last executing test programs: 28m23.010052482s ago: executing program 32 (id=117): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet(0x2, 0x2, 0x1) bind$inet(r2, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) r3 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r3, 0x1, 0x2, &(0x7f0000000080), 0x4) bind$inet(r3, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) 28m1.693840035s ago: executing program 33 (id=179): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)={[{@quota}, {@usrquota_inode_hardlimit={'usrquota_inode_hardlimit', 0x3d, [0x37]}}]}) chdir(&(0x7f0000000240)='./file0\x00') mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r5, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x8, 0x0, 0x0}}, 0x10) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0) unlink(&(0x7f00000002c0)='./file0\x00') 26m52.161884977s ago: executing program 6 (id=1052): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000700), 0xff, 0x49b, &(0x7f0000001040)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x40081, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3130025, 0x0, 0x3, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 26m51.136507571s ago: executing program 6 (id=1056): r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xa04710, &(0x7f0000000280)={[{@user_xattr}, {@i_version}, {@noblock_validity}, {@abort}, {@mblk_io_submit}, {@nogrpid}, {@jqfmt_vfsv0}, {@delalloc}, {@nolazytime}]}, 0x0, 0x448, &(0x7f0000000740)="$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") ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f00000003c0)={0x100, 0x67d, 0x2, 0x10, 0x0, 0x9}) 26m50.684083891s ago: executing program 6 (id=1064): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f0000000000)={[{@shortname_winnt}, {@utf8no}, {@fat=@sys_immutable}, {@fat=@discard}, {@shortname_winnt}, {@fat=@errors_continue}, {@fat=@check_normal}, {@shortname_lower}, {@utf8}]}, 0xfd, 0x2c7, &(0x7f0000000480)="$eJzs3U1rE1sYwPGnadMmKW2yuFy4F6QPutHN0MZPEKQFMaDUpqgLYWonGjImJRMjEbHduXXndygu3QnWL9CNO/fipgiCmy6kI53JmGk7fTVp0vb/g3JO55wn58wL5Zmhc7Jx783TctEximZdYgmVmCRWZFMkIzEJLLfK7S0DMixhK3Jt9OeXS3fvP7iVy+enZ1VncnPXs6o6PvHx+ct3lz/VR+ffj38YkfXMw40f2a/r/67/t7E1F3x6ta6mLlSrdXPBtnSx5JQN1Tu2ZTqWliqOVdvRXrSrS0tNNSuLY6mlmuU4alaaWraaWq9qvdZU87FZqqhhGDqWkotm8KDGZNTGwursrJk71iCxY04KpynyLNdqOXMwsrGwehqTAgAA/WVv/i978v+BVtnJ/P9JydGSo5XD8v+YkP93j5f/b0UmjTgf4ts3ADkzFXnrRv4PAAAAAAAAAAAAAAAAAAAAAMBZsOm6add100EZ/IyISEK2En4vN93reaI7Dj7/IsHvoZCBHk4XHRZ6cS8hYr9uFBoFv/Tbc0UpiS2WTMZFfnnXQ4tfn7mZn55UT0bW7OVWvPeS4EgQH8hEx0/58RqKX24U4pIKj5+VtPwTHZ/dFR8XkUZhWK5eCcUbkpbPj6Qqtix613U7/tWU6o3b+V3jJ71+AAAAAACcB4b+kdl5/+uvJmkYGiwbsqvd39h+PiDpQ54PqKwNSzt+SP4f6t1+AwAAAABwkTjNF2XTtq3aySsT838V3geVpBw/qiOH7oxVjNa/gx3Y2XVd7wtjjvjJb5Mi+zTFZN+mble+i0gfHPBOV74980/gUTr38q8SAAAAgG5oJ/29ngkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABfXURcPC/qfZO2x0HCDvdlLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoD/8DgAA//8uWRWa") syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 26m50.47010471s ago: executing program 6 (id=1067): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xb101e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) syz_clone(0x126400, 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) 26m50.264416569s ago: executing program 6 (id=1072): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000013000500000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000014001a80100004800c000280"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0) 26m50.150177774s ago: executing program 6 (id=1079): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000090000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e746572009c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000700003806c000080080003400000000260000b"], 0x130}, 0x1, 0x0, 0x0, 0x800}, 0x8880) 26m50.097485127s ago: executing program 34 (id=1079): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000090000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e746572009c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000700003806c000080080003400000000260000b"], 0x130}, 0x1, 0x0, 0x0, 0x800}, 0x8880) 23m53.604652992s ago: executing program 1 (id=2715): openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00') preadv(r0, &(0x7f0000001240)=[{&(0x7f0000000040)=""/18, 0x12}], 0x1, 0x0, 0x0) 23m53.542265704s ago: executing program 1 (id=2717): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x19, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x7fff}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002a00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) memfd_create(&(0x7f00000003c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}, &(0x7f0000000200)=0xc) quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f0000000240)=@loop={'/dev/loop', 0x0}, r1, 0x0) 23m53.158263661s ago: executing program 35 (id=2723): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x804810, &(0x7f0000000a40), 0x26, 0x756, &(0x7f00000002c0)="$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") r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000200)=0xc) quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f0000000240)=@loop={'/dev/loop', 0x0}, r1, 0x0) 23m8.949794426s ago: executing program 8 (id=3242): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x17, 0x8, 0x40, 0x42, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r0, 0x0, 0x0}, 0x20) 23m8.887647649s ago: executing program 8 (id=3254): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x17, 0x8, 0x40, 0x42, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r0, 0x0, 0x0}, 0x20) 23m8.815666892s ago: executing program 8 (id=3244): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRESOCT=0x0], 0x50) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000240)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r4}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e0, 0x110, 0x12, 0x60d, 0x0, 0x202, 0x210, 0x2e8, 0x2e8, 0x210, 0x2c0, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x41}, @private0, [0x7f800000, 0xff000000, 0xffffffff, 0xffffff00], [0xff, 0x0, 0xff000000, 0xffffffff], 'netdevsim0\x00', 'bridge_slave_0\x00', {0xff}, {}, 0x3b, 0x8, 0x0, 0x2}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x2, 0x0, "6474d72e6bc396e946f8a61db914a15339d6260feffd8b4bc7aa05bf2198"}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0x0, 0xffffff00, 0xff000000], [0xffffff00, 0xff000000, 0x0, 0xff], 'ipvlan1\x00', 'erspan0\x00', {}, {0xff}, 0x2b, 0x5, 0x6}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x340) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[], 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x970bd26, 0x0, {0x7, r5}, [@MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x1, 0x0, 0x8002, {@in6_addr=@mcast2, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) read$rfkill(0xffffffffffffffff, &(0x7f0000000140), 0x8) 23m7.773553707s ago: executing program 8 (id=3248): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, &(0x7f0000000180)={[{@usrjquota}, {@abort}, {@nombcache}, {@noload}, {@jqfmt_vfsv0}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@oldalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000000}}, {@bsdgroups}, {@bh}]}, 0xfa, 0x477, &(0x7f0000001380)="$eJzs3M9vFFUcAPDvTH/w21bEHyBIFY3EHy0tP+TgRaMJB01M9IDxVNtCKgs1tCZCiFYPeDQk3o3/hfGkF6NeNPGqd0NCDBdQL2tmZwaWZbfd0m0X2M8nme57M6/73ndm3u6bebsbQM8ayf4kEVsj4o+IGMqztxYYyR+uX70w9c/VC1NJVKtv/53Uyl27emGqLFr+35Y8U60W+Q1N6r34XsRkpTJztsiPLZz+cGz+3PkXZ09Pnpw5OXNm4ujRQwf3DB6ZONyROLO4ru36ZG73zmPvXnpz6vil939O0sjjjoY4OmUk37tNPdPpyrpsW1066a/fsvfXm+lmZwLd1BcR2eEaqPX/oeiLTTe2DcXrn3e1ccCaqlar1SVelRerwH0siW63AOiO8o0+u/4tl3UaetwVrrySXwBlcV8vlnxLf6R5Yu9Aw/Xt1g7WPxIRxxf//TpbYo3uQwAA1Ps+G/+80Gz8l8YjeWIw+/NAMYcyHBEPRsT2iHgoInZExMMRtbKPRsRjK6y/cYbk9vFPevmOg2tDNv57uZjbunX8l5ZFhvuK3LZa/APJidnKzIFin+yPgQ0nZpOZ8SXq+OG1379sta1+/JctWf3lWLBox+X+hht005MLk6uJud6VzyJ29TeLP4lyGieJiJ0RsesO65h9rr/ltuXjX0Lrp21b9ZuIZ/PjvxgN8ZeSlvOT4y8dmTg8tjEqMwfGyrPidr/8dvGtVvWvKv4OyI7/5qbn/434h5ONEfPnzp+qzdfOr+jps64TF//8ouU1TRF/1r3aOf+PbSvO/8HkndqKwWLDx5MLC2fHIwaTN25fP3Hz2cp8WT6Lf/++5v1/e9zcE49HxO6I2BMRT2QXhUXbn4yIpyJi3xI74adXn/5gmfibHP/1mSvN4p9e7vhH/fFfeaLv1I/fLR//xohodfwP1VL7izXtvP6128DV7DsAAAC4V+SfgU/S0RvpNB0dzT/DvyM2p5W5+YXnT8x9dGY6n/cejoG0vNM1VHc/dLy4N1zmJxryB4v7xl/1barlR6fmKtPdDh563JYW/T/zV1+3WwesuQ7MowH3KP0fepf+D70p0f+hp+n/0Lua9f9PW5Ye/XZNGwOsK+//0Lva6P+L+UPrUQFwb/L+D71L/4ee1PK78emqvvK/7on/it8zvFvac/8nIr0rmnH/J/rb/jGLFSSqQ3n/z9ZsaFqm269MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnfF/AAAA//8Qi+Nc") syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x10040d0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) 23m7.516490838s ago: executing program 8 (id=3256): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x17, 0x8, 0x40, 0x42, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r0, &(0x7f0000000240), 0x0}, 0x20) 23m6.593811628s ago: executing program 8 (id=3272): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f00000005c0)) 23m6.580988759s ago: executing program 36 (id=3272): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f00000005c0)) 22m8.762143283s ago: executing program 7 (id=3923): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r5}, 0x10) syz_open_dev$evdev(&(0x7f0000000000), 0x8c, 0x123a40) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000d40)=@newtaction={0x88, 0x30, 0xb, 0x5, 0x0, {}, [{0x74, 0x1, [@m_ct={0x70, 0x1, 0x0, 0x0, {{0x7}, {0x48, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0xfffffffc, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_LABELS={0x14, 0x7, "e14221dc6b3a3dd0a0eb9317676b63d2"}, @TCA_CT_MARK={0x8, 0x5, 0x9}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x8890}, 0x40) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x20, r6, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40001}, 0x4000080) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000005feffff720af0fff8ffffff71a4f0ff000000002d030000000000001d400500000000004704000001ed000072030000000000001d44000000000000db0a00fee10000007303000000000000b500f3ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 22m8.426346758s ago: executing program 7 (id=3927): syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1044, 0x7a4d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x70, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x8, 0x0, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0x1, 0x5}}}}}]}}]}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="0800000000000000820000c0"]) 22m6.75949939s ago: executing program 7 (id=3957): r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) lseek(r2, 0x0, 0x0) 22m6.670267084s ago: executing program 7 (id=3958): syz_mount_image$ext4(&(0x7f00000008c0)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x800080, &(0x7f0000000440)={[{@test_dummy_encryption}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}]}, 0x3, 0x45f, &(0x7f0000000900)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000080)='.