last executing test programs: 10.143875069s ago: executing program 2 (id=8406): syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x17, 0x0, 0x4, 0xff, 0x800, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000080000000000000000000181100", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setxattr$security_selinux(0x0, 0x0, &(0x7f00000002c0)='system_u:object_r:fixed_disk_device_t:s0\x00', 0x29, 0x2) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0x804498, &(0x7f0000001980)=ANY=[@ANYBLOB='shortname=winnt,uni_xlate=1,shortname=mixed,rodir,shortname=lower,utf8=0,uni_xlate=1,dos1xfloppy,check=strict,uni_xlate=1,shortname=win95,iocharset=iso8859-15,codepage=855,shortname=lower,nonumtail=0,nonumtail=0,uni_xlate=0,uni_xlate=0,iocharset=iso8859-6,shortname=lower,nnonumtail=1,shortname=win95,rodir,utf8=0,nnonumtail=1,shortname=lower,shortname=mixed,iocharset=ascii,appraise,uid>', @ANYBLOB="1880d396e7134e75872921883b53c77d0feb2b23455558cd3154f8cc077408245bf283ef5d7a6addc700447386d27ae3f18a643ddc3db5ed663493786a50333eef483786f4480a09e884bb757fe171cba190f2c08e8a4cf9f3f6df4fc6ef61936f17aac7fcb2e917d6f6a86b0e0285e2a69c36a808f638849528581a8b89c27d7c0815317896bf6d6934c9af3f11a005d9b6cd6d5571d97ac32f1661975ccf248689acc4a21a4dbb229b104ddd2b77965a41e4ed2f51eb1d8ff0d5ef5706b71c", @ANYBLOB="0200"], 0x6, 0x2d3, &(0x7f0000000a40)="$eJzs3b1rJGUYAPBnNrMfarFbWInggBZWx+Vamw1yB2Iqjy1OCw3eHUh2ES4Q8QPXq8TOxtK/QBD8Q2zsLAVbwc4IgZGZncl+ZNhsJBvx8vsVyZuZ55n3ed+ZJNPkyQcvTw4fZvH46Re/Ra+XRGvYjThJYhCtqH0VS4bfBgDwf3aS5/FnPtNw+tdv1uT2tlgXALA9F/z+r6TlxwdFxE/XVxsAsB33H7z79t7+/t13sqwX9yZfH4+SiCg+z87vPY6PYhyP4nb04zSifFFoR/m2UAzv5Xk+TbPCIF6bTI9HRebk/Z+r6+/9EVHm70Y/BuWhs7eNMv+t/bu72cxC/rSo4/lq/mGRfyf68eJZ8lL+nYb8GHXi9VcX6r8V/fjlw/g4xvGwLGKe/+Vulr2Zf/fX5+8V5RX5yfR41C3j5vKdevLpNd8jAAAAAAAAAAAAAAAAAAAAAACePbeq3jndKPv3FIeq/js7p8UX7chqg+X+PLP8pL7QvD9QtPI8n+bxfd1f53aWZXkVOM9P46W0aiwIAAAAAAAAAAAAAAAAAAAAN9zRp58dHozHj55cyaDuBpBGxN/3I/7tdYYLR16J9cHdas6D8bhVDZdj0sUjsVPHJBFryygWcUXbctHguXM1V4MffmzMKlZ0lEbTqd7Fk7ab57rk4JP2bB8bY+qn6/Agad7D7lnxveLGxeqN60Tz7O1YOdKp7+dqcP0obracTuOp/qW3pfNCOZiuiYlk3ffFG78vLSeJleBO2XGjMb1dDZp2Y/ZsbPQ8R2+Wfv5nRaJbBwAAAAAAAAAAAAAAAAAAbNX8r38bTj5dm9rKu1srCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACu1fz//28ySJeTN8jqxJOj/2ptAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3Bz/BAAA//8a6VGq") mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) syz_mount_image$fuse(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x40000, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x141842, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r6, &(0x7f0000004200)='t', 0x1) sendfile(r6, r5, 0x0, 0x40001) 4.394459347s ago: executing program 2 (id=8411): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = userfaultfd(0xc0801) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000280)={{&(0x7f0000a57000/0x4000)=nil, 0x4000}}) syz_open_procfs(0x0, &(0x7f0000000240)='projid_map\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$exfat(&(0x7f0000006c00), &(0x7f0000001b40)='./file0\x00', 0x208008de, &(0x7f0000001b80)=ANY=[@ANYBLOB='utf8,errors=continue,namecase=1,utf8,gid=', @ANYRESHEX=0x0, @ANYBLOB=',umask=00000000000000000000077,umask=00000000000000000005676,uid=', @ANYRESHEX=0x0, @ANYBLOB=',gid=', @ANYRESHEX=0x0, @ANYBLOB="2c000ca8768ddddc191573cbd33da79641936c9de64e264f331d1b50f4c4f54702f51dcbddb39c14c19175f07a639bb65ea608fbf6fadf5d8da30ace1281bed3e61b084526e10dbe921dad84fbcabc5791f52445cb76b789ed377aa0cd17309c4df04d525e8af05fb246b33836d90656cd2daa991b916be40df3bd607ae5672e1bb90730d0ff03000000000000c5f0cf287ea707c1fc66165f74e7d8a78c37a4b86907cec1df06da3611f616718d88770a2520ceb039bc06ef4d1183"], 0x1, 0x1503, &(0x7f0000000580)="$eJzs3AuYj1XXMPC99t43Y5L+TXIY9trr5p8G2yRJDgk5JEmSJDklJCZJEhJDTklDEnKcJIchJIdpTBrn8yHnpMkjTZKE5BT2d+np/Tzv0/O+fe9X3+e93lm/69qXvdz/tf7rnjXX3Pf9v66Z73uOqtu8Xq2mRCT+FPj7P8lCiBghxDAhxA1CiEAIUTGuYtyV4/kUJP+5N2F/rUfTrnUH7Fri+eduPP/cjeefu/H8czeef+7G88/deP65G8+fsdxs+5yiN/LKvYs//8/N+Pr/P0hOuclfbyx3c6//QgrPP3fj+eduPP/cjeefu/H8czee//98Nf+TYzz/3I3nz1hudq0/f+Z1bde1/v5jjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMZY7nPNXaSHEv+2vdV+MMcYYY4wxxhj76/i817oDxhhjjDHGGGOM/b8HQgoltAhEHpFXxIh8IlZcJ/KL60UBcYOIiBtFnLhJFBQ3i0KisCgiiop4UUwUF0agsIJEKEqIkiIqbhGlxK0iQZQWZURZ4UQ5kShuE+XF7aKCuENUFHeKSuIuUVlUEVVFNXG3qC7uETVETVFL3Ctqizqirqgn7hP1xf2igXhANBQPikbiIdFYPCyaiEdEU/GoaCYeE83F46KFeEK0FK1Ea9FGtP2/yn9Z9BWviH6iv0gWA8RA8aoYJAaLIWKoGCZeE8PF62KEeEOkiJFilHhTjBZviTHibTFWjBPjxTtigpgoJonJYoqYKlLFu2KaeE9MF++LGWKmmCVmizQxR8wVH4h5Yr5YID4UC8VHYpFYLJaIpSJdfCwyxDKRKT4Ry8WnIkusECvFKrFarBFrxTqxXmwQG8UmsVlsEVvFNrFdfCZ2iJ1il9gt9oi9Yp/4XOwXX4gD4kuRLb76L+af/af8XiBAgAQJGjTkgTwQAzEQC7GQH/JDASgAEYhAHMRBQSgIhaAQFIEiEA/xUByKAwICAUEJKAFRiEIpKAUJkABloAw4cJAIiVAebocKUAEqQkWoBJWgMlSBKlANqkF1qA41oAbUglpQG2pDXagL98F9cD80gAbQEBpCI2gEjaExNIEm0BSaQjNoBs2hObSAFtASWkJraA1toS20g3bQHtpDR+gInaATdIbOkARJ0BW6QjfoBt2hO/SAHtATekIv6A294WV4GV6BV6A/1JYDYCAMhEEwCIbAUBgKr8FweB1ehzcgBUbCKHgT3oS3YAycgbEwDsbDeKguJ8IkmAwkp0IqpMI0mAbTYTrMgJkwE2ZDGsyBuTAX5sF8mA8fwkL4CD6CxbAYlkI6pEMGLINMyITlcBayYAWshFWwGtbAalgH62EdbIRNsBG2wBbYBtvgM/gMdsJO2A27YS/shc/hc/gCvoAUyIZsOAgH4RAcgsNwGHIgB47AETgKR+EYHIPjcBxOwEk4BSfhNJyGM3AWzsE5uAAX4CK8GP9ts72lN6QIeYWWWuaReWSMjJGxMlbml/llAVlARmRExsk4WVAWlIVkIVlEFpHxMl4Wl8UlSpQkQ1lClogRQshSspRMkAmyjCwjnXQyUSbK8rK8rCAryIryTllJ3iUryyqyg6smq8nqsqOrIWvKWrKWrC3ryLqynqwn68v6soFsIBvKhrKRbCQby4dlEzkAhsCj8spkmsuR0EKOgpaylWwt28i34EnZTo6B9rKD7CifluNgLHSW7VySfFZ2lZOgm3xeToYXZA85FXrKl2Qv2Vv2kS/LvrK96yf7yxkwQA6Us2GQHCyHyKFyHtSRVyZWV74hU+RIOUq+KZfCW3KMfFuOlePkePmOnCAnyklyspwip8pU+a6cJt+T0+X7coacKWfJ2TJNzpFz5QdynpwvF8gP5UL5kVwkF8slcqlMlx/LDLlMZspP5HL5qcySK+RKuUqulmvkWrlOrpcb5Ea5SW6WW+RWuU1ul5/JHXKn3CV3yz1yr9wnP5f75RfygPxSZsuv5EH5N3lIfi0Py29kjvxWHpHfyaPye3lM/iCPyx/lCXlSnpI/ydPyZ3lGnpXn5Hl5Qf4iL8pL8rL0UihQUimlVaDyqLwqRuVTseo6lV9drwqoG1RE3aji1E2qoLpZFVKFVRFVVMWrYqq4MgqVVaRCVUKVVFF1iyqlblUJqrQqo8oqp8qpRHWbKq9uVxXUHaqiulNVUnepyqqKqqqqqbtVdXWPqqFqqlrqXlVb1VF1VT11n6qv7lcN1AOqoXpQNVIPqcbqYdVEPaKaqkdVM/WYaq4eVy3UE6qlaqVaqzaqrXpStVNPqfaqg+qonlad1DOqs+qiktSzqqt6TnVTz6vu6gXVQ72oeqqXVC/VW/VRl9Rl5VU/1V8lqwFqoHpVDVKD1RA1VA1Tr6nh6nU1Qr2hUtRINUq9qUart9QY9bYaq8ap8eodNUFNVJPUZDVFTVWp6l01Tb2npqv31Qw1U81Ss1WamqOG/FZpwT/lD/jtqvuP+e/9i/wRv777NrVdfaZ2qJ1ql9qt9qi9ap/ap/ar/eqAOqCyVbY6qA6qQ+qQOqwOqxyVo46oI+qoOqqOqWPquDquTqiT6rz6SZ1WP6sz6qw6q86rC+qCuvjb10Bo0FIrrXWg8+i8Okbn07H6Op1fX68L6Bt0RN+o4/RNuqC+WRfShXURXVTH62K6uDYatdWkQ11Cl9RRfYsupW/VCbq0LqPLaqfL6UR925/O/6P+2uq2up1up9vr9rqj7qg76U66s+6sk3SS7qq76m66m+6uu+seuofuqXvqXrqX7qP76L66r+6n++lknawH6lf1ID1YD9FD9TD9mh6uh+sReoRO0Sl6lB6lR+vReoweo8fqsXq8Hq8n6Al6kp6kp+gpOlWn6ml6mp6up+sZeoaepWfpNJ2m5+q5ep6epxfoBXqhXqgX6UV6iV6i03W6ztAZOlNn6uV6uc7SK/QKvUqv0mv0Gr1Or9Mb9Aa9SW/SW/QWnaW36+16h96hd+ldeo/eo/fpfXq/3q8P6AM6W2frg/qgPqQP6cP6sM7ROfqIPqKP6qP6mD424Lg+rk/oE/qUPqVP69P6jD6jz+lz+oK+oC/qi/qyvnzlti+QgQx0oIM8QZ4gJogJYoPYIH+QPygQFAgiQSSIC+KCgsHNQaGgcFAkKBrEB8WC4oEJMLABBWFQIigZRINbglLBrUFCUDooE5QNXFAuSAxuC8oHtwcVgjuCisGdQaXgrqByUCWoGlQL7g6qB/cENYKaQa3g3qB2UCeoG9QL7gvqB/cHDYIHgobBg0Gj4KGgcfBw0CR4JGgaPBo0Cx4LmgePBy2CJ4KWQaugddAmaPuX1vf+TOGnXD/T3ySbAWagedUMMoPNEDPUDDOvmeHmdTPCvGFSzEgzyrxpRpu3zBjzthlrxpnx5h0zwUw0k8xkM8VMNanmXTPNvGemm/fNDDPTzDKzTZqZY+aaD8w8M98sMB+aheYjs8gsNkvMUpNuPjYZZpnJNJ+Y5eZTk2VWmJVmlVlt1py/UQiz3mwwG80ms9lsMVvNNrPdfGZ2mJ1ml9lt9pi9Zp/53Ow3X5gD5kuTbb4yB83fzCHztTlsvjE55ltzxHxnjprvzTHzgzlufjQnzElzyvxkTpufzRlz1pwz580F84u5aC6Zy8Zfubm/cnlHjRrzYB6MwRiMxVjMj/mxABbACEYwDuOwIBbEQlgIi2ARjMd4LI7F8QpCwhJYAqMYxVJYChMwActgGXToMBETsTyWxwpYAStiRayElbAyVsaqWBXvxrvxHrwHa2JNvBfvxTpYB+thPayP9bEBNsCG2BAbYSNsjI2xCTbBptgUm2EzbI7NsQW2wJbYEltja2yLbbEdtsP22B47YkfshJ2wM3bGJEzCrtgVu2E37I7dsQf2wJ7YE3thL+yDfbAv9sV+2A+TMRkH4kAchINwCA7BYTgMh+NwHIEjMAVTcBSOwtE4GsfgGByL43A8voMTcCJOwsk4BadiKqbiNJyG03E6zsAZOAtnYRqm4Vyci/NwHi7ABbgQF+IiXIRLcAmmYzpmYAZmYiYux+WYhVm4ElfialyNa3Etrsf1uBE34mbcjFtxK27H7bgDd+Au3IV7cA/uw324H/fjATyA2ZiNB/EgHsJDeBgPYw7m4BE8gkfxKB7DY3gcj+MJPIGn8BSextN4Bs/gOTyHF/AXvIiX8DJ6jLFSxNrrbH57vS1gb7AxNp/9x7iILWrjbTFb3BpbyBb+dzFaaxNsaVvGlrXOlrOJ9rbfxZVtFVvVVrN32+r2Hlvjd3F9e79tYB+wDe2Dtp6977c4769xI/uQbWwft03sE7apbWWb2Ta2uX3ctrBP2Ja2lW1t29hO9hnb2XaxSfZZ29U+97s4wy6z6+0Gu9FusvvtF/acPW+P2u/tBfuL7Wf722H2NTvcvm5H2Ddsih35u3i8fcdOsBPtJDvZTrFTfxfPsrNtmp1j59oP7Dw7/3dxuv3YLrSZdpFdbJfYpb/GV3rKtJ/Y5fZTm2VX2JV2lV1t19i1dt3/7nWV3WK32m12n/3c7rA77S672+6xe3+Nr5zHAfulzbZf2SP2O3vIfm0P22M2x377a3zl/I7ZH+xx+6M9YU/aU/Yne9r+bM/Ys7+e/5Vz/8lespett4KAJCnSFFAeyksxlI9i6TrKT9dTAbqBInQjxdFNVJBupkJUmIpQUYqnYlScDCFZIgqpBJWkKN1CpehWSqDSVIbKkqNylEi3UXm6nSrQHVSR7qRKdBdVpipUlarR3VSd7qEaVJNq0b1Um+pQXapH91F9up8a0APUkB6kRvQQNaaHqQk9Qk3pUWpGj1Fzepxa0BPUklpRa2pDbelJakdPUXvqQB3paepEz1Bn6kJJ9Cx1peeoGz1P3ekF6kEvUk96iXpRb+pDL1NfeoX6UX9KpgE0kF6lQTSYhtBQGkav0XB6nUbQG5RCI2kUvUmj6S0aQ2/TWBpH4+kdmkATaRJNpik0lVLpXTqb3qXIlXu9GTSTZtFsSqM5NJc+oHk0nxbQh7SQPqJFtJiW0FJKp48pg5ZRJn1Cy+lTyqIVtJJW0WpaQ2tpHa2nDbSRNtFm2kJbaRttp89oB+2kXbSb9tBe2kef0376gg7Ql5RNX9FB+hsdoq/pMH1DOfQtHaHv6Ch9T8foBzpOP9IJOkmn6Cc6TT/TGTpL5+g8XaBf6CJdosvkSYQQylCFOgzCPGHeMCbMF8aG14X5w+vDAuENYSS8MYwLbwoLhjeHhcLCYZGwaBgfFguLhybE0IYUhmGJsGQYDW8JS4W3hglh6bBMWDZ0YbkwMbwtLB/eHlYI7wgrhneGlcK7wsphlfDxB6uFd4fVw3vCGmHNsFZ4b1g7rBPWDeuF94X1w/vDBuEDYcPwwbBC+FDYOHw4bBI+EjYNHw2bhY+FzcPHwxbhE2HLsFXYOmwTtg2fDNuFT4Xtww5hx/DpsFP4TNg57BImhc+GXcPn/vB4cjggHBi+Gr4aev+AWhJdGk2PfhzNiC6LZkY/iS6PfhrNiq6Iroyuiq6Oromuja6Lro9uiG6Mbopujm6Jbo1ui3pfL69w4KRTTrvA5XF5XYzL52LddS6/u94VcDe4iLvRxbmbXEF3syvkCrsirqiLd8VccWccOuvIha6EK+mi7hZXyt3qElxpV8aVdc6Vc4mujWvr2rp27inX3nVwHd3T7mn3jHvGdXFd3LOuq3vOdXPPu+7uBdfDvehedC+5Xq636+Nedn3dK66f6++SXbIb6Aa6QW6QG+KGuGFumBvuhrsRboRLcSlulBvlRrvRbowb48a6sW68G+8muAlukpvkprgpLtWlumlumpvuprsZboab5Wa5NJfm5rq5bp6b5xa4BW5hwkK3yC1yS9wSl+7SXYbLcJku0y13y12Wy3Ir3Uq32q12a91at96tdxvdRrfZbXZb3Va33W13O9wOt8vtcnvcHrfP7XP73X53wB1w2S7bHXQH3SF3yB1237gc96074r5zR9337pj7wR13P7oT7qQ75X5yp93P7ow768658+6C+8VddJfcZeddauTdyLTIe5HpkfcjMyIzI7MisyNpkTmRuZEPIvMi8yMLIh9GFkY+iiyKLI4siSyNpEc+jmRElkUyI59Elkc+jWRFVkRWRlZFVkfWRLwvtiP0JXxJH/W3+FL+Vp/gS/syvqx3vpxP9Lf58v52X8Hf4Sv6O30lf5ev7Kv4qv4J39K38q19G9/WP+nb+ad8e9/Bd/RP+07+Gd/Zd/FJ/lnf1T/nu/nnfXf/gu/hX/Q9/Uu+l+/t+/iXfV//iu/n+/tkP8AP9K/6QX6wH+KH+mH+NT/cv+5H+Dd8ih/pR/k3/Wj/lh/j3/Zj/Tg/3r/jJ/iJfpKf7Kf4qT7Vv+un+ff8dP++n+Fn+ll+tk/zc/xc/4Gf5+f7Bf5Dv9B/5Bf5xX6JX+rT/cc+wy/zmf4Tv9x/6rP8Cr/Sr/Kr/Rq/1q/z6/0Gv9Fv8pv9Fr/Vb/Pb/Wd+h9/pd/ndfo/f6/f5z/1+/4U/4L/02f4rf9D/zR/yX/vD/huf47/1R/x3/qj/3h/zP/jj/kd/wp/0p/xP/rT/2Z/xZ/05f95f8L/4i/6Sv8y/s8YYY4wx9n9E/cHxAf/i/+Rv64qBQojrdxbN+eeamwv9fT9YxneKCCGe7d/z0X9btWsnJyf/9tosJYKSi4UQkav5ecTVeIXoKJ4RSaKDKP8v+xsse1+gP6gfvVOI2KuVfxUr/rn+7f9B/SefHp9RKTwX95/UXyxEQsmrOfnE1fhq/Qr/Qf3C7f6g/3xfpwrR/h9y8our8dX6ieIp8ZxI+nevZIwxxhhjjDHG/m6wrNr9j56frzyfx+urOXnF1fiPns8ZY4wxxhhjjDF27b3Qu0+XJ5OSOnTnzZ/Y1Pjv0QZvePOXba71TybGGGOMMcbYX+3qTf+17oQxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGMu9/n/8ObFrfY6MMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcbYtfa/AgAA///mJjhh") close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000100)={{0x10b, 0x45, 0xc, 0x1c3, 0x11b, 0x4, 0x3da, 0x1ff}}, 0x20) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYRES64], 0x69) close(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYBLOB='\x00'/18, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\b\x00'/28], 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) 3.175967892s ago: executing program 2 (id=8415): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, 0x0, &(0x7f0000000e00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x1d, &(0x7f00000001c0), 0x4) 3.089753902s ago: executing program 2 (id=8418): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={0xffffffffffffffff, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r0}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdc8}, 0x0) 3.089243102s ago: executing program 2 (id=8419): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x8, &(0x7f0000000580), 0x5, 0x4cb, &(0x7f0000000700)="$eJzs3c1rG2caAPBHUuzYjnfzscuSZGETyEL2g1j+YIm9u7DsaXcPgWUDe9mF1LUVN7VsGUtOY5OD095y6KG0tFB66L1/QS/NqaFQem7ptfRQUtrUhbZQUNFISvwhOWrqSInn94OJ3nlH0fO+Es/r0TszmgBS63Ttn0zEcER8EBGH66tbn3C6/rBx9/pMbclEtXrxi0zyvNp686nN/3coItYjYiAi/vOPiKczO+OWV9fmp4vFwnJjPV9ZWMqXV9fOXVmYnivMFRbHJs9PTU2OToxP7Vlfb7747M0Lb/+r/61vXrhz+6V336k1a7ixbXM/9lK9631xdFPdgYj466MI1gO5Rn8Ge90QHkrt8/tFRJxJ8v9w5JJPE0iDarVa/b56sN3m9Sqwb2WTfeBMdiQi6uVsdmSkvg//yxjKFkvlyh8vl1YWZ+v7ykeiL3v5SrEw2viucCT6MrX1saR8f3182/pERLIP/HJuMFkfmSkVZ7s71AHbHNqW/1/n6vkPpISv/JBe8h/SS/5Desl/SC/5D+kl/yG95D+kl/yH9JL/kF7yH9Jrt/zv72I7gK7694ULtaXavP599urqynzp6rnZQnl+ZGFlZmSmtLw0MlcqzSXX7Cw86PWKpdLS2J9i5Vq+UihX8uXVtUsLpZXFyqXkuv5Lhb6u9AroxNFTtz7KRMT6nweTJTb9yZersL9Vq5no9TXIQG/kej0AAT1j6h/S60d8x2/7I2HAk63FT/RuMdC6+m+x9ChaA3RDttcNAHrm7AnH/yCtzP9Depn/h/Syjw885Px/mP+HJ5f5f0iv4Tb3//rZpnt3jUbEzyPiw1zfwea9voD9IPtZprH/f/bwb4e3b+3PfJscIuiPiOdev/jqtelKZXmsVv/lvfrKa4368V60H+hUM0+beQwApNfG3eszzaWbcT//e/0khJ3xDzTmJgeSY5RDG5kt5ypk9ujchfUbEXG8VfxM437n9SMfQxu5HfGPNR4z9ZdI2nsguW96d+Kf2BT/N5vin/zJ7wqkw63a+DPaKv+ySU7HvfzbMv5kh/fo3In241/23viXazP+neowxjNvPP9p2/g3Ik62jN+MN5DE2h6/1razHca/8////qrdtuqb9ddpFb+pVspXFpby5dW1c8nvyM0VFscmz09NTY5OjE/lkznqfHOmeqe/HH//9m79H2oTv97fj1v2v1b3+w77/92v3/vf6V3i/+5M68//WPLY+v0fjIg/dBj/q/FPnmq3rRZ/tk3/s7vEr9VNdBi//Mo/XTsMAI+R8ura/HSxWFhWUEgKBx+PZij0uPCgkWO9OwMU8MjcT/petwQAAAAAAAAAAADoVDdOJ+51HwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9oMfAgAA//+H4NeR") r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/crypto\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) ftruncate(r3, 0x5) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) sendfile(r0, r1, 0x0, 0x4000000000010046) 2.53387139s ago: executing program 3 (id=8425): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000d8ffffffb703000008000000b70400000000925e850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000070"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0b00000005000000020000000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) close(r2) 2.52080639s ago: executing program 0 (id=8427): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x141141, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r2}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd"], 0xfdef) 2.43410932s ago: executing program 0 (id=8428): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000d8ffffffb703000008000000b70400000000925e850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0b00000005000000020000000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) close(r3) 2.417423559s ago: executing program 3 (id=8429): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000d8ffffffb703000008000000b70400000000925e850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000070"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0b00000005000000020000000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) close(r2) 2.404340129s ago: executing program 1 (id=8430): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='rss_stat\x00', r0}, 0x18) syz_clone(0x2005000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.331891149s ago: executing program 0 (id=8431): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 2.303549619s ago: executing program 3 (id=8432): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x141141, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd"], 0xfdef) 2.299256929s ago: executing program 0 (id=8433): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xf, 0x7fff0006}]}) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r5, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x80000000003, 0x101301) syz_emit_ethernet(0x2a, 0x0, 0x0) 2.253717449s ago: executing program 1 (id=8435): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x25c, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x7}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) close(r1) 2.107365358s ago: executing program 1 (id=8439): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000008000008500000006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) 2.059349878s ago: executing program 3 (id=8440): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000008000008500000006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) 1.999552068s ago: executing program 1 (id=8441): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000d8ffffffb703000008000000b70400000000925e850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0b00000005000000020000000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) close(r3) 1.940837527s ago: executing program 3 (id=8442): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f0000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='signal_deliver\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 1.878640527s ago: executing program 1 (id=8443): syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0x804498, &(0x7f0000001980)=ANY=[@ANYBLOB='shortname=winnt,uni_xlate=1,shortname=mixed,rodir,shortname=lower,utf8=0,uni_xlate=1,dos1xfloppy,check=strict,uni_xlate=1,shortname=win95,iocharset=iso8859-15,codepage=855,shortname=lower,nonumtail=0,nonumtail=0,uni_xlate=0,uni_xlate=0,iocharset=iso8859-6,shortname=lower,nnonumtail=1,shortname=win95,rodir,utf8=0,nnonumtail=1,shortname=lower,shortname=mixed,iocharset=ascii,appraise,uid>', @ANYBLOB="1880d396e7134e75872921883b53c77d0feb2b23455558cd3154f8cc077408245bf283ef5d7a6addc700447386d27ae3f18a643ddc3db5ed663493786a50333eef483786f4480a09e884bb757fe171cba190f2c08e8a4cf9f3f6df4fc6ef61936f17aac7fcb2e917d6f6a86b0e0285e2a69c36a808f638849528581a8b89c27d7c0815317896bf6d6934c9af3f11a005d9b6cd6d5571d97ac32f1661975ccf248689acc4a21a4dbb229b104ddd2b77965a41e4ed2f51eb1d8ff0d5ef5706b71c", @ANYBLOB="0200"], 0x6, 0x2d3, &(0x7f0000000a40)="$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") mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x40000, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) 1.039773994s ago: executing program 0 (id=8444): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="4c00000010004b0422000000000000007a000000", @ANYRES32=0x0, @ANYBLOB], 0x4c}}, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETA(r3, 0x5406, &(0x7f0000000040)={0xffe0, 0x0, 0x0, 0x9, 0x0, "af437433af485638"}) ioctl$TIOCL_GETMOUSEREPORTING(r3, 0x5412, &(0x7f00000006c0)=0x1a) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x7f) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10) socket(0x1e, 0x4, 0x0) 629.639042ms ago: executing program 1 (id=8446): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f0000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='signal_deliver\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 620.741472ms ago: executing program 3 (id=8447): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f0000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='signal_deliver\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 616.961852ms ago: executing program 4 (id=8448): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x87, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb96f37538e486dd637208"], 0xe) 545.753302ms