last executing test programs: 15.404903709s ago: executing program 3 (id=1144): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f00000069c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5531, &(0x7f0000000b00)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f00000005c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) fallocate(r5, 0x0, 0x800003d, 0x7ff) 14.103792389s ago: executing program 1 (id=1151): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f00000069c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5531, &(0x7f0000000b00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f00000005c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) fallocate(r5, 0x0, 0x800003d, 0x7ff) write$binfmt_script(r5, &(0x7f00000000c0), 0xb) lseek(r5, 0x0, 0x3) 11.408331071s ago: executing program 1 (id=1153): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000180)='./file0\x00', 0x1000840, &(0x7f0000000f00)=ANY=[@ANYBLOB="696f636861727365743d6b6f69382d72752c73686f72746e616d653d77696e6e742c636f6465706167653d3935302c757466383d312c6e6f6e756d7461696c3d302c73686f72746e616d653d6c6f7765722c757466383d302c756e695f786c6174653d302c696f636861727365743d63703836352c757466383d312c73686f72746e616d653d6c6f7765722c757466383d302c73686f72746e616d653d77696e6e742c001d46d61beb"], 0x3, 0x384, &(0x7f0000000b40)="$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") mount(0x0, 0x0, 0x0, 0x2410, 0x0) statx(0xffffffffffffffff, 0x0, 0x800, 0x10, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0, r3}, 0x18) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$chown(0x4, r4, 0xee01, 0x0) connect$unix(r1, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) 10.2334566s ago: executing program 3 (id=1156): openat$procfs(0xffffffffffffff9c, &(0x7f0000000c00)='/proc/vmallocinfo\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x2a801, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000406d0434c504000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00226100000044a0"], 0x0}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) statx(0xffffffffffffffff, 0x0, 0x100, 0x4, &(0x7f0000002a00)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000), 0x10, 0x749}, 0x94) 10.23184183s ago: executing program 1 (id=1157): add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1e423ceb0ab4912f9f6a3af992968e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xfffffffb}, 0x48, 0xffffffffffffffff) r0 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc4}, &(0x7f00000000c0)={0x0, "f3a1173fb9462d3589e67197f90be6e423ceb0ab0912f9f6a31844ec98e950cfed21fcad7ff0fbcb566a0982f8938caa0600000000000000d56ad59300", 0x14}, 0x48, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001680)=@bloom_filter={0x1e, 0xfffffffd, 0x76, 0x6, 0x980c, 0xffffffffffffffff, 0x6725, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x5, 0x9}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r1}, &(0x7f0000000800), &(0x7f0000000840)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r4}, 0x10) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x82000, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r6}, 0x10) r7 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r7, r5, 0x0, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r8 = io_uring_setup(0x1694, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r8, 0x10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002700)=""/4096, 0x1a00}], 0x0, 0x11a}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r3}, 0x10) setitimer(0x0, 0x0, 0x0) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r10}, 0x18) r11 = add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f0000000440)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441705320725930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e67f3fd7264c39ea00c508ba6062696138"}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x4, r11, r0, r0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x800400, &(0x7f0000000680)={[], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x61, 0x38, 0x35, 0x56, 0x37, 0x36, 0x31], 0x2d, [0x66, 0x66, 0x64, 0x31], 0x2d, [0x37, 0x31, 0x61, 0x30], 0x2d, [0x31, 0x36, 0x63, 0x32], 0x2d, [0x39, 0x3f, 0x64, 0x35, 0x38, 0x35, 0x63, 0x39]}}}, {@obj_role={'obj_role', 0x3d, '+K)-/'}}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@measure}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}]}, 0x1, 0x793, &(0x7f0000001700)="$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") mount$incfs(&(0x7f0000000300)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000280), 0x0, 0x0) 8.605456645s ago: executing program 1 (id=1163): openat$procfs(0xffffffffffffff9c, &(0x7f0000000c00)='/proc/vmallocinfo\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000050000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000406d0434c504000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00226100000044a0"], 0x0}, 0x0) 7.67600482s ago: executing program 4 (id=1165): fchdir(0xffffffffffffffff) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x100c404, &(0x7f0000000940)={[{@dots}, {@dots}, {@fat=@nfs_nostale_ro}, {@fat=@uid={'uid', 0x3d, 0xee00}}, {@fat=@tz_utc}, {@dots}, {@dots}, {@dots}, {@dots}, {@dots}, {@dots}, {@dots}, {@fat=@discard}, {@fat=@check_normal}, {@fat=@sys_immutable}, {@nodots}, {@dots}, {@fat=@usefree}, {@nodots}, {@fat=@showexec}, {@fat=@codepage={'codepage', 0x3d, '861'}}, {@dots}]}, 0xfd, 0x202, &(0x7f0000001280)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000dd4ecc33d4ae0a235b7f329b0e96144e3ff293750a0d03fd968f962874ee9855b08db619a0fb9b"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) mount$incfs(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="820d283076a169a40703d21d183d0b1395a2ca44e277c52cea70861ce0fb8d082b37be5fe66292f9c09342b9347eae231d225810b4b5ef0e2fbb", 0x3a}, {&(0x7f0000000080)="e2e77554b22a511c9f03f0af48238166436e6a05a86dfc8cdea54daafed307199300b9345b1ce7156bee746b3e5a2b20bbc7b51a5dc42802972495cdbf16dcf725ff2bd1792c04d0a665d6017c3451d4dd6e13fc3fdd9c0ebb96841d0105c9d26637c2ec774e0ff0bfada6975a3bce1c885648e01fe01ca7ab111bdb2090f144a4783fdec450363428807fc8ca435fd31dcc55409697aef3990d8f2b32eb79e8ea952c59c02955e54b02fa7e323895a983c09e5aad2a396c87e370a39d5398ca71ee5b28fa19414b93616419adcce0", 0xcf}, {&(0x7f0000000180)="9186a21ea0ceb94f87632dc87185eb0a4ffbe42f6ca833007df6ae5071d43309757e6a41122bc36c4d0519cbe4464d56368e04dbf746e89ae389fde32a3f2591440a4e6bb75d791fc93542a9ce9b290a17554297", 0x54}, {&(0x7f0000000240)="a8d29aa0f5a2df66a5fee6360928ba7796cf7dba03cbe0f4970cdcf45fa21c66036b8d58aa884754a2e6416ca9", 0x2d}], 0x4) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000840)={[{@grpjquota}, {@auto_da_alloc_val}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x9}}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@oldalloc}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@usrquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x53}}]}, 0xfa, 0x568, &(0x7f0000000f00)="$eJzs3d9rW1UcAPDvTZPup66DMdAHKezByVy6tv6Y4MN8FB0O9MmXGdqsjKbLaNKx1oHbg3vxRYYg4kD8A3z3cfgP+FcMdDBkFH3wJXLTmy5dk/5YszY2nw/c9px7b3LOybnfw7k5CQlgYI2mf3IRr0TEt0nEsbZj+cgOjq6ct/zk1lS6JdFofPpXEkm2r3V+kv0/0srkI377OuJMbn25tcWl2VKlUp7P8mP1uetjtcWls1fnSjPlmfK1icnJ829PTrz37js9a+sbl/754ZMHH57/5tTy9788On4viQtxNDvW3o4duN2eGY3R7DUpxIVnThzvQWH9JFmbfXmv6sH2DGVxXoh0DDgWQ1nUA/vfVxHRAAZUIv5hQLXmAa17+873wYXPd3lasmsef7ByA7S+/fmV90biYPPe6PBysubOKL3fHelB+WkZv/55/166Re/ehwDY1O07EXEun18//iXZ+Pf8zm3hnGfLMP7B7nmQzn/e7DT/ya3Of6LD/OdIh9h9HpvHf+5RD4rpKp3/vd9x/ru6aDUylOVeas75CsmVq5XyuWyR43QUDqT5jdZzzi8/bHQ71j7/S7e0/NZcMKvHo/yBtY+ZLtVLO2lzu8d3Il7tOP9NVvs/6dD/6etxae1TNQ50KeNk+f5r3crfvP0vVuPniNc79v/TFa1k4/XJseb1MNa6Ktb7++7J37uVv9ftT/v/8MbtH0na12tr2y/jp4P/lrsde97rfzj5rJkezvbdLNXr8+MRw8nH6/dPPH1sK986P23/6VMbj3+drv9DEfHFFtt/98Tdrqf2Q/9Px/A2+n/7iYcfffljt/K31v9vNVOnsz1bGf+2WsGdvHYAAAAAAADQb3IRcTSSXHE1ncsViyuf7zgRh3OVaq1+5kp14dp0NL8rOxKFXGul+1jb5yHGs8/DtvITz+QnI+J4RHw3dKiZL05VK9N73XgAAAAAAAAAAAAAAAAAAADoE0e6fP8/9cfQXtcOeOHW/OR3snf1AHbfpj/534tfegL60qbxD+xb4h8Gl/iHwSX+YXCJfxhc4h8Gl/iHwSX+AQAAAAAAAAAAAAAAAAAAAAAAAAAAoKcuXbyYbo3lJ7em0vz0jcWF2eqNs9Pl2mxxbmGqOFWdv16cqVZnKuXiVHVus+erVKvXxydi4eZYvVyrj9UWly7PVReu1S9fnSvNlC+XC7vSKgAAAAAAAAAAAAAAAAAAAPh/qS0uzZYqlfL8vk4MZa3tl/rsp0S+P6oh0ePEHg9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANDmvwAAAP//mmY2oA==") r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r5, 0x0, 0x0, 0xfecc) 6.704466955s ago: executing program 4 (id=1168): sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f00000005c0), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x28, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004000}, 0xc0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) socket(0x6, 0x2, 0xfffffffe) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x301c40a, &(0x7f0000000740)=ANY=[@ANYBLOB="726f6469722c73686f72746e616d653d77696e6e742c6e6f6e756d7461696c3d302c757466383d302c696f636861727365743d63703933362c726f6469722c756e695f786c6174653d302c636f6465706167653d313235312c757466383d302c73686f72746e616d653d6c6f7765722c756e695f786c6174653d312c757466383d302c756e695f786c6174653d302c73686f72746e616d653d77696e6e742c696f636861727365743d63030033372c73686f72746e616d653d6c6f7765722c73686f72746e616d653d77696e39352c636865636b3d7374726963742c00"], 0x6, 0x2d5, &(0x7f0000000240)="$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") syz_clone(0x6a02f080, 0x0, 0xfffffffffffffd7b, 0x0, 0x0, 0x0) 6.624197736s ago: executing program 0 (id=1170): r0 = syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000ac0)={[{@lazytime}, {@i_version}, {@noblock_validity}, {@commit={'commit', 0x3d, 0x5}}, {@inlinecrypt}, {@max_batch_time}, {@abort}, {@auto_da_alloc}, {@lazytime}, {@errors_remount}, {@block_validity}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) fdatasync(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRESHEX=r0], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='tlb_flush\x00', r3}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x18) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c00000000000000", @ANYRES32, @ANYBLOB="e200000000000000000000000000000001000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000067b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r8}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES8=r5], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010328bd7000fedbdf251c0000000c000180080001"], 0x20}}, 0x10) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) 6.501494808s ago: executing program 0 (id=1171): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = io_uring_setup(0xaab, &(0x7f0000000340)={0x0, 0x2c97, 0x1000, 0xfffffffd, 0x17b}) r2 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x88) openat(r3, &(0x7f0000000340)='.\x00', 0x0, 0x131) close_range(r1, 0xffffffffffffffff, 0x0) 6.445749759s ago: executing program 0 (id=1172): prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file1\x00', 0x50, &(0x7f0000000280)={[{@usrquota}, {}, {@nobh}, {@grpjquota}, {@dioread_nolock}]}, 0x1, 0x3eb, &(0x7f0000000880)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) unshare(0x20000400) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32], 0xe) unshare(0x22020600) r4 = timerfd_create(0x0, 0x0) timerfd_gettime(r4, 0x0) 6.423197899s ago: executing program 3 (id=1173): pipe(&(0x7f00000000c0)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) io_setup(0x20, &(0x7f0000001140)) socket$inet_tcp(0x2, 0x1, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x0) mount$overlay(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c}) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) getsockname$packet(r4, 0x0, &(0x7f00000002c0)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x40}, 0x1, 0xd}, 0x0) 6.421868719s ago: executing program 1 (id=1174): pipe(&(0x7f00000000c0)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) getsockname$packet(r1, 0x0, 0x0) io_setup(0x20, &(0x7f0000001140)) socket$inet_tcp(0x2, 0x1, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) clock_gettime(0x0, &(0x7f0000000200)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c}) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) getsockname$packet(r4, 0x0, &(0x7f00000002c0)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x40}, 0x1, 0xd}, 0x0) 2.5631862s ago: executing program 2 (id=1176): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000067b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, 0x0, 0x10) 2.53947699s ago: executing program 3 (id=1177): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB="2b446c4c3fc12e0893fd08d0802a"]) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) writev(0xffffffffffffffff, 0x0, 0x0) socket(0x1a, 0xa, 0x0) r5 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c00009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r5, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r6 = syz_usb_connect$printer(0x5, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000300)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0xf2, 0x8, 0x10, 0xff, 0x10}, 0x38, &(0x7f0000000240)=ANY=[@ANYBLOB="050f3800031410043fecc9fbdba98ef3c55fc3278364ec6e510b10010c0e00000030c70914100a0d02ffffff00f0030030000000cf3f0000"], 0x1, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x860}}]}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@delchain={0x24, 0x66, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_usb_disconnect(r6) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) close_range(r11, 0xffffffffffffffff, 0x0) 2.411092052s ago: executing program 2 (id=1178): pipe(&(0x7f00000000c0)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) getsockname$packet(r1, 0x0, 0x0) io_setup(0x20, &(0x7f0000001140)) socket$inet_tcp(0x2, 0x1, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x0) mount$overlay(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c}) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) getsockname$packet(r4, 0x0, &(0x7f00000002c0)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x40}, 0x1, 0xd}, 0x0) 2.228554245s ago: executing program 0 (id=1179): gettid() syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='svcrdma_decode_rqst\x00', r0}, 0x18) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x31, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00'}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x6f4, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000600), 0x5, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008bd6000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'macsec0\x00', @random="06517dc2e6ea"}) 2.144387396s ago: executing program 0 (id=1180): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00'}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="2b446c4c3fc12e0893fd08d0802a"]) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) socket(0x1a, 0xa, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c00009040000020701010009050102"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) 1.799175222s ago: executing program 2 (id=1181): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000140), 0x8, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) setxattr$trusted_overlay_redirect(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x8, 0x2) 1.756835843s ago: executing program 2 (id=1182): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000002000000e27f000005"], 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='mm_page_free_batched\x00', r0}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x96) pwrite64(r1, &(0x7f0000000140)='2', 0x155c2, 0x8000c64) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x60) sendfile(r2, r2, 0x0, 0xe0000000) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x10000003) mmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000009, 0x20010, 0xffffffffffffffff, 0x4758e000) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x4b, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000400010000000e0000002000000000000000000000000fe8000000000000000000000000000bb00000002000000000a00000000000000f80897b4e9a3fd79c23f9515fabf7a5e6a38cffe620a54cc7795d0a1e1b0c479f0e69682bf20eefae58da4e533b284ce7d518d7b8a502b9122489436a180b04096494fe07c6d206acabecb15e6a698091e31508d6f75aa85e4c11ac88888cb1d30aa8b17aa395a", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000fbffffffffffffff0101000000000000050000000000000000000000000000000900000000000000000000000000000000000000800000000000000200000000"], 0xb8}}, 0x4004) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b8000000140001000000000000000000e0000002000000000000000000000000fe80000000000000000000000000001300000000000000000a00002000000000", @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, 0x0) pipe(&(0x7f00000000c0)) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) getsockname$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) clock_gettime(0x0, &(0x7f0000000200)) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) 1.512024926s ago: executing program 1 (id=1183): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB="2b446c4c3fc12e0893fd08d0802a"]) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) writev(0xffffffffffffffff, 0x0, 0x0) socket(0x1a, 0xa, 0x0) r5 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c00009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r5, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x3, 0x0) getsockname$packet(r8, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r9, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@delchain={0x24, 0x66, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_usb_disconnect(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) close_range(r10, 0xffffffffffffffff, 0x0) 884.658756ms ago: executing program 4 (id=1184): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) io_setup(0x9, &(0x7f0000003080)=0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c3000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r7}, 0x10) io_getevents(r5, 0x1, 0x1, &(0x7f0000000000)=[{}], 0x0) io_submit(r5, 0x1, &(0x7f0000000940)=[&(0x7f0000001940)={0x0, 0x0, 0x0, 0x7, 0x0, r4, 0x0}]) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_auto}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000140)={@my=0x1}) socket$vsock_stream(0x28, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r8}, 0x10) close(0x3) 883.780736ms ago: executing program 2 (id=1185): socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f00000005c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f00000000c0), 0xb) lseek(r5, 0x0, 0x3) 344.434434ms ago: executing program 0 (id=1186): openat$binfmt_register(0xffffff9c, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e00000000000000001801", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000dc0)={0x178, r6, 0x5, 0x70bd2a, 0x25dfdbfd, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_PEERS={0x154, 0x8, 0x0, 0x1, [{0x90, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x1, @mcast1, 0x2}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "1171ee8da334a5099295af229a5d237a7f4102f01f28b34347d6cbbe135d83ec"}, @WGPEER_A_PUBLIC_KEY={0x24}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}, {0x54, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "379aa288b2244a5b504ba04bea45625d328fb93b62e607a1b2e4da2f7f76a549"}]}, {0x44, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x9}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @empty}}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r7}]}, 0x178}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 330.940964ms ago: executing program 4 (id=1187): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 320.547104ms ago: executing program 3 (id=1188): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000067b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, 0x0, 0x10) 276.043876ms ago: executing program 4 (id=1189): r0 = socket$netlink(0x10, 0x3, 0xc) r1 = socket(0x10, 0x3, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000240)={0x0, @empty, @initdev}, &(0x7f0000000280)=0xc) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000780)={0x2, 0x3, 0x0, 0x3, 0xe, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_key={0x1, 0x9}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @private=0xa010102}}, @sadb_sa={0x2, 0x1, 0x0, 0x4, 0x0, 0x7, 0xb}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x7}}, @sadb_key={0x1, 0x8}]}, 0x70}, 0x1, 0x7}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="70000000160000032dbd7000ffdedf250a0818c8", @ANYRES32=r4, @ANYBLOB="08000800010000001400060002000000000000000600000000000100080009000500000008000a0002000000080009000100000008000a000400000008000a000200000014000200fe8000000000000000000000000000bb"], 0x70}}, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={0x0, &(0x7f00000005c0)=""/148, 0x0, 0x94, 0x1}, 0x28) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000005080000024d564b"]) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x200) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f00000004c0)='kfree\x00', r8}, 