\x00', 0x0, 0x120) getdents64(r0, 0xfffffffffffffffe, 0x41) 22m6.553627889s ago: executing program 7 (id=3959): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) write$binfmt_misc(r2, &(0x7f0000000740), 0xff67) sendfile(r1, r2, &(0x7f0000000000), 0xfffb) fcntl$addseals(r2, 0x409, 0x8) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x8, &(0x7f0000000040)=0x3de8e7ea, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000080, 0x0, 0x0) 22m6.278194581s ago: executing program 7 (id=3961): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x1) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000005c0)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000140)='2', 0xff10, 0x8000c61) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 22m6.278024371s ago: executing program 37 (id=3961): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x1) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000005c0)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000140)='2', 0xff10, 0x8000c61) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 16.067835528s ago: executing program 5 (id=12796): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newlink={0x58, 0x10, 0x437, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40c89}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @private1}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x8}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e20}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) 16.0216844s ago: executing program 5 (id=12797): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r1, 0xaea2, 0x5) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 16.02155487s ago: executing program 5 (id=12798): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r2 = dup2(r1, r1) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x1, 0x40000000, 0x10}) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) 16.02125957s ago: executing program 5 (id=12799): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000360000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f0000000080), &(0x7f0000000380)=r0}, 0x20) 15.962357183s ago: executing program 5 (id=12800): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0xe, 0x40) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, 0x0) 15.101697451s ago: executing program 5 (id=12815): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000fc0)="5c00000012006bab9a3fe3d86e17aa0a046b4877c4aaf68187bae53dca2ba35bda6a876c1d0048007ea608649e7524765f0ef82e3c0000a705259a3651f60a84c9f4", 0x42}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) ptrace(0x10, 0x1) 8.780843466s ago: executing program 9 (id=12906): bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200"], 0x50) 8.729654149s ago: executing program 9 (id=12908): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYRES32, @ANYBLOB="e0ff8b"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040040) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00'], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0xc31fe084736598c) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x4000004) 8.729442609s ago: executing program 9 (id=12910): r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x201, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) 8.729178919s ago: executing program 9 (id=12912): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x28a5291, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='tracefs\x00', 0x800000, 0x0) 8.674301921s ago: executing program 9 (id=12913): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000006c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xc12, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x8, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x5, 0x0, {0x9, 0x21, 0x2, 0x6, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000100)={0x20, 0xe, 0x8, {0x8, 0x3, "45e2567a34b0"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 8.660603872s ago: executing program 9 (id=12915): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x1101000000000000, &(0x7f0000000540)=@base={0x5, 0x80, 0x1a00, 0xf7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x50) 8.640331382s ago: executing program 38 (id=12915): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x1101000000000000, &(0x7f0000000540)=@base={0x5, 0x80, 0x1a00, 0xf7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x50) 7.30904658s ago: executing program 0 (id=12921): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)={0x1c, r2, 0x3ee6a88d3d217617, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20044050}, 0x8) 7.30889963s ago: executing program 0 (id=12922): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000008c0)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000bbb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0}, 0x68) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='environ\x00') read$FUSE(r0, &(0x7f0000000a40)={0x2020}, 0xffffffb2) 7.30882489s ago: executing program 0 (id=12923): r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x201, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) 7.30851937s ago: executing program 0 (id=12924): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000000)=0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) read$FUSE(r1, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='devtmpfs\x00', 0x2200892, 0x0) pread64(r0, &(0x7f0000002240)=""/237, 0xed, 0x4eb) 6.758061914s ago: executing program 4 (id=12926): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000040)={0x8a83, 0x9, 0xffffff00, 0x7, 0x1b, "102a14ffff005e87ff7515bb5d6900"}) 6.757872564s ago: executing program 4 (id=12927): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x3e, 0x208604) r1 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902"], 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect$cdc_ecm(0x0, 0x5e, &(0x7f0000000240)=ANY=[], 0x0) syz_usb_disconnect(r2) syz_usb_disconnect(r0) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000940)=ANY=[@ANYBLOB="12010000226aa140070ad0001310010203010902240001000000000904000002bd22f00009050303000000000009058aff9251"], 0x0) syz_usb_control_io$cdc_ecm(r3, &(0x7f00000005c0)={0x14, 0x0, &(0x7f0000000580)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r2) 6.421949009s ago: executing program 0 (id=12928): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f0000070000"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e) getsockopt(r6, 0x111, 0x3, 0x0, &(0x7f0000000080)) 5.622332103s ago: executing program 2 (id=12937): add_key(&(0x7f0000002180)='asymmetric\x00', 0x0, &(0x7f0000002200)="10ad", 0x2, 0xfffffffffffffffb) 5.622254433s ago: executing program 2 (id=12938): syz_usb_connect(0x3, 0x2d, &(0x7f0000001040)=ANY=[@ANYBLOB="1201000229639010861a2d754d2d0102030109021b000100000000090401"], 0x0) 5.542542327s ago: executing program 0 (id=12939): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) syz_usb_connect(0x3, 0x2d, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xf) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TCFLSH(r1, 0x400455c8, 0x4) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) 2.921286671s ago: executing program 4 (id=12950): socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x88, 0x30, 0x1, 0x0, 0x0, {}, [{0x74, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r4 = gettid() ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000280)={0x3, 0x0, 0x0, 0x0, 0x7fffffff}) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) tkill(r4, 0xb) utimensat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) 2.597219976s ago: executing program 2 (id=12951): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/\x00et/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44\x8cm\xa0\x8dN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r1, &(0x7f0000001f80)=""/4099, 0x1003) 2.573237447s ago: executing program 2 (id=12952): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, 0x0, 0x118) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sendmsg$inet(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x803e0000, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000100) 1.932114865s ago: executing program 4 (id=12954): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x0, [{{0x9, 0x4, 0x0, 0x90, 0x7f, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xa}}}}]}}]}}, 0x0) futex(0x0, 0x1, 0x0, 0x0, 0x0, 0x1) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0xa, {[@local=@item_4={0x3, 0x2, 0x7, "8c740a1b"}, @main=@item_4={0x3, 0x0, 0x8}]}}, 0x0}, 0x0) 1.687218635s ago: executing program 2 (id=12955): syz_emit_ethernet(0x6e, &(0x7f0000000480)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0x0, @private0, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x1, {0x0, 0x6, "028343", 0x1, 0x3a, 0xff, @mcast1, @remote, [], "005cefbd266831e3"}}}}}}}, 0x0) 1.638347748s ago: executing program 2 (id=12956): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x8241, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x39, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x5, 0x33, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x8, 0xb, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000080)={0x40, 0xf, 0x5, {0x5, 0x5, "a7fecf"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 1.378278399s ago: executing program 3 (id=12959): r0 = eventfd2(0x0, 0x0) io_setup(0x6, &(0x7f0000000040)=0x0) io_submit(r1, 0x2, &(0x7f0000000280)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x3511, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r0}]) 1.317791952s ago: executing program 3 (id=12960): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c4000000190001002dbd700000000000fe880000000000000000000000000001fe8000000000000000000000000000aa00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff00000b000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008000000000000000001000000000000000a00100001"], 0xc4}}, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 1.308418392s ago: executing program 3 (id=12961): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x1c) 406.379612ms ago: executing program 3 (id=12962): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="600000000101030000000000000000000a0000030600124000020000440001"], 0x60}}, 0x4000) 406.254242ms ago: executing program 3 (id=12963): syz_emit_ethernet(0x8e, &(0x7f0000000780)={@broadcast, @empty, @void, {@ipv6={0x86dd, @generic={0x1, 0x6, "7078c3", 0x58, 0x88, 0x1, @empty, @local, {[@srh={0x33, 0xa, 0x4, 0x5, 0x0, 0x48, 0x5, [@private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @dev={0xfe, 0x80, '\x00', 0x44}, @dev={0xfe, 0x80, '\x00', 0x1d}, @private2={0xfc, 0x2, '\x00', 