ago: executing program 4 (id=8449): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0xd, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdc8}, 0x0) 545.284172ms ago: executing program 4 (id=8450): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x25c, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x7}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) close(r1) 500.914492ms ago: executing program 2 (id=8451): syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x17, 0x0, 0x4, 0xff, 0x800, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000080000000000000000000181100", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) setxattr$security_selinux(0x0, 0x0, &(0x7f00000002c0)='system_u:object_r:fixed_disk_device_t:s0\x00', 0x29, 0x2) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0x804498, &(0x7f0000001980)=ANY=[@ANYBLOB='shortname=winnt,uni_xlate=1,shortname=mixed,rodir,shortname=lower,utf8=0,uni_xlate=1,dos1xfloppy,check=strict,uni_xlate=1,shortname=win95,iocharset=iso8859-15,codepage=855,shortname=lower,nonumtail=0,nonumtail=0,uni_xlate=0,uni_xlate=0,iocharset=iso8859-6,shortname=lower,nnonumtail=1,shortname=win95,rodir,utf8=0,nnonumtail=1,shortname=lower,shortname=mixed,iocharset=ascii,appraise,uid>', @ANYBLOB="1880d396e7134e75872921883b53c77d0feb2b23455558cd3154f8cc077408245bf283ef5d7a6addc700447386d27ae3f18a643ddc3db5ed663493786a50333eef483786f4480a09e884bb757fe171cba190f2c08e8a4cf9f3f6df4fc6ef61936f17aac7fcb2e917d6f6a86b0e0285e2a69c36a808f638849528581a8b89c27d7c0815317896bf6d6934c9af3f11a005d9b6cd6d5571d97ac32f1661975ccf248689acc4a21a4dbb229b104ddd2b77965a41e4ed2f51eb1d8ff0d5ef5706b71c", @ANYBLOB="0200"], 0x6, 0x2d3, &(0x7f0000000a40)="$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") mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) syz_mount_image$fuse(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x40000, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x141842, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r6, &(0x7f0000004200)='t', 0x1) sendfile(r6, r5, 0x0, 0x40001) 473.512772ms ago: executing program 4 (id=8452): setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x6, &(0x7f0000000000)={0x14, {{0x29, 0x4e20, 0x4000000, @mcast2}}}, 0x88) openat$vsock(0xffffff9c, &(0x7f00000001c0), 0x40101, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x10000000, 0xfffffffffffffffe, 0x100, 0x0, 0x0, 0x5]}) sendmsg$NL80211_CMD_SET_KEY(r2, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB='$', @ANYBLOB="01002abd7000fddbdf250a000000080003", @ANYBLOB='\b'], 0x24}, 0x1, 0x0, 0x0, 0x4004841}, 0x4810) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x400000000000002, 0x5, 0xfffffffffffffffe, 0x4, 0x2, 0x0, 0xefffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3], 0x0, 0x41901}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 383.173602ms ago: executing program 4 (id=8453): setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x6, &(0x7f0000000000)={0x14, {{0x29, 0x4e20, 0x4000000, @mcast2}}}, 0x88) openat$vsock(0xffffff9c, &(0x7f00000001c0), 0x40101, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x10000000, 0xfffffffffffffffe, 0x100, 0x0, 0x0, 0x5]}) sendmsg$NL80211_CMD_SET_KEY(r2, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x4004841}, 0x4810) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x400000000000002, 0x5, 0xfffffffffffffffe, 0x4, 0x2, 0x0, 0xefffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3], 0x0, 0x41901}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 289.973411ms ago: executing program 4 (id=8454): syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x17, 0x0, 0x4, 0xff, 0x800, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000080000000000000000000181100", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0x804498, &(0x7f0000001980)=ANY=[@ANYBLOB='shortname=winnt,uni_xlate=1,shortname=mixed,rodir,shortname=lower,utf8=0,uni_xlate=1,dos1xfloppy,check=strict,uni_xlate=1,shortname=win95,iocharset=iso8859-15,codepage=855,shortname=lower,nonumtail=0,nonumtail=0,uni_xlate=0,uni_xlate=0,iocharset=iso8859-6,shortname=lower,nnonumtail=1,shortname=win95,rodir,utf8=0,nnonumtail=1,shortname=lower,shortname=mixed,iocharset=ascii,appraise,uid>', @ANYBLOB="1880d396e7134e75872921883b53c77d0feb2b23455558cd3154f8cc077408245bf283ef5d7a6addc700447386d27ae3f18a643ddc3db5ed663493786a50333eef483786f4480a09e884bb757fe171cba190f2c08e8a4cf9f3f6df4fc6ef61936f17aac7fcb2e917d6f6a86b0e0285e2a69c36a808f638849528581a8b89c27d7c0815317896bf6d6934c9af3f11a005d9b6cd6d5571d97ac32f1661975ccf248689acc4a21a4dbb229b104ddd2b77965a41e4ed2f51eb1d8ff0d5ef5706b71c", @ANYBLOB="0200"], 0x6, 0x2d3, &(0x7f0000000a40)="$eJzs3b1rJGUYAPBnNrMfarFbWInggBZWx+Vamw1yB2Iqjy1OCw3eHUh2ES4Q8QPXq8TOxtK/QBD8Q2zsLAVbwc4IgZGZncl+ZNhsJBvx8vsVyZuZ55n3ed+ZJNPkyQcvTw4fZvH46Re/Ra+XRGvYjThJYhCtqH0VS4bfBgDwf3aS5/FnPtNw+tdv1uT2tlgXALA9F/z+r6TlxwdFxE/XVxsAsB33H7z79t7+/t13sqwX9yZfH4+SiCg+z87vPY6PYhyP4nb04zSifFFoR/m2UAzv5Xk+TbPCIF6bTI9HRebk/Z+r6+/9EVHm70Y/BuWhs7eNMv+t/bu72cxC/rSo4/lq/mGRfyf68eJZ8lL+nYb8GHXi9VcX6r8V/fjlw/g4xvGwLGKe/+Vulr2Zf/fX5+8V5RX5yfR41C3j5vKdevLpNd8jAAAAAAAAAAAAAAAAAAAAAACePbeq3jndKPv3FIeq/js7p8UX7chqg+X+PLP8pL7QvD9QtPI8n+bxfd1f53aWZXkVOM9P46W0aiwIAAAAAAAAAAAAAAAAAAAAN9zRp58dHozHj55cyaDuBpBGxN/3I/7tdYYLR16J9cHdas6D8bhVDZdj0sUjsVPHJBFryygWcUXbctHguXM1V4MffmzMKlZ0lEbTqd7Fk7ab57rk4JP2bB8bY+qn6/Agad7D7lnxveLGxeqN60Tz7O1YOdKp7+dqcP0obracTuOp/qW3pfNCOZiuiYlk3ffFG78vLSeJleBO2XGjMb1dDZp2Y/ZsbPQ8R2+Wfv5nRaJbBwAAAAAAAAAAAAAAAAAAbNX8r38bTj5dm9rKu1srCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACu1fz//28ySJeTN8jqxJOj/2ptAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3Bz/BAAA//8a6VGq") mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) syz_mount_image$fuse(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x40000, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x141842, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r7, &(0x7f0000004200)='t', 0x1) sendfile(r7, r6, 0x0, 0x40001) 0s ago: executing program 0 (id=8455): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f0000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='signal_deliver\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) kernel console output (not intermixed with test programs): F2FS-fs (loop1): Found nat_bits in checkpoint [ 1677.107028][T23522] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1678.365848][T23542] attempt to access beyond end of device [ 1678.365848][T23542] loop1: rw=2049, want=45208, limit=40427 [ 1678.545219][ T431] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1679.259533][ T357] usb 1-1: USB disconnect, device number 40 [ 1679.271822][T23548] loop4: detected capacity change from 0 to 512 [ 1679.373490][T21957] attempt to access beyond end of device [ 1679.373490][T21957] loop1: rw=2049, want=45216, limit=40427 [ 1679.414670][T23548] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 1679.421933][T23548] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1679.662367][T23548] EXT4-fs (loop4): 1 truncate cleaned up [ 1679.667931][T23548] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,mblk_io_submit,debug_want_extra_isize=0x0000000000000068,lazytime,block_validity,data_err=abort,,errors=continue. Quota mode: none. [ 1680.918617][T23567] loop1: detected capacity change from 0 to 512 [ 1680.935180][ T431] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1680.955149][ T431] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1680.967106][T23567] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1680.974115][ T431] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1680.992382][T23567] EXT4-fs (loop1): can't mount with journal_checksum, fs mounted w/o journal [ 1681.001238][ T431] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1681.022174][ T431] usb 4-1: config 0 descriptor?? [ 1681.283585][ T2335] usb 3-1: new low-speed USB device number 36 using dummy_hcd [ 1681.395351][ T431] usb 4-1: string descriptor 0 read error: -71 [ 1681.439275][ T431] usb 4-1: USB disconnect, device number 31 [ 1681.551854][T23578] loop4: detected capacity change from 0 to 40427 [ 1681.647079][T23578] F2FS-fs (loop4): invalid crc value [ 1681.654174][T23578] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1681.677439][T23578] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1681.746643][ T2335] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1681.960645][T23590] attempt to access beyond end of device [ 1681.960645][T23590] loop4: rw=2049, want=45208, limit=40427 [ 1682.855237][ T2335] usb 3-1: config 1 has an invalid interface number: 9 but max is 0 [ 1682.876386][T22111] attempt to access beyond end of device [ 1682.876386][T22111] loop4: rw=2049, want=45216, limit=40427 [ 1682.891848][ T2335] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1683.005039][ T2335] usb 3-1: config 1 has no interface number 0 [ 1683.021610][ T2335] usb 3-1: too many endpoints for config 1 interface 9 altsetting 33: 211, using maximum allowed: 30 [ 1683.041300][ T2335] usb 3-1: config 1 interface 9 altsetting 33 has 0 endpoint descriptors, different from the interface descriptor's value: 211 [ 1683.074952][ T2335] usb 3-1: config 1 interface 9 has no altsetting 0 [ 1683.186855][T23594] loop3: detected capacity change from 0 to 40427 [ 1683.217331][T23587] loop0: detected capacity change from 0 to 40427 [ 1683.231609][T23594] F2FS-fs (loop3): invalid crc value [ 1683.239604][T23594] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1683.254978][T23587] F2FS-fs (loop0): invalid crc value [ 1683.283282][T23594] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1683.377453][T23587] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1683.386096][ T2335] usb 3-1: string descriptor 0 read error: -22 [ 1683.412772][T23587] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1683.429889][ T2335] usb 3-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.40 [ 1683.445003][ T2335] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1683.584238][T23619] attempt to access beyond end of device [ 1683.584238][T23619] loop3: rw=2049, want=45208, limit=40427 [ 1684.496545][T23066] attempt to access beyond end of device [ 1684.496545][T23066] loop3: rw=2049, want=45216, limit=40427 [ 1684.635203][ T2335] usb 3-1: can't set config #1, error -71 [ 1684.646871][ T2335] usb 3-1: USB disconnect, device number 36 [ 1684.746468][T23627] loop2: detected capacity change from 0 to 256 [ 1684.751874][T23629] loop4: detected capacity change from 0 to 512 [ 1684.808289][T23629] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1684.878502][T23631] attempt to access beyond end of device [ 1684.878502][T23631] loop0: rw=2049, want=45208, limit=40427 [ 1685.555232][T23629] EXT4-fs (loop4): can't mount with journal_checksum, fs mounted w/o journal [ 1685.576496][T23627] FAT-fs (loop2): Directory bread(block 64) failed [ 1685.582847][T23627] FAT-fs (loop2): Directory bread(block 65) failed [ 1685.653692][T23626] loop1: detected capacity change from 0 to 40427 [ 1685.660335][T23627] FAT-fs (loop2): Directory bread(block 66) failed [ 1685.689690][T23627] FAT-fs (loop2): Directory bread(block 67) failed [ 1685.696652][T13667] attempt to access beyond end of device [ 1685.696652][T13667] loop0: rw=2049, want=45216, limit=40427 [ 1685.696900][T23627] FAT-fs (loop2): Directory bread(block 68) failed [ 1685.715049][T23627] FAT-fs (loop2): Directory bread(block 69) failed [ 1685.723049][T23627] FAT-fs (loop2): Directory bread(block 70) failed [ 1685.729472][T23627] FAT-fs (loop2): Directory bread(block 71) failed [ 1685.735772][T23627] FAT-fs (loop2): Directory bread(block 72) failed [ 1685.742056][T23627] FAT-fs (loop2): Directory bread(block 73) failed [ 1685.754024][T23634] loop3: detected capacity change from 0 to 512 [ 1685.783963][T23626] F2FS-fs (loop1): invalid crc value [ 1685.824278][T23626] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1685.862171][T23626] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1685.911963][T23634] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 1685.920783][T23634] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1685.966540][T23634] EXT4-fs (loop3): 1 truncate cleaned up [ 1685.972022][T23634] EXT4-fs (loop3): mounted filesystem without journal. Opts: i_version,mblk_io_submit,debug_want_extra_isize=0x0000000000000068,lazytime,block_validity,data_err=abort,,errors=continue. Quota mode: none. [ 1686.124029][T23641] loop0: detected capacity change from 0 to 40427 [ 1686.229761][T23647] attempt to access beyond end of device [ 1686.229761][T23647] loop1: rw=2049, want=45208, limit=40427 [ 1686.356564][T23646] loop2: detected capacity change from 0 to 256 [ 1686.885458][T23646] exfat: Deprecated parameter 'namecase' [ 1686.900697][T23641] F2FS-fs (loop0): invalid crc value [ 1687.017240][T23646] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xc2dc8e67, utbl_chksum : 0xe619d30d) [ 1687.044517][T21957] attempt to access beyond end of device [ 1687.044517][T21957] loop1: rw=2049, want=45216, limit=40427 [ 1687.053229][T23641] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1687.355524][T23641] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1687.668331][T23662] attempt to access beyond end of device [ 1687.668331][T23662] loop0: rw=2049, want=45208, limit=40427 [ 1690.803289][T13667] attempt to access beyond end of device [ 1690.803289][T13667] loop0: rw=2049, want=45216, limit=40427 [ 1690.940259][T23684] loop2: detected capacity change from 0 to 2048 [ 1691.296897][T23690] loop1: detected capacity change from 0 to 256 [ 1691.430686][T23684] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1691.630015][ T30] audit: type=1326 audit(1734680896.956:1294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23697 comm="syz.0.6154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c30e26d29 code=0x7ffc0000 [ 1691.660449][ T30] audit: type=1326 audit(1734680896.956:1295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23697 comm="syz.0.6154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8c30e26d29 code=0x7ffc0000 [ 1692.775952][ T30] audit: type=1326 audit(1734680896.956:1296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23697 comm="syz.0.6154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c30e26d29 code=0x7ffc0000 [ 1692.801552][ T30] audit: type=1326 audit(1734680896.956:1297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23697 comm="syz.0.6154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8c30e26d29 code=0x7ffc0000 [ 1692.812043][T23702] loop0: detected capacity change from 0 to 512 [ 1692.839076][ T30] audit: type=1326 audit(1734680896.956:1298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23697 comm="syz.0.6154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c30e26d29 code=0x7ffc0000 [ 1692.862496][ T30] audit: type=1326 audit(1734680896.956:1299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23697 comm="syz.0.6154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8c30e26d29 code=0x7ffc0000 [ 1692.886408][ T30] audit: type=1326 audit(1734680896.956:1300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23697 comm="syz.0.6154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c30e26d29 code=0x7ffc0000 [ 1692.905557][T23709] loop1: detected capacity change from 0 to 512 [ 1692.910829][T23702] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1692.925694][ T30] audit: type=1326 audit(1734680896.956:1301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23697 comm="syz.0.6154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f8c30e26d29 code=0x7ffc0000 [ 1692.932306][T23702] EXT4-fs (loop0): can't mount with journal_checksum, fs mounted w/o journal [ 1692.950280][T23709] EXT4-fs (loop1): Ignoring removed orlov option [ 1692.963852][ T30] audit: type=1326 audit(1734680896.956:1302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23697 comm="syz.0.6154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c30e26d29 code=0x7ffc0000 [ 1692.997007][T23709] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodelalloc,orlov,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 1693.010933][T23709] ext4 filesystem being mounted at /98/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1693.075407][ T2335] usb 4-1: new low-speed USB device number 32 using dummy_hcd [ 1694.654849][ T9504] usb 3-1: new low-speed USB device number 37 using dummy_hcd [ 1694.755206][ T2335] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1694.845228][ T2335] usb 4-1: config 1 has an invalid interface number: 9 but max is 0 [ 1694.853105][ T2335] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1694.862986][ T2335] usb 4-1: config 1 has no interface number 0 [ 1694.868938][ T2335] usb 4-1: too many endpoints for config 1 interface 9 altsetting 33: 211, using maximum allowed: 30 [ 1694.879563][ T2335] usb 4-1: config 1 interface 9 altsetting 33 has 0 endpoint descriptors, different from the interface descriptor's value: 211 [ 1694.892575][ T2335] usb 4-1: config 1 interface 9 has no altsetting 0 [ 1694.955211][ T357] usb 5-1: new low-speed USB device number 43 using dummy_hcd [ 1695.065143][ T2695] usb 1-1: new low-speed USB device number 41 using dummy_hcd [ 1695.095198][ T9504] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1695.102726][ T6] usb 2-1: new low-speed USB device number 38 using dummy_hcd [ 1695.135179][ T2335] usb 4-1: string descriptor 0 read error: -22 [ 1695.141180][ T2335] usb 4-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.40 [ 1695.150111][ T2335] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1695.175247][ T9504] usb 3-1: config 1 has an invalid interface number: 9 but max is 0 [ 1695.183121][ T9504] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1695.193351][ T9504] usb 3-1: config 1 has no interface number 0 [ 1695.199393][ T9504] usb 3-1: too many endpoints for config 1 interface 9 altsetting 33: 211, using maximum allowed: 30 [ 1695.206171][ T2335] usb-storage 4-1:1.9: USB Mass Storage device detected [ 1695.210152][ T9504] usb 3-1: config 1 interface 9 altsetting 33 has 0 endpoint descriptors, different from the interface descriptor's value: 211 [ 1695.230087][ T9504] usb 3-1: config 1 interface 9 has no altsetting 0 [ 1695.365208][ T357] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1695.412018][ T550] usb 4-1: USB disconnect, device number 32 [ 1695.445327][ T357] usb 5-1: config 1 has an invalid interface number: 9 but max is 0 [ 1695.453203][ T357] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1695.463357][ T357] usb 5-1: config 1 has no interface number 0 [ 1695.465256][ T2695] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1695.469291][ T357] usb 5-1: too many endpoints for config 1 interface 9 altsetting 33: 211, using maximum allowed: 30 [ 1695.476984][ T9504] usb 3-1: string descriptor 0 read error: -22 [ 1695.487642][ T357] usb 5-1: config 1 interface 9 altsetting 33 has 0 endpoint descriptors, different from the interface descriptor's value: 211 [ 1695.493874][ T9504] usb 3-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.40 [ 1695.506598][ T357] usb 5-1: config 1 interface 9 has no altsetting 0 [ 1695.515381][ T6] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1695.529255][ T9504] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1695.565261][ T2695] usb 1-1: config 1 has an invalid interface number: 9 but max is 0 [ 1695.573157][ T2695] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1695.583747][ T9504] usb-storage 3-1:1.9: USB Mass Storage device detected [ 1695.590655][ T2695] usb 1-1: config 1 has no interface number 0 [ 1695.596573][ T2695] usb 1-1: too many endpoints for config 1 interface 9 altsetting 33: 211, using maximum allowed: 30 [ 1695.607297][ T6] usb 2-1: config 1 has an invalid interface number: 9 but max is 0 [ 1695.615023][ T6] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1695.625030][ T6] usb 2-1: config 1 has no interface number 0 [ 1695.630936][ T2695] usb 1-1: config 1 interface 9 altsetting 33 has 0 endpoint descriptors, different from the interface descriptor's value: 211 [ 1695.649235][ T6] usb 2-1: too many endpoints for config 1 interface 9 altsetting 33: 211, using maximum allowed: 30 [ 1695.659985][ T2695] usb 1-1: config 1 interface 9 has no altsetting 0 [ 1695.666431][ T6] usb 2-1: config 1 interface 9 altsetting 33 has 0 endpoint descriptors, different from the interface descriptor's value: 211 [ 1695.679376][ T6] usb 2-1: config 1 interface 9 has no altsetting 0 [ 1695.785169][ T357] usb 5-1: string descriptor 0 read error: -22 [ 1695.791401][ T357] usb 5-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.40 [ 1695.800339][ T357] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1695.827762][ T2335] usb 3-1: USB disconnect, device number 37 [ 1695.856005][ T357] usb-storage 5-1:1.9: USB Mass Storage device detected [ 1695.915166][ T2695] usb 1-1: string descriptor 0 read error: -22 [ 1695.921212][ T2695] usb 1-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.40 [ 1695.930260][ T6] usb 2-1: string descriptor 0 read error: -22 [ 1695.936616][ T2695] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1695.946325][T23741] loop3: detected capacity change from 0 to 512 [ 1695.952622][ T6] usb 2-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.40 [ 1695.961831][ T6] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1695.995501][T23741] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 1696.002470][T23741] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1696.012781][ T2695] usb-storage 1-1:1.9: USB Mass Storage device detected [ 1696.014430][T23741] EXT4-fs (loop3): 1 truncate cleaned up [ 1696.020198][ T6] usb-storage 2-1:1.9: USB Mass Storage device detected [ 1696.025699][T23741] EXT4-fs (loop3): mounted filesystem without journal. Opts: i_version,mblk_io_submit,debug_want_extra_isize=0x0000000000000068,lazytime,block_validity,data_err=abort,,errors=continue. Quota mode: none. [ 1696.099932][ T2695] usb 5-1: USB disconnect, device number 43 [ 1696.520290][ T2335] usb 2-1: USB disconnect, device number 38 [ 1696.527607][T23751] loop2: detected capacity change from 0 to 256 [ 1696.538443][ T2695] usb 1-1: USB disconnect, device number 41 [ 1696.612603][T23751] FAT-fs (loop2): Directory bread(block 64) failed [ 1696.619016][T23751] FAT-fs (loop2): Directory bread(block 65) failed [ 1696.625349][T23751] FAT-fs (loop2): Directory bread(block 66) failed [ 1696.631670][T23751] FAT-fs (loop2): Directory bread(block 67) failed [ 1696.638113][T23751] FAT-fs (loop2): Directory bread(block 68) failed [ 1696.644478][T23751] FAT-fs (loop2): Directory bread(block 69) failed [ 1696.651252][T23751] FAT-fs (loop2): Directory bread(block 70) failed [ 1696.657809][T23751] FAT-fs (loop2): Directory bread(block 71) failed [ 1696.668792][T23751] FAT-fs (loop2): Directory bread(block 72) failed [ 1696.670807][T23754] loop4: detected capacity change from 0 to 256 [ 1696.675478][T23751] FAT-fs (loop2): Directory bread(block 73) failed [ 1696.695884][T23754] exfat: Deprecated parameter 'namecase' [ 1696.810462][T23754] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xc2dc8e67, utbl_chksum : 0xe619d30d) [ 1696.913393][T23758] loop2: detected capacity change from 0 to 2048 [ 1696.929139][T23758] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1697.158397][T23771] loop0: detected capacity change from 0 to 512 [ 1697.171658][T23775] loop2: detected capacity change from 0 to 512 [ 1697.397834][T23775] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 1697.412377][T23771] EXT4-fs (loop0): corrupt root inode, run e2fsck [ 1697.420041][T23775] EXT4-fs (loop2): mount failed [ 1697.429401][T23771] EXT4-fs (loop0): mount failed [ 1697.497949][T23773] loop3: detected capacity change from 0 to 40427 [ 1697.579407][T23783] loop4: detected capacity change from 0 to 2048 [ 1697.597624][T23773] F2FS-fs (loop3): Unrecognized mount option "barrier" or missing value [ 1697.623947][T23785] loop2: detected capacity change from 0 to 1024 [ 1697.637977][T23783] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1697.650555][T23785] EXT4-fs (loop2): dax option not supported [ 1697.736725][T23785] loop2: detected capacity change from 0 to 4096 [ 1697.789961][T23785] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1697.838000][T23785] fs-verity (loop2, inode 16): fs-verity keyring is empty, rejecting signed file! [ 1699.436116][T23814] loop2: detected capacity change from 0 to 512 [ 1700.302582][T23814] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 1700.325295][T23814] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1700.392001][T23814] EXT4-fs (loop2): 1 truncate cleaned up [ 1700.422402][T23814] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,mblk_io_submit,debug_want_extra_isize=0x0000000000000068,lazytime,block_validity,data_err=abort,,errors=continue. Quota mode: none. [ 1700.876133][ T3769] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 1700.876917][ T550] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1700.965133][ T2695] usb 1-1: new low-speed USB device number 42 using dummy_hcd [ 1701.015342][T23837] loop2: detected capacity change from 0 to 40427 [ 1701.116641][T23837] F2FS-fs (loop2): invalid crc value [ 1701.126575][T23837] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1701.149098][T23837] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1701.245272][ T3769] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1701.255972][ T3769] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1701.268953][ T3769] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1701.278076][ T3769] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1701.432408][ T3769] usb 5-1: config 0 descriptor?? [ 1702.211741][T23853] loop1: detected capacity change from 0 to 256 [ 1702.235222][ T3769] usbhid 5-1:0.0: can't add hid device: -71 [ 1702.241423][ T3769] usbhid: probe of 5-1:0.0 failed with error -71 [ 1702.251019][ T3769] usb 5-1: USB disconnect, device number 44 [ 1702.300353][T23853] FAT-fs (loop1): Directory bread(block 64) failed [ 1702.306852][T23853] FAT-fs (loop1): Directory bread(block 65) failed [ 1702.313324][T23853] FAT-fs (loop1): Directory bread(block 66) failed [ 1702.319989][T23853] FAT-fs (loop1): Directory bread(block 67) failed [ 1702.326605][T23853] FAT-fs (loop1): Directory bread(block 68) failed [ 1702.329234][ T550] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1702.333922][T23853] FAT-fs (loop1): Directory bread(block 69) failed [ 1702.343562][ T550] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1702.350110][T23853] FAT-fs (loop1): Directory bread(block 70) failed [ 1702.362780][ T550] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1702.369685][T23853] FAT-fs (loop1): Directory bread(block 71) failed [ 1702.377840][ T550] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1702.384604][T23853] FAT-fs (loop1): Directory bread(block 72) failed [ 1702.395324][T22645] attempt to access beyond end of device [ 1702.395324][T22645] loop2: rw=2049, want=45104, limit=40427 [ 1702.398953][T23853] FAT-fs (loop1): Directory bread(block 73) failed [ 1702.410047][ T550] usb 4-1: config 0 descriptor?? [ 1702.455699][ T550] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1702.465357][ T2695] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1702.545196][ T2695] usb 1-1: config 1 has an invalid interface number: 9 but max is 0 [ 1702.553208][ T2695] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1702.563316][ T2695] usb 1-1: config 1 has no interface number 0 [ 1702.569256][ T2695] usb 1-1: too many endpoints for config 1 interface 9 altsetting 33: 211, using maximum allowed: 30 [ 1702.579994][ T2695] usb 1-1: config 1 interface 9 altsetting 33 has 0 endpoint descriptors, different from the interface descriptor's value: 211 [ 1702.593098][ T2695] usb 1-1: config 1 interface 9 has no altsetting 0 [ 1703.020276][ T550] usb 3-1: new low-speed USB device number 38 using dummy_hcd [ 1703.095218][ T2695] usb 1-1: string descriptor 0 read error: -22 [ 1703.101271][ T2695] usb 1-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.40 [ 1703.114931][ T2695] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1703.124496][T23864] loop1: detected capacity change from 0 to 2048 [ 1703.165813][ T2695] usb-storage 1-1:1.9: USB Mass Storage device detected [ 1703.196694][T23864] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1703.368378][ T3769] usb 1-1: USB disconnect, device number 42 [ 1703.652438][T23879] loop4: detected capacity change from 0 to 512 [ 1703.659276][T23879] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 1703.666335][T23879] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1703.676100][ T550] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1703.678566][T23879] EXT4-fs (loop4): 1 truncate cleaned up [ 1703.689143][T23879] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,mblk_io_submit,debug_want_extra_isize=0x0000000000000068,lazytime,block_validity,data_err=abort,,errors=continue. Quota mode: none. [ 1703.745073][ T2695] usb 4-1: USB disconnect, device number 33 [ 1703.794921][ T550] usb 3-1: config 1 has an invalid interface number: 9 but max is 0 [ 1703.805288][ T550] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1703.815632][ T550] usb 3-1: config 1 has no interface number 0 [ 1703.821590][ T550] usb 3-1: too many endpoints for config 1 interface 9 altsetting 33: 211, using maximum allowed: 30 [ 1703.859664][ T550] usb 3-1: config 1 interface 9 altsetting 33 has 0 endpoint descriptors, different from the interface descriptor's value: 211 [ 1703.872927][ T550] usb 3-1: config 1 interface 9 has no altsetting 0 [ 1704.875511][ T30] audit: type=1326 audit(1734681678.180:1303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23889 comm="syz.1.6206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f627286fd29 code=0x7ffc0000 [ 1704.928627][ T30] audit: type=1326 audit(1734681678.180:1304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23889 comm="syz.1.6206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f627286fd29 code=0x7ffc0000 [ 1704.952642][ T30] audit: type=1326 audit(1734681678.180:1305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23889 comm="syz.1.6206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f627286fd29 code=0x7ffc0000 [ 1704.980458][ T30] audit: type=1326 audit(1734681678.180:1306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23889 comm="syz.1.6206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f627286fd29 code=0x7ffc0000 [ 1705.004184][ T30] audit: type=1326 audit(1734681678.180:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23889 comm="syz.1.6206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f627286fd29 code=0x7ffc0000 [ 1705.027830][ T30] audit: type=1326 audit(1734681678.180:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23889 comm="syz.1.6206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f627286fd29 code=0x7ffc0000 [ 1705.051287][ T30] audit: type=1326 audit(1734681678.180:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23889 comm="syz.1.6206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f627286fd29 code=0x7ffc0000 [ 1705.075703][ T30] audit: type=1326 audit(1734681678.180:1310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23889 comm="syz.1.6206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f627286fd29 code=0x7ffc0000 [ 1705.099080][ T550] usb 3-1: string descriptor 0 read error: -22 [ 1705.109136][ T550] usb 3-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.40 [ 1705.119221][ T550] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1705.135479][ T30] audit: type=1326 audit(1734681678.180:1311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23889 comm="syz.1.6206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f627286fd29 code=0x7ffc0000 [ 1705.195790][ T550] usb-storage 3-1:1.9: USB Mass Storage device detected [ 1705.255157][ T3769] usb 2-1: new low-speed USB device number 39 using dummy_hcd [ 1705.295024][T23903] loop0: detected capacity change from 0 to 40427 [ 1705.305243][ T2695] usb 4-1: new low-speed USB device number 34 using dummy_hcd [ 1705.361493][T23903] F2FS-fs (loop0): invalid crc value [ 1705.371367][T23903] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1705.399504][ T550] usb 3-1: USB disconnect, device number 38 [ 1705.420535][T23903] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1705.775286][ T3769] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1705.885352][ T3769] usb 2-1: config 1 has an invalid interface number: 9 but max is 0 [ 1705.893498][ T3769] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1706.380253][ T3769] usb 2-1: config 1 has no interface number 0 [ 1706.390303][ T3769] usb 2-1: too many endpoints for config 1 interface 9 altsetting 33: 211, using maximum allowed: 30 [ 1706.473345][T13667] attempt to access beyond end of device [ 1706.473345][T13667] loop0: rw=2049, want=45104, limit=40427 [ 1706.485456][ T3769] usb 2-1: config 1 interface 9 altsetting 33 has 0 endpoint descriptors, different from the interface descriptor's value: 211 [ 1706.525197][ T3769] usb 2-1: config 1 interface 9 has no altsetting 0 [ 1706.545250][ T2695] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1706.625160][ T2695] usb 4-1: config 1 has an invalid interface number: 9 but max is 0 [ 1706.785427][ T3769] usb 2-1: string descriptor 0 read error: -22 [ 1706.792403][ T3769] usb 2-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.40 [ 1706.881173][ T2695] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1706.891121][ T2695] usb 4-1: config 1 has no interface number 0 [ 1706.891544][ T3769] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1706.897017][ T2695] usb 4-1: too many endpoints for config 1 interface 9 altsetting 33: 211, using maximum allowed: 30 [ 1706.897049][ T2695] usb 4-1: config 1 interface 9 altsetting 33 has 0 endpoint descriptors, different from the interface descriptor's value: 211 [ 1706.897072][ T2695] usb 4-1: config 1 interface 9 has no altsetting 0 [ 1706.944306][T23925] loop0: detected capacity change from 0 to 2048 [ 1706.986928][ T3769] usb-storage 2-1:1.9: USB Mass Storage device detected [ 1707.007614][T23925] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1707.102366][T23937] loop0: detected capacity change from 0 to 256 [ 1707.140426][T23937] exfat: Deprecated parameter 'namecase' [ 1707.167899][T23937] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xc2dc8e67, utbl_chksum : 0xe619d30d) [ 1707.175178][ T2695] usb 4-1: string descriptor 0 read error: -22 [ 1707.274852][T23939] loop2: detected capacity change from 0 to 256 [ 1707.528854][ T2695] usb 4-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.40 [ 1707.565569][ T2695] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1707.574145][ T550] usb 2-1: USB disconnect, device number 39 [ 1707.645342][ T2695] usb-storage 4-1:1.9: USB Mass Storage device detected [ 1708.271790][ T2695] usb 4-1: USB disconnect, device number 34 [ 1708.310870][T23950] loop3: detected capacity change from 0 to 1024 [ 1708.355071][T23950] EXT4-fs (loop3): dax option not supported [ 1709.564752][T23959] loop4: detected capacity change from 0 to 256 [ 1709.756602][T23950] loop3: detected capacity change from 0 to 4096 [ 1709.774588][T23961] loop1: detected capacity change from 0 to 512 [ 1709.827216][T23950] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1709.882602][T23961] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 1709.894053][T23961] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1709.972549][T23961] EXT4-fs (loop1): 1 truncate cleaned up [ 1710.263869][T23961] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,mblk_io_submit,debug_want_extra_isize=0x0000000000000068,lazytime,block_validity,data_err=abort,,errors=continue. Quota mode: none. [ 1710.966971][T23981] loop3: detected capacity change from 0 to 2048 [ 1711.146623][T23981] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1712.333198][T24006] loop1: detected capacity change from 0 to 256 [ 1712.453509][T24006] exfat: Deprecated parameter 'namecase' [ 1712.529505][T24006] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xc2dc8e67, utbl_chksum : 0xe619d30d) [ 1712.532723][T24018] loop3: detected capacity change from 0 to 512 [ 1712.605468][T24018] EXT4-fs (loop3): corrupt root inode, run e2fsck [ 1712.611746][T24018] EXT4-fs (loop3): mount failed [ 1712.900397][T24013] loop0: detected capacity change from 0 to 40427 [ 1712.988426][T24013] F2FS-fs (loop0): invalid crc value [ 1712.995114][T24013] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1713.034148][T24013] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1715.774973][T24047] loop4: detected capacity change from 0 to 512 [ 1715.822781][T24052] attempt to access beyond end of device [ 1715.822781][T24052] loop0: rw=2049, want=45208, limit=40427 [ 1715.859443][T24047] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 1715.866845][T24047] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1715.885935][T24055] loop2: detected capacity change from 0 to 2048 [ 1715.906428][T24047] EXT4-fs (loop4): 1 truncate cleaned up [ 1716.145832][T24047] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,mblk_io_submit,debug_want_extra_isize=0x0000000000000068,lazytime,block_validity,data_err=abort,,errors=continue. Quota mode: none. [ 1716.171177][T13667] attempt to access beyond end of device [ 1716.171177][T13667] loop0: rw=2049, want=45216, limit=40427 [ 