0x10) unshare(0x20000400) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="160000000000000061b1000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r9}, 0x0, &(0x7f0000000040)}, 0x20) 222.839597ms ago: executing program 3 (id=1190): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1808014, &(0x7f0000000600)=ANY=[@ANYBLOB="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"/716], 0x5, 0x558b, &(0x7f00000079c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000003}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xacd6d66594b140a4, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='sys_enter\x00', r2}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001780)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r4, @ANYBLOB="00000000000000005c001280110001006272696467655f736c61766500000000440005800500050000000000050020000100000005000800000000000600", @ANYRES8=r4], 0x7c}}, 0x0) r6 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1e44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c00000108000905810320000000000904010000020d00000904010102020d0000090582020004fefc0009050302000200"], 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x20, 0x80, 0x1c, {0x26, 0x200, 0x10, 0xc, 0xe, 0x10, 0x91, 0x1ff, 0xf, 0x0, 0x7, 0x2010}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socket(0x10, 0x80002, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[{@version_u}]}}) timerfd_settime(r7, 0x400000000000000, 0x0, 0x0) 126.238898ms ago: executing program 4 (id=1191): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$key(0xf, 0x3, 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000001140)=ANY=[@ANYBLOB="180500000000000000000000ffffffffb7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000008000000850000009500000095f5ffffffffffff9a88"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, 0xffffffffffffffff, 0x0, 0x40000000000000}, 0x18) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5}, 0x48) r5 = syz_open_procfs(0x0, &(0x7f0000001100)='net/fib_trie\x00') preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000080)=""/4097, 0x1001}], 0x1, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) mkdir(0x0, 0x0) getpid() mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) 0s ago: executing program 2 (id=1192): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000140), 0x8, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) setxattr$trusted_overlay_redirect(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x8, 0x2) kernel console output (not intermixed with test programs): beyond end of device [ 230.769509][ T284] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 231.378202][ T3484] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 231.410553][ T3484] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 231.623834][ T3497] loop4: detected capacity change from 0 to 256 [ 234.509886][ T3497] loop4: detected capacity change from 0 to 512 [ 234.555368][ T3497] EXT4-fs: Ignoring removed bh option [ 234.584342][ T3497] ext4: Unknown parameter 'fowner' [ 234.796670][ T3516] loop1: detected capacity change from 0 to 256 [ 234.846633][ T3516] FAT-fs (loop1): Directory bread(block 64) failed [ 234.871933][ T3516] FAT-fs (loop1): Directory bread(block 65) failed [ 234.900956][ T3516] FAT-fs (loop1): Directory bread(block 66) failed [ 234.919692][ T3516] FAT-fs (loop1): Directory bread(block 67) failed [ 234.961949][ T3516] FAT-fs (loop1): Directory bread(block 68) failed [ 234.997496][ T3516] FAT-fs (loop1): Directory bread(block 69) failed [ 235.014565][ T3516] FAT-fs (loop1): Directory bread(block 70) failed [ 235.047808][ T3516] FAT-fs (loop1): Directory bread(block 71) failed [ 235.057220][ T3510] loop0: detected capacity change from 0 to 40427 [ 235.067764][ T3516] FAT-fs (loop1): Directory bread(block 72) failed [ 235.074298][ T3516] FAT-fs (loop1): Directory bread(block 73) failed [ 235.095570][ T3510] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 235.111155][ T3510] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 235.122100][ T286] EXT4-fs (loop2): unmounting filesystem. [ 235.159036][ T3510] F2FS-fs (loop0): invalid crc value [ 235.188902][ T3510] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 235.247926][ T3510] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 235.257953][ T1469] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 235.265790][ T3510] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 235.323477][ T3524] loop4: detected capacity change from 0 to 40427 [ 235.348697][ T3524] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 235.355348][ T283] syz-executor: attempt to access beyond end of device [ 235.355348][ T283] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 235.365264][ T3524] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 235.388758][ T3524] F2FS-fs (loop4): invalid crc value [ 235.407529][ T3524] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 235.452815][ T1469] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 235.475869][ T1469] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 235.490625][ T3524] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 235.499897][ T3524] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 235.500896][ T1469] usb 4-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.04 [ 235.526259][ T3531] loop2: detected capacity change from 0 to 40427 [ 235.544212][ T3531] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 235.570784][ T1469] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.618616][ T3531] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 235.627802][ T1469] usb 4-1: config 0 descriptor?? [ 235.639739][ T3531] F2FS-fs (loop2): invalid crc value [ 235.641112][ T3541] loop0: detected capacity change from 0 to 256 [ 235.675613][ T3531] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 236.058992][ T285] syz-executor: attempt to access beyond end of device [ 236.058992][ T285] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 236.282885][ T3531] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 236.327592][ T3531] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 236.345656][ T1469] logitech-djreceiver 0003:046D:C534.0010: item fetching failed at offset 2/5 [ 236.354802][ T1469] logitech-djreceiver 0003:046D:C534.0010: logi_dj_probe: parse failed [ 236.363170][ T1469] logitech-djreceiver: probe of 0003:046D:C534.0010 failed with error -22 [ 236.564291][ T1469] usb 4-1: USB disconnect, device number 10 [ 236.582154][ T3552] 9pnet_fd: Insufficient options for proto=fd [ 237.066435][ T286] syz-executor: attempt to access beyond end of device [ 237.066435][ T286] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 237.167529][ T3550] loop4: detected capacity change from 0 to 40427 [ 237.177521][ T3555] loop0: detected capacity change from 0 to 40427 [ 237.178354][ T3550] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 237.190627][ T3550] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 237.195008][ T3555] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 237.207874][ T591] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 237.227324][ T3555] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 237.235915][ T3550] F2FS-fs (loop4): invalid crc value [ 237.244236][ T3555] F2FS-fs (loop0): invalid crc value [ 237.260452][ T3561] loop2: detected capacity change from 0 to 256 [ 237.261123][ T3550] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 237.279923][ T3555] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 237.312124][ T3561] syz.2.786: attempt to access beyond end of device [ 237.312124][ T3561] loop2: rw=2049, sector=256, nr_sectors = 64 limit=256 [ 237.336052][ T3550] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 237.340443][ T3561] syz.2.786: attempt to access beyond end of device [ 237.340443][ T3561] loop2: rw=2049, sector=256, nr_sectors = 4 limit=256 [ 237.345440][ T3567] loop3: detected capacity change from 0 to 256 [ 237.357696][ T3561] Buffer I/O error on dev loop2, logical block 64, lost async page write [ 237.363330][ T3550] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 237.381528][ T3555] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 237.383920][ T28] audit: type=1400 audit(1750927105.300:327): avc: denied { connect } for pid=3560 comm="syz.2.786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 237.409922][ T3567] FAT-fs (loop3): Directory bread(block 64) failed [ 237.413521][ T28] audit: type=1400 audit(1750927105.300:328): avc: denied { write } for pid=3560 comm="syz.2.786" name="event2" dev="devtmpfs" ino=275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 237.424657][ T3555] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 237.446891][ T591] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 237.447605][ T3567] FAT-fs (loop3): Directory bread(block 65) failed [ 237.464527][ T3567] FAT-fs (loop3): Directory bread(block 66) failed [ 237.475128][ T3567] FAT-fs (loop3): Directory bread(block 67) failed [ 237.481792][ T3567] FAT-fs (loop3): Directory bread(block 68) failed [ 237.488435][ T3567] FAT-fs (loop3): Directory bread(block 69) failed [ 237.494993][ T3567] FAT-fs (loop3): Directory bread(block 70) failed [ 237.517920][ T3567] FAT-fs (loop3): Directory bread(block 71) failed [ 237.532570][ T591] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 237.546675][ T591] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 237.557526][ T3567] FAT-fs (loop3): Directory bread(block 72) failed [ 237.569983][ T3567] FAT-fs (loop3): Directory bread(block 73) failed [ 237.620329][ T3573] loop2: detected capacity change from 0 to 256 [ 237.677804][ T591] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 237.686947][ T591] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 237.695279][ T591] usb 2-1: Product: syz [ 237.699569][ T591] usb 2-1: Manufacturer: syz [ 237.730988][ T591] usb 2-1: SerialNumber: syz [ 237.859707][ T285] syz-executor: attempt to access beyond end of device [ 237.859707][ T285] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 237.975384][ T591] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 15 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 237.989207][ T3580] loop2: detected capacity change from 0 to 512 [ 238.011078][ T3580] EXT4-fs: Ignoring removed bh option [ 238.021416][ T3580] ext4: Unknown parameter 'fowner' [ 238.143514][ T3583] loop4: detected capacity change from 0 to 256 [ 238.200219][ T3552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.209617][ T3552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.236955][ T3583] loop4: detected capacity change from 0 to 512 [ 238.265843][ T3552] netlink: 24 bytes leftover after parsing attributes in process `syz.1.784'. [ 238.276476][ T3589] overlayfs: failed to resolve './file0': -2 [ 238.282113][ T3583] EXT4-fs: Ignoring removed bh option [ 238.297963][ T3583] ext4: Unknown parameter 'fowner' [ 238.335927][ T3591] device syzkaller0 entered promiscuous mode [ 238.444671][ T283] syz-executor: attempt to access beyond end of device [ 238.444671][ T283] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 238.513383][ T3593] loop2: detected capacity change from 0 to 40427 [ 238.529360][ T3593] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 238.535759][ T3593] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 238.551705][ T6] usb 2-1: USB disconnect, device number 15 [ 238.553401][ T3593] F2FS-fs (loop2): invalid crc value [ 238.568286][ T6] usblp0: removed [ 238.581109][ T3593] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 238.582556][ T3600] loop0: detected capacity change from 0 to 256 [ 238.618519][ T3600] FAT-fs (loop0): Directory bread(block 64) failed [ 238.625166][ T3600] FAT-fs (loop0): Directory bread(block 65) failed [ 238.629981][ T3593] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 238.632130][ T3600] FAT-fs (loop0): Directory bread(block 66) failed [ 238.639145][ T3593] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 238.645558][ T3600] FAT-fs (loop0): Directory bread(block 67) failed [ 238.668566][ T3600] FAT-fs (loop0): Directory bread(block 68) failed [ 238.675188][ T3600] FAT-fs (loop0): Directory bread(block 69) failed [ 238.682195][ T3600] FAT-fs (loop0): Directory bread(block 70) failed [ 238.688904][ T3600] FAT-fs (loop0): Directory bread(block 71) failed [ 238.695604][ T3600] FAT-fs (loop0): Directory bread(block 72) failed [ 238.702438][ T3600] FAT-fs (loop0): Directory bread(block 73) failed [ 238.807781][ T287] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 239.000009][ T287] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 239.026279][ T287] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 239.074165][ T287] usb 5-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.04 [ 239.089624][ T287] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.103618][ T28] audit: type=1400 audit(1750927107.020:329): avc: denied { mount } for pid=3607 comm="syz.1.796" name="/" dev="ramfs" ino=28323 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 239.140633][ T28] audit: type=1400 audit(1750927107.020:330): avc: denied { execute } for pid=3607 comm="syz.1.796" name="file0" dev="ramfs" ino=28324 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 239.141532][ T287] usb 5-1: config 0 descriptor?? [ 239.197542][ T3608] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.204902][ T3608] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.221022][ T28] audit: type=1400 audit(1750927107.020:331): avc: denied { execute_no_trans } for pid=3607 comm="syz.1.796" path="/file0" dev="ramfs" ino=28324 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 239.275401][ T286] syz-executor: attempt to access beyond end of device [ 239.275401][ T286] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 239.278502][ T3608] device bridge_slave_0 left promiscuous mode [ 239.309215][ T3608] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.329188][ T3608] device bridge_slave_1 left promiscuous mode [ 239.343157][ T3608] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.522299][ T3619] loop2: detected capacity change from 0 to 256 [ 239.625026][ T287] logitech-djreceiver 0003:046D:C534.0011: item fetching failed at offset 2/5 [ 239.634458][ T287] logitech-djreceiver 0003:046D:C534.0011: logi_dj_probe: parse failed [ 239.642909][ T287] logitech-djreceiver: probe of 0003:046D:C534.0011 failed with error -22 [ 239.705314][ T3624] 9pnet_fd: Insufficient options for proto=fd [ 240.098614][ T3628] loop3: detected capacity change from 0 to 256 [ 240.129058][ T1469] usb 5-1: USB disconnect, device number 14 [ 240.153883][ T3616] loop1: detected capacity change from 0 to 40427 [ 240.182919][ T3616] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 240.197520][ T3616] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 240.209761][ T3616] F2FS-fs (loop1): invalid crc value [ 240.240259][ T3616] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 240.266504][ T3616] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 240.273681][ T3616] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 240.347742][ T287] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 241.328804][ T3636] loop2: detected capacity change from 0 to 40427 [ 241.336179][ T3636] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 241.342848][ T3636] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 241.352534][ T287] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 241.369291][ T287] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 241.379465][ T3636] F2FS-fs (loop2): invalid crc value [ 241.385657][ T287] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 241.409859][ T3636] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 241.422679][ T287] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 241.447711][ T287] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 241.476155][ T287] usb 1-1: Product: syz [ 241.480650][ T287] usb 1-1: Manufacturer: syz [ 241.485260][ T287] usb 1-1: SerialNumber: syz [ 241.496992][ T284] syz-executor: attempt to access beyond end of device [ 241.496992][ T284] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 241.511495][ T3636] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 241.519019][ T3636] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 241.634157][ T3639] loop3: detected capacity change from 0 to 40427 [ 241.653689][ T3639] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 241.674006][ T3639] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 241.684115][ T3639] F2FS-fs (loop3): invalid crc value [ 241.718858][ T3639] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 241.732500][ T287] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 15 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 241.746795][ T287] usb 1-1: USB disconnect, device number 15 [ 241.754459][ T287] usblp0: removed [ 241.788076][ T3639] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 241.795148][ T3639] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 241.811654][ T3656] loop1: detected capacity change from 0 to 512 [ 241.818721][ T3656] EXT4-fs: Ignoring removed nobh option [ 241.952596][ T3656] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 242.058382][ T286] syz-executor: attempt to access beyond end of device [ 242.058382][ T286] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 242.122489][ T3662] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.129880][ T3662] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.184001][ T282] syz-executor: attempt to access beyond end of device [ 242.184001][ T282] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 242.202138][ T3662] device bridge_slave_0 left promiscuous mode [ 242.209487][ T3662] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.227162][ T3662] device bridge_slave_1 left promiscuous mode [ 242.237797][ T3662] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.302791][ T3662] device macsec0 left promiscuous mode [ 242.313690][ T3662] device ip6erspan0 left promiscuous mode [ 242.370486][ T3669] loop0: detected capacity change from 0 to 256 [ 242.375383][ T3664] loop2: detected capacity change from 0 to 40427 [ 242.393140][ T3664] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 242.407715][ T3664] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 242.424503][ T3664] F2FS-fs (loop2): invalid crc value [ 242.431043][ T3669] FAT-fs (loop0): Directory bread(block 64) failed [ 242.440156][ T3669] FAT-fs (loop0): Directory bread(block 65) failed [ 242.446826][ T3669] FAT-fs (loop0): Directory bread(block 66) failed [ 242.447879][ T3664] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 242.453528][ T3669] FAT-fs (loop0): Directory bread(block 67) failed [ 242.471546][ T3669] FAT-fs (loop0): Directory bread(block 68) failed [ 242.478159][ T3669] FAT-fs (loop0): Directory bread(block 69) failed [ 242.485116][ T3669] FAT-fs (loop0): Directory bread(block 70) failed [ 242.491755][ T3669] FAT-fs (loop0): Directory bread(block 71) failed [ 242.498752][ T3669] FAT-fs (loop0): Directory bread(block 72) failed [ 242.505293][ T3669] FAT-fs (loop0): Directory bread(block 73) failed [ 242.565990][ T3664] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 242.575298][ T3664] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 242.689462][ T284] EXT4-fs (loop1): unmounting filesystem. [ 242.724185][ T3679] loop4: detected capacity change from 0 to 256 [ 242.731484][ T3679] FAT-fs (loop4): IO charset c not found [ 242.759172][ T3684] syz.1.816[3684] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 242.759588][ T3684] syz.1.816[3684] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 242.774933][ T3684] loop1: detected capacity change from 0 to 512 [ 242.793120][ T3684] EXT4-fs: Ignoring removed nobh option [ 242.805105][ T3684] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 242.806964][ T3686] netlink: 104 bytes leftover after parsing attributes in process `syz.3.817'. [ 242.846003][ T284] EXT4-fs (loop1): unmounting filesystem. [ 242.935893][ T3692] device syzkaller0 entered promiscuous mode [ 242.945441][ T3693] device macsec0 entered promiscuous mode [ 243.279704][ T286] syz-executor: attempt to access beyond end of device [ 243.279704][ T286] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 243.362606][ T3701] loop1: detected capacity change from 0 to 40427 [ 243.387028][ T3701] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 243.409728][ T3701] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 243.433231][ T3701] F2FS-fs (loop1): invalid crc value [ 243.465451][ T3701] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 243.530706][ T3706] device syzkaller0 entered promiscuous mode [ 243.540361][ T3701] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 243.560623][ T3701] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 243.620940][ T3709] 9pnet_fd: Insufficient options for proto=fd [ 