0x1}]}]}}}}}, 0x0) 406.164692ms ago: executing program 3 (id=12964): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000680)=0x9) ioctl$TCXONC(r1, 0x540a, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000140)='g') r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 42.771938ms ago: executing program 39 (id=12815): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000fc0)="5c00000012006bab9a3fe3d86e17aa0a046b4877c4aaf68187bae53dca2ba35bda6a876c1d0048007ea608649e7524765f0ef82e3c0000a705259a3651f60a84c9f4", 0x42}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) ptrace(0x10, 0x1) 39.671598ms ago: executing program 4 (id=12966): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x94) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) 0s ago: executing program 4 (id=12967): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close(r0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}, 0x1, 0x0, 0x0, 0x4004040}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x4e21, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0xb}}}, 0xb8}}, 0x0) kernel console output (not intermixed with test programs): dev loop3, logical block 128, lost async page write [ 1616.313283][ T1525] attempt to access beyond end of device [ 1616.313283][ T1525] loop3: rw=2049, want=129, limit=128 [ 1616.327649][ T1525] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 1616.612103][ T1539] 9pnet: Insufficient options for proto=fd [ 1616.699448][ T1545] syz.0.11949[1545] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1616.699530][ T1545] syz.0.11949[1545] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1617.232106][ T1549] loop3: detected capacity change from 0 to 128 [ 1617.425666][ T1550] attempt to access beyond end of device [ 1617.425666][ T1550] loop3: rw=2049, want=129, limit=128 [ 1617.438726][ T1550] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 1617.449539][ T1549] attempt to access beyond end of device [ 1617.449539][ T1549] loop3: rw=2049, want=129, limit=128 [ 1617.463540][ T1549] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 1617.479003][ T1549] attempt to access beyond end of device [ 1617.479003][ T1549] loop3: rw=2049, want=129, limit=128 [ 1617.490038][ T1549] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 1617.660194][ T1560] 9pnet: Insufficient options for proto=fd [ 1617.670444][ T1562] loop2: detected capacity change from 0 to 128 [ 1617.686205][ T1564] 9pnet: Insufficient options for proto=fd [ 1617.970074][ T1567] loop0: detected capacity change from 0 to 128 [ 1618.714689][ T1562] attempt to access beyond end of device [ 1618.714689][ T1562] loop2: rw=2049, want=129, limit=128 [ 1618.731345][ T1578] loop9: detected capacity change from 0 to 128 [ 1618.737825][ T1562] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 1618.763201][ T1575] attempt to access beyond end of device [ 1618.763201][ T1575] loop2: rw=2049, want=129, limit=128 [ 1618.774816][ T1575] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 1618.829512][ T1580] loop3: detected capacity change from 0 to 128 [ 1618.860656][ T1582] syz.2.11963[1582] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1618.860739][ T1582] syz.2.11963[1582] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1619.142589][ T1593] 9pnet: Insufficient options for proto=fd [ 1619.210095][ T1597] loop0: detected capacity change from 0 to 128 [ 1619.215986][ T1599] loop5: detected capacity change from 0 to 128 [ 1619.328133][T18706] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 1619.747728][ T1611] loop2: detected capacity change from 0 to 128 [ 1619.793723][ T1613] loop5: detected capacity change from 0 to 128 [ 1619.797502][T18706] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1619.811177][T18706] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1619.824147][T18706] usb 10-1: New USB device found, idVendor=06a3, idProduct=0ccb, bcdDevice= 0.00 [ 1619.833875][T18706] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1619.853212][T18706] usb 10-1: config 0 descriptor?? [ 1620.039312][ T1617] loop2: detected capacity change from 0 to 128 [ 1620.150695][ T1623] loop3: detected capacity change from 0 to 128 [ 1620.248773][T18706] usbhid 10-1:0.0: can't add hid device: -71 [ 1620.254832][T18706] usbhid: probe of 10-1:0.0 failed with error -71 [ 1620.274389][ T1627] 9pnet: Insufficient options for proto=fd [ 1620.291301][T18706] usb 10-1: USB disconnect, device number 20 [ 1620.299819][ T1631] loop3: detected capacity change from 0 to 128 [ 1620.496774][ T1637] loop2: detected capacity change from 0 to 40427 [ 1620.539169][ T1637] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1620.598195][ T1637] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1620.636327][ T1643] loop9: detected capacity change from 0 to 128 [ 1620.892857][ T1647] loop9: detected capacity change from 0 to 128 [ 1620.927026][ T1649] loop5: detected capacity change from 0 to 128 [ 1621.001562][ T1637] handle_bad_sector: 20 callbacks suppressed [ 1621.001585][ T1637] attempt to access beyond end of device [ 1621.001585][ T1637] loop2: rw=2049, want=67104, limit=40427 [ 1621.054954][ T1644] attempt to access beyond end of device [ 1621.054954][ T1644] loop2: rw=524288, want=78080, limit=40427 [ 1621.067201][ T1644] attempt to access beyond end of device [ 1621.067201][ T1644] loop2: rw=0, want=77832, limit=40427 [ 1621.096201][ T1637] attempt to access beyond end of device [ 1621.096201][ T1637] loop2: rw=2049, want=69000, limit=40427 [ 1621.113737][ T1647] attempt to access beyond end of device [ 1621.113737][ T1647] loop9: rw=2049, want=129, limit=128 [ 1621.119872][ T1644] attempt to access beyond end of device [ 1621.119872][ T1644] loop2: rw=0, want=77832, limit=40427 [ 1621.155353][ T1647] buffer_io_error: 17 callbacks suppressed [ 1621.155372][ T1647] Buffer I/O error on dev loop9, logical block 128, lost async page write [ 1621.187454][ T1650] attempt to access beyond end of device [ 1621.187454][ T1650] loop5: rw=2049, want=129, limit=128 [ 1621.213147][ T1650] Buffer I/O error on dev loop5, logical block 128, lost async page write [ 1621.213871][ T1654] xt_TCPMSS: Only works on TCP SYN packets [ 1621.232087][ T1649] attempt to access beyond end of device [ 1621.232087][ T1649] loop5: rw=2049, want=129, limit=128 [ 1621.253238][ T1649] Buffer I/O error on dev loop5, logical block 128, lost async page write [ 1621.272386][ T1649] attempt to access beyond end of device [ 1621.272386][ T1649] loop5: rw=2049, want=129, limit=128 [ 1621.302141][ T1649] Buffer I/O error on dev loop5, logical block 128, lost async page write [ 1621.343211][ T1657] loop9: detected capacity change from 0 to 128 [ 1621.403530][ T1658] incfs: Backing dir is not set, filesystem can't be mounted. [ 1621.411126][ T1658] incfs: mount failed -2 [ 1621.704786][ T1666] 9pnet: Insufficient options for proto=fd [ 1621.806858][ T1669] loop9: detected capacity change from 0 to 128 [ 1622.179969][ T1670] attempt to access beyond end of device [ 1622.179969][ T1670] loop9: rw=2049, want=129, limit=128 [ 1622.213584][ T1670] Buffer I/O error on dev loop9, logical block 128, lost async page write [ 1622.239614][ T1669] Buffer I/O error on dev loop9, logical block 128, lost async page write [ 1622.263614][ T1660] loop5: detected capacity change from 0 to 40427 [ 1622.270788][ T1669] Buffer I/O error on dev loop9, logical block 128, lost async page write [ 1622.357808][ T1660] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1622.462427][ T1660] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1622.497104][ T1678] loop0: detected capacity change from 0 to 128 [ 1622.657099][ T1675] loop9: detected capacity change from 0 to 40427 [ 1622.700192][ T1688] loop2: detected capacity change from 0 to 128 [ 1622.752948][ T1675] F2FS-fs (loop9): Found nat_bits in checkpoint [ 1622.761219][ T1684] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 1622.781207][ T1678] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 1622.801158][ T1678] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 1622.820856][ T1675] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 1622.874791][ T1697] loop0: detected capacity change from 0 to 128 [ 1622.884458][ T1698] netlink: 96 bytes leftover after parsing attributes in process `syz.5.12000'. [ 1623.344029][ T1713] loop9: detected capacity change from 0 to 128 [ 1623.600949][ T1726] loop9: detected capacity change from 0 to 1024 [ 1623.622590][ T1727] incfs: Backing dir is not set, filesystem can't be mounted. [ 1623.630373][ T1727] incfs: mount failed -2 [ 1623.667566][ T1726] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 1623.677284][ T1726] EXT4-fs (loop9): orphan cleanup on readonly fs [ 1623.684121][ T1726] EXT4-fs error (device loop9): ext4_free_blocks:6218: comm syz.9.12013: Freeing blocks not in datazone - block = 0, count = 4096 [ 1623.697981][ T1726] EXT4-fs (loop9): 1 orphan inode deleted [ 1623.703818][ T1726] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1623.851791][ T1730] loop2: detected capacity change from 0 to 128 [ 1623.862344][ T1732] loop0: detected capacity change from 0 to 128 [ 1623.894406][ T1734] loop5: detected capacity change from 0 to 128 [ 1624.031485][ T1737] loop0: detected capacity change from 0 to 128 [ 1624.307904][ T1742] loop5: detected capacity change from 0 to 128 [ 1624.477299][ T1747] loop0: detected capacity change from 0 to 2048 [ 1624.565468][ T1747] EXT4-fs (loop0): mounted filesystem without journal. Opts: min_batch_time=0x000000000000000d,mb_optimize_scan=0x0000000000000001,noblock_validity,,errors=continue. Quota mode: none. [ 1624.651349][ T1754] loop0: detected capacity change from 0 to 128 [ 1624.800343][ T1761] bridge0: port 3(vlan2) entered blocking state [ 1624.806754][ T1761] bridge0: port 3(vlan2) entered disabled state [ 1624.841934][ T1765] loop0: detected capacity change from 0 to 128 [ 1624.867725][ T1767] loop3: detected capacity change from 0 to 128 [ 1624.883566][ T1769] loop2: detected capacity change from 0 to 2048 [ 1624.959368][ T1769] EXT4-fs (loop2): mounted filesystem without journal. Opts: min_batch_time=0x000000000000000d,mb_optimize_scan=0x0000000000000001,noblock_validity,,errors=continue. Quota mode: none. [ 1625.001424][ T1777] loop3: detected capacity change from 0 to 128 [ 1625.080720][ T1781] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12032'. [ 1625.106675][ T1783] loop2: detected capacity change from 0 to 128 [ 1625.107753][ T1785] loop0: detected capacity change from 0 to 128 [ 1625.241455][ T1795] loop3: detected capacity change from 0 to 128 [ 1625.453531][ T1800] loop3: detected capacity change from 0 to 128 [ 1625.736391][ T1802] loop3: detected capacity change from 0 to 40427 [ 1625.766987][ T1802] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1625.881483][ T1802] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1626.082043][ T1812] handle_bad_sector: 2632 callbacks suppressed [ 1626.082084][ T1812] attempt to access beyond end of device [ 1626.082084][ T1812] loop3: rw=2049, want=79872, limit=40427 [ 1626.184851][ T1812] attempt to access beyond end of device [ 1626.184851][ T1812] loop3: rw=2049, want=81920, limit=40427 [ 1626.210303][ T1812] attempt to access beyond end of device [ 1626.210303][ T1812] loop3: rw=2049, want=51272, limit=40427 [ 1626.235839][ T1812] attempt to access beyond end of device [ 1626.235839][ T1812] loop3: rw=2049, want=53248, limit=40427 [ 1626.270637][ T1812] attempt to access beyond end of device [ 1626.270637][ T1812] loop3: rw=2049, want=59688, limit=40427 [ 1626.284348][ T1804] loop5: detected capacity change from 0 to 40427 [ 1626.321169][ T1812] attempt to access beyond end of device [ 1626.321169][ T1812] loop3: rw=2049, want=62872, limit=40427 [ 1626.332637][ T1804] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1626.348195][ T1818] loop2: detected capacity change from 0 to 128 [ 1626.357989][ T1812] attempt to access beyond end of device [ 1626.357989][ T1812] loop3: rw=2049, want=63304, limit=40427 [ 1626.395981][ T1804] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1626.439262][T28194] attempt to access beyond end of device [ 1626.439262][T28194] loop3: rw=2049, want=45104, limit=40427 [ 1626.464715][ T1821] syz.2.12044[1821] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1626.464788][ T1821] syz.2.12044[1821] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1626.545608][ T1827] loop5: detected capacity change from 0 to 128 [ 1626.656440][ T1831] loop3: detected capacity change from 0 to 128 [ 1626.678044][ T1833] loop5: detected capacity change from 0 to 128 [ 1626.837875][ T1831] attempt to access beyond end of device [ 1626.837875][ T1831] loop3: rw=2049, want=129, limit=128 [ 1626.848948][ T1831] buffer_io_error: 20 callbacks suppressed [ 1626.848973][ T1831] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 1626.863642][ T1838] attempt to access beyond end of device [ 1626.863642][ T1838] loop3: rw=2049, want=129, limit=128 [ 1626.874643][ T1838] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 1626.883673][ T1838] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 1626.916342][ T1833] Buffer I/O error on dev loop5, logical block 128, lost async page write [ 1626.929959][ T1836] Buffer I/O error on dev loop5, logical block 128, lost async page write [ 1626.945074][ T1836] Buffer I/O error on dev loop5, logical block 128, lost async page write [ 1628.274022][ T1849] loop0: detected capacity change from 0 to 128 [ 1628.521477][ T1853] loop5: detected capacity change from 0 to 128 [ 1628.580911][ T1855] syz.2.12058[1855] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1628.580995][ T1855] syz.2.12058[1855] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1629.246282][ T1866] loop9: detected capacity change from 0 to 128 [ 1629.335992][ T1858] loop0: detected capacity change from 0 to 40427 [ 1629.342426][ T1853] Buffer I/O error on dev loop5, logical block 128, lost async page write [ 1629.342913][ T1853] Buffer I/O error on dev loop5, logical block 128, lost async page write [ 1629.427233][ T1871] loop9: detected capacity change from 0 to 128 [ 1629.450025][ T1858] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1629.459291][ T1877] 9pnet: Could not find request transport: fd0x0000000000000006 [ 1629.499022][ T1879] loop3: detected capacity change from 0 to 128 [ 1629.535388][ T1858] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1629.551578][ T1882] bridge0: port 3(vlan2) entered blocking state [ 1629.558593][ T1882] bridge0: port 3(vlan2) entered disabled state [ 1629.686176][ T1871] Buffer I/O error on dev loop9, logical block 128, lost async page write [ 1629.695716][ T1885] Buffer I/O error on dev loop9, logical block 128, lost async page write [ 1629.815462][ T1894] 9pnet: Insufficient options for proto=fd [ 1629.840675][ T1896] loop3: detected capacity change from 0 to 128 [ 1629.955060][ T1892] loop9: detected capacity change from 0 to 40427 [ 1629.964000][ T1900] fuse: Unknown parameter '0x0000000000000003' [ 1629.994220][ T1892] F2FS-fs (loop9): Found nat_bits in checkpoint [ 1630.030551][ T1892] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 1630.067220][ T1910] netlink: 96 bytes leftover after parsing attributes in process `syz.3.12075'. [ 1630.155178][ T1913] 9pnet: Insufficient options for proto=fd [ 1630.404828][ T1920] bridge0: port 3(vlan2) entered blocking state [ 1630.411201][ T1920] bridge0: port 3(vlan2) entered disabled state [ 1630.475821][ T1922] loop5: detected capacity change from 0 to 128 [ 1630.521011][ T1924] loop2: detected capacity change from 0 to 128 [ 1630.577372][ T1926] xt_time: unknown flags 0xc [ 1630.779437][ T1930] loop2: detected capacity change from 0 to 128 [ 1630.826360][ T1928] loop5: detected capacity change from 0 to 40427 [ 1630.896564][ T1928] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1630.915203][ T1933] loop2: detected capacity change from 0 to 128 [ 1630.968550][ T1928] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1631.108389][ T1942] 9pnet: Could not find request transport: fd0x0000000000000003 [ 1631.119014][ T1933] handle_bad_sector: 20 callbacks suppressed [ 1631.119034][ T1933] attempt to access beyond end of device [ 1631.119034][ T1933] loop2: rw=2049, want=129, limit=128 [ 1631.153833][ T1937] attempt to access beyond end of device [ 1631.153833][ T1937] loop2: rw=2049, want=129, limit=128 [ 1631.165627][ T1943] attempt to access beyond end of device [ 1631.165627][ T1943] loop5: rw=2049, want=79992, limit=40427 [ 1631.190435][ T1937] attempt to access beyond end of device [ 1631.190435][ T1937] loop2: rw=2049, want=129, limit=128 [ 1631.210276][ T1943] attempt to access beyond end of device [ 1631.210276][ T1943] loop5: rw=2049, want=81920, limit=40427 [ 1631.295338][ T1943] attempt to access beyond end of device [ 1631.295338][ T1943] loop5: rw=2049, want=50912, limit=40427 [ 1631.430870][ T1949] 9pnet: Insufficient options for proto=fd [ 1631.543504][ T1952] loop2: detected capacity change from 0 to 1024 [ 1631.581740][ T1952] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 1631.593765][T31199] attempt to access beyond end of device [ 1631.593765][T31199] loop5: rw=2049, want=45104, limit=40427 [ 1631.607463][ T1952] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1631.614410][ T1952] EXT4-fs error (device loop2): ext4_free_blocks:6218: comm syz.2.12089: Freeing blocks not in datazone - block = 0, count = 4096 [ 1631.662840][ T1952] EXT4-fs (loop2): 1 orphan inode deleted [ 1631.678786][ T1952] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1632.187174][ T1960] loop9: detected capacity change from 0 to 128 [ 1632.308638][ T1965] syz.9.12094[1965] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1632.308690][ T1965] syz.9.12094[1965] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1632.336637][ T1967] loop9: detected capacity change from 0 to 128 [ 1633.099655][ T1979] 9pnet: Insufficient options for proto=fd [ 1634.032132][ T1992] loop5: detected capacity change from 0 to 128 [ 1634.089746][ T1994] loop0: detected capacity change from 0 to 2048 [ 1634.135433][ T1994] EXT4-fs (loop0): mounted filesystem without journal. Opts: min_batch_time=0x000000000000000d,mb_optimize_scan=0x0000000000000001,noblock_validity,,errors=continue. Quota mode: none. [ 1634.180327][ T595] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1634.210652][ T2000] loop5: detected capacity change from 0 to 1024 [ 1634.257117][ T2000] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 1634.266064][ T2000] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1634.272764][ T2000] EXT4-fs error (device loop5): ext4_free_blocks:6218: comm syz.5.12106: Freeing blocks not in datazone - block = 0, count = 4096 [ 1634.302042][ T2009] syz.0.12107[2009] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1634.302123][ T2009] syz.0.12107[2009] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1634.316967][ T2000] EXT4-fs (loop5): 1 orphan inode deleted [ 1634.343839][ T2000] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1634.830034][ T595] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1634.841046][ T595] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1634.853954][ T595] usb 3-1: New USB device found, idVendor=06a3, idProduct=0ccb, bcdDevice= 0.00 [ 1634.863039][ T595] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1634.872198][ T595] usb 3-1: config 0 descriptor?? [ 1635.028687][ T2018] loop5: detected capacity change from 0 to 128 [ 1635.226822][ T595] usbhid 3-1:0.0: can't add hid device: -71 [ 1635.232922][ T595] usbhid: probe of 3-1:0.0 failed with error -71 [ 1635.240781][ T595] usb 3-1: USB disconnect, device number 53 [ 1635.418787][ T2018] attempt to access beyond end of device [ 1635.418787][ T2018] loop5: rw=2049, want=129, limit=128 [ 1635.429752][ T2018] buffer_io_error: 6 callbacks suppressed [ 1635.429763][ T2018] Buffer I/O error on dev loop5, logical block 128, lost async page write [ 1635.487296][ T2028] loop5: detected capacity change from 0 to 128 [ 1635.619586][T19503] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1635.979413][T19503] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1635.994015][T19503] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1636.064091][T19503] usb 1-1: New USB device found, idVendor=06a3, idProduct=0ccb, bcdDevice= 0.00 [ 1636.073206][T19503] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1636.085311][T19503] usb 1-1: config 0 descriptor?? [ 1636.375237][ T2043] syz.5.12121[2043] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1636.375297][ T2043] syz.5.12121[2043] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1636.417780][ T2045] 9pnet: Could not find request transport: fd0x0000000000000003 [ 1636.459539][T19503] usbhid 1-1:0.0: can't add hid device: -71 [ 1636.465685][T19503] usbhid: probe of 1-1:0.0 failed with error -71 [ 1636.480145][T19503] usb 1-1: USB disconnect, device number 23 [ 1636.542699][ T2048] loop5: detected capacity change from 0 to 1024 [ 1636.677028][ T2048] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 1636.688428][ T2048] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1636.696102][ T2052] netlink: 96 bytes leftover after parsing attributes in process `syz.2.12124'. [ 1636.705252][ T2048] EXT4-fs error (device loop5): ext4_free_blocks:6218: comm syz.5.12123: Freeing blocks not in datazone - block = 0, count = 4096 [ 1636.730002][ T2048] EXT4-fs (loop5): 1 orphan inode deleted [ 1636.740880][ T2048] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1636.910897][ T2057] loop3: detected capacity change from 0 to 128 [ 1636.919720][ T2059] loop0: detected capacity change from 0 to 128 [ 1637.024311][ T2057] attempt to access beyond end of device [ 1637.024311][ T2057] loop3: rw=2049, want=129, limit=128 [ 1637.039123][ T2057] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 1637.058346][ T2060] attempt to access beyond end of device [ 1637.058346][ T2060] loop3: rw=2049, want=129, limit=128 [ 1637.073601][ T2060] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 1637.082664][ T2060] attempt to access beyond end of device [ 1637.082664][ T2060] loop3: rw=2049, want=129, limit=128 [ 1637.105722][ T2063] xt_TCPMSS: Only works on TCP SYN packets [ 1637.129741][ T2060] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 1637.278703][ T2065] incfs: Backing dir is not set, filesystem can't be mounted. [ 1637.294849][ T2065] incfs: mount failed -2 [ 1637.309745][ T2067] loop3: detected capacity change from 0 to 128 [ 1637.371736][ T2071] 9pnet: Insufficient options for proto=fd [ 1637.437488][ T2074] syz.5.12132[2074] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1637.437568][ T2074] syz.5.12132[2074] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1637.566743][ T2067] attempt to access beyond end of device [ 1637.566743][ T2067] loop3: rw=2049, want=129, limit=128 [ 1637.626329][ T2067] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 1637.640449][ T2079] syz.2.12134[2079] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1637.640527][ T2079] syz.2.12134[2079] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1638.259757][ T2085] netlink: 96 bytes leftover after parsing attributes in process `syz.9.12136'. [ 1638.494991][ T2092] netlink: 96 bytes leftover after parsing attributes in process `syz.9.12139'. [ 1638.592765][ T2089] loop5: detected capacity change from 0 to 40427 [ 1638.693659][ T2089] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1638.738764][ T2106] loop0: detected capacity change from 0 to 1024 [ 1638.766158][ T2106] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 1638.774776][ T2106] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1638.781356][ T2106] EXT4-fs error (device loop0): ext4_free_blocks:6218: comm syz.0.12142: Freeing blocks not in datazone - block = 0, count = 4096 [ 1638.795028][ T2106] EXT4-fs (loop0): 1 orphan inode deleted [ 1638.801331][ T2106] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1638.815569][ T2105] 9pnet: Insufficient options for proto=fd [ 1638.826880][ T2089] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1638.850434][ T2111] syz.9.12144[2111] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1638.850507][ T2111] syz.9.12144[2111] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1638.947660][ T2114] attempt to access beyond end of device [ 1638.947660][ T2114] loop5: rw=2049, want=79872, limit=40427 [ 1638.983900][ T2114] attempt to access beyond end of device [ 1638.983900][ T2114] loop5: rw=2049, want=81920, limit=40427 [ 1639.008369][ T2114] attempt to access beyond end of device [ 1639.008369][ T2114] loop5: rw=2049, want=51200, limit=40427 [ 1639.034444][ T2114] attempt to access beyond end of device [ 1639.034444][ T2114] loop5: rw=2049, want=53248, limit=40427 [ 1639.072062][ T2114] attempt to access beyond end of device [ 1639.072062][ T2114] loop5: rw=2049, want=61432, limit=40427 [ 1639.112365][ T2114] attempt to access beyond end of device [ 1639.112365][ T2114] loop5: rw=2049, want=65520, limit=40427 [ 1639.361417][ T2118] 9pnet: Insufficient options for proto=fd [ 1639.393283][ T2120] loop2: detected capacity change from 0 to 128 [ 1639.513461][ T2121] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 1639.525790][ T2121] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 1639.587554][ T595] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 1639.609199][ T2128] netlink: 96 bytes leftover after parsing attributes in process `syz.0.12150'. [ 1639.627903][ T2130] xt_TCPMSS: Only works on TCP SYN packets [ 1639.737178][ T2132] loop0: detected capacity change from 0 to 128 [ 1639.755819][ T2135] 9pnet: Insufficient options for proto=fd [ 1639.801826][ T2138] incfs: Backing dir is not set, filesystem can't be mounted. [ 1639.824260][ T2138] incfs: mount failed -2 [ 1639.850145][ T2141] loop9: detected capacity change from 0 to 128 [ 1639.877414][ T595] usb 6-1: Using ep0 maxpacket: 16 [ 1639.889091][ T2132] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 1639.897938][ T2132] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 1639.990659][ T2143] loop9: detected capacity change from 0 to 128 [ 1639.997401][ T595] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1640.017633][ T595] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1640.046166][ T595] usb 6-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 1640.072632][ T595] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1640.097445][ T595] usb 6-1: config 0 descriptor?? [ 1640.152320][ T2146] Buffer I/O error on dev loop9, logical block 128, lost async page write [ 1640.285536][ T2148] 9pnet: Insufficient options for proto=fd [ 1640.316052][ T2150] loop9: detected capacity change from 0 to 128 [ 1640.322532][T18706] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1640.447149][ T595] usbhid 6-1:0.0: can't add hid device: -71 [ 1640.453228][ T595] usbhid: probe of 6-1:0.0 failed with error -71 [ 1640.468509][ T595] usb 6-1: USB disconnect, device number 58 [ 1640.560109][ T2150] buffer_io_error: 1 callbacks suppressed [ 1640.560127][ T2150] Buffer I/O error on dev loop9, logical block 128, lost async page write [ 1640.665849][ T2155] loop9: detected capacity change from 0 to 128 [ 1640.747067][T18706] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1640.765177][T18706] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1640.778167][T18706] usb 1-1: New USB device found, idVendor=06a3, idProduct=0ccb, bcdDevice= 0.00 [ 1640.787475][T18706] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1640.800832][T18706] usb 1-1: config 0 descriptor?? [ 1640.833647][ T2155] Buffer I/O error on dev loop9, logical block 128, lost async page write [ 1640.843798][ T2156] Buffer I/O error on dev loop9, logical block 128, lost async page write [ 1640.852784][ T2156] Buffer I/O error on dev loop9, logical block 128, lost async page write [ 1641.126824][T18706] usbhid 1-1:0.0: can't add hid device: -71 [ 1641.134900][T18706] usbhid: probe of 1-1:0.0 failed with error -71 [ 1641.141008][ T2163] loop2: detected capacity change from 0 to 40427 [ 1641.154033][T18706] usb 1-1: USB disconnect, device number 24 [ 1641.273447][ T2163] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1641.338348][ T2163] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1641.692279][ T2177] netlink: 96 bytes leftover after parsing attributes in process `syz.3.12168'. [ 1641.946725][ T2186] 9pnet: Insufficient options for proto=fd [ 1642.356027][ T2181] loop5: detected capacity change from 0 to 40427 [ 1642.433111][ T2181] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1642.505600][ T2197] xt_TCPMSS: Only works on TCP SYN packets [ 1642.513353][ T2200] loop2: detected capacity change from 0 to 128 [ 1642.519873][ T2181] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1642.675500][ T2204] handle_bad_sector: 19 callbacks suppressed [ 1642.675523][ T2204] attempt to access beyond end of device [ 1642.675523][ T2204] loop5: rw=2049, want=81920, limit=40427 [ 1642.982938][ T2211] incfs: Backing dir is not set, filesystem can't be mounted. [ 1642.990780][ T2211] incfs: mount failed -2 [ 1643.037058][ T2204] attempt to access beyond end of device [ 1643.037058][ T2204] loop5: rw=2049, want=53248, limit=40427 [ 1643.049929][ T2210] netlink: 96 bytes leftover after parsing attributes in process `syz.9.12176'. [ 1643.244120][ T2204] attempt to access beyond end of device [ 1643.244120][ T2204] loop5: rw=2049, want=59328, limit=40427 [ 1643.495985][T31199] attempt to access beyond end of device [ 1643.495985][T31199] loop5: rw=2049, want=45104, limit=40427 [ 1643.710300][ T2219] loop9: detected capacity change from 0 to 128 [ 1643.812248][ T2223] incfs: Backing dir is not set, filesystem can't be mounted. [ 1643.819981][ T2223] incfs: mount failed -2 [ 1644.314802][ T2227] loop5: detected capacity change from 0 to 2048 [ 1644.380627][ T2224] attempt to access beyond end of device [ 1644.380627][ T2224] loop9: rw=2049, want=129, limit=128 [ 1644.395191][ T2224] Buffer I/O error on dev loop9, logical block 128, lost async page write [ 1644.398098][ T2227] EXT4-fs (loop5): mounted filesystem without journal. Opts: min_batch_time=0x000000000000000d,mb_optimize_scan=0x0000000000000001,noblock_validity,,errors=continue. Quota mode: none. [ 1644.740751][ T2235] netlink: 96 bytes leftover after parsing attributes in process `syz.5.12182'. [ 1644.811576][ T2238] 9pnet: Insufficient options for proto=fd [ 1644.841848][ T2240] syz.5.12185[2240] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1644.841934][ T2240] syz.5.12185[2240] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1645.493618][ T2249] loop0: detected capacity change from 0 to 128 [ 1645.647678][ T2254] loop9: detected capacity change from 0 to 128 [ 1645.827415][ T2257] attempt to access beyond end of device [ 1645.827415][ T2257] loop9: rw=2049, want=129, limit=128 [ 1645.838803][ T2257] Buffer I/O error on dev loop9, logical block 128, lost async page write [ 1645.866095][ T2254] attempt to access beyond end of device [ 1645.866095][ T2254] loop9: rw=2049, want=129, limit=128 [ 1645.886270][ T2254] Buffer I/O error on dev loop9, logical block 128, lost async page write [ 1645.933492][ T2249] attempt to access beyond end of device [ 1645.933492][ T2249] loop0: rw=2049, want=129, limit=128 [ 1645.944795][ T2249] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 1646.011989][ T2263] loop9: detected capacity change from 0 to 128 [ 1646.816059][ T2263] attempt to access beyond end of device [ 1646.816059][ T2263] loop9: rw=2049, want=129, limit=128 [ 1646.983495][ T2263] Buffer I/O error on dev loop9, logical block 128, lost async page write [ 1646.992536][ T2269] attempt to access beyond end of device [ 1646.992536][ T2269] loop9: rw=2049, want=129, limit=128 [ 1647.003834][ T2269] Buffer I/O error on dev loop9, logical block 128, lost async page write [ 1647.080674][ T2273] netlink: 96 bytes leftover after parsing attributes in process `syz.0.12195'. [ 1647.122952][ T2275] 9pnet: Insufficient options for proto=fd [ 1647.389061][ T2279] loop0: detected capacity change from 0 to 128 [ 1648.258852][ T2288] xt_TCPMSS: Only works on TCP SYN packets [ 1648.403563][ T2293] loop2: detected capacity change from 0 to 1024 [ 1648.414079][ T2279] attempt to access