1716.252090][T24055] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1717.157501][ T30] audit: type=1326 audit(1734682202.483:1312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24069 comm="syz.3.6248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2a33cfd29 code=0x7ffc0000 [ 1717.299249][T24073] loop1: detected capacity change from 0 to 256 [ 1717.311157][ T30] audit: type=1326 audit(1734682202.513:1313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24069 comm="syz.3.6248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2a33cfd29 code=0x7ffc0000 [ 1717.425437][T24073] exfat: Deprecated parameter 'namecase' [ 1717.488777][T24078] loop0: detected capacity change from 0 to 1024 [ 1717.498827][T24077] loop3: detected capacity change from 0 to 2048 [ 1717.518288][ T30] audit: type=1326 audit(1734682202.513:1314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24069 comm="syz.3.6248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7fe2a33cfd29 code=0x7ffc0000 [ 1717.541878][ T30] audit: type=1326 audit(1734682202.513:1315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24069 comm="syz.3.6248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2a33cfd29 code=0x7ffc0000 [ 1717.565224][ T30] audit: type=1326 audit(1734682202.513:1316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24069 comm="syz.3.6248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2a33cfd29 code=0x7ffc0000 [ 1717.588460][ T30] audit: type=1326 audit(1734682202.513:1317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24069 comm="syz.3.6248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=86 compat=0 ip=0x7fe2a33cfd29 code=0x7ffc0000 [ 1717.612126][ T30] audit: type=1326 audit(1734682202.513:1318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24069 comm="syz.3.6248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2a33cfd29 code=0x7ffc0000 [ 1717.636199][T24078] EXT4-fs (loop0): dax option not supported [ 1717.644327][ T30] audit: type=1326 audit(1734682202.513:1319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24069 comm="syz.3.6248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2a33cfd29 code=0x7ffc0000 [ 1717.670024][T24073] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xc2dc8e67, utbl_chksum : 0xe619d30d) [ 1717.693547][T24077] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1719.096074][T24078] loop0: detected capacity change from 0 to 4096 [ 1719.332466][T24078] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1720.302214][T24125] loop2: detected capacity change from 0 to 512 [ 1720.390177][T24111] loop4: detected capacity change from 0 to 40427 [ 1720.465218][T24125] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 1720.472624][T24111] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 1720.486778][T24125] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1720.488159][T24111] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 1720.498372][T24125] EXT4-fs (loop2): 1 truncate cleaned up [ 1720.510157][T24125] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,mblk_io_submit,debug_want_extra_isize=0x0000000000000068,lazytime,block_validity,data_err=abort,,errors=continue. Quota mode: none. [ 1720.641154][T24127] loop3: detected capacity change from 0 to 40427 [ 1720.661048][T24111] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 1720.846293][T24143] loop0: detected capacity change from 0 to 512 [ 1720.874216][T24127] F2FS-fs (loop3): invalid crc value [ 1720.943136][T24111] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 1720.985965][T24111] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1721.006711][T24143] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 1721.045739][T24127] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1721.059423][T24143] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1721.302081][T24143] EXT4-fs (loop0): 1 truncate cleaned up [ 1721.347136][T24127] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1721.347638][T24143] EXT4-fs (loop0): mounted filesystem without journal. Opts: i_version,mblk_io_submit,debug_want_extra_isize=0x0000000000000068,lazytime,block_validity,data_err=abort,,errors=continue. Quota mode: none. [ 1721.405207][T22111] attempt to access beyond end of device [ 1721.405207][T22111] loop4: rw=2049, want=45104, limit=40427 [ 1722.616973][T24164] attempt to access beyond end of device [ 1722.616973][T24164] loop3: rw=2049, want=45208, limit=40427 [ 1724.979346][T23066] attempt to access beyond end of device [ 1724.979346][T23066] loop3: rw=2049, want=45216, limit=40427 [ 1725.119192][T24173] loop1: detected capacity change from 0 to 1024 [ 1725.129289][T24175] loop4: detected capacity change from 0 to 512 [ 1725.216055][T24173] EXT4-fs (loop1): dax option not supported [ 1725.516159][T24175] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 1725.547816][T24175] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1725.775778][T24173] loop1: detected capacity change from 0 to 4096 [ 1725.798982][T24175] EXT4-fs (loop4): 1 truncate cleaned up [ 1725.804575][T24175] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,mblk_io_submit,debug_want_extra_isize=0x0000000000000068,lazytime,block_validity,data_err=abort,,errors=continue. Quota mode: none. [ 1725.888792][T24173] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1726.280652][T24191] loop2: detected capacity change from 0 to 512 [ 1726.294506][T24191] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 1726.302117][T24191] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1726.313662][T24191] EXT4-fs (loop2): 1 truncate cleaned up [ 1726.319184][T24191] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,mblk_io_submit,debug_want_extra_isize=0x0000000000000068,lazytime,block_validity,data_err=abort,,errors=continue. Quota mode: none. [ 1727.344429][T24211] loop2: detected capacity change from 0 to 512 [ 1727.458346][T24211] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 1727.475499][T24211] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1727.496773][T24211] EXT4-fs (loop2): 1 truncate cleaned up [ 1727.502241][T24211] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,mblk_io_submit,debug_want_extra_isize=0x0000000000000068,lazytime,block_validity,data_err=abort,,errors=continue. Quota mode: none. [ 1727.714682][T24208] loop0: detected capacity change from 0 to 40427 [ 1727.755147][ T2335] usb 2-1: new low-speed USB device number 40 using dummy_hcd [ 1727.818789][T24208] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 1727.824945][T24208] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 1727.870363][T24208] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 1727.904446][T24222] loop4: detected capacity change from 0 to 40427 [ 1727.944940][T24208] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 1727.955141][T24208] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1727.967455][T24222] F2FS-fs (loop4): invalid crc value [ 1728.024597][T24222] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1728.068665][T13667] attempt to access beyond end of device [ 1728.068665][T13667] loop0: rw=2049, want=45104, limit=40427 [ 1728.144052][T24222] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1728.165153][ T2335] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1728.245166][ T2335] usb 2-1: config 1 has an invalid interface number: 9 but max is 0 [ 1728.253040][ T2335] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1728.279686][ T2335] usb 2-1: config 1 has no interface number 0 [ 1728.287228][ T2335] usb 2-1: too many endpoints for config 1 interface 9 altsetting 33: 211, using maximum allowed: 30 [ 1728.356271][ T2335] usb 2-1: config 1 interface 9 altsetting 33 has 0 endpoint descriptors, different from the interface descriptor's value: 211 [ 1728.369379][ T2335] usb 2-1: config 1 interface 9 has no altsetting 0 [ 1729.562325][T24240] attempt to access beyond end of device [ 1729.562325][T24240] loop4: rw=2049, want=45208, limit=40427 [ 1730.215196][ T2335] usb 2-1: string descriptor 0 read error: -22 [ 1730.221587][ T2335] usb 2-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.40 [ 1730.231065][ T2335] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1730.397780][ T2335] usb-storage 2-1:1.9: USB Mass Storage device detected [ 1730.409279][T22111] attempt to access beyond end of device [ 1730.409279][T22111] loop4: rw=2049, want=45216, limit=40427 [ 1730.732957][T24252] loop3: detected capacity change from 0 to 512 [ 1730.799216][T24252] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 1730.817920][ T2335] usb 2-1: USB disconnect, device number 40 [ 1730.845393][T24252] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1730.869996][T24252] EXT4-fs (loop3): 1 truncate cleaned up [ 1730.875954][T24252] EXT4-fs (loop3): mounted filesystem without journal. Opts: i_version,mblk_io_submit,debug_want_extra_isize=0x0000000000000068,lazytime,block_validity,data_err=abort,,errors=continue. Quota mode: none. [ 1731.175148][ T550] usb 3-1: new low-speed USB device number 39 using dummy_hcd [ 1731.455123][ T431] usb 5-1: new low-speed USB device number 45 using dummy_hcd [ 1731.626135][ T550] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1731.705209][ T550] usb 3-1: config 1 has an invalid interface number: 9 but max is 0 [ 1731.735399][ T550] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1731.747330][T24273] loop1: detected capacity change from 0 to 512 [ 1731.760122][ T550] usb 3-1: config 1 has no interface number 0 [ 1731.766343][ T550] usb 3-1: too many endpoints for config 1 interface 9 altsetting 33: 211, using maximum allowed: 30 [ 1731.777377][ T550] usb 3-1: config 1 interface 9 altsetting 33 has 0 endpoint descriptors, different from the interface descriptor's value: 211 [ 1731.791215][ T550] usb 3-1: config 1 interface 9 has no altsetting 0 [ 1731.815681][T24273] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 1731.822716][T24273] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1731.841984][T24273] EXT4-fs (loop1): 1 truncate cleaned up [ 1731.855253][T24273] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,mblk_io_submit,debug_want_extra_isize=0x0000000000000068,lazytime,block_validity,data_err=abort,,errors=continue. Quota mode: none. [ 1731.874971][ T431] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1732.005159][ T431] usb 5-1: config 1 has an invalid interface number: 9 but max is 0 [ 1732.012996][ T431] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1732.023251][ T431] usb 5-1: config 1 has no interface number 0 [ 1732.029226][ T431] usb 5-1: too many endpoints for config 1 interface 9 altsetting 33: 211, using maximum allowed: 30 [ 1732.039946][ T431] usb 5-1: config 1 interface 9 altsetting 33 has 0 endpoint descriptors, different from the interface descriptor's value: 211 [ 1732.052950][ T431] usb 5-1: config 1 interface 9 has no altsetting 0 [ 1732.385161][ T550] usb 3-1: string descriptor 0 read error: -22 [ 1732.392350][ T550] usb 3-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.40 [ 1732.411536][ T550] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1732.415230][ T431] usb 5-1: string descriptor 0 read error: -22 [ 1732.434661][ T431] usb 5-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.40 [ 1732.443678][ T431] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1732.476100][ T550] usb-storage 3-1:1.9: USB Mass Storage device detected [ 1732.485978][ T431] usb-storage 5-1:1.9: USB Mass Storage device detected [ 1732.669289][T24287] loop3: detected capacity change from 0 to 512 [ 1732.693457][T24292] loop1: detected capacity change from 0 to 2048 [ 1732.700177][ T319] usb 3-1: USB disconnect, device number 39 [ 1732.707930][T24287] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2766: inode #11: comm syz.3.6295: corrupted xattr block 95 [ 1732.721594][T24287] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.6295: bg 0: block 7: invalid block bitmap [ 1732.734032][ T2335] usb 5-1: USB disconnect, device number 45 [ 1732.736414][T24287] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 1732.748486][T24287] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2932: inode #11: comm syz.3.6295: corrupted xattr block 95 [ 1732.760513][T24287] EXT4-fs warning (device loop3): ext4_evict_inode:303: xattr delete (err -117) [ 1732.769604][T24287] EXT4-fs (loop3): 1 orphan inode deleted [ 1732.775192][T24287] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1732.887549][T24292] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1733.495271][ T30] audit: type=1326 audit(1734684010.805:1320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24301 comm="syz.1.6299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f627286fd29 code=0x7ffc0000 [ 1733.679861][ T30] audit: type=1326 audit(1734684010.815:1321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24301 comm="syz.1.6299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f627286fd29 code=0x7ffc0000 [ 1735.324082][ T30] audit: type=1326 audit(1734684012.645:1322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24320 comm="syz.1.6306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f627286fd29 code=0x7ffc0000 [ 1735.448550][ T30] audit: type=1326 audit(1734684012.735:1323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24320 comm="syz.1.6306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f627286fd29 code=0x7ffc0000 [ 1737.561903][T24353] loop0: detected capacity change from 0 to 16 [ 1737.704320][ T30] audit: type=1400 audit(1734684015.005:1324): avc: denied { set_context_mgr } for pid=24359 comm="syz.2.6316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1739.178458][ T30] audit: type=1400 audit(1734684015.005:1325): avc: denied { map } for pid=24359 comm="syz.2.6316" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1739.179545][T24353] erofs: (device loop0): mounted with root inode @ nid 36. [ 1739.858624][ T30] audit: type=1400 audit(1734684017.185:1326): avc: denied { bind } for pid=24363 comm="syz.4.6318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1740.217633][ T30] audit: type=1400 audit(1734684017.545:1327): avc: denied { connect } for pid=24385 comm="syz.1.6323" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1740.524771][T24394] loop3: detected capacity change from 0 to 128 [ 1740.638822][T24394] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c018, mo2=0002] [ 1740.668749][T24394] System zones: 1-3, 19-19, 35-36 [ 1740.694919][T24394] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,,errors=continue. Quota mode: none. [ 1740.717614][T24399] loop1: detected capacity change from 0 to 256 [ 1740.825439][T24399] exfat: Deprecated parameter 'namecase' [ 1740.855780][T24399] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xc2dc8e67, utbl_chksum : 0xe619d30d) [ 1742.731613][T24414] loop2: detected capacity change from 0 to 16 [ 1742.856218][T24414] erofs: (device loop2): mounted with root inode @ nid 36. [ 1744.742652][ T30] audit: type=1400 audit(1734684022.065:1328): avc: denied { create } for pid=24442 comm="syz.4.6341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 1744.917398][T24434] loop1: detected capacity change from 0 to 40427 [ 1746.053285][T24434] F2FS-fs (loop1): invalid crc value [ 1746.096605][T24460] loop4: detected capacity change from 0 to 512 [ 1746.104172][T24434] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1746.178709][T24434] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1746.192262][T24460] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2766: inode #11: comm syz.4.6344: corrupted xattr block 95 [ 1746.240787][T24460] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.6344: bg 0: block 7: invalid block bitmap [ 1746.263327][T24460] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 1746.344233][T24460] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2932: inode #11: comm syz.4.6344: corrupted xattr block 95 [ 1746.356412][T24460] EXT4-fs warning (device loop4): ext4_evict_inode:303: xattr delete (err -117) [ 1746.375229][T24460] EXT4-fs (loop4): 1 orphan inode deleted [ 1746.430037][T24460] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1746.819330][T24473] attempt to access beyond end of device [ 1746.819330][T24473] loop1: rw=2049, want=45208, limit=40427 [ 1747.334147][ T30] audit: type=1326 audit(1734684280.563:1329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24478 comm="syz.3.6348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2a33cfd29 code=0x7ffc0000 [ 1747.803825][ T30] audit: type=1326 audit(1734684280.563:1330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24478 comm="syz.3.6348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2a33cfd29 code=0x7ffc0000 [ 1748.861505][T24489] loop3: detected capacity change from 0 to 16 [ 1748.903635][ T30] audit: type=1326 audit(1734684280.563:1331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24478 comm="syz.3.6348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe2a33cfd29 code=0x7ffc0000 [ 1748.932025][T21957] attempt to access beyond end of device [ 1748.932025][T21957] loop1: rw=2049, want=45216, limit=40427 [ 1748.954566][T24489] erofs: (device loop3): mounted with root inode @ nid 36. [ 1748.995455][ T30] audit: type=1326 audit(1734684280.563:1332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24478 comm="syz.3.6348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2a33cfd29 code=0x7ffc0000 [ 1749.100817][ T30] audit: type=1326 audit(1734684280.563:1333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24478 comm="syz.3.6348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2a33cfd29 code=0x7ffc0000 [ 1749.125446][ T30] audit: type=1326 audit(1734684280.563:1334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24478 comm="syz.3.6348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe2a33cfd29 code=0x7ffc0000 [ 1749.370651][ T30] audit: type=1326 audit(1734684280.563:1335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24478 comm="syz.3.6348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2a33cfd29 code=0x7ffc0000 [ 1749.406905][ T30] audit: type=1326 audit(1734684280.563:1336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24478 comm="syz.3.6348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2a33cfd29 code=0x7ffc0000 [ 1749.431063][ T30] audit: type=1326 audit(1734684280.563:1337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24478 comm="syz.3.6348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe2a33cfd29 code=0x7ffc0000 [ 1749.945394][T24513] loop4: detected capacity change from 0 to 128 [ 1751.022541][T24513] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c018, mo2=0002] [ 1751.062989][T24513] System zones: 1-3, 19-19, 35-36 [ 1751.157109][T24513] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,,errors=continue. Quota