243.658145][ T3712] overlayfs: missing 'lowerdir' [ 243.900225][ T1469] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 243.908242][ T284] syz-executor: attempt to access beyond end of device [ 243.908242][ T284] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 243.942294][ T3721] loop4: detected capacity change from 0 to 512 [ 243.949081][ T3721] EXT4-fs: Ignoring removed nobh option [ 243.969173][ T3716] xt_TPROXY: Can be used only with -p tcp or -p udp [ 243.982840][ T3721] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 244.043779][ T3724] loop1: detected capacity change from 0 to 256 [ 244.098919][ T1469] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 244.108810][ T1469] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 244.118924][ T1469] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 244.133929][ T1469] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 244.155298][ T1469] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 244.174709][ T1469] usb 1-1: Product: syz [ 244.182825][ T1469] usb 1-1: Manufacturer: syz [ 244.214120][ T1469] usb 1-1: SerialNumber: syz [ 244.537333][ T1469] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 16 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 244.549280][ T1469] usb 1-1: USB disconnect, device number 16 [ 244.556195][ T1469] usblp0: removed [ 244.690905][ T285] EXT4-fs (loop4): unmounting filesystem. [ 244.692442][ T3728] loop2: detected capacity change from 0 to 256 [ 244.706159][ T3728] FAT-fs (loop2): IO charset c not found [ 244.734639][ T3731] 9pnet_fd: Insufficient options for proto=fd [ 244.999491][ T3737] loop2: detected capacity change from 0 to 512 [ 245.010709][ T3737] EXT4-fs (loop2): bad block size 65536 [ 245.184649][ T3739] loop1: detected capacity change from 0 to 256 [ 245.419514][ T3739] FAT-fs (loop1): Directory bread(block 64) failed [ 245.448779][ T3741] netlink: 'syz.0.834': attribute type 7 has an invalid length. [ 245.493921][ T3739] FAT-fs (loop1): Directory bread(block 65) failed [ 245.526962][ T3741] netlink: 'syz.0.834': attribute type 8 has an invalid length. [ 245.544545][ T3739] FAT-fs (loop1): Directory bread(block 66) failed [ 245.561896][ T3739] FAT-fs (loop1): Directory bread(block 67) failed [ 245.575896][ T3739] FAT-fs (loop1): Directory bread(block 68) failed [ 245.607260][ T3739] FAT-fs (loop1): Directory bread(block 69) failed [ 245.640752][ T3739] FAT-fs (loop1): Directory bread(block 70) failed [ 245.706921][ T3739] FAT-fs (loop1): Directory bread(block 71) failed [ 245.741255][ T3739] FAT-fs (loop1): Directory bread(block 72) failed [ 245.777227][ T3739] FAT-fs (loop1): Directory bread(block 73) failed [ 246.027761][ T591] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 246.229599][ T591] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 246.257563][ T591] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 246.269586][ T591] usb 1-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.04 [ 246.278938][ T591] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.288260][ T591] usb 1-1: config 0 descriptor?? [ 246.337708][ T595] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 246.529282][ T595] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 246.541669][ T595] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 246.551577][ T595] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 246.575434][ T595] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 246.586925][ T595] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 246.602452][ T595] usb 5-1: Product: syz [ 246.617888][ T595] usb 5-1: Manufacturer: syz [ 246.622868][ T595] usb 5-1: SerialNumber: syz [ 246.640455][ T3752] loop1: detected capacity change from 0 to 1024 [ 246.647295][ T3752] EXT4-fs: Ignoring removed i_version option [ 246.658735][ T3752] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 246.682395][ T3750] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.689675][ T3750] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.719287][ T3750] device bridge_slave_0 left promiscuous mode [ 246.725579][ T3750] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.734281][ T591] logitech-djreceiver 0003:046D:C534.0012: unknown main item tag 0x0 [ 246.747720][ T591] logitech-djreceiver 0003:046D:C534.0012: unknown main item tag 0x0 [ 246.758127][ T3750] device bridge_slave_1 left promiscuous mode [ 246.765044][ T3750] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.766377][ T28] audit: type=1400 audit(1750927114.680:332): avc: denied { name_bind } for pid=3755 comm="syz.3.839" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 246.793707][ T591] logitech-djreceiver 0003:046D:C534.0012: unbalanced collection at end of report description [ 246.804216][ T591] logitech-djreceiver 0003:046D:C534.0012: logi_dj_probe: parse failed [ 246.812665][ T591] logitech-djreceiver: probe of 0003:046D:C534.0012 failed with error -22 [ 246.831471][ T595] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 15 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 246.847954][ T28] audit: type=1400 audit(1750927114.770:333): avc: denied { read } for pid=3755 comm="syz.3.839" name="ptp0" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 246.871831][ T28] audit: type=1400 audit(1750927114.770:334): avc: denied { open } for pid=3755 comm="syz.3.839" path="/dev/ptp0" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 246.895238][ T28] audit: type=1400 audit(1750927114.770:335): avc: denied { ioctl } for pid=3755 comm="syz.3.839" path="/dev/ptp0" dev="devtmpfs" ino=264 ioctlcmd=0x3d03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 246.903757][ T3758] loop3: detected capacity change from 0 to 256 [ 246.927072][ T3750] device macsec0 left promiscuous mode [ 246.937807][ T595] usb 1-1: USB disconnect, device number 17 [ 246.938220][ T3758] FAT-fs (loop3): Directory bread(block 64) failed [ 246.948187][ T3756] netlink: 8 bytes leftover after parsing attributes in process `syz.3.839'. [ 246.958112][ T3758] FAT-fs (loop3): Directory bread(block 65) failed [ 246.979461][ T3758] FAT-fs (loop3): Directory bread(block 66) failed [ 246.986588][ T3758] FAT-fs (loop3): Directory bread(block 67) failed [ 246.993648][ T3758] FAT-fs (loop3): Directory bread(block 68) failed [ 247.001383][ T3758] FAT-fs (loop3): Directory bread(block 69) failed [ 247.008292][ T284] EXT4-fs (loop1): unmounting filesystem. [ 247.013737][ T3758] FAT-fs (loop3): Directory bread(block 70) failed [ 247.020623][ T3758] FAT-fs (loop3): Directory bread(block 71) failed [ 247.027184][ T3758] FAT-fs (loop3): Directory bread(block 72) failed [ 247.047440][ T3731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.056303][ T3758] FAT-fs (loop3): Directory bread(block 73) failed [ 247.063868][ T3731] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.115723][ T28] audit: type=1326 audit(1750927115.030:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3755 comm="syz.3.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f467718e929 code=0x7ffc0000 [ 247.116408][ T3756] netlink: 4 bytes leftover after parsing attributes in process `syz.3.839'. [ 247.155447][ T28] audit: type=1326 audit(1750927115.030:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3755 comm="syz.3.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f467718e929 code=0x7ffc0000 [ 247.172422][ T3756] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56323 sclass=netlink_route_socket pid=3756 comm=syz.3.839 [ 247.191841][ T28] audit: type=1326 audit(1750927115.030:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3755 comm="syz.3.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7f467718e929 code=0x7ffc0000 [ 247.215617][ T28] audit: type=1326 audit(1750927115.030:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3755 comm="syz.3.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f467718e929 code=0x7ffc0000 [ 247.239031][ T28] audit: type=1326 audit(1750927115.030:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3755 comm="syz.3.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f467718e929 code=0x7ffc0000 [ 247.239165][ T3763] loop1: detected capacity change from 0 to 512 [ 247.262599][ T28] audit: type=1326 audit(1750927115.030:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3755 comm="syz.3.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f467718e929 code=0x7ffc0000 [ 247.269122][ T3763] EXT4-fs: Ignoring removed nobh option [ 247.306540][ T595] usb 5-1: USB disconnect, device number 15 [ 247.320502][ T595] usblp0: removed [ 247.325097][ T3763] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 247.365149][ T3767] overlayfs: failed to resolve './file0': -2 [ 247.387039][ T3769] 9pnet_fd: Insufficient options for proto=fd [ 247.657709][ T6] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 247.671829][ T3772] loop0: detected capacity change from 0 to 40427 [ 247.686121][ T3772] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 247.696718][ T3772] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 247.707749][ T3772] F2FS-fs (loop0): invalid crc value [ 247.725724][ T3772] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 247.771955][ T3772] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 247.779178][ T3772] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 247.827979][ T3778] 9pnet_fd: Insufficient options for proto=fd [ 247.849482][ T6] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 247.861351][ T6] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 247.876318][ T6] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 247.937507][ T284] EXT4-fs (loop1): unmounting filesystem. [ 247.944031][ T6] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 247.958320][ T6] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 247.966569][ T6] usb 4-1: Product: syz [ 247.971084][ T6] usb 4-1: Manufacturer: syz [ 247.975701][ T6] usb 4-1: SerialNumber: syz [ 248.167724][ T595] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 248.187429][ T6] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 248.382314][ T283] syz-executor: attempt to access beyond end of device [ 248.382314][ T283] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 248.407951][ T595] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 248.408132][ T3769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.428006][ T595] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 248.442946][ T595] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 248.476708][ T3769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.485812][ T595] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 248.505212][ T595] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 248.518020][ T595] usb 5-1: Product: syz [ 248.522228][ T595] usb 5-1: Manufacturer: syz [ 248.537178][ T595] usb 5-1: SerialNumber: syz [ 248.586652][ T3786] loop0: detected capacity change from 0 to 1024 [ 248.597988][ T3786] EXT4-fs: Ignoring removed i_version option [ 248.621732][ T3788] device syzkaller0 entered promiscuous mode [ 248.634094][ T3786] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 248.707479][ T283] EXT4-fs (loop0): unmounting filesystem. [ 248.714927][ T591] usb 4-1: USB disconnect, device number 11 [ 248.732264][ T591] usblp0: removed [ 248.761174][ T595] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 16 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 248.780944][ T595] usb 5-1: USB disconnect, device number 16 [ 248.794488][ T595] usblp0: removed [ 248.847967][ T3792] xt_TPROXY: Can be used only with -p tcp or -p udp [ 248.889876][ T3795] loop2: detected capacity change from 0 to 256 [ 251.149772][ T3806] netlink: 104 bytes leftover after parsing attributes in process `syz.4.854'. [ 251.391472][ T3815] loop1: detected capacity change from 0 to 512 [ 251.398199][ T3815] EXT4-fs: Ignoring removed nobh option [ 251.644410][ T3815] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 251.824315][ T3804] xt_TPROXY: Can be used only with -p tcp or -p udp [ 251.948851][ T3823] loop0: detected capacity change from 0 to 40427 [ 251.967421][ T3823] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 251.976338][ T3823] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 251.986303][ T3823] F2FS-fs (loop0): invalid crc value [ 252.012636][ T3823] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 252.025848][ T3830] loop4: detected capacity change from 0 to 1024 [ 252.036959][ T3830] EXT4-fs: Ignoring removed i_version option [ 252.055805][ T3830] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 252.079113][ T284] EXT4-fs (loop1): unmounting filesystem. [ 252.080892][ T3823] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 252.092657][ T3823] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 252.123448][ T3834] loop1: detected capacity change from 0 to 256 [ 252.189710][ T285] EXT4-fs (loop4): unmounting filesystem. [ 252.700342][ T3842] 9pnet_fd: Insufficient options for proto=fd [ 252.770386][ T283] syz-executor: attempt to access beyond end of device [ 252.770386][ T283] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 252.784935][ T3836] xt_TPROXY: Can be used only with -p tcp or -p udp [ 252.855112][ T3843] loop3: detected capacity change from 0 to 40427 [ 252.867198][ T3843] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 252.873917][ T3843] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 252.883117][ T3843] F2FS-fs (loop3): invalid crc value [ 252.911994][ T3843] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 252.964177][ T3843] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 252.977703][ T3843] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 253.023771][ T3850] 9pnet_fd: Insufficient options for proto=fd [ 253.044815][ T3852] 9pnet_fd: Insufficient options for proto=fd [ 253.092073][ T287] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 253.279890][ T287] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 253.303455][ T287] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 253.317739][ T595] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 253.325430][ T1469] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 253.333218][ T287] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 253.334280][ T3854] loop0: detected capacity change from 0 to 40427 [ 253.358555][ T287] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 253.361642][ T3854] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 253.379938][ T287] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 253.381686][ T3854] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 253.399796][ T287] usb 3-1: Product: syz [ 253.404038][ T287] usb 3-1: Manufacturer: syz [ 253.411999][ T3854] F2FS-fs (loop0): invalid crc value [ 253.420173][ T287] usb 3-1: SerialNumber: syz [ 253.426266][ T3854] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 253.464070][ T3854] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 253.471477][ T3854] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 253.538837][ T595] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 253.548670][ T1469] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 253.564694][ T1469] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 253.574445][ T595] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 253.591125][ T595] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 253.627938][ T282] syz-executor: attempt to access beyond end of device [ 253.627938][ T282] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 253.637592][ T1469] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 253.646934][ T287] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 253.666862][ T1469] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 253.676562][ T595] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 253.685842][ T595] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 253.849485][ T3842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.871351][ T3842] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.881668][ T3864] device syzkaller0 entered promiscuous mode [ 253.895816][ T3842] netlink: 24 bytes leftover after parsing attributes in process `syz.2.862'. [ 253.950412][ T1469] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 253.958614][ T595] usb 2-1: Product: syz [ 253.962803][ T595] usb 2-1: Manufacturer: syz [ 253.967529][ T595] usb 2-1: SerialNumber: syz [ 253.972339][ T1469] usb 5-1: Product: syz [ 253.976560][ T1469] usb 5-1: Manufacturer: syz [ 253.981230][ T1469] usb 5-1: SerialNumber: syz [ 254.020540][ T283] syz-executor: attempt to access beyond end of device [ 254.020540][ T283] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 254.122298][ T3870] device bridge0 entered promiscuous mode [ 254.128257][ T3870] device macsec1 entered promiscuous mode [ 254.134759][ T3870] bridge0: port 3(macsec1) entered blocking state [ 254.141687][ T3870] bridge0: port 3(macsec1) entered disabled state [ 254.149394][ T3870] device bridge0 left promiscuous mode [ 254.193869][ T595] usblp 2-1:1.0: usblp1: USB Unidirectional printer dev 16 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 254.209938][ T1304] usb 3-1: USB disconnect, device number 12 [ 254.217017][ T3873] loop0: detected capacity change from 0 to 256 [ 254.223862][ T1469] usblp 5-1:1.0: usblp2: USB Unidirectional printer dev 17 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 254.237028][ T595] usb 2-1: USB disconnect, device number 16 [ 254.249818][ T1469] usb 5-1: USB disconnect, device number 17 [ 254.278475][ T1469] usblp2: removed [ 254.287380][ T1304] usblp0: removed [ 254.291526][ T595] usblp1: removed [ 254.713609][ T3877] loop3: detected capacity change from 0 to 1024 [ 254.720437][ T3877] EXT4-fs: Ignoring removed i_version option [ 254.736370][ T3877] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 254.755075][ T3881] netlink: 104 bytes leftover after parsing attributes in process `syz.1.872'. [ 254.790883][ T3883] device macsec1 entered promiscuous mode [ 254.798754][ T3883] device bridge0 entered promiscuous mode [ 254.804867][ T3883] bridge0: port 1(macsec1) entered blocking state [ 254.811972][ T3883] bridge0: port 1(macsec1) entered disabled state [ 254.828572][ T3883] device bridge0 left promiscuous mode [ 254.842080][ T28] kauditd_printk_skb: 36 callbacks suppressed [ 254.842097][ T28] audit: type=1400 audit(1750927122.760:378): avc: denied { mount } for pid=3882 comm="syz.2.873" name="/" dev="configfs" ino=9372 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 254.893160][ T282] EXT4-fs (loop3): unmounting filesystem. [ 254.934540][ T28] audit: type=1400 audit(1750927122.790:379): avc: denied { search } for pid=3882 comm="syz.2.873" name="/" dev="configfs" ino=9372 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 254.961847][ T28] audit: type=1400 audit(1750927122.790:380): avc: denied { read } for pid=3882 comm="syz.2.873" name="/" dev="configfs" ino=9372 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 254.998547][ T3892] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.006075][ T3892] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.027322][ T28] audit: type=1400 audit(1750927122.790:381): avc: denied { open } for pid=3882 comm="syz.2.873" path="/" dev="configfs" ino=9372 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 255.095743][ T28] audit: type=1400 audit(1750927122.910:382): avc: denied { append } for pid=3890 comm="syz.3.875" name="001" dev="devtmpfs" ino=182 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 255.145668][ T3893] xt_TPROXY: Can be used only with -p tcp or -p udp [ 255.169088][ T3900] netlink: 'syz.0.877': attribute type 7 has an invalid length. [ 255.177000][ T3900] netlink: 'syz.0.877': attribute type 8 has an invalid length. [ 255.188679][ T3901] loop3: detected capacity change from 0 to 512 [ 255.195946][ T3901] EXT4-fs: Ignoring removed nobh option [ 255.275819][ T3901] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 255.446309][ T3912] device syzkaller0 entered promiscuous mode [ 255.577382][ T3909] loop0: detected capacity change from 0 to 40427 [ 255.596115][ T3909] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 255.614375][ T3909] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 255.633009][ T3909] F2FS-fs (loop0): invalid crc value [ 255.653811][ T3909] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 255.695923][ T3919] 9pnet_fd: Insufficient options for proto=fd [ 255.706515][ T3909] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 255.713698][ T3909] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 255.885869][ T28] audit: type=1400 audit(1750927123.800:383): avc: denied { map } for pid=3923 comm="syz.4.885" path="socket:[29720]" dev="sockfs" ino=29720 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 255.973651][ T282] EXT4-fs (loop3): unmounting filesystem. [ 255.977760][ T1469] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 256.121558][ T3930] loop3: detected capacity change from 0 to 512 [ 256.128332][ T3930] EXT4-fs: Ignoring removed nobh option [ 256.139851][ T3930] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 256.169721][ T1469] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 256.180631][ T1469] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 256.190401][ T1469] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 256.214562][ T1469] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 256.223996][ T1469] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 256.224622][ T283] syz-executor: attempt to access beyond end of device [ 256.224622][ T283] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 256.232404][ T1469] usb 2-1: Product: syz [ 256.250555][ T1469] usb 2-1: Manufacturer: syz [ 256.255216][ T1469] usb 2-1: SerialNumber: syz [ 256.370175][ T3936] device bridge0 entered promiscuous mode [ 256.376095][ T3936] device macsec1 entered promiscuous mode [ 256.384450][ T3936] bridge0: port 3(macsec1) entered blocking state [ 256.391087][ T3936] bridge0: port 3(macsec1) entered disabled state [ 256.399054][ T3936] device bridge0 left promiscuous mode [ 256.410814][ T3934] loop2: detected capacity change from 0 to 256 [ 256.419678][ T3934] FAT-fs (loop2): IO charset c not found [ 256.472140][ T1469] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 17 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 256.511536][ T28] audit: type=1400 audit(1750927124.430:384): avc: denied { mount } for pid=3942 comm="syz.2.891" name="/" dev="ramfs" ino=29754 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 256.615478][ T3948] overlayfs: failed to resolve './file0': -2 [ 256.688841][ T3919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.698210][ T3919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.706657][ T3919] netlink: 24 bytes leftover after parsing attributes in process `syz.1.883'. [ 256.747709][ T591] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 256.863914][ T282] EXT4-fs (loop3): unmounting filesystem. [ 256.927255][ T1469] usb 2-1: USB disconnect, device number 17 [ 256.935872][ T1469] usblp0: removed [ 256.940952][ T591] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 256.951987][ T591] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 256.964486][ T3957] loop3: detected capacity change from 0 to 512 [ 256.971171][ T3957] EXT4-fs: Ignoring removed nobh option [ 256.980522][ T591] usb 1-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.04 [ 256.990385][ T591] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.990875][ T3957] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 257.010373][ T591] usb 1-1: config 0 descriptor?? [ 257.419684][ T591] logitech-djreceiver 0003:046D:C534.0013: item fetching failed at offset 2/5 [ 257.430705][ T591] logitech-djreceiver 0003:046D:C534.0013: logi_dj_probe: parse failed [ 257.449821][ T591] logitech-djreceiver: probe of 0003:046D:C534.0013 failed with error -22 [ 257.511020][ T3963] device syzkaller0 entered promiscuous mode [ 257.599810][ T3967] device macsec1 entered promiscuous mode [ 257.605638][ T3967] device bridge0 entered promiscuous mode [ 257.611939][ T3967] bridge0: port 1(macsec1) entered blocking state [ 257.618656][ T3967] bridge0: port 1(macsec1) entered disabled state [ 257.626143][ T3967] device bridge0 left promiscuous mode [ 257.629347][ T591] usb 1-1: USB disconnect, device number 18 [ 257.698602][ T3970] netlink: 'syz.1.900': attribute type 7 has an invalid length. [ 257.706369][ T3970] netlink: 'syz.1.900': attribute type 8 has an invalid length. [ 257.742326][ T3976] loop1: detected capacity change from 0 to 256 [ 257.750240][ T282] EXT4-fs (loop3): unmounting filesystem. [ 258.752349][ T3988] 9pnet_fd: Insufficient options for proto=fd [ 258.783007][ T3991] loop1: detected capacity change from 0 to 512 [ 258.789729][ T3991] EXT4-fs: Ignoring removed nobh option [ 258.813433][ T3991] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 259.027778][ T591] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 259.161351][ T28] audit: type=1400 audit(1750927127.080:385): avc: denied { accept } for pid=4000 comm="syz.3.910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 259.219988][ T591] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 259.231079][ T591] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 259.260942][ T4003] loop0: detected capacity change from 0 to 512 [ 259.269268][ T4003] EXT4-fs: Ignoring removed nobh option [ 259.327020][ T591] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 259.401807][ T4003] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 259.460908][ T28] audit: type=1400 audit(1750927127.380:386): avc: denied { ioctl } for pid=4000 comm="syz.3.910" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=29995 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 259.707203][ T284] EXT4-fs (loop1): unmounting filesystem. [ 259.754414][ T591] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 259.911031][ T591] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 260.034901][ T591] usb 5-1: Product: syz [ 260.051200][ T591] usb 5-1: Manufacturer: syz [ 260.055925][ T591] usb 5-1: SerialNumber: syz [ 260.227770][ T4008] loop3: detected capacity change from 0 to 40427 [ 260.243301][ T4008] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 260.259459][ T4008] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 260.269193][ T4008] F2FS-fs (loop3): invalid crc value [ 260.275966][ T4008] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 260.294377][ T283] EXT4-fs (loop0): unmounting filesystem. [ 260.333812][ T4008] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 260.341069][ T4008] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 260.365423][ T591] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 18 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 260.459900][ T4025] loop2: detected capacity change from 0 to 256 [ 260.466459][ T4022] loop0: detected capacity change from 0 to 256 [ 260.589613][ T3988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.596700][ T4022] FAT-fs (loop0): Directory bread(block 64) failed [ 260.607057][ T4022] FAT-fs (loop0): Directory bread(block 65) failed [ 260.610703][ T3988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.257487][ T4022] FAT-fs (loop0): Directory bread(block 66) failed [ 261.301045][ T282] syz-executor: attempt to access beyond end of device [ 261.301045][ T282] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 261.460157][ T4022] FAT-fs (loop0): Directory bread(block 67) failed [ 261.491407][ T4022] FAT-fs (loop0): Directory bread(block 68) failed [ 261.498265][ T4022] FAT-fs (loop0): Directory bread(block 69) failed [ 261.504933][ T4022] FAT-fs (loop0): Directory bread(block 70) failed [ 261.506143][ T3988] netlink: 24 bytes leftover after parsing attributes in process `syz.4.907'. [ 261.511834][ T4022] FAT-fs (loop0): Directory bread(block 71) failed [ 261.528499][ T4022] FAT-fs (loop0): Directory bread(block 72) failed [ 261.535109][ T4022] FAT-fs (loop0): Directory bread(block 73) failed [ 261.628296][ T4021] loop1: detected capacity change from 0 to 40427 [ 261.643187][ T4034] loop2: detected capacity change from 0 to 1024 [ 261.653157][ T4034] EXT4-fs: Ignoring removed i_version option [ 261.660722][ T4021] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 261.667206][ T4021] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 261.677271][ T4021] F2FS-fs (loop1): invalid crc value [ 261.714012][ T4035] device syzkaller0 entered promiscuous mode [ 261.722177][ T4034] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 261.749321][ T4021] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 261.910624][ T796] usb 5-1: USB disconnect, device number 18 [ 262.128344][ T4021] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 262.135992][ T4021] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 262.148414][ T796] usblp0: removed [ 262.204084][ T286] EXT4-fs (loop2): unmounting filesystem. [ 262.334626][ T4050] loop2: detected capacity change from 0 to 512 [ 262.344084][ T4051] loop0: detected capacity change from 0 to 512 [ 262.351662][ T4050] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 262.351980][ T4051] EXT4-fs: Ignoring removed nobh option [ 262.374198][ T4051] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 262.381318][ T4050] EXT4-fs (loop2): orphan cleanup on readonly fs [ 262.723719][ T4050] EXT4-fs error (device loop2): ext4_quota_enable:7005: comm syz.2.923: Bad quota inum: 64, type: 0 [ 262.742184][ T4050] EXT4-fs warning (device loop2): ext4_enable_quotas:7053: Failed to enable quota tracking (type=0, err=-117, ino=64). Please run e2fsck to fix. [ 262.757445][ T4050] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 262.768923][ T4050] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 263.023620][ T284] syz-executor: attempt to access beyond end of device [ 263.023620][ T284] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 263.085412][ T283] EXT4-fs (loop0): unmounting filesystem. [ 263.158695][ T4063] device syzkaller0 entered promiscuous mode [ 263.202607][ T286] EXT4-fs (loop2): unmounting filesystem. [ 263.291879][ T4071] loop4: detected capacity change from 0 to 256 [ 263.300723][ T4071] exfat: Deprecated parameter 'utf8' [ 263.306257][ T4071] exfat: Deprecated parameter 'utf8' [ 263.640276][ T4071] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 263.720244][ T28] audit: type=1400 audit(1750927131.640:387): avc: denied { write } for pid=4060 comm="syz.4.927" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 263.989617][ T28] audit: type=1400 audit(1750927131.640:388): avc: denied { add_name } for pid=4060 comm="syz.4.927" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 264.022998][ T28] audit: type=1400 audit(1750927131.640:389): avc: denied { associate } for pid=4060 comm="syz.4.927" name="file2" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 264.127757][ T28] audit: type=1400 audit(1750927131.660:390): avc: denied { write open } for pid=4060 comm="syz.4.927" path="/182/file0/file2" dev="loop4" ino=1048603 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 264.204683][ T4078] loop0: detected capacity change from 0 to 256 [ 264.228827][ T4080] overlayfs: failed to resolve './file0': -2 [ 264.372907][ T4085] loop4: detected capacity change from 0 to 256 [ 264.376299][ T4082] overlayfs: failed to resolve './file0': -2 [ 264.423252][ T4085] FAT-fs (loop4): Directory bread(block 64) failed [ 264.534043][ T4085] FAT-fs (loop4): Directory bread(block 65) failed [ 264.689442][ T4085] FAT-fs (loop4): Directory bread(block 66) failed [ 264.742900][ T4085] FAT-fs (loop4): Directory bread(block 67) failed [ 264.749599][ T4085] FAT-fs (loop4): Directory bread(block 68) failed [ 264.756235][ T4085] FAT-fs (loop4): Directory bread(block 69) failed [ 264.762961][ T4085] FAT-fs (loop4): Directory bread(block 70) failed [ 264.769527][ T4085] FAT-fs (loop4): Directory bread(block 71) failed [ 264.776130][ T4085] FAT-fs (loop4): Directory bread(block 72) failed [ 264.792561][ T4085] FAT-fs (loop4): Directory bread(block 73) failed [ 266.754771][ T4091] loop1: detected capacity change from 0 to 40427 [ 266.778419][ T4091] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 266.802033][ T4091] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 266.826619][ T4091] F2FS-fs (loop1): invalid crc value [ 266.836063][ T4091] F2FS-fs (loop1): Found nat_bits in checkpoint [ 266.895997][ T4091] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 266.903577][ T4091] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 267.800881][ T4105] 9pnet_fd: Insufficient options for proto=fd [ 267.810848][ T4103] device macsec0 entered promiscuous mode [ 267.891533][ T28] audit: type=1400 audit(1750927135.810:391): avc: denied { ioctl } for pid=4090 comm="syz.1.936" path="/190/bus/file0" dev="loop1" ino=455 ioctlcmd=0x5828 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 268.127803][ T796] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 268.348806][ T796] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 268.362769][ T796] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 268.372936][ T4111] xt_TPROXY: Can be used only with -p tcp or -p udp [ 268.381884][ T796] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 268.399992][ T4108] loop0: detected capacity change from 0 to 40427 [ 268.415134][ T4108] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 268.430192][ T4108] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 268.439824][ T4108] F2FS-fs (loop0): invalid crc value [ 268.450104][ T4108] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 268.485254][ T4108] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 268.492517][ T1469] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 268.492596][ T796] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 268.501439][ T4108] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 268.509398][ T796] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 268.525037][ T796] usb 5-1: Product: syz [ 268.529344][ T796] usb 5-1: Manufacturer: syz [ 268.533972][ T796] usb 5-1: SerialNumber: syz [ 268.689012][ T1469] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 268.707245][ T1469] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 268.722910][ T1469] usb 2-1: New USB device found, idVendor=0525, idProduct=e4a1, bcdDevice= 0.40 [ 268.750215][ T796] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 19 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 268.867457][ T1469] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.875829][ T1469] usb 2-1: Product: syz [ 268.880296][ T1469] usb 2-1: Manufacturer: syz [ 268.886869][ T1469] usb 2-1: SerialNumber: syz [ 268.943509][ T283] syz-executor: attempt to access beyond end of device [ 268.943509][ T283] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 268.968544][ T4105] netlink: 24 bytes leftover after parsing attributes in process `syz.4.937'. [ 268.985503][ T1469] cdc_ncm 2-1:1.0: bind() failure [ 268.992458][ T1469] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 269.006023][ T1469] cdc_ncm 2-1:1.1: bind() failure [ 269.006217][ T284] syz-executor: attempt to access beyond end of device [ 269.006217][ T284] loop1: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 269.029032][ T4130] loop2: detected capacity change from 0 to 256 [ 269.035735][ T1469] usb 2-1: USB disconnect, device number 18 [ 269.068439][ T4130] syz.2.946: attempt to access beyond end of device [ 269.068439][ T4130] loop2: rw=2049, sector=256, nr_sectors = 64 limit=256 [ 269.082138][ T313] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 269.088403][ T4130] syz.2.946: attempt to access beyond end of device [ 269.088403][ T4130] loop2: rw=2049, sector=256, nr_sectors = 4 limit=256 [ 269.105110][ T313] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 269.137757][ T4130] Buffer I/O error on dev loop2, logical block 64, lost async page write [ 269.211190][ T4138] loop0: detected capacity change from 0 to 512 [ 269.218207][ T4138] EXT4-fs: Ignoring removed nobh option [ 269.235306][ T591] usb 5-1: USB disconnect, device number 19 [ 269.246036][ T591] usblp0: removed [ 269.264675][ T4138] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 269.293902][ T4142] loop1: detected capacity change from 0 to 256 [ 269.315293][ T4142] FAT-fs (loop1): Directory bread(block 64) failed [ 269.338578][ T4142] FAT-fs (loop1): Directory bread(block 65) failed [ 269.365532][ T4142] FAT-fs (loop1): Directory bread(block 66) failed [ 269.385708][ T4142] FAT-fs (loop1): Directory bread(block 67) failed [ 269.405971][ T4142] FAT-fs (loop1): Directory bread(block 68) failed [ 269.416091][ T4142] FAT-fs (loop1): Directory bread(block 69) failed [ 269.434704][ T4142] FAT-fs (loop1): Directory bread(block 70) failed [ 269.448086][ T4142] FAT-fs (loop1): Directory bread(block 71) failed [ 269.452798][ T4136] loop2: detected capacity change from 0 to 40427 [ 269.465293][ T4142] FAT-fs (loop1): Directory bread(block 72) failed [ 269.471037][ T4136] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 269.485447][ T4142] FAT-fs (loop1): Directory bread(block 73) failed [ 269.487581][ T4136] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 269.528232][ T4136] F2FS-fs (loop2): invalid crc value [ 269.564837][ T4136] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 269.594163][ T4136] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 269.602359][ T4136] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 270.489202][ T283] EXT4-fs (loop0): unmounting filesystem. [ 270.527330][ T4153] netlink: 104 bytes leftover after parsing attributes in process `syz.4.951'. [ 270.543201][ T4157] netlink: 104 bytes leftover after parsing attributes in process `syz.0.949'. [ 270.555939][ T4158] loop1: detected capacity change from 0 to 256 [ 270.606744][ T286] syz-executor: attempt to access beyond end of device [ 270.606744][ T286] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 270.622966][ T4158] FAT-fs (loop1): Directory bread(block 64) failed [ 270.637739][ T4158] FAT-fs (loop1): Directory bread(block 65) failed [ 270.664726][ T4158] FAT-fs (loop1): Directory bread(block 66) failed [ 270.678478][ T4158] FAT-fs (loop1): Directory bread(block 67) failed [ 270.705923][ T4158] FAT-fs (loop1): Directory bread(block 68) failed [ 270.725625][ T4158] FAT-fs (loop1): Directory bread(block 69) failed [ 270.756007][ T4158] FAT-fs (loop1): Directory bread(block 70) failed [ 270.772998][ T4158] FAT-fs (loop1): Directory bread(block 71) failed [ 270.787075][ T4158] FAT-fs (loop1): Directory bread(block 72) failed [ 270.803855][ T4158] FAT-fs (loop1): Directory bread(block 73) failed [ 271.032926][ T4160] loop3: detected capacity change from 0 to 40427 [ 271.052276][ T4160] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 271.061429][ T4160] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 271.111993][ T4160] F2FS-fs (loop3): invalid crc value [ 271.134533][ T4160] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 271.159067][ T4166] xt_TPROXY: Can be used only with -p tcp or -p udp [ 271.239255][ T4160] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 271.248526][ T4160] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 271.399349][ T4179] loop0: detected capacity change from 0 to 256 [ 271.421471][ T4179] FAT-fs (loop0): Directory bread(block 64) failed [ 271.428522][ T4179] FAT-fs (loop0): Directory bread(block 65) failed [ 271.435609][ T4179] FAT-fs (loop0): Directory bread(block 66) failed [ 271.443761][ T4179] FAT-fs (loop0): Directory bread(block 67) failed [ 271.450546][ T4179] FAT-fs (loop0): Directory bread(block 68) failed [ 271.457326][ T4179] FAT-fs (loop0): Directory bread(block 69) failed [ 271.464145][ T4179] FAT-fs (loop0): Directory bread(block 70) failed [ 271.490789][ T4179] FAT-fs (loop0): Directory bread(block 71) failed [ 271.536871][ T4179] FAT-fs (loop0): Directory bread(block 72) failed [ 271.552411][ T4179] FAT-fs (loop0): Directory bread(block 73) failed [ 271.619199][ T4186] loop4: detected capacity change from 0 to 256 [ 271.662961][ T4183] loop4: detected capacity change from 0 to 512 [ 271.736439][ T4183] EXT4-fs: Ignoring removed bh option [ 271.743416][ T282] syz-executor: attempt to access beyond end of device [ 271.743416][ T282] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 272.158031][ T4183] ext4: Unknown parameter 'fowner' [ 272.515893][ T4196] 9pnet_fd: Insufficient options for proto=fd [ 272.568586][ T4199] loop2: detected capacity change from 0 to 512 [ 272.576574][ T4199] EXT4-fs: Ignoring removed nobh option [ 272.588670][ T4199] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 272.624733][ T4202] loop3: detected capacity change from 0 to 256 [ 272.653345][ T4202] FAT-fs (loop3): Directory bread(block 64) failed [ 272.661428][ T4204] device macsec0 entered promiscuous mode [ 272.664242][ T4202] FAT-fs (loop3): Directory bread(block 65) failed [ 272.675517][ T4202] FAT-fs (loop3): Directory bread(block 66) failed [ 272.688906][ T4202] FAT-fs (loop3): Directory bread(block 67) failed [ 272.690951][ T4206] loop4: detected capacity change from 0 to 256 [ 272.696425][ T4202] FAT-fs (loop3): Directory bread(block 68) failed [ 272.711598][ T4202] FAT-fs (loop3): Directory bread(block 69) failed [ 272.724207][ T4206] syz.4.965: attempt to access beyond end of device [ 272.724207][ T4206] loop4: rw=2049, sector=256, nr_sectors = 64 limit=256 [ 272.728507][ T4202] FAT-fs (loop3): Directory bread(block 70) failed [ 272.748142][ T4202] FAT-fs (loop3): Directory bread(block 71) failed [ 272.754731][ T4202] FAT-fs (loop3): Directory bread(block 72) failed [ 272.761861][ T4202] FAT-fs (loop3): Directory bread(block 73) failed [ 272.774248][ T28] audit: type=1400 audit(1750927140.690:392): avc: denied { connect } for pid=4207 