beyond end of device [ 1648.414079][ T2279] loop0: rw=2049, want=129, limit=128 [ 1648.483452][ T2293] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 1648.502395][ T2293] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1648.521932][ T2293] EXT4-fs error (device loop2): ext4_free_blocks:6218: comm syz.2.12202: Freeing blocks not in datazone - block = 0, count = 4096 [ 1648.543682][ T2279] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 1648.561827][ T2293] EXT4-fs (loop2): 1 orphan inode deleted [ 1648.567968][ T2279] attempt to access beyond end of device [ 1648.567968][ T2279] loop0: rw=2049, want=129, limit=128 [ 1648.579617][ T2293] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1648.593523][ T2279] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 1648.635489][ T2299] loop9: detected capacity change from 0 to 128 [ 1648.668877][ T2300] incfs: Backing dir is not set, filesystem can't be mounted. [ 1648.676712][ T2300] incfs: mount failed -2 [ 1648.760539][ T2286] loop3: detected capacity change from 0 to 40427 [ 1648.846342][ T2286] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1648.964985][ T2286] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1649.037405][ T2299] attempt to access beyond end of device [ 1649.037405][ T2299] loop9: rw=2049, want=129, limit=128 [ 1649.068611][ T2299] Buffer I/O error on dev loop9, logical block 128, lost async page write [ 1649.118516][ T2302] loop0: detected capacity change from 0 to 40427 [ 1649.158504][ T2309] 9pnet: Insufficient options for proto=fd [ 1649.168179][ T2302] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1649.191141][ T2313] attempt to access beyond end of device [ 1649.191141][ T2313] loop3: rw=2049, want=79920, limit=40427 [ 1649.212368][ T2315] 9pnet: Insufficient options for proto=fd [ 1649.242383][ T2313] attempt to access beyond end of device [ 1649.242383][ T2313] loop3: rw=2049, want=81920, limit=40427 [ 1649.254410][ T2302] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1649.406242][ T2313] attempt to access beyond end of device [ 1649.406242][ T2313] loop3: rw=2049, want=51200, limit=40427 [ 1649.745269][ T2324] attempt to access beyond end of device [ 1649.745269][ T2324] loop0: rw=2049, want=81912, limit=40427 [ 1649.756713][ T2313] attempt to access beyond end of device [ 1649.756713][ T2313] loop3: rw=2049, want=53248, limit=40427 [ 1649.819975][ T2324] attempt to access beyond end of device [ 1649.819975][ T2324] loop0: rw=2049, want=81920, limit=40427 [ 1649.824352][ T2313] attempt to access beyond end of device [ 1649.824352][ T2313] loop3: rw=2049, want=59392, limit=40427 [ 1649.850213][ T2320] loop2: detected capacity change from 0 to 40427 [ 1649.893417][ T2320] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1649.970584][ T2320] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1650.330941][ T2336] loop0: detected capacity change from 0 to 128 [ 1650.478383][ T2337] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 1650.492497][ T2336] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 1650.576604][ T2334] loop3: detected capacity change from 0 to 40427 [ 1650.602546][ T2342] loop5: detected capacity change from 0 to 128 [ 1650.621362][ T2334] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1650.685202][ T2334] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1650.753096][ T2354] loop2: detected capacity change from 0 to 2048 [ 1650.773820][ T2357] 9pnet: Insufficient options for proto=fd [ 1650.877433][ T2362] loop0: detected capacity change from 0 to 128 [ 1650.888142][ T2354] EXT4-fs (loop2): mounted filesystem without journal. Opts: min_batch_time=0x000000000000000d,mb_optimize_scan=0x0000000000000001,noblock_validity,,errors=continue. Quota mode: none. [ 1651.128370][ T2362] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 1651.172198][ T2362] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 1651.182079][ T2374] xt_TCPMSS: Only works on TCP SYN packets [ 1651.367306][ T2378] loop0: detected capacity change from 0 to 128 [ 1651.485593][ T2380] incfs: Backing dir is not set, filesystem can't be mounted. [ 1651.493408][ T2380] incfs: mount failed -2 [ 1651.584077][ T2382] loop2: detected capacity change from 0 to 128 [ 1651.668843][ T2378] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 1651.696446][ T2384] loop5: detected capacity change from 0 to 128 [ 1651.961659][ T2384] Buffer I/O error on dev loop5, logical block 128, lost async page write [ 1651.980994][ T2384] Buffer I/O error on dev loop5, logical block 128, lost async page write [ 1652.191266][T19503] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1652.441101][T19503] usb 1-1: Using ep0 maxpacket: 16 [ 1652.561092][T19503] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1652.581035][T19503] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1652.603086][T19503] usb 1-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 1652.624075][T19503] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1652.646063][T19503] usb 1-1: config 0 descriptor?? [ 1652.990874][T19503] usbhid 1-1:0.0: can't add hid device: -71 [ 1652.998404][T19503] usbhid: probe of 1-1:0.0 failed with error -71 [ 1653.023736][T19503] usb 1-1: USB disconnect, device number 25 [ 1653.099293][ T2409] loop2: detected capacity change from 0 to 128 [ 1653.107813][ T2407] loop9: detected capacity change from 0 to 128 [ 1653.277895][ T2407] Buffer I/O error on dev loop9, logical block 128, lost async page write [ 1653.286927][ T2407] Buffer I/O error on dev loop9, logical block 128, lost async page write [ 1653.354823][ T2419] loop9: detected capacity change from 0 to 128 [ 1653.435463][ T2422] loop0: detected capacity change from 0 to 128 [ 1653.554139][ T2419] handle_bad_sector: 20 callbacks suppressed [ 1653.554159][ T2419] attempt to access beyond end of device [ 1653.554159][ T2419] loop9: rw=2049, want=129, limit=128 [ 1653.602080][ T2419] Buffer I/O error on dev loop9, logical block 128, lost async page write [ 1653.642042][ T2422] attempt to access beyond end of device [ 1653.642042][ T2422] loop0: rw=2049, want=129, limit=128 [ 1653.660214][ T2422] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 1653.669377][ T2424] attempt to access beyond end of device [ 1653.669377][ T2424] loop0: rw=2049, want=129, limit=128 [ 1653.680581][ T2424] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 1653.689525][ T2424] attempt to access beyond end of device [ 1653.689525][ T2424] loop0: rw=2049, want=129, limit=128 [ 1654.336762][ T2430] loop0: detected capacity change from 0 to 128 [ 1654.440053][ T2438] xt_TCPMSS: Only works on TCP SYN packets [ 1654.547567][ T2441] syz.2.12249[2441] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1654.547644][ T2441] syz.2.12249[2441] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1654.635545][ T2444] loop9: detected capacity change from 0 to 128 [ 1654.658187][ T2445] incfs: Backing dir is not set, filesystem can't be mounted. [ 1654.669821][ T2445] incfs: mount failed -2 [ 1654.749463][ T2447] netlink: 24 bytes leftover after parsing attributes in process `syz.9.12251'. [ 1654.832214][ T2430] attempt to access beyond end of device [ 1654.832214][ T2430] loop0: rw=2049, want=129, limit=128 [ 1654.867798][ T2450] loop9: detected capacity change from 0 to 128 [ 1655.137486][ T2453] attempt to access beyond end of device [ 1655.137486][ T2453] loop9: rw=2049, want=129, limit=128 [ 1655.194110][ T2450] attempt to access beyond end of device [ 1655.194110][ T2450] loop9: rw=2049, want=129, limit=128 [ 1655.230088][ T2450] attempt to access beyond end of device [ 1655.230088][ T2450] loop9: rw=2049, want=129, limit=128 [ 1655.598802][ T2474] loop9: detected capacity change from 0 to 128 [ 1655.838555][ T2478] 9pnet: Insufficient options for proto=fd [ 1655.877816][ T2480] bridge0: port 3(vlan2) entered blocking state [ 1655.884429][ T2480] bridge0: port 3(vlan2) entered disabled state [ 1656.040249][ T2490] loop2: detected capacity change from 0 to 512 [ 1656.059803][ T2490] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1656.069200][ T2490] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 1656.127138][ T2493] syz.5.12270[2493] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1656.127216][ T2493] syz.5.12270[2493] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1656.142713][ T2490] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.12269: casefold flag without casefold feature [ 1656.168132][ T2490] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.12269: couldn't read orphan inode 15 (err -117) [ 1656.181499][ T2490] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,jqfmt=vfsv0,,errors=continue. Quota mode: writeback. [ 1656.216758][ T2496] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12271'. [ 1656.224400][ T2490] overlayfs: failed to resolve './file0': -2 [ 1656.253220][ T2500] loop3: detected capacity change from 0 to 128 [ 1656.337303][ T2503] loop2: detected capacity change from 0 to 128 [ 1656.398064][ T2501] attempt to access beyond end of device [ 1656.398064][ T2501] loop3: rw=2049, want=129, limit=128 [ 1656.409064][ T2501] buffer_io_error: 5 callbacks suppressed [ 1656.415164][ T2501] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 1656.429584][ T2501] attempt to access beyond end of device [ 1656.429584][ T2501] loop3: rw=2049, want=129, limit=128 [ 1656.440666][ T2501] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 1656.458343][ T2503] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 1656.515515][ T2506] 9pnet: Insufficient options for proto=fd [ 1656.703265][ T2513] netlink: 96 bytes leftover after parsing attributes in process `syz.3.12275'. [ 1657.093084][ T2525] xt_TCPMSS: Only works on TCP SYN packets [ 1657.249272][ T2527] incfs: Backing dir is not set, filesystem can't be mounted. [ 1657.272278][ T2527] incfs: mount failed -2 [ 1657.492059][ T2535] loop2: detected capacity change from 0 to 128 [ 1657.503624][ T2537] 9pnet: Insufficient options for proto=fd [ 1657.522453][ T2539] loop9: detected capacity change from 0 to 128 [ 1657.742099][ T2535] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 1657.758639][ T2542] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 1657.781173][ T2539] Buffer I/O error on dev loop9, logical block 128, lost async page write [ 1657.798740][ T2542] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 1657.897014][ T2547] loop2: detected capacity change from 0 to 128 [ 1657.916031][ T2549] syz.9.12290[2549] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1657.916106][ T2549] syz.9.12290[2549] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1657.941113][ T2551] loop9: detected capacity change from 0 to 128 [ 1658.109729][ T2547] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 