mode: none. [ 1753.440123][T24574] loop3: detected capacity change from 0 to 128 [ 1753.545734][T24574] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c018, mo2=0002] [ 1753.555242][T24574] System zones: 1-3, 19-19, 35-36 [ 1753.560608][T24574] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,,errors=continue. Quota mode: none. [ 1756.609066][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 1756.728339][ T30] audit: type=1326 audit(1734684289.923:1364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24612 comm="syz.1.6382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f627286fd29 code=0x7ffc0000 [ 1756.752817][ T30] audit: type=1326 audit(1734684289.933:1365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24612 comm="syz.1.6382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f627286fd29 code=0x7ffc0000 [ 1756.794259][T24626] loop4: detected capacity change from 0 to 256 [ 1756.802587][T24628] loop1: detected capacity change from 0 to 512 [ 1756.820733][ T30] audit: type=1326 audit(1734684289.943:1366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24612 comm="syz.1.6382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7f627286fd29 code=0x7ffc0000 [ 1756.851243][ T30] audit: type=1326 audit(1734684289.943:1367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24612 comm="syz.1.6382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f627286fd29 code=0x7ffc0000 [ 1756.878092][T24626] exfat: Deprecated parameter 'namecase' [ 1756.884457][ T30] audit: type=1326 audit(1734684289.943:1368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24612 comm="syz.1.6382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f627286fd29 code=0x7ffc0000 [ 1756.918663][T24628] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 1756.979810][T24626] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xc2dc8e67, utbl_chksum : 0xe619d30d) [ 1757.014823][T24628] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1757.052431][T24628] EXT4-fs (loop1): 1 truncate cleaned up [ 1757.058267][T24628] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,mblk_io_submit,debug_want_extra_isize=0x0000000000000068,lazytime,block_validity,data_err=abort,,errors=continue. Quota mode: none. [ 1758.855129][ T30] audit: type=1326 audit(1734684548.150:1369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24654 comm="syz.2.6392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feabc9a2d29 code=0x7ffc0000 [ 1758.908902][ T30] audit: type=1326 audit(1734684548.150:1370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24654 comm="syz.2.6392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feabc9a2d29 code=0x7ffc0000 [ 1758.941478][ T30] audit: type=1326 audit(1734684548.150:1371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24654 comm="syz.2.6392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7feabc9a2d29 code=0x7ffc0000 [ 1758.965655][ T30] audit: type=1326 audit(1734684548.150:1372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24654 comm="syz.2.6392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feabc9a2d29 code=0x7ffc0000 [ 1758.989142][ T30] audit: type=1326 audit(1734684548.150:1373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24654 comm="syz.2.6392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feabc9a2d29 code=0x7ffc0000 [ 1759.145441][T24670] loop3: detected capacity change from 0 to 512 [ 1759.155154][ T3769] usb 3-1: new low-speed USB device number 40 using dummy_hcd [ 1759.234669][T24670] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2766: inode #11: comm syz.3.6398: corrupted xattr block 95 [ 1759.285311][T24670] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.6398: bg 0: block 7: invalid block bitmap [ 1759.317752][T24670] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 1759.339832][T24670] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2932: inode #11: comm syz.3.6398: corrupted xattr block 95 [ 1759.353409][T24670] EXT4-fs warning (device loop3): ext4_evict_inode:303: xattr delete (err -117) [ 1759.361920][T24675] loop1: detected capacity change from 0 to 16 [ 1759.362371][T24670] EXT4-fs (loop3): 1 orphan inode deleted [ 1759.373867][T24670] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1759.395660][T24675] erofs: (device loop1): mounted with root inode @ nid 36. [ 1759.548287][T24685] loop1: detected capacity change from 0 to 512 [ 1759.605372][ T3769] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1759.715639][ T3769] usb 3-1: config 1 has an invalid interface number: 9 but max is 0 [ 1759.741375][ T3769] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1759.771171][ T3769] usb 3-1: config 1 has no interface number 0 [ 1759.789386][T24685] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 1759.800585][ T3769] usb 3-1: too many endpoints for config 1 interface 9 altsetting 33: 211, using maximum allowed: 30 [ 1759.805521][T24685] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1759.822016][ T3769] usb 3-1: config 1 interface 9 altsetting 33 has 0 endpoint descriptors, different from the interface descriptor's value: 211 [ 1759.836041][ T3769] usb 3-1: config 1 interface 9 has no altsetting 0 [ 1759.836046][T24685] EXT4-fs (loop1): 1 truncate cleaned up [ 1759.854039][T24685] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,mblk_io_submit,debug_want_extra_isize=0x0000000000000068,lazytime,block_validity,data_err=abort,,errors=continue. Quota mode: none. [ 1760.158367][ T3769] usb 3-1: string descriptor 0 read error: -22 [ 1760.164398][ T3769] usb 3-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.40 [ 1760.173285][ T3769] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1760.247737][ T3769] usb-storage 3-1:1.9: USB Mass Storage device detected [ 1761.159216][T24709] loop1: detected capacity change from 0 to 512 [ 1761.162091][ T3769] usb 3-1: USB disconnect, device number 40 [ 1761.183020][T24709] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 1761.192877][T24709] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1761.320306][T24709] EXT4-fs (loop1): 1 truncate cleaned up [ 1761.329067][T24709] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,mblk_io_submit,debug_want_extra_isize=0x0000000000000068,lazytime,block_validity,data_err=abort,,errors=continue. Quota mode: none. [ 1763.142194][T24741] loop4: detected capacity change from 0 to 512 [ 1763.233891][T24741] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2766: inode #11: comm syz.4.6416: corrupted xattr block 95 [ 1764.117328][T24741] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.6416: bg 0: block 7: invalid block bitmap [ 1764.142423][T24741] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 1764.152989][T24741] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2932: inode #11: comm syz.4.6416: corrupted xattr block 95 [ 1764.167539][T24741] EXT4-fs warning (device loop4): ext4_evict_inode:303: xattr delete (err -117) [ 1764.176865][T24741] EXT4-fs (loop4): 1 orphan inode deleted [ 1764.182473][T24741] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1765.454923][ T319] usb 4-1: new low-speed USB device number 35 using dummy_hcd [ 1766.100992][ T30] audit: type=1326 audit(1734685579.331:1374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24791 comm="syz.4.6432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf2fb19d29 code=0x7ffc0000 [ 1766.239429][ T30] audit: type=1326 audit(1734685579.361:1375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24791 comm="syz.4.6432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf2fb19d29 code=0x7ffc0000 [ 1766.717110][ T319] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1766.730904][ T30] audit: type=1326 audit(1734685580.001:1376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24803 comm="syz.4.6435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf2fb19d29 code=0x7ffc0000 [ 1766.761636][ T30] audit: type=1326 audit(1734685580.001:1377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24803 comm="syz.4.6435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf2fb19d29 code=0x7ffc0000 [ 1766.785699][ T30] audit: type=1326 audit(1734685580.001:1378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24803 comm="syz.4.6435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7fbf2fb19d29 code=0x7ffc0000 [ 1768.312320][ T30] audit: type=1326 audit(1734685580.001:1379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24803 comm="syz.4.6435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf2fb19d29 code=0x7ffc0000 [ 1768.336828][ T30] audit: type=1326 audit(1734685580.001:1380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24803 comm="syz.4.6435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf2fb19d29 code=0x7ffc0000 [ 1768.843241][ T319] usb 4-1: unable to read config index 0 descriptor/all [ 1768.890674][ T319] usb 4-1: can't read configurations, error -71 [ 1771.110059][T24866] loop3: detected capacity change from 0 to 512 [ 1771.125125][T20775] usb 1-1: new low-speed USB device number 43 using dummy_hcd [ 1771.178562][T24866] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 1771.186658][T24866] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1771.427843][T24864] overlayfs: missing 'lowerdir' [ 1771.509703][T24866] EXT4-fs (loop3): 1 truncate cleaned up [ 1771.527459][T24866] EXT4-fs (loop3): mounted filesystem without journal. Opts: i_version,mblk_io_submit,debug_want_extra_isize=0x0000000000000068,lazytime,block_validity,data_err=abort,,errors=continue. Quota mode: none. [ 1772.905283][T20775] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1773.589703][T24896] loop3: detected capacity change from 0 to 512 [ 1773.602126][T20775] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1773.609892][T20775] usb 1-1: can't read configurations, error -71 [ 1773.648031][T24896] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 1773.656498][T24896] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1773.757018][T24896] EXT4-fs (loop3): 1 truncate cleaned up [ 1773.762493][T24896] EXT4-fs (loop3): mounted filesystem without journal. Opts: i_version,mblk_io_submit,debug_want_extra_isize=0x0000000000000068,lazytime,block_validity,data_err=abort,,errors=continue. Quota mode: none. [ 1773.832180][T24908] binder: BINDER_SET_CONTEXT_MGR already set [ 1773.838322][T24908] binder: 24907:24908 ioctl 4018620d 20004a80 returned -16 [ 1775.541687][T20775] usb 1-1: new low-speed USB device number 44 using dummy_hcd [ 1776.147122][T24929] overlayfs: missing 'lowerdir' [ 1776.848022][ T30] audit: type=1326 audit(1734686614.138:1381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24924 comm="syz.3.6468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2a33cfd29 code=0x7ffc0000 [ 1776.914866][ T30] audit: type=1326 audit(1734686614.168:1382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24924 comm="syz.3.6468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7fe2a33cfd29 code=0x7ffc0000 [ 1776.942416][ T30] audit: type=1326 audit(1734686614.168:1383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24924 comm="syz.3.6468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2a33cfd29 code=0x7ffc0000 [ 1776.997040][ T30] audit: type=1326 audit(1734686614.168:1384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24924 comm="syz.3.6468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2a33cfd29 code=0x7ffc0000 [ 1777.959319][T24947] loop4: detected capacity change from 0 to 512 [ 1778.018080][T20775] usb 1-1: device not accepting address 44, error -71 [ 1778.062965][T20775] usb usb1-port1: attempt power cycle [ 1778.125107][ T319] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1778.523408][T24947] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 1778.531109][T24947] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1778.555174][ T906] usb 2-1: new low-speed USB device number 41 using dummy_hcd [ 1778.576901][T24947] EXT4-fs (loop4): 1 truncate cleaned up [ 1778.582470][T24947] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,mblk_io_submit,debug_want_extra_isize=0x0000000000000068,lazytime,block_validity,data_err=abort,,errors=continue. Quota mode: none. [ 1779.730808][T24964] loop3: detected capacity change from 0 to 2048 [ 1779.885236][ T906] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1779.945651][T24964] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1779.985395][ T906] usb 2-1: config 1 has an invalid interface number: 9 but max is 0 [ 1780.015034][ T319] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1780.025864][ T319] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1780.027454][ T906] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1780.038589][ T319] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1780.057336][ T319] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1780.066042][ T319] usb 3-1: config 0 descriptor?? [ 1780.071168][ T906] usb 2-1: config 1 has no interface number 0 [ 1780.077134][ T906] usb 2-1: too many endpoints for config 1 interface 9 altsetting 33: 211, using maximum allowed: 30 [ 1780.095208][ T319] usb 3-1: can't set config #0, error -71 [ 1780.097731][ T906] usb 2-1: config 1 interface 9 altsetting 33 has 0 endpoint descriptors, different from the interface descriptor's value: 211 [ 1780.105891][T24975] binder: BINDER_SET_CONTEXT_MGR already set [ 1780.123757][ T319] usb 3-1: USB disconnect, device number 41 [ 1780.125327][ T906] usb 2-1: config 1 interface 9 has no altsetting 0 [ 1780.145236][T24975] binder: 24973:24975 ioctl 4018620d 20004a80 returned -16 [ 1780.375122][ T906] usb 2-1: string descriptor 0 read error: -22 [ 1780.381433][ T906] usb 2-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.40 [ 1780.390372][ T906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1780.435823][ T906] usb-storage 2-1:1.9: USB Mass Storage device detected [ 1780.916552][ T4148] usb 2-1: USB disconnect, device number 41 [ 1781.005742][T24994] loop3: detected capacity change from 0 to 128 [ 1781.075441][T24994] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c018, mo2=0002] [ 1781.083204][T24994] System zones: 1-3, 19-19, 35-36 [ 1781.089758][T24994] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,,errors=continue. Quota mode: none. [ 1781.328361][ T30] audit: type=1326 audit(1734687130.598:1385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24996 comm="syz.2.6484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feabc9a2d29 code=0x7ffc0000 [ 1782.036499][ T30] audit: type=1326 audit(1734687130.598:1386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24996 comm="syz.2.6484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feabc9a2d29 code=0x7ffc0000 [ 1782.061051][ T30] audit: type=1326 audit(1734687131.188:1387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24996 comm="syz.2.6484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7feabc9a2d29 code=0x7ffc0000 [ 1782.095141][ T30] audit: type=1326 audit(1734687131.248:1388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24996 comm="syz.2.6484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feabc9a2d29 code=0x7ffc0000 [ 1782.138191][ T30] audit: type=1326 audit(1734687131.248:1389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24996 comm="syz.2.6484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feabc9a2d29 code=0x7ffc0000 [ 1782.203192][T25010] loop3: detected capacity change from 0 to 512 [ 1783.859227][T25010] EXT4-fs (loop3): corrupt root inode, run e2fsck [ 1783.865529][ T30] audit: type=1326 audit(1734687132.978:1390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25032 comm="syz.1.6493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f627286fd29 code=0x7ffc0000 [ 1783.909183][T25010] EXT4-fs (loop3): mount failed [ 1783.923278][ T30] audit: type=1326 audit(1734687132.998:1391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25032 comm="syz.1.6493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f627286fd29 code=0x7ffc0000 [ 1783.955302][ T30] audit: type=1326 audit(1734687133.038:1392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25032 comm="syz.1.6493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7f627286fd29 code=0x7ffc0000 [ 1783.986733][ T30] audit: type=1326 audit(1734687133.078:1393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25032 comm="syz.1.6493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f627286fd29 code=0x7ffc0000 [ 1784.010393][ T30] audit: type=1326 audit(1734687133.088:1394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25032 comm="syz.1.6493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f627286fd29 code=0x7ffc0000 [ 1784.078730][T25043] binder: 25042:25043 ioctl 4018620d 0 returned -22 [ 1787.837823][ T30] audit: type=1326 audit(1734687649.166:1395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25102 comm="syz.0.6510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c30e26d29 code=0x7ffc0000 [ 1787.946524][ T30] audit: type=1326 audit(1734687649.166:1396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25102 comm="syz.0.6510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c30e26d29 code=0x7ffc0000 [ 1787.980312][ T30] audit: type=1326 audit(1734687649.186:1397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25102 comm="syz.0.6510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7f8c30e26d29 code=0x7ffc0000 [ 1788.008339][ T30] audit: type=1326 audit(1734687649.186:1398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25102 comm="syz.0.6510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c30e26d29 code=0x7ffc0000 [ 1788.038210][ T30] audit: type=1326 audit(1734687649.186:1399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25102 comm="syz.0.6510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c30e26d29 code=0x7ffc0000 [ 1790.255181][ T30] audit: type=1326 audit(1734687907.550:1400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25141 comm="syz.0.6520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c30e26d29 code=0x7ffc0000 [ 1790.403925][ T30] audit: type=1326 audit(1734687907.570:1401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25141 comm="syz.0.6520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c30e26d29 code=0x7ffc0000 [ 1790.439070][ T30] audit: type=1326 audit(1734687907.580:1402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25141 comm="syz.0.6520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7f8c30e26d29 code=0x7ffc0000 [ 1790.554521][ T30] audit: type=1326 audit(1734687907.580:1403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25141 comm="syz.0.6520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c30e26d29 code=0x7ffc0000 [ 1790.585125][ T4148] usb 5-1: new low-speed USB device number 46 using dummy_hcd [ 1790.656101][ T30] audit: type=1326 audit(1734687907.580:1404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25141 comm="syz.0.6520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c30e26d29 code=0x7ffc0000 [ 1791.165234][ T4148] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1791.245173][ T4148] usb 5-1: config 1 has an invalid interface number: 9 but max is 0 [ 1791.253007][ T4148] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1791.281750][ T4148] usb 5-1: config 1 has no interface number 0 [ 1791.294238][ T4148] usb 5-1: too many endpoints for config 1 interface 9 altsetting 33: 211, using maximum allowed: 30 [ 1791.354758][ T4148] usb 5-1: config 1 interface 9 altsetting 33 has 0 endpoint descriptors, different from the interface descriptor's value: 211 [ 1791.428899][ T4148] usb 5-1: config 1 interface 9 has no altsetting 0 [ 1792.577168][T25194] binder: BINDER_SET_CONTEXT_MGR already set [ 1792.583055][T25194] binder: 25191:25194 ioctl 4018620d 20004a80 returned -16 [ 1792.631893][ T4148] usb 5-1: string descriptor 0 read error: -22 [ 1792.637986][ T4148] usb 5-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.40 [ 1792.842228][ T4148] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1794.375231][ T4148] usb 5-1: can't set config #1, error -71 [ 1794.386208][ T4148] usb 5-1: USB disconnect, device number 46 [ 1795.455756][ T550] usb 3-1: new low-speed USB device number 42 using dummy_hcd [ 1796.105160][ T550] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1796.235170][ T550] usb 3-1: config 1 has an invalid interface number: 9 but max is 0 [ 1796.243066][ T550] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1796.638934][ T319] usb 5-1: new low-speed USB device number 47 using dummy_hcd [ 1796.665101][ T550] usb 3-1: config 1 has no interface number 0 [ 1796.671147][ T550] usb 3-1: too many endpoints for config 1 interface 9 altsetting 33: 211, using maximum allowed: 30 [ 1796.692337][ T550] usb 3-1: config 1 interface 9 altsetting 33 has 0 endpoint descriptors, different from the interface descriptor's value: 211 [ 1796.705697][ T550] usb 3-1: config 1 interface 9 has no altsetting 0 [ 1797.556916][ T550] usb 3-1: string descriptor 0 read error: -22 [ 1797.563039][ T550] usb 3-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.40 [ 1797.572180][ T550] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1797.625830][ T550] usb-storage 3-1:1.9: USB Mass Storage device detected [ 1797.765134][ T319] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1797.838672][ T431] usb 3-1: USB disconnect, device number 42 [ 1797.845396][ T319] usb 5-1: config 1 has an invalid interface number: 9 but max is 0 [ 1797.869134][ T319] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1797.879814][ T319] usb 5-1: config 1 has no interface number 0 [ 1797.888425][ T319] usb 5-1: too many endpoints for config 1 interface 9 altsetting 33: 211, using maximum allowed: 30 [ 1797.900559][ T319] usb 5-1: config 1 interface 9 altsetting 33 has 0 endpoint descriptors, different from the interface descriptor's value: 211 [ 1797.914773][ T319] usb 5-1: config 1 interface 9 has no altsetting 0 [ 1798.185148][ T319] usb 5-1: string descriptor 0 read error: -22 [ 1798.191725][ T319] usb 5-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.40 [ 1798.200940][ T319] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1798.265752][ T319] usb-storage 5-1:1.9: USB Mass Storage device detected [ 1798.469740][ T319] usb 5-1: USB disconnect, device number 47 [ 1798.925107][ T431] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1799.304002][ T431] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1799.314765][ T431] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1799.327546][ T431] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1799.336518][ T431] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1799.348892][ T431] usb 4-1: config 0 descriptor?? [ 1799.998334][ T431] plantronics 0003:047F:FFFF.002E: unknown main item tag 0x0 [ 1800.033154][ T431] plantronics 0003:047F:FFFF.002E: unknown main item tag 0x0 [ 1800.040440][ T431] plantronics 0003:047F:FFFF.002E: unknown main item tag 0x0 [ 1800.047599][ T431] plantronics 0003:047F:FFFF.002E: unknown main item tag 0x0 [ 1800.054780][ T431] plantronics 0003:047F:FFFF.002E: unknown main item tag 0x0 [ 1800.063057][ T431] plantronics 0003:047F:FFFF.002E: unknown main item tag 0x0 [ 1800.070307][ T431] plantronics 0003:047F:FFFF.002E: unknown main item tag 0x0 [ 1800.077523][ T431] plantronics 0003:047F:FFFF.002E: unknown main item tag 0x0 [ 1800.084727][ T431] plantronics 0003:047F:FFFF.002E: unknown main item tag 0x0 [ 1800.103874][ T431] plantronics 0003:047F:FFFF.002E: unknown main item tag 0x0 [ 1800.126083][ T431] plantronics 0003:047F:FFFF.002E: unbalanced collection at end of report description [ 1800.138529][ T431] plantronics 0003:047F:FFFF.002E: parse failed [ 1800.145372][ T431] plantronics: probe of 0003:047F:FFFF.002E failed with error -22 [ 1800.158830][ T431] usb 4-1: USB disconnect, device number 37 [ 1800.205091][ T319] usb 2-1: new low-speed USB device number 42 using dummy_hcd [ 1800.635159][ T319] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1800.755850][ T319] usb 2-1: config 1 has an invalid interface number: 9 but max is 0 [ 1800.763666][ T319] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1800.785220][ T319] usb 2-1: config 1 has no interface number 0 [ 1800.791312][ T319] usb 2-1: too many endpoints for config 1 interface 9 altsetting 33: 211, using maximum allowed: 30 [ 1800.812266][ T319] usb 2-1: config 1 interface 9 altsetting 33 has 0 endpoint descriptors, different from the interface descriptor's value: 211 [ 1800.871149][ T319] usb 2-1: config 1 interface 9 has no altsetting 0 [ 1801.385152][ T319] usb 2-1: string descriptor 0 read error: -22 [ 1801.431628][ T319] usb 2-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.40 [ 1801.441744][ T319] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1802.550088][ T319] usb-storage 2-1:1.9: USB Mass Storage device detected [ 1803.850265][ T550] usb 2-1: USB disconnect, device number 42 [ 1807.697362][T25483] binder: 25482:25483 ioctl 4018620d 0 returned -22 [ 1809.441326][T25543] overlayfs: missing 'lowerdir' [ 1810.955115][T25594] overlayfs: missing 'lowerdir' [ 1811.869422][T25603] bridge0: port 1(bridge_slave_0) entered blocking state [ 1811.881539][T25603] bridge0: port 1(bridge_slave_0) entered disabled state [ 1811.895730][T25603] device bridge_slave_0 entered promiscuous mode [ 1811.902552][T25603] bridge0: port 2(bridge_slave_1) entered blocking state [ 1811.920711][T25603] bridge0: port 2(bridge_slave_1) entered disabled state [ 1811.938165][T25603] device bridge_slave_1 entered promiscuous mode [ 1812.034871][T25603] bridge0: port 2(bridge_slave_1) entered blocking state [ 1812.041757][T25603] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1812.048874][T25603] bridge0: port 1(bridge_slave_0) entered blocking state [ 1812.055637][T25603] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1812.082521][T21347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1812.090409][T21347] bridge0: port 1(bridge_slave_0) entered disabled state [ 1812.098009][T21347] bridge0: port 2(bridge_slave_1) entered disabled state [ 1812.116138][T21347] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1812.124293][T21347] bridge0: port 1(bridge_slave_0) entered blocking state [ 1812.131192][T21347] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1812.140188][T21347] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1812.148996][T21347] bridge0: port 2(bridge_slave_1) entered blocking state [ 1812.155871][T21347] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1812.204529][T21347] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1812.220116][T21347] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1812.236794][T21347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1812.245659][T21347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1812.254717][T21347] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1812.262559][T21347] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1812.268552][ T431] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1812.309405][T25603] device veth0_vlan entered promiscuous mode [ 1812.324806][T21347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1812.333822][T21347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1812.343535][T25603] device veth1_macvtap entered promiscuous mode [ 1812.354715][T21347] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1812.362549][T21347] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1812.371495][T21347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1812.382655][T21347] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1812.391292][T21347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1812.708339][ T2005] device bridge_slave_1 left promiscuous mode [ 1812.717867][ T2005] bridge0: port 2(bridge_slave_1) entered disabled state [ 1812.753044][ T2005] device bridge_slave_0 left promiscuous mode [ 1812.759995][ T2005] bridge0: port 1(bridge_slave_0) entered disabled state [ 1812.772806][ T2005] device veth1_macvtap left promiscuous mode [ 1812.779474][ T2005] device veth0_vlan left promiscuous mode [ 1812.915252][ T431] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1812.926335][ T431] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1812.939526][ T431] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1812.948598][ T431] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1812.957879][ T431] usb 4-1: config 0 descriptor?? [ 1814.888759][T25655] overlayfs: missing 'workdir' [ 1816.210333][ T431] usbhid 4-1:0.0: can't add hid device: -71 [ 1817.084937][T25679] 9p: Unknown uid 18446744073709551615 [ 1817.105293][ T431] usbhid: probe of 4-1:0.0 failed with error -71 [ 1817.997250][ T431] usb 4-1: USB disconnect, device number 38 [ 1818.515118][ T319] usb 1-1: new low-speed USB device number 46 using dummy_hcd [ 1819.022059][T25707] overlayfs: missing 'workdir' [ 1819.495146][ T30] audit: type=1326 audit(1734689728.811:1405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25721 comm="syz.3.6690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2a33cfd29 code=0x7ffc0000 [ 1819.634964][ T30] audit: type=1326 audit(1734689728.811:1406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25721 comm="syz.3.6690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7fe2a33cfd29 code=0x7ffc0000 [ 1819.661486][ T30] audit: type=1326 audit(1734689728.811:1407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25721 comm="syz.3.6690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2a33cfd29 code=0x7ffc0000 [ 1819.695367][ T30] audit: type=1326 audit(1734689728.851:1408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25721 comm="syz.3.6690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2a33cfd29 code=0x7ffc0000 [ 1819.721325][T25724] 9p: Unknown uid 18446744073709551615 [ 1820.195123][ T319] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1820.305157][ T319] usb 1-1: config 1 has an invalid interface number: 9 but max is 0 [ 1820.316232][ T319] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1821.252714][ T319] usb 1-1: config 1 has no interface number 0 [ 1821.259022][ T319] usb 1-1: too many endpoints for config 1 interface 9 altsetting 33: 211, using maximum allowed: 30 [ 1821.269990][ T319] usb 1-1: config 1 interface 9 altsetting 33 has 0 endpoint descriptors, different from the interface descriptor's value: 211 [ 1821.290343][ T319] usb 1-1: config 1 interface 9 has no altsetting 0 [ 1821.334354][T25753] binder: 25752:25753 ioctl c0306201 0 returned -14 [ 1821.345139][ T319] usb 1-1: string descriptor 0 read error: -71 [ 1821.351153][ T319] usb 1-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.40 [ 1821.365515][T25753] binder: BINDER_SET_CONTEXT_MGR already set [ 1821.371415][ T319] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1821.379432][T25753] binder: 25752:25753 ioctl 4018620d 20004a80 returned -16 [ 1821.497919][T25764] overlayfs: missing 'workdir' [ 1821.692658][ T319] usb 1-1: can't set config #1, error -71 [ 1821.698715][ T319] usb 1-1: USB disconnect, device number 46 [ 1822.263321][ T2335] usb 2-1: new low-speed USB device number 43 using dummy_hcd [ 1822.905486][ T2335] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1823.115180][ T2335] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1823.126569][T25795] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1823.126651][ T2335] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1827.705133][ T2335] usb 2-1: string descriptor 0 read error: -71 [ 1827.711168][ T2335] usb 2-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.40 [ 1827.771033][ T2335] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1827.824849][ T30] audit: type=1400 audit(1734690249.137:1409): avc: denied { call } for pid=25838 comm="syz.4.6729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1827.879213][ T2335] usb 2-1: can't set config #1, error -71 [ 1827.886120][ T2335] usb 2-1: USB disconnect, device number 43 [ 1837.435958][T25961] binder: 25960:25961 ioctl 4018620d 0 returned -22 [ 1843.027401][T26097] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 1843.036146][T26097] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1847.624290][T26173] 9pnet: Insufficient options for proto=fd [ 1847.715392][T26177] 9pnet: Insufficient options for proto=fd [ 1848.898999][T26212] 9pnet: Insufficient options for proto=fd [ 1852.245403][T26261] 9pnet: Insufficient options for proto=fd [ 1855.669126][T11980] usb 1-1: new low-speed USB device number 47 using dummy_hcd [ 1857.325113][T11980] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1857.451298][T11980] usb 1-1: config 1 has an invalid interface number: 9 but max is 0 [ 1857.464570][T11980] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1857.553704][T11980] usb 1-1: config 1 has no interface number 0 [ 1857.594765][T11980] usb 1-1: too many endpoints for config 1 interface 9 altsetting 33: 211, using maximum allowed: 30 [ 1857.724546][T11980] usb 1-1: config 1 interface 9 altsetting 33 has 0 endpoint descriptors, different from the interface descriptor's value: 211 [ 1857.741480][T11980] usb 1-1: config 1 interface 9 has no altsetting 0 [ 1857.819606][T11980] usb 1-1: string descriptor 0 read error: -71 [ 1857.876429][T11980] usb 1-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.40 [ 1857.953010][T11980] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1857.988075][T11980] usb 1-1: can't set config #1, error -71 [ 1858.460745][T11980] usb 1-1: USB disconnect, device number 47 [ 1861.034995][T26439] overlayfs: missing 'lowerdir' [ 1863.448786][T26491] overlayfs: missing 'lowerdir' [ 1863.775128][ T4148] usb 3-1: new low-speed USB device number 43 using dummy_hcd [ 1864.185086][ T4148] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1864.275105][ T4148] usb 3-1: config 1 has an invalid interface number: 9 but max is 0 [ 1864.289858][ T4148] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1864.359123][ T4148] usb 3-1: config 1 has no interface number 0 [ 1864.365619][ T4148] usb 3-1: too many endpoints for config 1 interface 9 altsetting 33: 211, using maximum allowed: 30 [ 1864.376765][ T4148] usb 3-1: config 1 interface 9 altsetting 33 has 0 endpoint descriptors, different from the interface descriptor's value: 211 [ 1864.389940][ T4148] usb 3-1: config 1 interface 9 has no altsetting 0 [ 1864.840743][T26533] overlayfs: missing 'workdir' [ 1865.115543][ T4148] usb 3-1: string descriptor 0 read error: -22 [ 1865.211094][ T4148] usb 3-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.40 [ 1865.225564][ T4148] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1865.281473][ T4148] usb-storage 3-1:1.9: USB Mass Storage device detected [ 1866.393105][ T550] usb 3-1: USB disconnect, device number 43 [ 1867.347367][T26593] overlayfs: missing 'workdir' [ 1868.971933][T26635] overlayfs: missing 'workdir' [ 1872.165055][ T550] usb 5-1: new low-speed USB device number 48 using dummy_hcd [ 1872.595146][ T550] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1872.725100][ T550] usb 5-1: config 1 has an invalid interface number: 9 but max is 0 [ 1872.735191][ T550] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1872.755978][ T550] usb 5-1: config 1 has no interface number 0 [ 1873.011145][ T550] usb 5-1: too many endpoints for config 1 interface 9 altsetting 33: 211, using maximum allowed: 30 [ 1873.051672][ T550] usb 5-1: config 1 interface 9 altsetting 33 has 0 endpoint descriptors, different from the interface descriptor's value: 211 [ 1873.079013][ T550] usb 5-1: config 1 interface 9 has no altsetting 0 [ 1873.405374][ T550] usb 5-1: string descriptor 0 read error: -22 [ 1873.411988][ T550] usb 5-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.40 [ 1873.425516][ T550] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1875.515124][ T550] usb 5-1: can't set config #1, error -71 [ 1875.523597][ T550] usb 5-1: USB disconnect, device number 48 [ 1880.003954][ T319] usb 4-1: new low-speed USB device number 39 using dummy_hcd [ 1880.060513][T26874] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7042'. [ 1880.652752][ T319] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1881.140035][ T319] usb 4-1: config 1 has an invalid interface number: 9 but max is 0 [ 1881.147955][ T319] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1881.157814][ T319] usb 4-1: config 1 has no interface number 0 [ 1881.163700][ T319] usb 4-1: too many endpoints for config 1 interface 9 altsetting 33: 211, using maximum allowed: 30 [ 1881.174414][ T319] usb 4-1: config 1 interface 9 altsetting 33 has 0 endpoint descriptors, different from the interface descriptor's value: 211 [ 1881.191436][ T319] usb 4-1: config 1 interface 9 has no altsetting 0 [ 1881.655250][ T319] usb 4-1: string descriptor 0 read error: -22 [ 1881.661341][ T319] usb 4-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.40 [ 1881.701689][ T319] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1881.775740][ T319] usb-storage 4-1:1.9: USB Mass Storage device detected [ 1881.980555][ T319] usb 4-1: USB disconnect, device number 39 [ 1882.509471][T26920] netlink: 68 bytes leftover after parsing attributes in process `syz.2.7054'. [ 1883.709339][T26957] netlink: 68 bytes leftover after parsing attributes in process `syz.0.7066'. [ 1885.437708][ T30] audit: type=1400 audit(1734695426.760:1410): avc: denied { transfer } for pid=26995 comm="syz.2.7077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1885.459832][T26998] binder_alloc: 26995: binder_alloc_buf, no vma [ 1885.471791][T27000] netlink: 68 bytes