4:07B1.0002: unbalanced collection at end of report description [ 916.209336][ T19] cypress 0003:04B4:07B1.0002: parse failed [ 916.215267][ T19] cypress: probe of 0003:04B4:07B1.0002 failed with error -22 [ 916.273521][ T447] usb 5-1: Using ep0 maxpacket: 8 [ 916.279974][ T447] usb 5-1: unable to get BOS descriptor or descriptor too short [ 916.288376][ T447] usb 5-1: config 73 has an invalid interface number: 165 but max is 0 [ 916.296660][ T447] usb 5-1: config 73 has no interface number 0 [ 916.302831][ T447] usb 5-1: config 73 interface 165 has no altsetting 0 [ 916.311768][ T447] usb 5-1: string descriptor 0 read error: -22 [ 916.317975][ T447] usb 5-1: New USB device found, idVendor=10b8, idProduct=1e6e, bcdDevice=9d.9d [ 916.327025][ T447] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 916.401734][ T447] usb 2-1: USB disconnect, device number 34 [ 916.875619][ T19] usb 1-1: USB disconnect, device number 29 [ 917.036501][ T801] usb 4-1: USB disconnect, device number 22 [ 917.173444][ T447] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 917.233439][ T19] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 917.364445][ T447] usb 2-1: config 0 has no interfaces? [ 917.371173][ T447] usb 2-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 917.380280][ T447] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 917.388300][ T447] usb 2-1: Product: syz [ 917.392577][ T447] usb 2-1: Manufacturer: syz [ 917.397196][ T447] usb 2-1: SerialNumber: syz [ 917.402343][ T447] usb 2-1: config 0 descriptor?? [ 917.423434][ T19] usb 1-1: Using ep0 maxpacket: 32 [ 917.429993][ T19] usb 1-1: unable to get BOS descriptor or descriptor too short [ 917.439040][ T19] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 917.449389][ T19] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 917.458379][ T801] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 917.467239][ T19] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40 [ 917.476309][ T19] usb 1-1: New USB device strings: Mfr=2, Product=2, SerialNumber=3 [ 917.484340][ T19] usb 1-1: Product: syz [ 917.488485][ T19] usb 1-1: Manufacturer: syz [ 917.493070][ T19] usb 1-1: SerialNumber: syz [ 917.610043][ T9304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 917.618615][ T9304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 917.626961][ T447] usb 2-1: USB disconnect, device number 35 [ 917.644436][ T801] usb 4-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice= 0.01 [ 917.653567][ T801] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 917.702557][ T19] usb 1-1: 3:0: cannot get min/max values for control 2 (id 3) [ 917.710574][ T19] usb 1-1: 3:0: cannot get min/max values for control 8 (id 3) [ 917.718621][ T19] usb 1-1: 3:0: failed to get current value for ch 1 (-71) [ 917.727761][ T19] usb 1-1: 3:0: failed to get current value for ch 1 (-71) [ 917.739002][ T19] usb 1-1: USB disconnect, device number 30 [ 917.769019][ T415] usb 3-1: USB disconnect, device number 24 [ 918.143570][ T415] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 918.213447][ T447] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 918.293427][ T19] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 918.324484][ T415] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 918.335429][ T415] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 918.346218][ T415] usb 3-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice=24.00 [ 918.355293][ T415] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 918.363274][ T415] usb 3-1: Product: syz [ 918.367593][ T415] usb 3-1: Manufacturer: syz [ 918.403426][ T447] usb 2-1: Using ep0 maxpacket: 32 [ 918.409702][ T447] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 918.419683][ T447] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 918.430706][ T447] usb 2-1: New USB device found, idVendor=1618, idProduct=9113, bcdDevice= 0.00 [ 918.439836][ T447] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 918.447844][ T447] usb 2-1: Product: syz [ 918.452011][ T447] usb 2-1: Manufacturer: syz [ 918.456630][ T447] usb 2-1: SerialNumber: syz [ 918.483432][ T19] usb 1-1: Using ep0 maxpacket: 32 [ 918.489884][ T19] usb 1-1: unable to get BOS descriptor or descriptor too short [ 918.498326][ T19] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 918.508506][ T19] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 918.519112][ T19] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40 [ 918.528230][ T19] usb 1-1: New USB device strings: Mfr=2, Product=2, SerialNumber=3 [ 918.536287][ T19] usb 1-1: Product: syz [ 918.540464][ T19] usb 1-1: Manufacturer: syz [ 918.545071][ T19] usb 1-1: SerialNumber: syz [ 918.753496][ T19] usb 1-1: 3:0: cannot get min/max values for control 2 (id 3) [ 918.761338][ T19] usb 1-1: 3:0: cannot get min/max values for control 8 (id 3) [ 918.769189][ T19] usb 1-1: 3:0: failed to get current value for ch 1 (-71) [ 918.777591][ T415] general protection fault, probably for non-canonical address 0xdffffc0000000005: 0000 [#1] PREEMPT SMP KASAN [ 918.789354][ T415] KASAN: null-ptr-deref in range [0x0000000000000028-0x000000000000002f] [ 918.797772][ T415] CPU: 0 PID: 415 Comm: kworker/0:4 Not tainted syzkaller #0 [ 918.805130][ T415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 918.815173][ T415] Workqueue: usb_hub_wq hub_event [ 918.820277][ T415] RIP: 0010:logi_dj_probe+0x66f/0xf40 [ 918.825695][ T415] Code: 3e c5 fd 49 83 c7 40 4c 89 f8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ff e8 3f dc 0a fe 4d 8b 37 49 83 c6 28 4c 89 f0 48 c1 e8 03 <0f> b6 04 18 84 c0 0f 85 a3 08 00 00 41 8b 0e 49 81 c5 e0 18 00 00 [ 918.838095][ T447] usb 5-1: USB disconnect, device number 15 [ 918.845313][ T415] RSP: 0018:ffffc9000e60ebc8 EFLAGS: 00010206 [ 918.845335][ T415] RAX: 0000000000000005 RBX: dffffc0000000000 RCX: 0000000000100000 [ 918.845349][ T415] RDX: ffffc9000e981000 RSI: 0000000000023cf7 RDI: 0000000000023cf8 [ 918.845359][ T415] RBP: ffffc9000e60ec18 R08: 0000000000000003 R09: 0000000000000004 [ 918.845371][ T415] R10: dffffc0000000000 R11: fffff52001cc1c9c R12: 0000000000000000 [ 918.867078][ T28] audit: type=1400 audit(1794139240.093:281): avc: denied { read } for pid=85 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 918.873190][ T415] R13: ffff888120924000 R14: 0000000000000028 R15: ffff888120e94040 [ 918.873208][ T415] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 918.873226][ T415] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 918.881317][ T28] audit: type=1400 audit(1794139240.093:282): avc: denied { search } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 918.889132][ T415] CR2: 00007f252b7524c0 CR3: 000000010924b000 CR4: 00000000003506b0 [ 918.889150][ T415] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 918.889161][ T415] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 918.889173][ T415] Call Trace: [ 918.889179][ T415] [ 918.889186][ T415] ? hid_lookup_quirk+0x393/0x630 [ 918.911671][ T28] audit: type=1400 audit(1794139240.093:283): avc: denied { write } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 918.918866][ T415] ? __cfi_logi_dj_probe+0x10/0x10 [ 918.918894][ T415] hid_device_probe+0x273/0x410 [ 918.928119][ T28] audit: type=1400 audit(1794139240.093:284): avc: denied { add_name } for pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 918.934383][ T415] ? __cfi_hid_device_probe+0x10/0x10 [ 918.934407][ T415] really_probe+0x2d7/0x9a0 [ 918.956220][ T28] audit: type=1400 audit(1794139240.093:285): avc: denied { create } for pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 918.963614][ T415] ? __kasan_check_write+0x14/0x20 [ 918.963648][ T415] __driver_probe_device+0x193/0x270 [ 918.971924][ T28] audit: type=1400 audit(1794139240.093:286): avc: denied { append open } for pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 918.979582][ T415] driver_probe_device+0x54/0x3e0 [ 918.979610][ T415] ? __device_attach_driver+0x2d3/0x4a0 [ 918.985578][ T28] audit: type=1400 audit(1794139240.093:287): avc: denied { getattr } for pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 918.985805][ T415] __device_attach_driver+0x2e9/0x4a0 [ 919.143917][ T415] ? __cfi___device_attach_driver+0x10/0x10 [ 919.149805][ T415] bus_for_each_drv+0x192/0x220 [ 919.154638][ T415] ? __kasan_check_write+0x14/0x20 [ 919.159762][ T415] ? __cfi___device_attach_driver+0x10/0x10 [ 919.165664][ T415] ? __cfi_bus_for_each_drv+0x10/0x10 [ 919.171048][ T415] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 919.176835][ T415] __device_attach+0x2b0/0x420 [ 919.181607][ T415] ? device_attach+0x20/0x20 [ 919.186183][ T415] device_initial_probe+0x1a/0x20 [ 919.191190][ T415] bus_probe_device+0xc0/0x1f0 [ 919.195955][ T415] device_add+0xb0b/0xec0 [ 919.200392][ T415] hid_add_device+0x3b8/0x580 [ 919.205087][ T415] usbhid_probe+0xc12/0xff0 [ 919.209641][ T415] usb_probe_interface+0x621/0xb30 [ 919.214818][ T415] ? __cfi_usb_probe_interface+0x10/0x10 [ 919.220435][ T415] really_probe+0x2d7/0x9a0 [ 919.224927][ T415] ? __kasan_check_write+0x14/0x20 [ 919.230022][ T415] __driver_probe_device+0x193/0x270 [ 919.235293][ T415] driver_probe_device+0x54/0x3e0 [ 919.240303][ T415] ? __device_attach_driver+0x2d3/0x4a0 [ 919.245831][ T415] __device_attach_driver+0x2e9/0x4a0 [ 919.251193][ T415] ? __cfi___device_attach_driver+0x10/0x10 [ 919.253449][ T447] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 919.257071][ T415] bus_for_each_drv+0x192/0x220 [ 919.257096][ T415] ? __kasan_check_write+0x14/0x20 [ 919.257115][ T415] ? __cfi___device_attach_driver+0x10/0x10 [ 919.280507][ T415] ? __cfi_bus_for_each_drv+0x10/0x10 [ 919.285865][ T415] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 919.291654][ T415] __device_attach+0x2b0/0x420 [ 919.296401][ T415] ? device_attach+0x20/0x20 [ 919.300974][ T415] ? kobject_uevent_env+0x35c/0x720 [ 919.306237][ T415] device_initial_probe+0x1a/0x20 [ 919.311245][ T415] bus_probe_device+0xc0/0x1f0 [ 919.315987][ T415] device_add+0xb0b/0xec0 [ 919.320303][ T415] usb_set_configuration+0x1a01/0x1f70 [ 919.325781][ T415] usb_generic_driver_probe+0x91/0x150 [ 919.331313][ T415] usb_probe_device+0x154/0x260 [ 919.336148][ T415] ? __cfi_usb_probe_device+0x10/0x10 [ 919.341504][ T415] really_probe+0x2d7/0x9a0 [ 919.345991][ T415] ? __kasan_check_write+0x14/0x20 [ 919.351102][ T415] __driver_probe_device+0x193/0x270 [ 919.356370][ T415] driver_probe_device+0x54/0x3e0 [ 919.361379][ T415] ? __device_attach_driver+0x2d3/0x4a0 [ 919.366920][ T415] __device_attach_driver+0x2e9/0x4a0 [ 919.372279][ T415] ? __cfi___device_attach_driver+0x10/0x10 [ 919.378158][ T415] bus_for_each_drv+0x192/0x220 [ 919.382996][ T415] ? __kasan_check_write+0x14/0x20 [ 919.388097][ T415] ? __cfi___device_attach_driver+0x10/0x10 [ 919.394001][ T415] ? __cfi_bus_for_each_drv+0x10/0x10 [ 919.399365][ T415] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 919.405157][ T415] __device_attach+0x2b0/0x420 [ 919.409927][ T415] ? device_attach+0x20/0x20 [ 919.414503][ T415] ? kfree+0x6f/0xf0 [ 919.418381][ T415] ? kobject_uevent_env+0x35c/0x720 [ 919.423571][ T415] device_initial_probe+0x1a/0x20 [ 919.428592][ T415] bus_probe_device+0xc0/0x1f0 [ 919.433350][ T415] device_add+0xb0b/0xec0 [ 919.437683][ T415] usb_new_device+0x9f4/0x1500 [ 919.442442][ T415] ? __cfi_usb_new_device+0x10/0x10 [ 919.447624][ T415] hub_event+0x27fb/0x4310 [ 919.452028][ T415] ? __cfi_hub_event+0x10/0x10 [ 919.456783][ T415] ? __schedule+0xcbb/0x1700 [ 919.461374][ T415] process_one_work+0x717/0xc30 [ 919.466215][ T415] worker_thread+0xa4d/0x11d0 [ 919.470877][ T415] kthread+0x281/0x320 [ 919.474957][ T415] ? __cfi_worker_thread+0x10/0x10 [ 919.480063][ T415] ? __cfi_kthread+0x10/0x10 [ 919.484649][ T415] ret_from_fork+0x1f/0x30 [ 919.489077][ T415] [ 919.492114][ T415] Modules linked in: [ 919.496543][ T415] ---[ end trace 0000000000000000 ]--- [ 919.502148][ T415] RIP: 0010:logi_dj_probe+0x66f/0xf40 [ 919.507715][ T415] Code: 3e c5 fd 49 83 c7 40 4c 89 f8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ff e8 3f dc 0a fe 4d 8b 37 49 83 c6 28 4c 89 f0 48 c1 e8 03 <0f> b6 04 18 84 c0 0f 85 a3 08 00 00 41 8b 0e 49 81 c5 e0 18 00 00 [ 919.509840][ T447] usb 5-1: config 4 has an invalid interface number: 235 but max is 1 [ 919.527704][ T415] RSP: 0018:ffffc9000e60ebc8 EFLAGS: 00010206 [ 919.535985][ T447] usb 5-1: config 4 has an invalid interface number: 228 but max is 1 [ 919.541789][ T415] RAX: 0000000000000005 RBX: dffffc0000000000 RCX: 0000000000100000 [ 919.551687][ T447] usb 5-1: config 4 has no interface number 0 [ 919.558007][ T415] RDX: ffffc9000e981000 RSI: 0000000000023cf7 RDI: 0000000000023cf8 [ 919.564286][ T447] usb 5-1: config 4 has no interface number 1 [ 919.572105][ T415] RBP: ffffc9000e60ec18 R08: 0000000000000003 R09: 0000000000000004 [ 919.578381][ T447] usb 5-1: config 4 interface 235 has no altsetting 0 [ 919.586205][ T415] R10: dffffc0000000000 R11: fffff52001cc1c9c R12: 0000000000000000 [ 919.593134][ T447] usb 5-1: config 4 interface 228 has no altsetting 0 [ 919.601069][ T415] R13: ffff888120924000 R14: 0000000000000028 R15: ffff888120e94040 [ 919.609323][ T447] usb 5-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=3a.dd [ 919.615661][ T19] usb 1-1: 3:0: failed to get current value for ch 1 (-71) [ 919.625008][ T447] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 919.631876][ T415] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 919.640173][ T447] usb 5-1: Product: syz [ 919.652246][ T19] usb 1-1: USB disconnect, device number 31 [ 919.659284][ T447] usb 5-1: Manufacturer: syz [ 919.662061][ T415] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 919.663978][ T447] usb 5-1: SerialNumber: syz [ 919.670593][ T415] CR2: 00007f252b7524c0 CR3: 000000010924b000 CR4: 00000000003506b0 [ 919.683081][ T415] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 919.691122][ T415] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 919.699220][ T415] Kernel panic - not syncing: Fatal exception [ 919.705618][ T415] Kernel Offset: disabled [ 919.709932][ T415] Rebooting in 86400 seconds..