comm="syz.4.966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 272.797733][ T1304] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 272.864976][ T796] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 272.932566][ T4212] syz.4.967[4212] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 272.934549][ T4212] syz.4.967[4212] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 273.060773][ T4212] loop4: detected capacity change from 0 to 512 [ 273.089462][ T4212] EXT4-fs: Ignoring removed nobh option [ 273.195738][ T4212] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 273.249932][ T796] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.290855][ T796] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 273.310090][ T796] usb 2-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.04 [ 273.319421][ T796] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.334157][ T796] usb 2-1: config 0 descriptor?? [ 273.336411][ T286] EXT4-fs (loop2): unmounting filesystem. [ 273.346423][ T1304] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 273.356849][ T1304] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 273.367242][ T1304] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 273.381564][ T1304] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 273.388459][ T4216] netlink: 104 bytes leftover after parsing attributes in process `syz.2.968'. [ 273.391675][ T1304] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 273.408021][ T1304] usb 1-1: Product: syz [ 273.412254][ T1304] usb 1-1: Manufacturer: syz [ 273.416994][ T1304] usb 1-1: SerialNumber: syz [ 273.630335][ T1304] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 19 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 273.668152][ T285] EXT4-fs (loop4): unmounting filesystem. [ 273.747631][ T796] logitech-djreceiver 0003:046D:C534.0014: item fetching failed at offset 2/5 [ 273.757110][ T796] logitech-djreceiver 0003:046D:C534.0014: logi_dj_probe: parse failed [ 273.777730][ T796] logitech-djreceiver: probe of 0003:046D:C534.0014 failed with error -22 [ 273.841420][ T4196] netlink: 24 bytes leftover after parsing attributes in process `syz.0.962'. [ 273.953415][ T1304] usb 2-1: USB disconnect, device number 19 [ 273.986137][ T4227] device bridge_slave_0 left promiscuous mode [ 273.996168][ T4227] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.032753][ T4227] device bridge_slave_1 left promiscuous mode [ 274.049871][ T4227] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.073813][ T1469] usb 1-1: USB disconnect, device number 19 [ 274.084666][ T1469] usblp0: removed [ 274.120021][ T4227] device macsec0 left promiscuous mode [ 274.311093][ T4237] loop4: detected capacity change from 0 to 256 [ 274.471326][ T342] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 274.677702][ T4243] loop4: detected capacity change from 0 to 512 [ 274.685406][ T4243] EXT4-fs: Ignoring removed bh option [ 274.691692][ T4243] ext4: Unknown parameter 'fowner' [ 274.730312][ T4245] loop1: detected capacity change from 0 to 256 [ 275.248110][ T4255] loop3: detected capacity change from 0 to 256 [ 275.258960][ T4252] loop2: detected capacity change from 0 to 256 [ 275.295670][ T4248] loop0: detected capacity change from 0 to 40427 [ 275.307881][ T4248] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 275.314840][ T4248] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 275.328136][ T4248] F2FS-fs (loop0): invalid crc value [ 275.346160][ T4252] FAT-fs (loop2): IO charset c not found [ 275.354831][ T4248] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 275.369267][ T4255] FAT-fs (loop3): Directory bread(block 64) failed [ 275.376020][ T4255] FAT-fs (loop3): Directory bread(block 65) failed [ 275.398031][ T4255] FAT-fs (loop3): Directory bread(block 66) failed [ 275.407736][ T4255] FAT-fs (loop3): Directory bread(block 67) failed [ 275.414886][ T4255] FAT-fs (loop3): Directory bread(block 68) failed [ 275.427724][ T4255] FAT-fs (loop3): Directory bread(block 69) failed [ 275.434681][ T4255] FAT-fs (loop3): Directory bread(block 70) failed [ 275.444734][ T4248] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 275.451944][ T4248] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 275.461550][ T4255] FAT-fs (loop3): Directory bread(block 71) failed [ 275.473941][ T4255] FAT-fs (loop3): Directory bread(block 72) failed [ 275.482559][ T4255] FAT-fs (loop3): Directory bread(block 73) failed [ 277.253577][ T4251] loop4: detected capacity change from 0 to 40427 [ 277.308707][ T4251] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 277.315279][ T4251] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 277.331725][ T283] syz-executor: attempt to access beyond end of device [ 277.331725][ T283] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 277.369703][ T4251] F2FS-fs (loop4): invalid crc value [ 277.414891][ T4251] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 277.857734][ T1469] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 278.007798][ T4278] FAULT_INJECTION: forcing a failure. [ 278.007798][ T4278] name failslab, interval 1, probability 0, space 0, times 0 [ 278.021292][ T4278] CPU: 1 PID: 4278 Comm: syz.0.982 Not tainted 6.1.141-syzkaller-00030-g44c8456c4231 #0 [ 278.031582][ T4278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 278.041942][ T4278] Call Trace: [ 278.045282][ T4278] [ 278.048245][ T4278] __dump_stack+0x21/0x24 [ 278.052664][ T4278] dump_stack_lvl+0xee/0x150 [ 278.057752][ T4278] ? __cfi_dump_stack_lvl+0x8/0x8 [ 278.062955][ T4278] dump_stack+0x15/0x24 [ 278.067245][ T4278] should_fail_ex+0x3d4/0x520 [ 278.072060][ T4278] ? __alloc_file+0x28/0x2a0 [ 278.076688][ T4278] __should_failslab+0xac/0xf0 [ 278.081831][ T4278] should_failslab+0x9/0x20 [ 278.086456][ T4278] kmem_cache_alloc+0x3b/0x330 [ 278.091423][ T4278] __alloc_file+0x28/0x2a0 [ 278.095975][ T4278] alloc_empty_file+0x97/0x180 [ 278.100849][ T4278] path_openat+0xf4/0x2f50 [ 278.105401][ T4278] ? __kasan_check_write+0x14/0x20 [ 278.110728][ T4278] ? push_rt_task+0x35f/0x5b0 [ 278.115449][ T4278] ? __cfi_push_rt_tasks+0x10/0x10 [ 278.120878][ T4278] ? _raw_spin_unlock+0x4c/0x70 [ 278.125865][ T4278] ? __cfi_push_rt_tasks+0x10/0x10 [ 278.131108][ T4278] ? finish_task_switch+0x16b/0x7b0 [ 278.137659][ T4278] ? __switch_to_asm+0x3a/0x60 [ 278.142459][ T4278] ? release_firmware_map_entry+0x194/0x194 [ 278.148494][ T4278] ? do_filp_open+0x3c0/0x3c0 [ 278.153312][ T4278] ? release_firmware_map_entry+0x194/0x194 [ 278.159451][ T4278] ? preempt_schedule_irq+0xbb/0x110 [ 278.165178][ T4278] do_filp_open+0x1c1/0x3c0 [ 278.171674][ T4278] ? __cfi_do_filp_open+0x10/0x10 [ 278.177452][ T4278] ? preempt_schedule+0xa7/0xb0 [ 278.184100][ T4278] ? alloc_fd+0x4e6/0x590 [ 278.188683][ T4278] do_sys_openat2+0x185/0x7e0 [ 278.193798][ T4278] ? bpf_trace_run2+0x104/0x250 [ 278.199749][ T4278] ? do_sys_open+0xe0/0xe0 [ 278.204220][ T4278] ? __cfi_bpf_trace_run2+0x10/0x10 [ 278.209544][ T4278] ? ksys_write+0x1eb/0x240 [ 278.214288][ T4278] __x64_sys_openat+0x136/0x160 [ 278.219359][ T4278] x64_sys_call+0x783/0x9a0 [ 278.224407][ T4278] do_syscall_64+0x4c/0xa0 [ 278.229212][ T4278] ? clear_bhb_loop+0x30/0x80 [ 278.234308][ T4278] ? clear_bhb_loop+0x30/0x80 [ 278.239022][ T4278] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 278.245148][ T4278] RIP: 0033:0x7f0260f8e929 [ 278.249603][ T4278] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 278.270556][ T4278] RSP: 002b:00007f0261d5a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 278.277770][ T1469] usb 2-1: Using ep0 maxpacket: 32 [ 278.279048][ T4278] RAX: ffffffffffffffda RBX: 00007f02611b6160 RCX: 00007f0260f8e929 [ 278.279069][ T4278] RDX: 0000000000080200 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 278.279088][ T4278] RBP: 00007f0261d5a090 R08: 0000000000000000 R09: 0000000000000000 [ 278.289011][ T1469] usb 2-1: config 0 has an invalid interface number: 115 but max is 0 [ 278.293439][ T4278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 278.328663][ T4278] R13: 0000000000000000 R14: 00007f02611b6160 R15: 00007ffecf5a5438 [ 278.334926][ T4280] netlink: 104 bytes leftover after parsing attributes in process `syz.4.983'. [ 278.337414][ T4278] [ 278.430083][ T1469] usb 2-1: config 0 has no interface number 0 [ 278.447255][ T1469] usb 2-1: config 0 interface 115 has no altsetting 0 [ 278.451812][ T4283] loop3: detected capacity change from 0 to 256 [ 278.462480][ T1469] usb 2-1: New USB device found, idVendor=03f0, idProduct=3239, bcdDevice=c1.64 [ 278.481608][ T1469] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.497731][ T1469] usb 2-1: Product: syz [ 278.502695][ T1469] usb 2-1: Manufacturer: syz [ 278.507547][ T1469] usb 2-1: SerialNumber: syz [ 278.513654][ T1469] usb 2-1: config 0 descriptor?? [ 278.528706][ T1469] pl2303 2-1:0.115: required interrupt-in endpoint missing [ 278.613045][ T4285] device syzkaller0 entered promiscuous mode [ 278.629091][ T1469] usb 2-1: USB disconnect, device number 20 [ 278.661706][ T4288] 9pnet_fd: Insufficient options for proto=fd [ 278.721099][ T4292] netlink: 104 bytes leftover after parsing attributes in process `syz.0.988'. [ 279.041597][ T4297] loop2: detected capacity change from 0 to 40427 [ 279.055071][ T4297] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 279.062930][ T4297] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 279.076480][ T4297] F2FS-fs (loop2): invalid crc value [ 279.101965][ T4297] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 279.117953][ T1469] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 279.146526][ T4297] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 279.155640][ T4297] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 279.309119][ T1469] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 279.321369][ T1469] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 279.333260][ T1469] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 279.353007][ T1469] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 279.367125][ T1469] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 279.376742][ T1469] usb 2-1: Product: syz [ 279.382015][ T1469] usb 2-1: Manufacturer: syz [ 279.387560][ T1469] usb 2-1: SerialNumber: syz [ 279.597361][ T1469] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 21 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 279.618961][ T4309] overlayfs: failed to resolve './file0': -2 [ 279.676340][ T286] syz-executor: attempt to access beyond end of device [ 279.676340][ T286] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 279.747757][ T351] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 279.800825][ T4288] netlink: 24 bytes leftover after parsing attributes in process `syz.1.987'. [ 279.941579][ T351] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.976757][ T351] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 280.028642][ T351] usb 4-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.04 [ 280.102793][ T351] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.170864][ T796] usb 2-1: USB disconnect, device number 21 [ 280.243259][ T351] usb 4-1: config 0 descriptor?? [ 280.252527][ T796] usblp0: removed [ 280.754557][ T351] logitech-djreceiver 0003:046D:C534.0015: item fetching failed at offset 2/5 [ 280.791950][ T351] logitech-djreceiver 0003:046D:C534.0015: logi_dj_probe: parse failed [ 280.838459][ T351] logitech-djreceiver: probe of 0003:046D:C534.0015 failed with error -22 [ 280.988586][ T351] usb 4-1: USB disconnect, device number 12 [ 281.095735][ T4325] netlink: 8 bytes leftover after parsing attributes in process `syz.2.996'. [ 281.130652][ T4321] loop4: detected capacity change from 0 to 40427 [ 281.140350][ T4325] loop2: detected capacity change from 0 to 256 [ 281.152265][ T4321] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 281.167113][ T4321] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 281.196817][ T4321] F2FS-fs (loop4): invalid crc value [ 281.223958][ T4321] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 281.243226][ T4325] FAT-fs (loop2): Directory bread(block 64) failed [ 281.262331][ T4325] FAT-fs (loop2): Directory bread(block 65) failed [ 281.266062][ T4322] loop1: detected capacity change from 0 to 40427 [ 281.271583][ T4325] FAT-fs (loop2): Directory bread(block 66) failed [ 281.286142][ T4325] FAT-fs (loop2): Directory bread(block 67) failed [ 281.286712][ T4322] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 281.293515][ T4325] FAT-fs (loop2): Directory bread(block 68) failed [ 281.307767][ T4321] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 281.314992][ T4321] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 281.323080][ T4325] FAT-fs (loop2): Directory bread(block 69) failed [ 281.347180][ T4325] FAT-fs (loop2): Directory bread(block 70) failed [ 281.364963][ T4322] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 281.414673][ T4325] FAT-fs (loop2): Directory bread(block 71) failed [ 281.480594][ T4322] F2FS-fs (loop1): invalid crc value [ 281.504044][ T4325] FAT-fs (loop2): Directory bread(block 72) failed [ 281.580897][ T4325] FAT-fs (loop2): Directory bread(block 73) failed [ 281.676293][ T4322] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 282.166941][ T28] audit: type=1326 audit(1750927150.080:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4323 comm="syz.2.996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f869c98e929 code=0x7ffc0000 [ 282.197262][ T4325] netlink: 4 bytes leftover after parsing attributes in process `syz.2.996'. [ 282.238902][ T4325] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56323 sclass=netlink_route_socket pid=4325 comm=syz.2.996 [ 282.258097][ T4322] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 282.276691][ T28] audit: type=1326 audit(1750927150.110:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4323 comm="syz.2.996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f869c98e929 code=0x7ffc0000 [ 282.307919][ T4322] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 282.322849][ T28] audit: type=1326 audit(1750927150.110:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4323 comm="syz.2.996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7f869c98e929 code=0x7ffc0000 [ 282.347346][ T28] audit: type=1326 audit(1750927150.110:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4323 comm="syz.2.996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f869c98e929 code=0x7ffc0000 [ 282.372273][ T28] audit: type=1326 audit(1750927150.110:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4323 comm="syz.2.996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f869c98e929 code=0x7ffc0000 [ 282.432517][ T28] audit: type=1326 audit(1750927150.110:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4323 comm="syz.2.996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f869c98e929 code=0x7ffc0000 [ 282.474523][ T28] audit: type=1326 audit(1750927150.110:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4323 comm="syz.2.996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f869c98e929 code=0x7ffc0000 [ 282.513979][ T4343] overlayfs: missing 'lowerdir' [ 282.517763][ T28] audit: type=1326 audit(1750927150.110:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4323 comm="syz.2.996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f869c98e929 code=0x7ffc0000 [ 282.580980][ T28] audit: type=1326 audit(1750927150.110:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4323 comm="syz.2.996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f869c98e929 code=0x7ffc0000 [ 282.655642][ T28] audit: type=1326 audit(1750927150.110:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4323 comm="syz.2.996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f869c98e929 code=0x7ffc0000 [ 282.865342][ T4339] loop3: detected capacity change from 0 to 40427 [ 282.891436][ T4339] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 282.904649][ T4339] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 282.928447][ T4339] F2FS-fs (loop3): invalid crc value [ 282.945246][ T4339] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 283.028046][ T4339] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 283.036496][ T4339] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 283.219420][ T284] syz-executor: attempt to access beyond end of device [ 283.219420][ T284] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 283.242245][ T4350] loop2: detected capacity change from 0 to 40427 [ 283.262917][ T4350] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 283.285290][ T4350] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 283.308422][ T4350] F2FS-fs (loop2): invalid crc value [ 283.325313][ T285] syz-executor: attempt to access beyond end of device [ 283.325313][ T285] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 283.475078][ T4350] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 283.551605][ T4350] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 283.568047][ T4350] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 283.579459][ T282] syz-executor: attempt to access beyond end of device [ 283.579459][ T282] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 283.817336][ T4361] loop1: detected capacity change from 0 to 40427 [ 283.833598][ T4361] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 283.854695][ T4361] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 283.878159][ T4361] F2FS-fs (loop1): invalid crc value [ 283.908951][ T4361] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 283.921179][ T4366] loop4: detected capacity change from 0 to 40427 [ 283.940668][ T4366] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 283.953151][ T4369] syz.3.1004 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 283.965180][ T4366] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 283.999059][ T4366] F2FS-fs (loop4): invalid crc value [ 284.010709][ T4361] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 284.020463][ T4361] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 284.042394][ T4366] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 284.080646][ T284] syz-executor: attempt to access beyond end of device [ 284.080646][ T284] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 284.109829][ T4366] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 284.118686][ T4366] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 284.257833][ T351] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 284.302129][ T286] syz-executor: attempt to access beyond end of device [ 284.302129][ T286] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 284.448929][ T351] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.460217][ T351] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 284.469463][ T351] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.475379][ T4381] loop1: detected capacity change from 0 to 40427 [ 284.479118][ T351] usb 4-1: config 0 descriptor?? [ 284.529923][ T4381] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 284.580716][ T4381] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 284.663270][ T4381] F2FS-fs (loop1): invalid crc value [ 284.881217][ T4369] loop3: detected capacity change from 0 to 2048 [ 284.923782][ T4381] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 284.998424][ T4369] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 285.242429][ T351] usbhid 4-1:0.0: can't add hid device: -71 [ 285.340795][ T351] usbhid: probe of 4-1:0.0 failed with error -71 [ 285.391360][ T351] usb 4-1: USB disconnect, device number 13 [ 285.408413][ T285] syz-executor: attempt to access beyond end of device [ 285.408413][ T285] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 285.437579][ T4381] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 285.445513][ T4381] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 285.889460][ T4405] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1010'. [ 285.906148][ T4406] syz.0.1009[4406] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 285.906249][ T4406] syz.0.1009[4406] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 285.919114][ T4405] loop2: detected capacity change from 0 to 256 [ 285.940158][ T4410] syz.4.1011[4410] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 285.940257][ T4410] syz.4.1011[4410] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 285.956819][ T4411] loop0: detected capacity change from 0 to 512 [ 285.979021][ T4410] loop4: detected capacity change from 0 to 512 [ 285.985893][ T4410] EXT4-fs: Ignoring removed nobh option [ 286.010509][ T4411] EXT4-fs: Ignoring removed nobh option [ 286.110743][ T4405] FAT-fs (loop2): Directory bread(block 64) failed [ 286.120878][ T4412] loop3: detected capacity change from 0 to 512 [ 286.128329][ T4412] EXT4-fs: Ignoring removed nobh option [ 286.145207][ T4405] FAT-fs (loop2): Directory bread(block 65) failed [ 286.155327][ T4405] FAT-fs (loop2): Directory