leftover after parsing attributes in process `syz.4.7078'. [ 1886.440998][T27039] netlink: 68 bytes leftover after parsing attributes in process `syz.2.7091'. [ 1887.907816][T27058] binder: BINDER_SET_CONTEXT_MGR already set [ 1888.901267][T27058] binder: 27056:27058 ioctl 4018620d 20004a80 returned -16 [ 1891.617208][T27121] binder: BINDER_SET_CONTEXT_MGR already set [ 1891.639551][T27121] binder: 27120:27121 ioctl 4018620d 20004a80 returned -16 [ 1891.647294][ T30] audit: type=1400 audit(1734695432.970:1411): avc: denied { ioctl } for pid=27122 comm="syz.2.7115" path="socket:[112684]" dev="sockfs" ino=112684 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1904.035145][T20775] usb 3-1: new low-speed USB device number 44 using dummy_hcd [ 1904.047701][T27379] device pim6reg1 entered promiscuous mode [ 1904.535726][T20775] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1904.857378][T20775] usb 3-1: config 1 has an invalid interface number: 9 but max is 0 [ 1904.865309][T20775] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1904.876162][T20775] usb 3-1: config 1 has no interface number 0 [ 1904.882267][T20775] usb 3-1: too many endpoints for config 1 interface 9 altsetting 33: 211, using maximum allowed: 30 [ 1904.898169][T20775] usb 3-1: config 1 interface 9 altsetting 33 has 0 endpoint descriptors, different from the interface descriptor's value: 211 [ 1904.920372][T20775] usb 3-1: config 1 interface 9 has no altsetting 0 [ 1905.455071][T20775] usb 3-1: string descriptor 0 read error: -22 [ 1905.463258][T20775] usb 3-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.40 [ 1905.472597][T20775] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1905.535691][T20775] usb-storage 3-1:1.9: USB Mass Storage device detected [ 1905.955185][ T906] usb 3-1: USB disconnect, device number 44 [ 1909.713699][T27507] device pim6reg1 entered promiscuous mode [ 1913.301120][T27597] 9pnet: Insufficient options for proto=fd [ 1916.709575][T27676] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7282'. [ 1922.153119][T27769] 9pnet: Insufficient options for proto=fd [ 1930.320740][T27935] device pim6reg1 entered promiscuous mode [ 1930.346491][T27939] device pim6reg1 entered promiscuous mode [ 1939.830114][T28029] device pim6reg1 entered promiscuous mode [ 1941.142476][ T4148] usb 5-1: new low-speed USB device number 49 using dummy_hcd [ 1941.828261][T20775] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1941.945240][ T4148] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1942.105547][ T4148] usb 5-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 1942.116698][ T4148] usb 5-1: config 255 has 0 interfaces, different from the descriptor's value: 1 [ 1942.275167][T20775] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1942.321317][T20775] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1942.330464][T20775] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1942.339352][T20775] usb 3-1: config 0 descriptor?? [ 1942.465084][ T4148] usb 5-1: string descriptor 0 read error: -22 [ 1942.471080][ T4148] usb 5-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.40 [ 1942.480021][ T4148] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1942.852773][ T26] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 1942.959484][ T4148] usb 5-1: USB disconnect, device number 49 [ 1943.135353][T20775] hid (null): bogus close delimiter [ 1943.223149][ T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1943.234004][ T26] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1943.267628][ T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1943.314245][ T26] usb 2-1: config 0 descriptor?? [ 1943.655062][T20775] uclogic 0003:256C:006D.002F: failed retrieving Huion firmware version: -71 [ 1943.664440][T20775] uclogic 0003:256C:006D.002F: failed probing parameters: -71 [ 1943.672338][T20775] uclogic: probe of 0003:256C:006D.002F failed with error -71 [ 1943.683011][T20775] usb 3-1: USB disconnect, device number 45 [ 1943.795247][ T26] hid (null): bogus close delimiter [ 1944.998588][ T26] uclogic 0003:256C:006D.0030: failed retrieving Huion firmware version: -71 [ 1945.012202][ T26] uclogic 0003:256C:006D.0030: failed probing parameters: -71 [ 1945.020626][ T26] uclogic: probe of 0003:256C:006D.0030 failed with error -71 [ 1945.035180][ T26] usb 2-1: USB disconnect, device number 44 [ 1950.015040][T20775] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1950.200680][T28207] device pim6reg1 entered promiscuous mode [ 1951.961896][T20775] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1951.979457][T20775] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1951.990259][T20775] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1952.018245][T20775] usb 3-1: config 0 descriptor?? [ 1953.175193][T20775] usbhid 3-1:0.0: can't add hid device: -71 [ 1953.182307][T20775] usbhid: probe of 3-1:0.0 failed with error -71 [ 1954.560576][T20775] usb 3-1: USB disconnect, device number 46 [ 1955.453439][ T30] audit: type=1400 audit(1734698312.774:1412): avc: denied { relabelfrom } for pid=28292 comm="syz.2.7477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1955.569885][ T30] audit: type=1400 audit(1734698312.774:1413): avc: denied { relabelto } for pid=28292 comm="syz.2.7477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1960.884753][T28411] netlink: 68 bytes leftover after parsing attributes in process `syz.2.7516'. [ 1961.225212][ T26] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1961.585069][ T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1961.595850][ T26] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1961.604699][ T26] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1961.613330][ T26] usb 3-1: config 0 descriptor?? [ 1962.392707][T28453] netlink: 68 bytes leftover after parsing attributes in process `syz.0.7530'. [ 1962.627440][ T26] hid (null): bogus close delimiter [ 1963.145215][ T26] uclogic 0003:256C:006D.0031: failed retrieving Huion firmware version: -71 [ 1963.280604][ T26] uclogic 0003:256C:006D.0031: failed probing parameters: -71 [ 1963.301308][ T26] uclogic: probe of 0003:256C:006D.0031 failed with error -71 [ 1963.317266][ T26] usb 3-1: USB disconnect, device number 47 [ 1963.550256][T28481] 9p: Unknown uid 18446744073709551615 [ 1963.574351][T28483] 9p: Unknown uid 18446744073709551615 [ 1965.088844][T28504] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7547'. [ 1965.914701][T28529] device pim6reg1 entered promiscuous mode [ 1966.028803][T28546] netlink: 68 bytes leftover after parsing attributes in process `syz.4.7562'. [ 1966.124127][T28551] device pim6reg1 entered promiscuous mode [ 1966.315400][T28571] device pim6reg1 entered promiscuous mode [ 1967.938789][T28582] netlink: 68 bytes leftover after parsing attributes in process `syz.4.7573'. [ 1968.495406][T28606] device pim6reg1 entered promiscuous mode [ 1969.870330][T28623] netlink: 68 bytes leftover after parsing attributes in process `syz.2.7588'. [ 1970.422065][T28584] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1970.500718][T28649] device pim6reg1 entered promiscuous mode [ 1970.845511][T28584] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1970.856522][T28584] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1970.865964][T28584] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1970.878021][T28584] usb 2-1: config 0 descriptor?? [ 1971.435232][T28584] usbhid 2-1:0.0: can't add hid device: -71 [ 1971.444830][T28584] usbhid: probe of 2-1:0.0 failed with error -71 [ 1971.643814][T28584] usb 2-1: USB disconnect, device number 45 [ 1971.692820][T28687] device pim6reg1 entered promiscuous mode [ 1972.041459][T28702] netlink: 68 bytes leftover after parsing attributes in process `syz.3.7614'. [ 1972.051093][T28697] device pim6reg1 entered promiscuous mode [ 1972.965077][ T2695] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 1973.839085][T28740] netlink: 68 bytes leftover after parsing attributes in process `syz.0.7629'. [ 1973.935089][ T2695] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1973.951052][ T2695] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1973.976542][ T2695] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1973.988236][ T2695] usb 5-1: config 0 descriptor?? [ 1974.467810][T28767] device pim6reg1 entered promiscuous mode [ 1974.505300][ T2695] hid (null): bogus close delimiter [ 1974.597883][T28774] netlink: 68 bytes leftover after parsing attributes in process `syz.0.7643'. [ 1975.155042][ T2695] uclogic 0003:256C:006D.0032: failed retrieving Huion firmware version: -71 [ 1975.166806][ T2695] uclogic 0003:256C:006D.0032: failed probing parameters: -71 [ 1975.183551][ T2695] uclogic: probe of 0003:256C:006D.0032 failed with error -71 [ 1975.202523][ T2695] usb 5-1: USB disconnect, device number 50 [ 1975.322877][T28802] device pim6reg1 entered promiscuous mode [ 1975.595317][T28808] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7655'. [ 1976.333511][T28838] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7666'. [ 1979.910988][T28877] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7679'. [ 1980.526247][T20775] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1981.123906][T28909] 9pnet: Insufficient options for proto=fd [ 1981.409677][T28917] netlink: 68 bytes leftover after parsing attributes in process `syz.2.7693'. [ 1982.395071][T20775] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1983.553729][T20775] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1983.564735][T20775] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1983.573310][T20775] usb 2-1: config 0 descriptor?? [ 1983.599453][T20775] usb 2-1: can't set config #0, error -71 [ 1983.605499][T20775] usb 2-1: USB disconnect, device number 46 [ 1983.675583][T28976] device pim6reg1 entered promiscuous mode [ 1984.309979][T29001] netlink: 68 bytes leftover after parsing attributes in process `syz.2.7724'. [ 1985.012801][T29032] device pim6reg1 entered promiscuous mode [ 1985.385129][ T2695] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 1986.644466][T29075] device pim6reg1 entered promiscuous mode [ 1986.675115][ T2695] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1986.687672][ T2695] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1986.754344][ T2695] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1986.766345][ T2695] usb 1-1: config 0 descriptor?? [ 1987.278761][T29096] device pim6reg1 entered promiscuous mode [ 1987.590666][T29115] device pim6reg1 entered promiscuous mode [ 1987.626448][ T2695] hid (null): bogus close delimiter [ 1987.711136][T29130] device pim6reg1 entered promiscuous mode [ 1987.780302][T29141] device pim6reg1 entered promiscuous mode [ 1988.034336][T29149] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1988.795091][ T2695] uclogic 0003:256C:006D.0033: failed retrieving Huion firmware version: -71 [ 1988.798374][T29170] device pim6reg1 entered promiscuous mode [ 1988.803809][ T2695] uclogic 0003:256C:006D.0033: failed probing parameters: -71 [ 1988.816768][ T2695] uclogic: probe of 0003:256C:006D.0033 failed with error -71 [ 1988.829141][ T2695] usb 1-1: USB disconnect, device number 48 [ 1989.109390][T29188] device pim6reg1 entered promiscuous mode [ 1989.578138][T29223] device pim6reg1 entered promiscuous mode [ 1989.610253][T29227] device pim6reg1 entered promiscuous mode [ 1989.938736][T29249] device pim6reg1 entered promiscuous mode [ 1990.915051][ T26] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 1991.385119][ T26] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1991.399248][ T26] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1991.408143][ T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1991.416570][ T26] usb 1-1: config 0 descriptor?? [ 1992.075184][ T26] hid (null): bogus close delimiter [ 1992.575040][ T26] uclogic 0003:256C:006D.0034: failed retrieving Huion firmware version: -71 [ 1992.591117][ T26] uclogic 0003:256C:006D.0034: failed probing parameters: -71 [ 1992.645767][ T26] uclogic: probe of 0003:256C:006D.0034 failed with error -71 [ 1992.691160][ T26] usb 1-1: USB disconnect, device number 49 [ 1996.926241][T29437] device pim6reg1 entered promiscuous mode [ 1997.283512][T29444] device pim6reg1 entered promiscuous mode [ 1997.745007][ T2335] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 1998.203081][T25212] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1998.355216][ T2335] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1998.376289][ T2335] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1998.385665][ T2335] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1998.432158][ T2335] usb 5-1: config 0 descriptor?? [ 1998.475819][ T2335] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1998.595085][T25212] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1998.605954][T25212] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1998.614822][T25212] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1998.623532][T25212] usb 3-1: config 0 descriptor?? [ 1999.096385][T25212] hid (null): bogus close delimiter [ 1999.703249][T25212] uclogic 0003:256C:006D.0035: failed retrieving Huion firmware version: -71 [ 1999.766237][T29058] usb 5-1: USB disconnect, device number 51 [ 1999.774784][T25212] uclogic 0003:256C:006D.0035: failed probing parameters: -71 [ 1999.783043][T25212] uclogic: probe of 0003:256C:006D.0035 failed with error -71 [ 1999.795014][T25212] usb 3-1: USB disconnect, device number 48 [ 2000.261675][ T26] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 2000.655048][ T26] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2000.666940][ T26] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 2000.680008][ T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2000.689766][T29623] device pim6reg1 entered promiscuous mode [ 2000.696368][ T26] usb 5-1: config 0 descriptor?? [ 2000.723304][T29627] device pim6reg1 entered promiscuous mode [ 2002.355466][ T26] hid (null): bogus close delimiter [ 2004.125163][ T26] uclogic 0003:256C:006D.0036: failed retrieving Huion firmware version: -71 [ 2004.134161][ T26] uclogic 0003:256C:006D.0036: failed probing parameters: -71 [ 2004.388736][ T26] uclogic: probe of 0003:256C:006D.0036 failed with error -71 [ 2004.402574][ T26] usb 5-1: USB disconnect, device number 52 [ 2006.321324][T29771] device pim6reg1 entered promiscuous mode [ 2006.506740][T29788] 9pnet: Insufficient options for proto=fd [ 2009.773223][T29834] device pim6reg1 entered promiscuous mode [ 2010.719782][T29857] device pim6reg1 entered promiscuous mode [ 2012.653609][T11980] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 2012.709471][ T30] audit: type=1400 audit(1734704770.034:1414): avc: denied { ioctl } for pid=29897 comm="syz.1.8069" path="/dev/ppp" dev="devtmpfs" ino=150 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 2013.125467][T11980] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2013.136905][T11980] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 2013.147541][T11980] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2013.156124][T11980] usb 5-1: config 0 descriptor?? [ 2013.728068][T11980] hid (null): bogus close delimiter [ 2014.365028][T11980] uclogic 0003:256C:006D.0037: failed retrieving Huion firmware version: -71 [ 2014.385015][T11980] uclogic 0003:256C:006D.0037: failed probing parameters: -71 [ 2014.392334][T11980] uclogic: probe of 0003:256C:006D.0037 failed with error -71 [ 2014.409300][T11980] usb 5-1: USB disconnect, device number 53 [ 2014.605031][T29058] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 2015.385030][T29058] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2015.396169][T29058] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 2015.405715][T29058] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2015.414412][T29058] usb 2-1: config 0 descriptor?? [ 2015.945072][T11980] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 2016.283508][T29058] hid (null): bogus close delimiter [ 2016.333527][T11980] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2016.372426][T11980] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 2016.400898][T11980] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2016.412818][T11980] usb 4-1: config 0 descriptor?? [ 2018.225069][T29058] usb 2-1: string descriptor 0 read error: -71 [ 2018.245027][T29058] uclogic 0003:256C:006D.0038: failed retrieving string descriptor #200: -71 [ 2018.258262][T29058] uclogic 0003:256C:006D.0038: failed retrieving pen parameters: -71 [ 2018.266774][T29058] uclogic 0003:256C:006D.0038: failed probing pen v2 parameters: -71 [ 2018.274698][T29058] uclogic 0003:256C:006D.0038: failed probing parameters: -71 [ 2018.283701][T29058] uclogic: probe of 0003:256C:006D.0038 failed with error -71 [ 2018.294268][T29058] usb 2-1: USB disconnect, device number 47 [ 2019.286132][T11980] hid (null): bogus close delimiter [ 2019.515009][T11980] usb 4-1: string descriptor 0 read error: -71 [ 2019.595029][T11980] uclogic 0003:256C:006D.0039: failed retrieving string descriptor #200: -71 [ 2019.606927][T11980] uclogic 0003:256C:006D.0039: failed retrieving pen parameters: -71 [ 2019.614891][T11980] uclogic 0003:256C:006D.0039: failed probing pen v2 parameters: -71 [ 2019.623707][T11980] uclogic 0003:256C:006D.0039: failed probing parameters: -71 [ 2019.632182][T11980] uclogic: probe of 0003:256C:006D.0039 failed with error -71 [ 2019.644122][T11980] usb 4-1: USB disconnect, device number 40 [ 2027.814985][ T6] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 2028.520874][ T6] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2028.533048][ T6] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2028.546820][ T2695] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 2028.556431][ T6] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 2028.572496][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2030.035334][ T6] usb 1-1: config 0 descriptor?? [ 2030.452797][ T6] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 2030.473606][ T6] usb 1-1: USB disconnect, device number 50 [ 2030.649477][T30497] device pim6reg1 entered promiscuous mode [ 2030.708941][T30501] device pim6reg1 entered promiscuous mode [ 2030.735063][ T2695] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 2030.972509][T30503] device pim6reg1 entered promiscuous mode [ 2030.981190][ T2695] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 2030.990292][ T2695] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2030.999080][ T2695] usb 5-1: config 0 descriptor?? [ 2031.035549][ T2695] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 2031.217449][ T2695] usb 5-1: USB disconnect, device number 54 [ 2032.005863][T30550] device pim6reg1 entered promiscuous mode [ 2033.961300][T30568] device