bread(block 66) failed [ 286.171186][ T4412] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 286.171186][ T4410] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 286.182599][ T4405] FAT-fs (loop2): Directory bread(block 67) failed [ 286.190366][ T4411] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 286.207217][ T4405] FAT-fs (loop2): Directory bread(block 68) failed [ 286.231891][ T4405] FAT-fs (loop2): Directory bread(block 69) failed [ 286.242018][ T4405] FAT-fs (loop2): Directory bread(block 70) failed [ 286.251603][ T4405] FAT-fs (loop2): Directory bread(block 71) failed [ 286.258817][ T4405] FAT-fs (loop2): Directory bread(block 72) failed [ 286.266093][ T4405] FAT-fs (loop2): Directory bread(block 73) failed [ 286.289705][ T4405] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1010'. [ 286.487538][ T284] syz-executor: attempt to access beyond end of device [ 286.487538][ T284] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 286.688925][ T4422] loop1: detected capacity change from 0 to 256 [ 286.709988][ T4422] FAT-fs (loop1): Directory bread(block 64) failed [ 286.730115][ T285] EXT4-fs (loop4): unmounting filesystem. [ 286.740696][ T4422] FAT-fs (loop1): Directory bread(block 65) failed [ 286.773433][ T4422] FAT-fs (loop1): Directory bread(block 66) failed [ 286.796496][ T282] EXT4-fs (loop3): unmounting filesystem. [ 286.808831][ T4422] FAT-fs (loop1): Directory bread(block 67) failed [ 286.823775][ T4426] 9pnet_fd: Insufficient options for proto=fd [ 286.833077][ T4422] FAT-fs (loop1): Directory bread(block 68) failed [ 286.854439][ T4422] FAT-fs (loop1): Directory bread(block 69) failed [ 286.872001][ T4422] FAT-fs (loop1): Directory bread(block 70) failed [ 286.881826][ T4422] FAT-fs (loop1): Directory bread(block 71) failed [ 286.897807][ T4422] FAT-fs (loop1): Directory bread(block 72) failed [ 286.914825][ T4422] FAT-fs (loop1): Directory bread(block 73) failed [ 287.052099][ T4425] loop4: detected capacity change from 0 to 40427 [ 287.107628][ T4425] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 287.117731][ T796] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 287.132935][ T4425] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 287.142546][ T4425] F2FS-fs (loop4): invalid crc value [ 287.309815][ T796] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 287.341347][ T4425] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 287.364768][ T796] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 287.471828][ T796] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 287.589531][ T796] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 287.606907][ T796] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 287.627722][ T796] usb 3-1: Product: syz [ 287.635613][ T4425] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 287.643529][ T4425] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 287.652224][ T796] usb 3-1: Manufacturer: syz [ 287.667770][ T796] usb 3-1: SerialNumber: syz [ 287.693524][ T4428] loop3: detected capacity change from 0 to 40427 [ 287.709361][ T4428] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 287.877732][ T4428] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 287.896891][ T796] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 13 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 287.968886][ T4428] F2FS-fs (loop3): invalid crc value [ 288.151775][ T4428] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 288.276259][ T4426] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1017'. [ 288.618096][ T4428] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 288.645355][ T4428] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 288.807959][ T796] usb 3-1: USB disconnect, device number 13 [ 288.828271][ T796] usblp0: removed [ 288.928333][ T283] EXT4-fs (loop0): unmounting filesystem. [ 289.151769][ T4448] xt_TPROXY: Can be used only with -p tcp or -p udp [ 289.270593][ T285] syz-executor: attempt to access beyond end of device [ 289.270593][ T285] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 289.334012][ T282] syz-executor: attempt to access beyond end of device [ 289.334012][ T282] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 289.477766][ T1304] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 289.506347][ T4462] syz.3.1023[4462] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 289.506472][ T4462] syz.3.1023[4462] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 289.523018][ T4462] loop3: detected capacity change from 0 to 512 [ 289.542567][ T4462] EXT4-fs: Ignoring removed nobh option [ 289.563501][ T4462] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 289.688930][ T1304] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 289.700601][ T1304] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 289.712070][ T1304] usb 1-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.04 [ 289.723051][ T1304] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.732161][ T1304] usb 1-1: config 0 descriptor?? [ 289.776943][ T4470] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1027'. [ 289.788226][ T4470] loop4: detected capacity change from 0 to 256 [ 289.813567][ T4470] FAT-fs (loop4): Directory bread(block 64) failed [ 289.820375][ T4470] FAT-fs (loop4): Directory bread(block 65) failed [ 289.827498][ T4470] FAT-fs (loop4): Directory bread(block 66) failed [ 289.834203][ T1469] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 289.846964][ T4472] loop1: detected capacity change from 0 to 256 [ 289.849148][ T4470] FAT-fs (loop4): Directory bread(block 67) failed [ 289.861827][ T4470] FAT-fs (loop4): Directory bread(block 68) failed [ 289.868860][ T4470] FAT-fs (loop4): Directory bread(block 69) failed [ 289.876732][ T4470] FAT-fs (loop4): Directory bread(block 70) failed [ 289.884619][ T4470] FAT-fs (loop4): Directory bread(block 71) failed [ 289.892599][ T4470] FAT-fs (loop4): Directory bread(block 72) failed [ 289.899994][ T4470] FAT-fs (loop4): Directory bread(block 73) failed [ 289.918388][ T28] kauditd_printk_skb: 50 callbacks suppressed [ 289.918406][ T28] audit: type=1326 audit(1750927157.840:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4468 comm="syz.4.1027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf1398e929 code=0x7ffc0000 [ 289.955641][ T28] audit: type=1326 audit(1750927157.870:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4468 comm="syz.4.1027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf1398e929 code=0x7ffc0000 [ 289.990081][ T4470] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1027'. [ 289.999657][ T28] audit: type=1326 audit(1750927157.900:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4468 comm="syz.4.1027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7fcf1398e929 code=0x7ffc0000 [ 290.025202][ T28] audit: type=1326 audit(1750927157.900:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4468 comm="syz.4.1027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf1398e929 code=0x7ffc0000 [ 290.048923][ T1469] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 290.053628][ T28] audit: type=1326 audit(1750927157.900:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4468 comm="syz.4.1027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf1398e929 code=0x7ffc0000 [ 290.064381][ T1469] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 290.087566][ T28] audit: type=1326 audit(1750927157.900:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4468 comm="syz.4.1027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcf1398e929 code=0x7ffc0000 [ 290.097152][ T1469] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 290.121035][ T28] audit: type=1326 audit(1750927157.900:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4468 comm="syz.4.1027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf1398e929 code=0x7ffc0000 [ 290.335192][ T28] audit: type=1326 audit(1750927157.900:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4468 comm="syz.4.1027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf1398e929 code=0x7ffc0000 [ 290.371801][ T282] EXT4-fs (loop3): unmounting filesystem. [ 290.418634][ T28] audit: type=1326 audit(1750927157.900:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4468 comm="syz.4.1027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fcf1398e929 code=0x7ffc0000 [ 290.466180][ T28] audit: type=1326 audit(1750927157.900:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4468 comm="syz.4.1027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf1398e929 code=0x7ffc0000 [ 290.471559][ T1304] logitech-djreceiver 0003:046D:C534.0016: item fetching failed at offset 2/5 [ 290.531835][ T1304] logitech-djreceiver 0003:046D:C534.0016: logi_dj_probe: parse failed [ 290.541935][ T1304] logitech-djreceiver: probe of 0003:046D:C534.0016 failed with error -22 [ 290.554041][ T1469] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 290.565786][ T1469] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 290.574969][ T1469] usb 3-1: Product: syz [ 290.580132][ T1469] usb 3-1: Manufacturer: syz [ 290.585146][ T1469] usb 3-1: SerialNumber: syz [ 290.606814][ T351] usb 1-1: USB disconnect, device number 20 [ 290.809957][ T1469] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 14 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 290.863563][ T4480] loop4: detected capacity change from 0 to 40427 [ 290.923070][ T4480] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 290.930548][ T1469] usb 3-1: USB disconnect, device number 14 [ 290.938563][ T4480] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 290.957220][ T4480] F2FS-fs (loop4): invalid crc value [ 290.970632][ T4480] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 291.131934][ T1469] usblp0: removed [ 291.398244][ T4480] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 291.432588][ T4480] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 292.361067][ T4501] loop2: detected capacity change from 0 to 1024 [ 292.377034][ T4501] EXT4-fs: Ignoring removed i_version option [ 292.541559][ T4501] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 294.272163][ T286] EXT4-fs (loop2): unmounting filesystem. [ 294.567496][ T4519] loop3: detected capacity change from 0 to 40427 [ 294.588463][ T4519] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 294.595969][ T4519] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 294.628796][ T4519] F2FS-fs (loop3): invalid crc value [ 294.666794][ T4519] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 294.747993][ T4519] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 294.765980][ T4519] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 294.901798][ T285] syz-executor: attempt to access beyond end of device [ 294.901798][ T285] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 295.066617][ T4530] loop1: detected capacity change from 0 to 40427 [ 295.078229][ T4534] loop2: detected capacity change from 0 to 256 [ 295.089213][ T4530] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 295.095916][ T4530] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 295.200459][ T4530] F2FS-fs (loop1): invalid crc value [ 295.211795][ T4537] loop4: detected capacity change from 0 to 1024 [ 295.222177][ T4530] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 295.242203][ T4537] EXT4-fs: Ignoring removed i_version option [ 295.314237][ T4534] FAT-fs (loop2): IO charset c not found [ 295.330040][ T4537] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 295.340710][ T282] syz-executor: attempt to access beyond end of device [ 295.340710][ T282] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 295.414269][ T4530] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 295.415326][ T4544] loop0: detected capacity change from 0 to 256 [ 295.428667][ T4530] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 295.540855][ T4544] FAT-fs (loop0): Directory bread(block 64) failed [ 295.581142][ T285] EXT4-fs (loop4): unmounting filesystem. [ 295.597809][ T4544] FAT-fs (loop0): Directory bread(block 65) failed [ 295.648449][ T4544] FAT-fs (loop0): Directory bread(block 66) failed [ 295.658583][ T4544] FAT-fs (loop0): Directory bread(block 67) failed [ 295.685580][ T4544] FAT-fs (loop0): Directory bread(block 68) failed [ 295.724016][ T4544] FAT-fs (loop0): Directory bread(block 69) failed [ 295.732420][ T4549] 9pnet_fd: Insufficient options for proto=fd [ 295.742127][ T4544] FAT-fs (loop0): Directory bread(block 70) failed [ 295.762283][ T4544] FAT-fs (loop0): Directory bread(block 71) failed [ 295.807804][ T4544] FAT-fs (loop0): Directory bread(block 72) failed [ 295.814385][ T4544] FAT-fs (loop0): Directory bread(block 73) failed [ 296.010355][ T284] syz-executor: attempt to access beyond end of device [ 296.010355][ T284] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 297.227736][ T1469] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 297.254237][ T4561] device syzkaller0 entered promiscuous mode [ 297.324542][ T4558] loop1: detected capacity change from 0 to 40427 [ 297.348802][ T4558] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 297.367702][ T4558] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 297.384581][ T4558] F2FS-fs (loop1): invalid crc value [ 297.418800][ T1469] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 297.430006][ T4558] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 297.441871][ T1469] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 297.463805][ T1469] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 297.481544][ T4567] overlayfs: failed to resolve './file0': -2 [ 297.509262][ T1469] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 297.522934][ T1469] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 297.533305][ T1469] usb 5-1: Product: syz [ 297.542517][ T4558] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 297.551386][ T4558] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 297.562675][ T1469] usb 5-1: Manufacturer: syz [ 297.568891][ T1469] usb 5-1: SerialNumber: syz [ 297.793443][ T1469] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 20 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 297.837719][ T351] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 297.983984][ T1469] usb 5-1: USB disconnect, device number 20 [ 297.997898][ T1469] usblp0: removed [ 298.028844][ T351] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.052348][ T351] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 298.080628][ T4578] loop3: detected capacity change from 0 to 256 [ 298.081503][ T351] usb 1-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.04 [ 298.105491][ T351] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.116217][ T284] syz-executor: attempt to access beyond end of device [ 298.116217][ T284] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 298.138699][ T351] usb 1-1: config 0 descriptor?? [ 298.651127][ T4585] loop4: detected capacity change from 0 to 1024 [ 298.669079][ T351] logitech-djreceiver 0003:046D:C534.0017: item fetching failed at offset 2/5 [ 298.672068][ T4585] EXT4-fs: Ignoring removed i_version option [ 298.686119][ T351] logitech-djreceiver 0003:046D:C534.0017: logi_dj_probe: parse failed [ 298.701346][ T351] logitech-djreceiver: probe of 0003:046D:C534.0017 failed with error -22 [ 298.715256][ T4585] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 298.835176][ T285] EXT4-fs (loop4): unmounting filesystem. [ 298.870605][ T351] usb 1-1: USB disconnect, device number 21 [ 300.773437][ T4586] loop1: detected capacity change from 0 to 40427 [ 300.790485][ T4586] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 300.797000][ T4586] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 300.808962][ T4586] F2FS-fs (loop1): invalid crc value [ 300.816233][ T4586] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 300.859295][ T4607] overlayfs: failed to resolve './file0': -2 [ 301.081974][ T4614] loop2: detected capacity change from 0 to 512 [ 301.090961][ T4614] EXT4-fs: Ignoring removed nobh option [ 301.224261][ T4586] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 301.233021][ T4586] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 301.242568][ T4614] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 301.413606][ T4619] device syzkaller0 entered promiscuous mode [ 302.854629][ T4613] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 302.885199][ T4613] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 302.886413][ T286] EXT4-fs (loop2): unmounting filesystem. [ 302.904314][ T284] syz-executor: attempt to access beyond end of device [ 302.904314][ T284] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 303.401370][ T4634] 9pnet_fd: Insufficient options for proto=fd [ 303.463664][ T4639] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1070'. [ 303.663809][ T4631] loop1: detected capacity change from 0 to 40427 [ 303.686238][ T4631] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 303.697714][ T591] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 303.699966][ T4631] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 303.726180][ T4631] F2FS-fs (loop1): invalid crc value [ 303.746103][ T4631] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 303.818969][ T4637] loop4: detected capacity change from 0 to 40427 [ 303.841190][ T4637] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 303.857772][ T4637] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 303.884285][ T4637] F2FS-fs (loop4): invalid crc value [ 303.896659][ T4631] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 303.899009][ T4637] F2FS-fs (loop4): Found nat_bits in checkpoint [ 303.917057][ T4631] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 303.959391][ T591] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 304.148985][ T591] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 304.241908][ T4637] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 304.342460][ T591] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 304.378970][ T4637] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 304.573377][ T591] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 304.748269][ T591] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 304.786351][ T591] usb 4-1: Product: syz [ 304.801124][ T591] usb 4-1: Manufacturer: syz [ 304.827722][ T591] usb 4-1: SerialNumber: syz [ 305.054803][ T591] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 14 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 305.110494][ T4663] loop2: detected capacity change from 0 to 2048 [ 305.135910][ T4663] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 305.277801][ T796] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 305.298611][ T4634] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1069'. [ 305.359273][ T4660] loop0: detected capacity change from 0 to 40427 [ 305.367204][ T284] syz-executor: attempt to access beyond end of device [ 305.367204][ T284] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 305.371656][ T4660] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 305.390877][ T4667] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1075'. [ 305.401069][ T4660] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 305.413335][ T4667] loop2: detected capacity change from 0 to 256 [ 305.422498][ T4660] F2FS-fs (loop0): invalid crc value [ 305.446769][ T4667] FAT-fs (loop2): Directory bread(block 64) failed [ 305.465404][ T4667] FAT-fs (loop2): Directory bread(block 65) failed [ 305.472701][ T4667] FAT-fs (loop2): Directory bread(block 66) failed [ 305.479900][ T4667] FAT-fs (loop2): Directory bread(block 67) failed [ 305.486744][ T4667] FAT-fs (loop2): Directory bread(block 68) failed [ 305.493695][ T4667] FAT-fs (loop2): Directory bread(block 69) failed [ 305.498465][ T4660] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 305.500601][ T4667] FAT-fs (loop2): Directory bread(block 70) failed [ 305.512314][ T796] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 305.518983][ T4667] FAT-fs (loop2): Directory bread(block 71) failed [ 305.535865][ T4667] FAT-fs (loop2): Directory bread(block 72) failed [ 305.542818][ T4667] FAT-fs (loop2): Directory bread(block 73) failed [ 305.550275][ T796] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 305.561071][ T1304] usb 4-1: USB disconnect, device number 14 [ 305.568893][ T1304] usblp0: removed [ 305.587385][ T796] usb 5-1: New USB device found, idVendor=0525, idProduct=e4a1, bcdDevice= 0.40 [ 305.606515][ T796] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.607343][ T4660] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 305.624784][ T4660] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 305.630095][ T4673] 9pnet_fd: Insufficient options for proto=fd [ 305.640601][ T796] usb 5-1: Product: syz [ 305.645249][ T796] usb 5-1: Manufacturer: syz [ 305.660512][ T796] usb 5-1: SerialNumber: syz [ 305.667310][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 