pim6reg1 entered promiscuous mode [ 2034.531715][T30602] device pim6reg1 entered promiscuous mode [ 2034.544124][T30606] device pim6reg1 entered promiscuous mode [ 2034.652906][T30614] device pim6reg1 entered promiscuous mode [ 2036.128170][ T2695] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 2037.024993][T30629] device pim6reg1 entered promiscuous mode [ 2039.300234][T30637] device pim6reg1 entered promiscuous mode [ 2039.314001][T30638] device pim6reg1 entered promiscuous mode [ 2039.510963][T30648] device pim6reg1 entered promiscuous mode [ 2039.562671][T30660] device pim6reg1 entered promiscuous mode [ 2039.608015][T30656] device pim6reg1 entered promiscuous mode [ 2039.662694][T30666] device pim6reg1 entered promiscuous mode [ 2040.080157][T30675] device pim6reg1 entered promiscuous mode [ 2040.222825][T30679] device pim6reg1 entered promiscuous mode [ 2041.603322][ T2695] usb 4-1: device not accepting address 41, error -71 [ 2041.615092][T30688] device pim6reg1 entered promiscuous mode [ 2041.638636][T30692] device pim6reg1 entered promiscuous mode [ 2041.713014][T30706] device pim6reg1 entered promiscuous mode [ 2041.764496][T30713] device pim6reg1 entered promiscuous mode [ 2041.806643][T30716] device pim6reg1 entered promiscuous mode [ 2041.833193][T30718] device pim6reg1 entered promiscuous mode [ 2041.854362][T30720] device pim6reg1 entered promiscuous mode [ 2041.926807][T30725] device pim6reg1 entered promiscuous mode [ 2041.945649][T30728] device pim6reg1 entered promiscuous mode [ 2042.036339][T30733] device pim6reg1 entered promiscuous mode [ 2042.171840][T30738] device pim6reg1 entered promiscuous mode [ 2043.407903][T30754] device pim6reg1 entered promiscuous mode [ 2043.425800][T30752] device pim6reg1 entered promiscuous mode [ 2043.432965][T30748] device pim6reg1 entered promiscuous mode [ 2043.464701][T30758] device pim6reg1 entered promiscuous mode [ 2043.513147][T30760] device pim6reg1 entered promiscuous mode [ 2043.541213][T30765] device pim6reg1 entered promiscuous mode [ 2050.974122][T30814] device pim6reg1 entered promiscuous mode [ 2051.004885][T30816] device pim6reg1 entered promiscuous mode [ 2051.029134][T30818] device pim6reg1 entered promiscuous mode [ 2051.155974][T30826] device pim6reg1 entered promiscuous mode [ 2051.177627][T30830] device pim6reg1 entered promiscuous mode [ 2051.251245][T30832] device pim6reg1 entered promiscuous mode [ 2051.285341][T30834] device pim6reg1 entered promiscuous mode [ 2051.576719][T30857] device pim6reg1 entered promiscuous mode [ 2051.625888][T30859] device pim6reg1 entered promiscuous mode [ 2051.695240][T30862] device pim6reg1 entered promiscuous mode [ 2153.734879][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 2153.741662][ C1] (detected by 1, t=10002 jiffies, g=148785, q=134) [ 2153.748154][ C1] rcu: All QSes seen, last rcu_preempt kthread activity 10003 (4295152594-4295142591), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 2153.761352][ C1] rcu: rcu_preempt kthread starved for 10004 jiffies! g148785 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 2153.772458][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 2153.782263][ C1] rcu: RCU grace-period kthread stack dump: [ 2153.787996][ C1] task:rcu_preempt state:R running task stack:27912 pid: 14 ppid: 2 flags:0x00004000 [ 2153.798597][ C1] Call Trace: [ 2153.801704][ C1] [ 2153.804488][ C1] __schedule+0xccc/0x1590 [ 2153.808739][ C1] ? release_firmware_map_entry+0x190/0x190 [ 2153.814471][ C1] ? __kasan_check_write+0x14/0x20 [ 2153.819411][ C1] schedule+0x11f/0x1e0 [ 2153.823404][ C1] schedule_timeout+0x18c/0x370 [ 2153.828093][ C1] ? _raw_spin_unlock_irq+0x4e/0x70 [ 2153.833128][ C1] ? console_conditional_schedule+0x30/0x30 [ 2153.838857][ C1] ? update_process_times+0x200/0x200 [ 2153.844061][ C1] ? prepare_to_swait_event+0x308/0x320 [ 2153.849441][ C1] rcu_gp_fqs_loop+0x2af/0xf80 [ 2153.854047][ C1] ? debug_smp_processor_id+0x17/0x20 [ 2153.859249][ C1] ? __note_gp_changes+0x4ab/0x920 [ 2153.864197][ C1] ? rcu_gp_init+0xc30/0xc30 [ 2153.868627][ C1] ? _raw_spin_unlock_irq+0x4e/0x70 [ 2153.873656][ C1] ? rcu_gp_init+0x9cf/0xc30 [ 2153.878086][ C1] rcu_gp_kthread+0xa4/0x350 [ 2153.882514][ C1] ? _raw_spin_lock+0x1b0/0x1b0 [ 2153.887205][ C1] ? wake_nocb_gp+0x1e0/0x1e0 [ 2153.891711][ C1] ? __kasan_check_read+0x11/0x20 [ 2153.896574][ C1] ? __kthread_parkme+0xb2/0x200 [ 2153.901342][ C1] kthread+0x421/0x510 [ 2153.905252][ C1] ? wake_nocb_gp+0x1e0/0x1e0 [ 2153.909762][ C1] ? kthread_blkcg+0xd0/0xd0 [ 2153.914193][ C1] ret_from_fork+0x1f/0x30 [ 2153.918450][ C1] [ 2153.921310][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 2153.927480][ C1] Sending NMI from CPU 1 to CPUs 0: [ 2153.932518][ C0] NMI backtrace for cpu 0 [ 2153.932527][ C0] CPU: 0 PID: 30897 Comm: syz.4.8454 Not tainted 5.15.173-syzkaller-00161-gb4bd207b0380 #0 [ 2153.932544][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 2153.932554][ C0] RIP: 0010:setup_object+0x6/0x130 [ 2153.932578][ C0] Code: 89 fe 44 89 f1 e8 3a fc 0d 02 65 ff 0d 6b fd 4f 7e 75 b8 e8 b8 17 4e ff eb b1 66 2e 0f 1f 84 00 00 00 00 00 55 48 89 e5 41 57 <41> 56 53 49 89 f6 49 89 ff 66 90 4c 89 ff 4c 89 f6 e8 74 24 00 00 [ 2153.932591][ C0] RSP: 0018:ffffc90000007ae0 EFLAGS: 00000082 [ 2153.932605][ C0] RAX: ffff88810014e800 RBX: 0000000000000021 RCX: 0000000000000000 [ 2153.932616][ C0] RDX: 7828a58b8188ffff RSI: ffff88818ba52e70 RDI: ffff8881001c4900 [ 2153.932627][ C0] RBP: ffffc90000007ae8 R08: ffffffff82c795a3 R09: ffff88818ba52830 [ 2153.932639][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88818ba527e0 [ 2153.932650][ C0] R13: ffff8881001c4900 R14: ffffea00062e9480 R15: 0000000000000013 [ 2153.932662][ C0] FS: 0000555577fe1500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 2153.932676][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2153.932687][ C0] CR2: 00007ffd7304cf00 CR3: 000000010acc7000 CR4: 00000000003506b0 [ 2153.932701][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2153.932711][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2153.932721][ C0] Call Trace: [ 2153.932725][ C0] [ 2153.932730][ C0] ? show_regs+0x58/0x60 [ 2153.932747][ C0] ? nmi_cpu_backtrace+0x29f/0x300 [ 2153.932761][ C0] ? nmi_trigger_cpumask_backtrace+0x270/0x270 [ 2153.932777][ C0] ? setup_object+0x6/0x130 [ 2153.932798][ C0] ? setup_object+0x6/0x130 [ 2153.932812][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 2153.932828][ C0] ? nmi_handle+0xa8/0x280 [ 2153.932843][ C0] ? setup_object+0x6/0x130 [ 2153.932856][ C0] ? default_do_nmi+0x69/0x160 [ 2153.932871][ C0] ? exc_nmi+0xad/0x100 [ 2153.932885][ C0] ? end_repeat_nmi+0x16/0x31 [ 2153.932901][ C0] ? get_random_u32+0x353/0x660 [ 2153.932918][ C0] ? setup_object+0x6/0x130 [ 2153.932931][ C0] ? setup_object+0x6/0x130 [ 2153.932945][ C0] ? setup_object+0x6/0x130 [ 2153.932958][ C0] [ 2153.932963][ C0] [ 2153.932968][ C0] new_slab+0x234/0x4e0 [ 2153.932981][ C0] ___slab_alloc+0x39e/0x830 [ 2153.932997][ C0] ? __sigqueue_alloc+0x130/0x200 [ 2153.933015][ C0] ? __sigqueue_alloc+0x130/0x200 [ 2153.933030][ C0] __slab_alloc+0x4a/0x90 [ 2153.933045][ C0] ? __sigqueue_alloc+0x130/0x200 [ 2153.933059][ C0] kmem_cache_alloc+0x139/0x250 [ 2153.933076][ C0] __sigqueue_alloc+0x130/0x200 [ 2153.933091][ C0] __send_signal+0x1fd/0xcb0 [ 2153.933107][ C0] send_signal+0x43a/0x590 [ 2153.933123][ C0] do_send_sig_info+0xde/0x230 [ 2153.933138][ C0] group_send_sig_info+0x113/0x460 [ 2153.933153][ C0] ? __lock_task_sighand+0x100/0x100 [ 2153.933168][ C0] ? clockevents_program_event+0x22f/0x300 [ 2153.933187][ C0] do_bpf_send_signal+0x8c/0x150 [ 2153.933203][ C0] irq_work_run_list+0x1c2/0x290 [ 2153.933220][ C0] ? irq_work_run+0xf0/0xf0 [ 2153.933236][ C0] irq_work_run+0x69/0xf0 [ 2153.933251][ C0] __sysvec_irq_work+0x63/0x1b0 [ 2153.933267][ C0] sysvec_irq_work+0xa1/0xc0 [ 2153.933281][ C0] [ 2153.933285][ C0] [ 2153.933290][ C0] asm_sysvec_irq_work+0x1b/0x20 [ 2153.933304][ C0] RIP: 0010:_raw_spin_unlock_irq+0x49/0x70 [ 2153.933319][ C0] Code: 08 00 74 0c 48 c7 c7 d8 59 ad 86 e8 41 1c cb fc 48 83 3d 31 b7 c5 01 00 74 2a 48 89 df e8 63 80 6d fc 66 90 fb bf 01 00 00 00 82 c9 64 fc 65 8b 05 c3 ca 1a 7b 85 c0 74 03 5b 5d c3 e8 f3 e4 [ 2153.933331][ C0] RSP: 0018:ffffc90000d5fbb8 EFLAGS: 00000246 [ 2153.933343][ C0] RAX: 0000000000000001 RBX: ffff888114aa6900 RCX: dffffc0000000000 [ 2153.933354][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 2153.933364][ C0] RBP: ffffc90000d5fbc0 R08: ffffffff8145abca R09: fffff520001abfc0 [ 2153.933375][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff888114aa6900 [ 2153.933385][ C0] R13: ffff888114aa6d20 R14: 0000000000000021 R15: dffffc0000000000 [ 2153.933398][ C0] ? get_signal+0x151a/0x1630 [ 2153.933414][ C0] ? _raw_spin_unlock_irq+0x41/0x70 [ 2153.933428][ C0] get_signal+0x1562/0x1630 [ 2153.933445][ C0] arch_do_signal_or_restart+0xbd/0x1680 [ 2153.933460][ C0] ? __do_compat_sys_x32_rt_sigreturn+0x1e0/0x1e0 [ 2153.933475][ C0] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 2153.933490][ C0] ? __kasan_check_write+0x14/0x20 [ 2153.933506][ C0] ? _copy_from_user+0x96/0xd0 [ 2153.933521][ C0] ? restore_altstack+0x274/0x400 [ 2153.933536][ C0] ? get_sigframe_size+0x10/0x10 [ 2153.933550][ C0] ? __ia32_sys_sigaltstack+0x70/0x70 [ 2153.933568][ C0] ? __do_sys_rt_sigreturn+0x160/0x1e0 [ 2153.933584][ C0] exit_to_user_mode_loop+0xa0/0xe0 [ 2153.933599][ C0] exit_to_user_mode_prepare+0x5a/0xa0 [ 2153.933615][ C0] syscall_exit_to_user_mode+0x26/0x160 [ 2153.933630][ C0] do_syscall_64+0x47/0xb0 [ 2153.933643][ C0] ? clear_bhb_loop+0x35/0x90 [ 2153.933658][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2153.933673][ C0] RIP: 0033:0x7fbf2f9db710 [ 2153.933687][ C0] Code: 10 83 e0 01 83 e2 01 88 15 e2 df e5 00 88 05 df df e5 00 c3 50 48 8d 35 a0 a3 1b 00 48 8d 3d a6 a3 1b 00 31 c0 e8 30 f7 ff ff <53> 89 fb 48 83 ec 10 64 8b 04 25 94 ff ff ff 85 c0 74 2a 89 fe 31 [ 2153.933700][ C0] RSP: 002b:00007ffd7304d4b8 EFLAGS: 00000246 [ 2153.933711][ C0] RAX: 0000000000000000 RBX: 00007fbf2fd0a2d8 RCX: 00007fbf2fad1347 [ 2153.933722][ C0] RDX: 00007ffd7304d4c0 RSI: 00007ffd7304d5f0 RDI: 0000000000000007 [ 2153.933732][ C0] RBP: 00007fbf2fd0a24c R08: 00007fbf2fd09fa0 R09: 00007ffd7304d8f7 [ 2153.933743][ C0] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000003 [ 2153.933752][ C0] R13: 00007fbf2fd0a240 R14: 0000000000000005 R15: 00000000000010d7 [ 2153.933766][ C0] [ 2292.444820][ C0] BUG: workqueue lockup - pool cpus=0-1 flags=0x4 nice=0 stuck for 238s! [ 2292.453100][ C0] Showing busy workqueues and worker pools: [ 2292.458843][ C0] workqueue events: flags=0x0 [ 2292.463335][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=4/256 refcnt=5 [ 2292.463379][ C0] pending: release_one_tty, kfree_rcu_monitor, psi_avgs_work, rht_deferred_worker [ 2292.463457][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=3/256 refcnt=4 [ 2292.463494][ C0] pending: vmstat_shepherd, xfrm_state_gc_task, kfree_rcu_monitor [ 2292.463550][ C0] workqueue events_long: flags=0x0 [ 2292.500758][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=4/256 refcnt=5 [ 2292.500805][ C0] pending: br_multicast_gc_work, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup [ 2292.500880][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=2/256 refcnt=3 [ 2292.500919][ C0] pending: br_fdb_cleanup, br_fdb_cleanup [ 2292.500953][ C0] workqueue events_unbound: flags=0x2 [ 2292.536177][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/512 refcnt=4 [ 2292.536222][ C0] pending: toggle_allocation_gate, flush_memcg_stats_dwork [ 2292.536296][ C0] workqueue events_power_efficient: flags=0x80 [ 2292.556677][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=4/256 refcnt=5 [ 2292.556724][ C0] pending: wg_ratelimiter_gc_entries, check_lifetime, neigh_periodic_work, gc_worker [ 2292.556795][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2292.556833][ C0] pending: neigh_periodic_work [ 2292.556855][ C0] workqueue events_freezable_power_: flags=0x84 [ 2292.592407][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2292.592458][ C0] pending: sync_hw_clock [ 2292.592487][ C0] workqueue mm_percpu_wq: flags=0x8 [ 2292.609346][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2292.609392][ C0] pending: vmstat_update [ 2292.609421][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2292.609457][ C0] pending: vmstat_update [ 2292.609483][ C0] workqueue writeback: flags=0x4a [ 2292.638105][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 2292.638147][ C0] pending: wb_workfn [ 2292.638179][ C0] workqueue kblockd: flags=0x18 [ 2292.653886][ C0] pwq 3: cpus=1 node=0 flags=0x0 nice=-20 active=1/256 refcnt=2 [ 2292.653929][ C0] pending: blk_mq_timeout_work [ 2292.653966][ C0] workqueue dm_bufio_cache: flags=0x8 [ 2292.671679][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2292.671731][ C0] pending: work_fn [ 2292.671760][ C0] workqueue ipv6_addrconf: flags=0x40008 [ 2292.688532][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/1 refcnt=2 [ 2292.688581][ C0] pending: addrconf_verify_work [ 2292.688621][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 2292.705983][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2292.706030][ C0] pending: wg_packet_encrypt_worker [ 2292.706069][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2292.706107][ C0] pending: wg_packet_encrypt_worker [ 2292.706135][ C0] workqueue wg-kex-wg1: flags=0x6 [ 2292.736662][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 2292.736704][ C0] pending: wg_packet_handshake_send_worker, wg_queued_expired_zero_key_material [ 2292.736758][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 2292.758020][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2292.758074][ C0] pending: wg_packet_encrypt_worker [ 2292.758117][ C0] workqueue wg-kex-wg2: flags=0x6 [ 2292.775718][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 2292.775760][ C0] pending: wg_packet_handshake_send_worker, wg_queued_expired_zero_key_material [ 2292.775809][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 2292.797073][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2292.797118][ C0] pending: wg_packet_encrypt_worker [ 2292.797162][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 2292.815045][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2292.815088][ C0] pending: wg_packet_encrypt_worker [ 2292.815121][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2292.815157][ C0] pending: wg_packet_encrypt_worker [ 2292.815186][ C0] workqueue wg-kex-wg1: flags=0x6 [ 2292.845715][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 2292.845757][ C0] pending: wg_packet_handshake_send_worker, wg_queued_expired_zero_key_material [ 2292.845804][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 2292.867068][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2292.867114][ C0] pending: wg_packet_encrypt_worker [ 2292.867144][ C0] workqueue wg-kex-wg2: flags=0x6 [ 2292.884757][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 2292.884798][ C0] pending: wg_packet_handshake_send_worker, wg_queued_expired_zero_key_material [ 2292.901009][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 2292.906122][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2292.906167][ C0] pending: wg_packet_encrypt_worker [ 2292.906219][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 2292.924077][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2292.924128][ C0] pending: wg_packet_encrypt_worker [ 2292.924165][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2292.924202][ C0] pending: wg_packet_encrypt_worker [ 2292.924232][ C0] workqueue wg-kex-wg1: flags=0x6 [ 2292.954748][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 2292.954798][ C0] pending: wg_packet_handshake_send_worker, wg_queued_expired_zero_key_material [ 2292.971005][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 2292.976116][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2292.976160][ C0] pending: wg_packet_encrypt_worker [ 2292.976193][ C0] workqueue wg-kex-wg2: flags=0x6 [ 2292.993804][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 2292.993849][ C0] pending: wg_packet_handshake_send_worker, wg_queued_expired_zero_key_material [ 2292.993904][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 2293.015429][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2293.015477][ C0] pending: wg_packet_encrypt_worker [ 2293.015522][ C0] workqueue wg-kex-wg0: flags=0x6 [ 2293.033126][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 2293.033168][ C0] pending: wg_packet_handshake_send_worker [ 2293.033198][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 2293.051261][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2293.051306][ C0] pending: wg_packet_encrypt_worker [ 2293.051339][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2293.051380][ C0] pending: wg_packet_encrypt_worker [ 2293.051408][ C0] workqueue wg-kex-wg1: flags=0x6 [ 2293.081924][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 2293.081967][ C0] pending: wg_packet_handshake_send_worker, wg_queued_expired_zero_key_material [ 2293.082025][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 2293.103273][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2293.103320][ C0] pending: wg_packet_encrypt_worker [ 2293.103356][ C0] workqueue wg-kex-wg2: flags=0x6 [ 2293.120989][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 2293.121030][ C0] pending: wg_packet_handshake_send_worker, wg_queued_expired_zero_key_material [ 2293.121078][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 2293.142330][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2293.142376][ C0] pending: wg_packet_encrypt_worker [ 2293.142412][ C0] workqueue wg-kex-wg0: flags=0x6 [ 2293.160039][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 2293.160079][ C0] pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker [ 2293.160128][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 2293.181043][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2293.181097][ C0] pending: wg_packet_encrypt_worker [ 2293.181131][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2293.181169][ C0] pending: wg_packet_encrypt_worker [ 2293.181198][ C0] workqueue wg-kex-wg1: flags=0x6 [ 2293.211717][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 2293.211769][ C0] pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker [ 2293.211824][ C0] workqueue wg-kex-wg2: flags=0x6 [ 2293.232463][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 2293.232507][ C0] pending: wg_packet_handshake_send_worker [ 2293.232542][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 2293.250605][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2293.250655][ C0] pending: wg_packet_encrypt_worker