305.667328][ T28] audit: type=1326 audit(1750927173.580:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4665 comm="syz.2.1075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f869c98e929 code=0x7ffc0000 [ 305.693390][ T4667] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1075'. [ 305.703832][ T28] audit: type=1326 audit(1750927173.600:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4665 comm="syz.2.1075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f869c98e929 code=0x7ffc0000 [ 305.721679][ T4667] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56323 sclass=netlink_route_socket pid=4667 comm=syz.2.1075 [ 305.779789][ T28] audit: type=1326 audit(1750927173.600:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4665 comm="syz.2.1075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7f869c98e929 code=0x7ffc0000 [ 305.805387][ T28] audit: type=1326 audit(1750927173.600:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4665 comm="syz.2.1075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f869c98e929 code=0x7ffc0000 [ 305.832471][ T28] audit: type=1326 audit(1750927173.600:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4665 comm="syz.2.1075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f869c98e929 code=0x7ffc0000 [ 305.856958][ T28] audit: type=1326 audit(1750927173.600:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4665 comm="syz.2.1075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f869c98e929 code=0x7ffc0000 [ 305.881663][ T28] audit: type=1326 audit(1750927173.600:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4665 comm="syz.2.1075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f869c98e929 code=0x7ffc0000 [ 305.907332][ T28] audit: type=1326 audit(1750927173.600:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4665 comm="syz.2.1075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f869c98e929 code=0x7ffc0000 [ 305.923011][ T4637] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 305.932502][ T28] audit: type=1326 audit(1750927173.600:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4665 comm="syz.2.1075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f869c98e929 code=0x7ffc0000 [ 305.947875][ T591] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 305.965743][ T28] audit: type=1326 audit(1750927173.600:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4665 comm="syz.2.1075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f869c98e929 code=0x7ffc0000 [ 306.142287][ T283] syz-executor: attempt to access beyond end of device [ 306.142287][ T283] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 306.149087][ T591] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 306.170837][ T4677] device syzkaller0 entered promiscuous mode [ 306.193384][ T591] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 306.204379][ T591] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 306.245521][ T591] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 306.255214][ T591] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 306.266719][ T591] usb 2-1: Product: syz [ 306.278331][ T591] usb 2-1: Manufacturer: syz [ 306.286473][ T591] usb 2-1: SerialNumber: syz [ 306.290611][ T4682] overlayfs: failed to resolve './file0': -2 [ 306.604986][ T4637] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 306.695286][ T591] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 22 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 306.797489][ T591] usb 2-1: USB disconnect, device number 22 [ 306.816248][ T591] usblp0: removed [ 306.833280][ T4685] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 306.837689][ T796] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 306.843981][ T4685] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 306.857736][ T796] cdc_ncm 5-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 306.867013][ T796] cdc_ncm 5-1:1.0: setting rx_max = 2048 [ 307.100464][ T4637] 9pnet: p9_errstr2errno: server reported unknown error 184467440737 [ 307.172153][ T796] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 307.192551][ T796] usb 5-1: USB disconnect, device number 21 [ 307.199320][ T796] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP) [ 308.405080][ T285] syz-executor: attempt to access beyond end of device [ 308.405080][ T285] loop4: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 308.601494][ T4694] loop2: detected capacity change from 0 to 40427 [ 308.628203][ T4074] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 308.646282][ T4694] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 308.667716][ T4074] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 308.688752][ T4694] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 308.727969][ T4694] F2FS-fs (loop2): invalid crc value [ 308.777458][ T4694] F2FS-fs (loop2): Found nat_bits in checkpoint [ 308.943890][ T4694] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 308.961581][ T4694] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 309.209279][ T1304] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 309.376449][ T4744] loop4: detected capacity change from 0 to 40427 [ 309.396342][ T4744] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 309.404456][ T4744] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 309.414867][ T4744] F2FS-fs (loop4): invalid crc value [ 309.427765][ T1469] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 309.437721][ T1304] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 309.449221][ T1304] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 309.450283][ T4744] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 309.459368][ T1304] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.468716][ T1304] usb 2-1: config 0 descriptor?? [ 309.486680][ T6] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 309.503729][ T4744] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 309.511403][ T4744] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 309.639087][ T1469] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 309.651543][ T1469] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 309.654735][ T4746] loop3: detected capacity change from 0 to 40427 [ 309.664916][ T1469] usb 3-1: New USB device found, idVendor=0525, idProduct=e4a1, bcdDevice= 0.40 [ 309.671504][ T4746] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 309.688887][ T1469] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.689984][ T4746] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 309.699763][ T1469] usb 3-1: Product: syz [ 309.722133][ T4746] F2FS-fs (loop3): invalid crc value [ 309.730582][ T1469] usb 3-1: Manufacturer: syz [ 309.743736][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 309.760032][ T1304] usbhid 2-1:0.0: can't add hid device: -71 [ 309.768455][ T1304] usbhid: probe of 2-1:0.0 failed with error -71 [ 309.777349][ T1469] usb 3-1: SerialNumber: syz [ 309.782711][ T4746] F2FS-fs (loop3): Found nat_bits in checkpoint [ 309.782950][ T6] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 309.805682][ T1304] usb 2-1: USB disconnect, device number 23 [ 309.860300][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.880282][ T6] usb 1-1: config 0 descriptor?? [ 309.894628][ T4746] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 309.902231][ T4746] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 310.110710][ T6] usbhid 1-1:0.0: can't add hid device: -71 [ 310.117275][ T6] usbhid: probe of 1-1:0.0 failed with error -71 [ 310.135620][ T6] usb 1-1: USB disconnect, device number 22 [ 310.144632][ T4694] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 310.238492][ T285] syz-executor: attempt to access beyond end of device [ 310.238492][ T285] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 310.896404][ T4766] loop4: detected capacity change from 0 to 512 [ 310.903449][ T4766] EXT4-fs: Ignoring removed nobh option [ 310.945685][ T1304] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 310.968704][ T4766] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 311.368292][ T4739] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 311.382218][ T4074] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 311.516449][ T4074] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 311.985105][ T285] EXT4-fs (loop4): unmounting filesystem. [ 312.107795][ T287] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 312.162860][ T4777] overlayfs: failed to resolve './file0': -2 [ 312.166760][ T1469] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 312.184243][ T1469] cdc_ncm 3-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 312.193775][ T1469] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 312.209589][ T286] syz-executor: attempt to access beyond end of device [ 312.209589][ T286] loop2: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 312.227843][ T1304] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 312.243393][ T1469] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 312.303662][ T1304] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 312.318896][ T1469] usb 3-1: USB disconnect, device number 15 [ 312.326677][ T1469] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 312.396331][ T1304] usb 4-1: New USB device found, idVendor=0525, idProduct=e4a1, bcdDevice= 0.40 [ 312.665241][ T1304] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.695804][ T4784] overlayfs: failed to resolve './file0': -2 [ 312.752117][ T1304] usb 4-1: Product: syz [ 312.789845][ T1304] usb 4-1: Manufacturer: syz [ 312.860187][ T282] syz-executor: attempt to access beyond end of device [ 312.860187][ T282] loop3: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 312.909707][ T1304] usb 4-1: SerialNumber: syz [ 312.990071][ T1304] usb 4-1: can't set config #1, error -71 [ 313.040651][ T304] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 313.145162][ T304] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 313.158119][ T1304] usb 4-1: USB disconnect, device number 15 [ 313.170258][ T4786] 9pnet_fd: Insufficient options for proto=fd [ 313.234672][ T4788] netlink: 'syz.2.1096': attribute type 7 has an invalid length. [ 313.242929][ T4788] netlink: 'syz.2.1096': attribute type 8 has an invalid length. [ 313.438858][ T287] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 313.457769][ T287] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 313.467820][ T305] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 313.476995][ T287] usb 1-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.04 [ 313.497687][ T287] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.514089][ T4799] device macsec0 entered promiscuous mode [ 313.518017][ T287] usb 1-1: config 0 descriptor?? [ 313.637818][ T4793] loop4: detected capacity change from 0 to 40427 [ 313.647824][ T305] usb 2-1: device descriptor read/64, error -71 [ 313.659798][ T4793] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 313.667999][ T4793] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 313.687531][ T4793] F2FS-fs (loop4): invalid crc value [ 313.695926][ T4793] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 313.734809][ T4793] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 313.742390][ T4793] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 313.751481][ T4801] loop3: detected capacity change from 0 to 40427 [ 313.773278][ T4801] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 313.787211][ T4801] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 313.799358][ T4801] F2FS-fs (loop3): invalid crc value [ 313.808202][ T4801] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 313.870547][ T4801] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 313.877756][ T4801] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 313.938245][ T305] usb 2-1: device descriptor read/64, error -71 [ 313.950849][ T287] logitech-djreceiver 0003:046D:C534.0018: item fetching failed at offset 2/5 [ 313.960325][ T287] logitech-djreceiver 0003:046D:C534.0018: logi_dj_probe: parse failed [ 313.969195][ T287] logitech-djreceiver: probe of 0003:046D:C534.0018 failed with error -22 [ 314.211990][ T796] usb 1-1: USB disconnect, device number 23 [ 314.297805][ T287] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 314.373759][ T285] syz-executor: attempt to access beyond end of device [ 314.373759][ T285] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 314.435063][ T282] syz-executor: attempt to access beyond end of device [ 314.435063][ T282] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 314.497710][ T305] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 314.528902][ T287] usb 3-1: config 0 has an invalid descriptor of length 212, skipping remainder of the config [ 314.540534][ T287] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 143, using maximum allowed: 30 [ 314.552381][ T287] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 143 [ 314.569363][ T287] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 314.580406][ T287] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.602059][ T287] usb 3-1: config 0 descriptor?? [ 314.657715][ T305] usb 2-1: device descriptor read/64, error -71 [ 314.735361][ T4822] loop3: detected capacity change from 0 to 40427 [ 314.751407][ T4822] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 314.769271][ T4822] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 314.780325][ T4822] F2FS-fs (loop3): invalid crc value [ 314.788334][ T4822] F2FS-fs (loop3): Found nat_bits in checkpoint [ 314.812853][ T4830] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1109'. [ 314.865417][ T4822] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 314.878154][ T4807] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2625886693 (5251773386 ns) > initial count (4961665182 ns). Using initial count to start timer. [ 314.884770][ T4822] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 314.902343][ T4833] loop4: detected capacity change from 0 to 256 [ 314.936615][ T4833] FAT-fs (loop4): IO charset c not found [ 314.942080][ T305] usb 2-1: device descriptor read/64, error -71 [ 314.978375][ T342] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 315.068415][ T287] usb 3-1: string descriptor 0 read error: -71 [ 315.069995][ T305] usb usb2-port1: attempt power cycle [ 315.076797][ T287] usb 3-1: USB disconnect, device number 16 [ 315.377731][ T1469] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 315.517751][ T305] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 315.568967][ T1469] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 315.581421][ T305] usb 2-1: device descriptor read/8, error -71 [ 315.597714][ T1469] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 315.619437][ T1469] usb 4-1: New USB device found, idVendor=0525, idProduct=e4a1, bcdDevice= 0.40 [ 315.629108][ T1469] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.657947][ T1469] usb 4-1: Product: syz [ 315.662625][ T1469] usb 4-1: Manufacturer: syz [ 315.668827][ T1469] usb 4-1: SerialNumber: syz [ 315.674414][ T4839] netlink: 'syz.2.1110': attribute type 7 has an invalid length. [ 315.686876][ T4839] netlink: 'syz.2.1110': attribute type 8 has an invalid length. [ 315.749109][ T305] usb 2-1: device descriptor read/8, error -71 [ 316.017853][ T305] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 316.099843][ T305] usb 2-1: device descriptor read/8, error -71 [ 316.177599][ T4822] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 316.348904][ T305] usb 2-1: device descriptor read/8, error -71 [ 316.478125][ T305] usb usb2-port1: unable to enumerate USB device [ 317.034521][ T4822] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 317.048458][ T4857] syz.1.1114[4857] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 317.048597][ T4857] syz.1.1114[4857] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 317.093586][ T4857] loop1: detected capacity change from 0 to 512 [ 317.169475][ T4857] EXT4-fs: Ignoring removed nobh option [ 317.268284][ T4857] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 317.285990][ T1469] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 317.297381][ T1469] cdc_ncm 4-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 317.306825][ T1469] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 317.698289][ T1469] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 317.714170][ T1469] usb 4-1: USB disconnect, device number 16 [ 317.721288][ T1469] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 317.875482][ T4855] loop0: detected capacity change from 0 to 40427 [ 317.898571][ T4855] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 317.915670][ T4855] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 317.941369][ T4855] F2FS-fs (loop0): invalid crc value [ 317.978096][ T4855] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 318.028548][ T282] syz-executor: attempt to access beyond end of device [ 318.028548][ T282] loop3: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 318.067475][ T4864] loop2: detected capacity change from 0 to 40427 [ 318.100158][ T4864] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 318.118752][ T4864] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 318.129244][ T304] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 318.142020][ T304] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 318.162304][ T4864] F2FS-fs (loop2): invalid crc value [ 318.169102][ T4855] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 318.193711][ T4855] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 318.229015][ T4864] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 318.313959][ T4864] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 318.332766][ T4864] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 318.734010][ T283] syz-executor: attempt to access beyond end of device [ 318.734010][ T283] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 318.837297][ T4883] loop3: detected capacity change from 0 to 40427 [ 318.871660][ T4883] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 318.897689][ T4883] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 318.917228][ T4883] F2FS-fs (loop3): invalid crc value [ 318.944044][ T4883] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 319.019247][ T4883] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 319.026551][ T4883] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 319.034657][ T4893] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1121'. [ 319.257047][ T286] syz-executor: attempt to access beyond end of device [ 319.257047][ T286] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 319.288147][ T4888] loop4: detected capacity change from 0 to 40427 [ 319.321221][ T4888] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 319.348390][ T4888] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 319.376558][ T4888] F2FS-fs (loop4): invalid crc value [ 319.404053][ T4888] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 319.415214][ T284] EXT4-fs (loop1): unmounting filesystem. [ 319.517964][ T4888] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 319.525622][ T4888] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 319.761531][ T4911] loop2: detected capacity change from 0 to 512 [ 319.768672][ T4911] EXT4-fs: Ignoring removed nobh option [ 319.790293][ T4911] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 319.867487][ T282] syz-executor: attempt to access beyond end of device [ 319.867487][ T282] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 320.113310][ T4916] loop0: detected capacity change from 0 to 40427 [ 320.138689][ T4916] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 320.167492][ T4916] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 320.199855][ T4916] F2FS-fs (loop0): invalid crc value [ 320.234533][ T4916] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 320.310009][ T4916] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 320.325176][ T4916] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 320.465741][ T4927] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1128'. [ 320.671410][ T286] EXT4-fs (loop2): unmounting filesystem. [ 320.872235][ T283] syz-executor: attempt to access beyond end of device [ 320.872235][ T283] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 320.911761][ T285] syz-executor: attempt to access beyond end of device [ 320.911761][ T285] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 320.979637][ T4936] 9pnet_fd: Insufficient options for proto=fd [ 321.267699][ T287] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 321.270647][ T4931] loop3: detected capacity change from 0 to 40427 [ 321.295794][ T4931] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 321.314879][ T4931] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 321.335882][ T4931] F2FS-fs (loop3): invalid crc value [ 321.367282][ T4931] F2FS-fs (loop3): Found nat_bits in checkpoint [ 321.443568][ T4939] loop0: detected capacity change from 0 to 40427 [ 321.459451][ T4939] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 321.468589][ T287] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 321.478214][ T4931] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 321.479937][ T4939] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 321.487794][ T4931] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 321.496998][ T287] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 321.515435][ T287] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 321.561091][ T4939] F2FS-fs (loop0): invalid crc value [ 321.594006][ T287] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 321.800522][ T287] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 321.849979][ T4939] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 321.954469][ T287] usb 3-1: Product: syz [ 322.025436][ T287] usb 3-1: Manufacturer: syz [ 322.145652][ T287] usb 3-1: SerialNumber: syz [ 322.425905][ T4939] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 322.442517][ T4939] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 322.517799][ T351] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 322.565829][ T287] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 17 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 322.597048][ T287] usb 3-1: USB disconnect, device number 17 [ 322.615463][ T287] usblp0: removed [ 322.710760][ T351] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 322.721149][ T4963] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1136'. [ 322.728474][ T351] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 322.751159][ T351] usb 4-1: New USB device found, idVendor=0525, idProduct=e4a1, bcdDevice= 0.40 [ 322.760643][ T351] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.768914][ T351] usb 4-1: Product: syz [ 322.773622][ T351] usb 4-1: Manufacturer: syz [ 322.795660][ T351] usb 4-1: SerialNumber: syz [ 322.815136][ T4966] 9pnet_fd: Insufficient options for proto=fd [ 322.857285][ T283] syz-executor: attempt to access beyond end of device [ 322.857285][ T283] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 322.999647][ T4969] loop0: detected capacity change from 0 to 256 [ 323.032834][ T4969] FAT-fs (loop0): Directory bread(block 64) failed [ 323.033438][ T4931] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 323.040726][ T4969] FAT-fs (loop0): Directory bread(block 65) failed [ 323.056149][ T4969] FAT-fs (loop0): Directory bread(block 66) failed [ 323.063575][ T4969] FAT-fs (loop0): Directory bread(block 67) failed [ 323.071347][ T4969] FAT-fs (loop0): Directory bread(block 68) failed [ 323.090929][ T4969] FAT-fs (loop0): Directory bread(block 69) failed [ 323.098401][ T4969] FAT-fs (loop0): Directory bread(block 70) failed [ 323.105395][ T4969] FAT-fs (loop0): Directory bread(block 71) failed [ 323.113045][ T1469] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 323.123326][ T4969] FAT-fs (loop0): Directory bread(block 72) failed [ 323.139604][ T4969] FAT-fs (loop0): Directory bread(block 73) failed [ 323.332221][ T1469] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 323.347765][ T1469] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 323.365105][ T1469] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 323.701051][ T1469] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 323.712716][ T1469] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 323.721499][ T1469] usb 5-1: Product: syz [ 323.725796][ T1469] usb 5-1: Manufacturer: syz [ 323.733785][ T4931] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 323.741864][ T1469] usb 5-1: SerialNumber: syz [ 323.743800][ T4976] loop1: detected capacity change from 0 to 256 [ 323.771776][ T4976] FAT-fs (loop1): Directory bread(block 64) failed [ 323.779006][ T4976] FAT-fs (loop1): Directory bread(block 65) failed [ 323.785894][ T4976] FAT-fs (loop1): Directory bread(block 66) failed [ 323.793268][ T4976] FAT-fs (loop1): Directory bread(block 67) failed [ 323.800898][ T4976] FAT-fs (loop1): Directory bread(block 68) failed [ 323.808203][ T4976] FAT-fs (loop1): Directory bread(block 69) failed [ 323.815829][ T4976] FAT-fs (loop1): Directory bread(block 70) failed [ 323.823289][ T4976] FAT-fs (loop1): Directory bread(block 71) failed [ 323.910587][ T4976] FAT-fs (loop1): Directory bread(block 72) failed [ 323.917604][ T4976] FAT-fs (loop1): Directory bread(block 73) failed [ 323.946190][ T351] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 323.959675][ T351] cdc_ncm 4-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 323.968615][ T351] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 324.048201][ T1469] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 22 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 324.066625][ T4978] loop2: detected capacity change from 0 to 40427 [ 324.084598][ T1469] usb 5-1: USB disconnect, device number 22 [ 324.187342][ T351] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 324.263398][ T4978] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 324.296125][ T4978] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 324.414679][ T4978] F2FS-fs (loop2): invalid crc value [ 324.427883][ T1469] usblp0: removed [ 324.428514][ T351] usb 4-1: USB disconnect, device number 17 [ 324.458776][ T4978] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 324.464162][ T351] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 324.525719][ T4978] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 324.537385][ T4978] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 324.626925][ T4980] loop0: detected capacity change from 0 to 40427 [ 324.651903][ T4980] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 324.680784][ T4980] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 324.722118][ T4980] F2FS-fs (loop0): invalid crc value [ 324.729132][ T313] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 324.745297][ T313] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 324.756273][ T4980] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 324.964290][ T4998] loop1: detected capacity change from 0 to 2048 [ 325.218359][ T4998] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 325.288902][ T286] syz-executor: attempt to access beyond end of device [ 325.288902][ T286] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 325.347975][ T4980] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 325.355352][ T4980] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 325.970982][ T283] syz-executor: attempt to access beyond end of device [ 325.970982][ T283] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 326.153249][ T5017] loop4: detected capacity change from 0 to 40427 [ 326.171572][ T5017] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 326.187728][ T5017] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 326.216675][ T5017] F2FS-fs (loop4): invalid crc value [ 326.246690][ T5017] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 326.312630][ T5026] loop3: detected capacity change from 0 to 40427 [ 326.396530][ T5026] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 326.403465][ T5026] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 326.428295][ T5026] F2FS-fs (loop3): invalid crc value [ 326.643325][ T5026] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 326.663908][ T5017] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 326.720888][ T5017] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 326.793692][ T5026] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 326.801027][ T5026] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 326.838459][ T5040] loop1: detected capacity change from 0 to 40427 [ 326.853788][ T5040] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 326.870026][ T5040] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 326.888789][ T5040] F2FS-fs (loop1): invalid crc value [ 326.929397][ T5040] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 327.012965][ T5040] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 327.020394][ T5040] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 327.199196][ T5063] loop0: detected capacity change from 0 to 256 [ 328.718065][ T284] syz-executor: attempt to access beyond end of device [ 328.718065][ T284] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 328.758488][ T285] syz-executor: attempt to access beyond end of device [ 328.758488][ T285] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 328.987561][ T5071] loop1: detected capacity change from 0 to 256 [ 329.018321][ T5071] FAT-fs (loop1): Directory bread(block 64) failed [ 329.037282][ T5071] FAT-fs (loop1): Directory bread(block 65) failed [ 329.054417][ T5071] FAT-fs (loop1): Directory bread(block 66) failed [ 329.066084][ T5071] FAT-fs (loop1): Directory bread(block 67) failed [ 329.078305][ T5071] FAT-fs (loop1): Directory bread(block 68) failed [ 329.091274][ T5071] FAT-fs (loop1): Directory bread(block 69) failed [ 329.112648][ T5075] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1155'. [ 329.113340][ T5071] FAT-fs (loop1): Directory bread(block 70) failed [ 329.139658][ T5075] loop4: detected capacity change from 0 to 256 [ 329.147876][ T5071] FAT-fs (loop1): Directory bread(block 71) failed [ 329.154752][ T5071] FAT-fs (loop1): Directory bread(block 72) failed [ 329.177600][ T5071] FAT-fs (loop1): Directory bread(block 73) failed [ 329.188778][ T5075] FAT-fs (loop4): Directory bread(block 64) failed [ 329.208895][ T5075] FAT-fs (loop4): Directory bread(block 65) failed [ 329.237816][ T5075] FAT-fs (loop4): Directory bread(block 66) failed [ 329.248378][ T5075] FAT-fs (loop4): Directory bread(block 67) failed [ 329.277714][ T5075] FAT-fs (loop4): Directory bread(block 68) failed [ 329.305428][ T5075] FAT-fs (loop4): Directory bread(block 69) failed [ 329.358146][ T5075] FAT-fs (loop4): Directory bread(block 70) failed [ 329.429919][ T5075] FAT-fs (loop4): Directory bread(block 71) failed [ 329.668015][ T5075] FAT-fs (loop4): Directory bread(block 72) failed [ 329.717747][ T5075] FAT-fs (loop4): Directory bread(block 73) failed [ 329.758023][ T28] kauditd_printk_skb: 42 callbacks suppressed [ 329.758042][ T28] audit: type=1400 audit(1750927197.640:536): avc: denied { read } for pid=5078 comm="poweroff" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 329.892714][ T282] syz-executor: attempt to access beyond end of device [ 329.892714][ T282] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 329.956123][ T28] audit: type=1326 audit(1750927197.870:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5073 comm="syz.4.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf1398e929 code=0x7ffc0000 [ 330.060013][ T5075] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56323 sclass=netlink_route_socket pid=5075 comm=syz.4.1155 [ 330.164084][ T28] audit: type=1326 audit(1750927197.870:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5073 comm="syz.4.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf1398e929 code=0x7ffc0000 [ 330.350691][ T5083] loop1: detected capacity change from 0 to 2048 [ 330.428132][ T28] audit: type=1326 audit(1750927197.960:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5073 comm="syz.4.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7fcf1398e929 code=0x7ffc0000 [ 330.465485][ T5083] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 330.807776][ T351] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 330.969522][ T28] audit: type=1326 audit(1750927197.960:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5073 comm="syz.4.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf1398e929 code=0x7ffc0000 [ 331.073942][ T5098] loop4: detected capacity change from 0 to 256 [ 331.102845][ T28] audit: type=1326 audit(1750927197.960:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5073 comm="syz.4.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf1398e929 code=0x7ffc0000 [ 331.285884][ T28] audit: type=1326 audit(1750927197.970:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5073 comm="syz.4.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcf1398e929 code=0x7ffc0000 [ 331.329850][ T351] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 331.382279][ T28] audit: type=1326 audit(1750927197.970:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5073 comm="syz.4.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf1398e929 code=0x7ffc0000 [ 331.621985][ T351] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 331.666676][ T5109] device syzkaller0 entered promiscuous mode [ 331.732281][ T351] usb 4-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.04 [ 331.756798][ T351] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.779047][ T351] usb 4-1: config 0 descriptor?? [ 331.791494][ T28] audit: type=1326 audit(1750927197.970:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5073 comm="syz.4.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf1398e929 code=0x7ffc0000 [ 331.791537][ T28] audit: type=1326 audit(1750927197.970:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5073 comm="syz.4.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fcf1398e929 code=0x7ffc0000 [ 332.172390][ T6] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 332.361820][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 332.361866][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 332.361907][ T6] usb 2-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.04 [ 332.361943][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.388088][ T6] usb 2-1: config 0 descriptor?? [ 332.513621][ T5121] loop4: detected capacity change from 0 to 256 [ 332.640448][ T351] logitech-djreceiver 0003:046D:C534.0019: item fetching failed at offset 2/5 [ 332.640668][ T351] logitech-djreceiver 0003:046D:C534.0019: logi_dj_probe: parse failed [ 332.640706][ T351] logitech-djreceiver: probe of 0003:046D:C534.0019 failed with error -22 [ 333.060794][ T6] logitech-djreceiver 0003:046D:C534.001A: item fetching failed at offset 2/5 [ 333.061009][ T6] logitech-djreceiver 0003:046D:C534.001A: logi_dj_probe: parse failed [ 333.061042][ T6] logitech-djreceiver: probe of 0003:046D:C534.001A failed with error -22 [ 333.130350][ T351] usb 4-1: USB disconnect, device number 18 [ 333.151094][ T796] usb 2-1: USB disconnect, device number 28 [ 333.241817][ T5134] loop0: detected capacity change from 0 to 1024 [ 333.258722][ T5134] EXT4-fs: Ignoring removed i_version option [ 333.270033][ T5126] xt_TPROXY: Can be used only with -p tcp or -p udp [ 333.287708][ T5134] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 333.444070][ T283] EXT4-fs (loop0): unmounting filesystem. [ 333.535218][ T5149] loop0: detected capacity change from 0 to 1024 [ 333.561990][ T5149] EXT4-fs: Ignoring removed i_version option [ 333.579372][ T5149] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 333.630383][ T283] EXT4-fs (loop0): unmounting filesystem. [ 334.103912][ T5170] loop0: detected capacity change from 0 to 512 [ 334.117692][ T5170] EXT4-fs: Ignoring removed nobh option [ 337.358702][ T28] kauditd_printk_skb: 45 callbacks suppressed [ 337.358900][ T28] audit: type=1400 audit(1750927204.250:591): avc: denied { module_request } for pid=5167 comm="syz.2.1175" kmod="netdev-vxcan0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 337.552395][ T5164] loop4: detected capacity change from 0 to 256 [ 337.566028][ T28] audit: type=1400 audit(1750927205.470:592): avc: denied { create } for pid=5141 comm="syz.4.1168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 337.608519][ T5170] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 337.678033][ T5164] FAT-fs (loop4): IO charset c not found [ 337.701291][ T5185] 9pnet_fd: Insufficient options for proto=fd [ 337.760022][ T28] audit: type=1400 audit(1750927205.600:593): avc: denied { read write } for pid=5159 comm="syz.0.1172" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 337.823510][ T28] audit: type=1400 audit(1750927205.600:594): avc: denied { open } for pid=5159 comm="syz.0.1172" path="/212/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 337.898379][ T283] EXT4-fs (loop0): unmounting filesystem. [ 337.942100][ T28] audit: type=1400 audit(1750927205.650:595): avc: denied { read write } for pid=5182 comm="syz.3.1177" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 338.004126][ T5193] 9pnet_fd: Insufficient options for proto=fd [ 338.012159][ T28] audit: type=1400 audit(1750927205.650:596): avc: denied { open } for pid=5182 comm="syz.3.1177" path="/dev/raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 338.017859][ T595] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 338.078519][ T28] audit: type=1400 audit(1750927205.650:597): avc: denied { ioctl } for pid=5182 comm="syz.3.1177" path="/dev/raw-gadget" dev="devtmpfs" ino=258 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 338.173071][ T28] audit: type=1400 audit(1750927206.090:598): avc: denied { execute } for pid=5183 comm="syz.2.1178" path="/252/file1" dev="tmpfs" ino=1571 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 338.239305][ T28] audit: type=1400 audit(1750927206.140:599): avc: denied { write } for pid=87 comm="acpid" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 338.274100][ T28] audit: type=1400 audit(1750927206.140:600): avc: denied { remove_name } for pid=87 comm="acpid" name="acpid.pid" dev="tmpfs" ino=7 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 338.299624][ T595] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 338.317007][ T595] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 338.339978][ T595] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 338.359637][ T595] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 338.378207][ T595] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 338.384264][ T796] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 338.394798][ T595] usb 4-1: Product: syz [ 338.400998][ T5204] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1182'. [ 338.410394][ T595] usb 4-1: Manufacturer: syz [ 338.415025][ T595] usb 4-1: SerialNumber: syz [ 338.579649][ T796] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 338.597729][ T796] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 338.620046][ T796] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 338.632944][ T595] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 19 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 338.645815][ T796] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 338.657213][ T796] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 338.665617][ T5207] 9pnet_fd: Insufficient options for proto=fd [ 338.681987][ T796] usb 1-1: Product: syz [ 338.686618][ T796] usb 1-1: Manufacturer: syz [ 338.691453][ T796] usb 1-1: SerialNumber: syz [ 338.836513][ T5185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 338.852666][ T5185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 338.868850][ T5185] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1177'. [ 338.910300][ T796] usblp 1-1:1.0: usblp1: USB Unidirectional printer dev 24 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 338.932235][ T796] usb 1-1: USB disconnect, device number 24 [ 338.951999][ T796] usblp1: removed [ 338.977676][ T591] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 339.102572][ T595] usb 4-1: USB disconnect, device number 19 [ 339.109351][ T595] usblp0: removed [ 339.188849][ T591] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 339.207689][ T591] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 339.227714][ T591] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 339.307357][ T591] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 339.317103][ T591] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 339.325304][ T591] usb 2-1: Product: syz [ 339.329893][ T591] usb 2-1: Manufacturer: syz [ 339.334534][ T591] usb 2-1: SerialNumber: syz [ 339.580535][ T591] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 29 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 339.807896][ T5207] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1183'. [ 340.231387][ T6] usb 2-1: USB disconnect, device number 29 Connection to 10.128.10.4 closed by remote host. [ 340.350974][ T6] usblp0: removed [ 341.520059][ T313] tipc: Left network mode [ 341.958634][ T313] device bridge_slave_1 left promiscuous mode [ 341.964798][ T313] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.972281][ T313] device bridge_slave_0 left promiscuous mode [ 341.978431][ T313] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.987925][ T313] device veth0_vlan left promiscuous mode [ 343.015572][ T5243] kvm: exiting hardware virtualization [ 343.023094][ T5243] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 343.029992][ T5243] ACPI: PM: Preparing to enter system sleep state S5 [ 343.037165][ T5243] reboot: Power down serialport: VM disconnected.