1658.126566][ T2552] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 1658.159649][ T2552] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 1658.472036][ T2555] loop9: detected capacity change from 0 to 40427 [ 1658.494320][ T2555] F2FS-fs (loop9): Found nat_bits in checkpoint [ 1658.548336][ T2555] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 1658.823671][ T2555] handle_bad_sector: 8 callbacks suppressed [ 1658.823692][ T2555] attempt to access beyond end of device [ 1658.823692][ T2555] loop9: rw=2049, want=81920, limit=40427 [ 1658.901743][ T2555] attempt to access beyond end of device [ 1658.901743][ T2555] loop9: rw=2049, want=53248, limit=40427 [ 1658.927930][ T2576] attempt to access beyond end of device [ 1658.927930][ T2576] loop9: rw=524288, want=78080, limit=40427 [ 1658.958132][ T2576] attempt to access beyond end of device [ 1658.958132][ T2576] loop9: rw=0, want=77832, limit=40427 [ 1658.995855][ T2555] attempt to access beyond end of device [ 1658.995855][ T2555] loop9: rw=2049, want=58432, limit=40427 [ 1659.040686][ T2576] attempt to access beyond end of device [ 1659.040686][ T2576] loop9: rw=0, want=77832, limit=40427 [ 1659.089483][ T2576] attempt to access beyond end of device [ 1659.089483][ T2576] loop9: rw=0, want=77832, limit=40427 [ 1659.174802][ T2576] attempt to access beyond end of device [ 1659.174802][ T2576] loop9: rw=0, want=77832, limit=40427 [ 1659.228361][ T2580] loop0: detected capacity change from 0 to 128 [ 1659.239523][ T2576] attempt to access beyond end of device [ 1659.239523][ T2576] loop9: rw=0, want=77832, limit=40427 [ 1659.346715][ T2576] attempt to access beyond end of device [ 1659.346715][ T2576] loop9: rw=0, want=77832, limit=40427 [ 1659.450929][ T2587] syz.3.12303[2587] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1659.451009][ T2587] syz.3.12303[2587] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1660.177034][ T2602] bridge0: port 3(vlan2) entered blocking state [ 1660.183420][ T2602] bridge0: port 3(vlan2) entered disabled state [ 1660.278348][ T2606] loop5: detected capacity change from 0 to 512 [ 1660.318222][ T2606] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1660.325599][ T2606] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 1660.338845][ T2606] EXT4-fs error (device loop5): ext4_orphan_get:1401: inode #15: comm syz.5.12310: casefold flag without casefold feature [ 1660.354234][ T2606] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.12310: couldn't read orphan inode 15 (err -117) [ 1660.370798][ T2606] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption,jqfmt=vfsv0,,errors=continue. Quota mode: writeback. [ 1660.421149][ T2606] overlayfs: failed to resolve './file0': -2 [ 1660.526102][ T2616] loop3: detected capacity change from 0 to 128 [ 1660.561283][ T2617] netlink: 96 bytes leftover after parsing attributes in process `syz.5.12312'. [ 1660.666304][ T2619] loop3: detected capacity change from 0 to 128 [ 1660.698481][ T2621] syz.5.12316[2621] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1660.698559][ T2621] syz.5.12316[2621] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1660.863224][ T2623] loop0: detected capacity change from 0 to 512 [ 1660.897970][ T2623] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1660.904807][ T2623] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 1660.926589][ T2623] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #15: comm syz.0.12317: casefold flag without casefold feature [ 1660.939632][ T2623] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.12317: couldn't read orphan inode 15 (err -117) [ 1660.952007][ T2623] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,jqfmt=vfsv0,,errors=continue. Quota mode: writeback. [ 1661.155279][ T2636] loop2: detected capacity change from 0 to 128 [ 1661.546844][ T2636] buffer_io_error: 2 callbacks suppressed [ 1661.546859][ T2636] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 1661.652582][ T2645] loop2: detected capacity change from 0 to 2048 [ 1661.663974][ T2648] syz.5.12327[2648] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1661.664050][ T2648] syz.5.12327[2648] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1661.685302][ T2650] loop5: detected capacity change from 0 to 128 [ 1661.743522][ T2652] loop5: detected capacity change from 0 to 128 [ 1661.858205][ T2657] netlink: 96 bytes leftover after parsing attributes in process `syz.2.12331'. [ 1661.991404][ T2652] Buffer I/O error on dev loop5, logical block 128, lost async page write [ 1661.994940][ T2661] loop3: detected capacity change from 0 to 128 [ 1662.065603][ T2665] loop5: detected capacity change from 0 to 128 [ 1662.245243][ T2665] Buffer I/O error on dev loop5, logical block 128, lost async page write [ 1662.368464][ T2663] loop2: detected capacity change from 0 to 40427 [ 1662.393127][ T2661] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 1662.476434][ T2666] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 1662.513247][ T2663] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1662.545339][ T2663] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1662.575915][ T2678] syz.3.12338[2678] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1662.577576][ T2678] syz.3.12338[2678] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1662.879065][ T2688] xt_TCPMSS: Only works on TCP SYN packets [ 1663.037818][ T2696] loop3: detected capacity change from 0 to 128 [ 1663.165042][ T2691] incfs: Backing dir is not set, filesystem can't be mounted. [ 1663.200107][ T2691] incfs: mount failed -2 [ 1663.239607][ T2696] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 1663.320280][ T2702] loop3: detected capacity change from 0 to 128 [ 1663.498246][ T2702] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 1663.899863][ T2711] loop0: detected capacity change from 0 to 128 [ 1663.972816][T29966] handle_bad_sector: 1770 callbacks suppressed [ 1663.972838][T29966] attempt to access beyond end of device [ 1663.972838][T29966] loop2: rw=2049, want=45104, limit=40427 [ 1664.202660][ T2715] loop2: detected capacity change from 0 to 128 [ 1664.240896][ T2712] attempt to access beyond end of device [ 1664.240896][ T2712] loop0: rw=2049, want=129, limit=128 [ 1664.262716][ T2712] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 1664.290622][ T2711] attempt to access beyond end of device [ 1664.290622][ T2711] loop0: rw=2049, want=129, limit=128 [ 1664.322397][ T2711] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 1664.335874][ T2711] attempt to access beyond end of device [ 1664.335874][ T2711] loop0: rw=2049, want=129, limit=128 [ 1664.720645][ T2711] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 1664.994429][ T2731] loop0: detected capacity change from 0 to 128 [ 1665.048595][ T2715] attempt to access beyond end of device [ 1665.048595][ T2715] loop2: rw=2049, want=129, limit=128 [ 1665.060110][ T2715] attempt to access beyond end of device [ 1665.060110][ T2715] loop2: rw=2049, want=129, limit=128 [ 1665.104824][ T3706] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 1665.209355][ T2731] attempt to access beyond end of device [ 1665.209355][ T2731] loop0: rw=2049, want=129, limit=128 [ 1665.220852][ T2740] attempt to access beyond end of device [ 1665.220852][ T2740] loop0: rw=2049, want=129, limit=128 [ 1665.251457][ T2742] loop2: detected capacity change from 0 to 128 [ 1665.542782][ T2747] loop9: detected capacity change from 0 to 128 [ 1665.684592][ T3706] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1665.697735][ T3706] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1665.711566][ T3706] usb 6-1: New USB device found, idVendor=06a3, idProduct=0ccb, bcdDevice= 0.00 [ 1665.721219][ T3706] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1665.732072][ T3706] usb 6-1: config 0 descriptor?? [ 1665.740560][ T2742] attempt to access beyond end of device [ 1665.740560][ T2742] loop2: rw=2049, want=129, limit=128 [ 1665.814259][ T2747] attempt to access beyond end of device [ 1665.814259][ T2747] loop9: rw=2049, want=129, limit=128 [ 1666.029686][ T2758] loop2: detected capacity change from 0 to 40427 [ 1666.096371][ T3706] usbhid 6-1:0.0: can't add hid device: -71 [ 1666.102347][ T3706] usbhid: probe of 6-1:0.0 failed with error -71 [ 1666.110601][ T3706] usb 6-1: USB disconnect, device number 59 [ 1666.119509][ T2758] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1666.121085][ T2768] loop9: detected capacity change from 0 to 128 [ 1666.420940][ T2758] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1666.642124][ T2768] buffer_io_error: 8 callbacks suppressed [ 1666.642142][ T2768] Buffer I/O error on dev loop9, logical block 128, lost async page write [ 1666.656894][ T2773] Buffer I/O error on dev loop9, logical block 128, lost async page write [ 1666.665983][ T2773] Buffer I/O error on dev loop9, logical block 128, lost async page write [ 1667.028126][ T2783] loop3: detected capacity change from 0 to 128 [ 1667.046612][ T2785] bridge0: port 3(vlan2) entered blocking state [ 1667.076512][ T2785] bridge0: port 3(vlan2) entered disabled state [ 1667.147879][ T2788] loop5: detected capacity change from 0 to 128 [ 1667.214518][ T2783] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 1667.223629][ T2783] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 1667.356947][ T2788] Buffer I/O error on dev loop5, logical block 128, lost async page write [ 1667.382696][ T2788] Buffer I/O error on dev loop5, logical block 128, lost async page write [ 1667.392967][ T2796] incfs: Backing dir is not set, filesystem can't be mounted. [ 1667.400529][ T2796] incfs: mount failed -2 [ 1667.523285][ T2805] loop5: detected capacity change from 0 to 128 [ 1667.750390][ T2806] Buffer I/O error on dev loop5, logical block 128, lost async page write [ 1667.759379][ T2805] Buffer I/O error on dev loop5, logical block 128, lost async page write [ 1667.768349][ T2805] Buffer I/O error on dev loop5, logical block 128, lost async page write [ 1668.613006][T19503] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1668.795687][ T2822] bridge0: port 3(vlan2) entered blocking state [ 1668.802062][ T2822] bridge0: port 3(vlan2) entered disabled state [ 1668.857287][ T2824] loop2: detected capacity change from 0 to 128 [ 1668.912961][T19503] usb 4-1: Using ep0 maxpacket: 16 [ 1668.957184][ T2826] loop5: detected capacity change from 0 to 128 [ 1669.033203][T19503] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1669.050376][T19503] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1669.060583][T19503] usb 4-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 1669.069880][T19503] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1669.082603][T19503] usb 4-1: config 0 descriptor?? [ 1669.133452][ T2824] handle_bad_sector: 3062 callbacks suppressed [ 1669.133472][ T2824] attempt to access beyond end of device [ 1669.133472][ T2824] loop2: rw=2049, want=129, limit=128 [ 1669.219311][ T2830] loop2: detected capacity change from 0 to 128 [ 1669.272593][ T2827] attempt to access beyond end of device [ 1669.272593][ T2827] loop5: rw=2049, want=129, limit=128 [ 1669.283967][ T2826] attempt to access beyond end of device [ 1669.283967][ T2826] loop5: rw=2049, want=129, limit=128 [ 1669.311225][ T2826] attempt to access beyond end of device [ 1669.311225][ T2826] loop5: rw=2049, want=129, limit=128 [ 1669.363608][ T2831] attempt to access beyond end of device [ 1669.363608][ T2831] loop2: rw=2049, want=129, limit=128 [ 1669.390521][ T2831] attempt to access beyond end of device [ 1669.390521][ T2831] loop2: rw=2049, want=129, limit=128 [ 1669.412072][ T2838] loop5: detected capacity change from 0 to 128 [ 1669.412724][T19503] usbhid 4-1:0.0: can't add hid device: -71 [ 1669.430742][T19503] usbhid: probe of 4-1:0.0 failed with error -71 [ 1669.443591][T19503] usb 4-1: USB disconnect, device number 49 [ 1669.467394][ T2840] 9pnet: Could not find request transport: fd0x0000000000000003 [ 1669.503680][ T2842] bridge0: port 3(vlan2) entered blocking state [ 1669.510135][ T2842] bridge0: port 3(vlan2) entered disabled state [ 1672.426777][ T2870] loop9: detected capacity change from 0 to 128 [ 1672.550203][ T2874] attempt to access beyond end of device [ 1672.550203][ T2874] loop9: rw=2049, want=129, limit=128 [ 1672.561265][ T2874] buffer_io_error: 6 callbacks suppressed [ 1672.561284][ T2874] Buffer I/O error on dev loop9, logical block 128, lost async page write [ 1672.577044][ T2874] attempt to access beyond end of device [ 1672.577044][ T2874] loop9: rw=2049, want=129, limit=128 [ 1672.594485][ T2874] Buffer I/O error on dev loop9, logical block 128, lost async page write [ 1672.694276][ T2880] loop9: detected capacity change from 0 to 128 [ 1672.850250][ T2880] attempt to access beyond end of device [ 1672.850250][ T2880] loop9: rw=2049, want=129, limit=128 [ 1672.861420][ T2880] Buffer I/O error on dev loop9, logical block 128, lost async page write [ 1672.870144][ T2882] attempt to access beyond end of device [ 1672.870144][ T2882] loop9: rw=2049, want=129, limit=128 [ 1672.881540][ T2882] Buffer I/O error on dev loop9, logical block 128, lost async page write [ 1672.890461][ T2882] Buffer I/O error on dev loop9, logical block 128, lost async page write [ 1673.270606][ T3706] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1673.289270][ T2887] syz.2.12409[2887] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1673.289347][ T2887] syz.2.12409[2887] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1675.416940][ T2907] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12416'. [ 1675.424350][ T2909] loop3: detected capacity change from 0 to 128 [ 1675.519386][ T2915] loop0: detected capacity change from 0 to 128 [ 1675.741391][ T2917] handle_bad_sector: 1 callbacks suppressed [ 1675.741413][ T2917] attempt to access beyond end of device [ 1675.741413][ T2917] loop3: rw=2049, want=129, limit=128 [ 1675.821276][ T2917] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 1675.852111][ T2920] attempt to access beyond end of device [ 1675.852111][ T2920] loop0: rw=2049, want=129, limit=128 [ 1675.868983][ T2917] attempt to access beyond end of device [ 1675.868983][ T2917] loop3: rw=2049, want=129, limit=128 [ 1675.895984][ T2920] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 1675.923476][ T2917] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 1675.935380][ T2915] attempt to access beyond end of device [ 1675.935380][ T2915] loop0: rw=2049, want=129, limit=128 [ 1675.975552][ T2915] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 1676.003719][ T2915] attempt to access beyond end of device [ 1676.003719][ T2915] loop0: rw=2049, want=129, limit=128 [ 1676.066803][ T2915] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 1676.126489][ T2924] netlink: 96 bytes leftover after parsing attributes in process `syz.3.12420'. [ 1677.194466][ T2936] loop2: detected capacity change from 0 to 128 [ 1677.978611][ T2943] attempt to access beyond end of device [ 1677.978611][ T2943] loop2: rw=2049, want=129, limit=128 [ 1677.989731][ T2943] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 1677.998686][ T2936] attempt to access beyond end of device [ 1677.998686][ T2936] loop2: rw=2049, want=129, limit=128 [ 1678.009686][ T2936] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 1678.018826][ T2936] attempt to access beyond end of device [ 1678.018826][ T2936] loop2: rw=2049, want=129, limit=128 [ 1678.032137][ T2936] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 1678.120120][ T2948] loop2: detected capacity change from 0 to 512 [ 1678.238735][ T2948] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1678.245814][ T2948] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 1678.875856][ T2948] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.12427: casefold flag without casefold feature [ 1679.015091][ T2948] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.12427: couldn't read orphan inode 15 (err -117) [ 1679.289508][ T2952] loop5: detected capacity change from 0 to 40427 [ 1679.308102][ T2948] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,jqfmt=vfsv0,,errors=continue. Quota mode: writeback. [ 1679.345493][ T2948] overlayfs: missing 'lowerdir' [ 1679.351184][ T2966] loop3: detected capacity change from 0 to 128 [ 1679.367507][ T2952] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1679.390227][ T2952] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1679.530773][ T2974] attempt to access beyond end of device [ 1679.530773][ T2974] loop3: rw=2049, want=129, limit=128 [ 1679.541901][ T2974] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 1679.551369][ T2966] attempt to access beyond end of device [ 1679.551369][ T2966] loop3: rw=2049, want=129, limit=128 [ 1679.567578][ T2966] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 1679.776596][ T20] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1679.911802][ T2983] syz.0.12437[2983] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1679.911857][ T2983] syz.0.12437[2983] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1680.146633][ T2986] loop0: detected capacity change from 0 to 128 [ 1680.319032][ T2986] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 1680.327887][ T2987] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 1680.336833][ T2987] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 1680.337264][ T20] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1680.370876][ T20] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1680.386090][ T2989] loop5: detected capacity change from 0 to 128 [ 1680.392579][ T20] usb 3-1: New USB device found, idVendor=06a3, idProduct=0ccb, bcdDevice= 0.00 [ 1680.402073][ T20] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1680.415472][ T20] usb 3-1: config 0 descriptor?? [ 1680.524115][ T2989] Buffer I/O error on dev loop5, logical block 128, lost async page write [ 1680.691849][ T2993] loop0: detected capacity change from 0 to 40427 [ 1680.756977][ T20] usbhid 3-1:0.0: can't add hid device: -71 [ 1680.763294][ T20] usbhid: probe of 3-1:0.0 failed with error -71 [ 1680.782315][ T20] usb 3-1: USB disconnect, device number 54 [ 1680.849106][ T2993] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1680.884716][ T2993] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1681.326842][ T2993] handle_bad_sector: 2308 callbacks suppressed [ 1681.326864][ T2993] attempt to access beyond end of device [ 1681.326864][ T2993] loop0: rw=2049, want=81920, limit=40427 [ 1681.355338][ T2993] attempt to access beyond end of device [ 1681.355338][ T2993] loop0: rw=2049, want=53056, limit=40427 [ 1681.368862][ T2993] attempt to access beyond end of device [ 1681.368862][ T2993] loop0: rw=2049, want=53248, limit=40427 [ 1681.396447][ T2993] attempt to access beyond end of device [ 1681.396447][ T2993] loop0: rw=2049, want=64488, limit=40427 [ 1681.400549][ T3019] xt_TCPMSS: Only works on TCP SYN packets [ 1681.410337][ T2993] attempt to access beyond end of device [ 1681.410337][ T2993] loop0: rw=2049, want=64552, limit=40427 [ 1681.518525][ T2993] attempt to access beyond end of device [ 1681.518525][ T2993] loop0: rw=524288, want=78080, limit=40427 [ 1681.530289][ T2993] attempt to access beyond end of device [ 1681.530289][ T2993] loop0: rw=0, want=77832, limit=40427 [ 1681.541798][ T2993] attempt to access beyond end of device [ 1681.541798][ T2993] loop0: rw=0, want=77832, limit=40427 [ 1681.553229][ T2993] attempt to access beyond end of device [ 1681.553229][ T2993] loop0: rw=0, want=77832, limit=40427 [ 1681.576093][ T2993] attempt to access beyond end of device [ 1681.576093][ T2993] loop0: rw=0, want=77832, limit=40427 [ 1681.600312][ T3022] loop3: detected capacity change from 0 to 128 [ 1681.752487][ T3025] loop9: detected capacity change from 0 to 128 [ 1682.022247][ T3026] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 1682.296286][ T3023] incfs: Backing dir is not set, filesystem can't be mounted. [ 1682.302028][ T3036] loop9: detected capacity change from 0 to 128 [ 1682.303889][ T3023] incfs: mount failed -2 [ 1684.194425][ T3050] 9pnet: Insufficient options for proto=fd [ 1684.215768][ T3052] overlayfs: missing 'lowerdir' [ 1684.229097][ T3057] loop9: detected capacity change from 0 to 128 [ 1684.275358][ T3059] loop2: detected capacity change from 0 to 128 [ 1684.367334][ T3057] buffer_io_error: 6 callbacks suppressed [ 1684.367354][ T3057] Buffer I/O error on dev loop9, logical block 128, lost async page write [ 1684.382415][ T3057] Buffer I/O error on dev loop9, logical block 128, lost async page write [ 1684.575078][T11899] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1684.799327][ T3059] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 1684.808229][ T3069] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 1684.817173][ T3069] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 1684.846397][ T3074] loop9: detected capacity change from 0 to 128 [ 1684.946501][ T3074] Buffer I/O error on dev loop9, logical block 128, lost async page write [ 1684.965002][T11899] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1684.975978][T11899] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1684.988815][T11899] usb 4-1: New USB device found, idVendor=06a3, idProduct=0ccb, bcdDevice= 0.00 [ 1684.997972][T11899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1685.012586][T11899] usb 4-1: config 0 descriptor?? [ 1685.013385][ T3079] loop9: detected capacity change from 0 to 128 [ 1685.054159][ T3081] xt_TCPMSS: Only works on TCP SYN packets [ 1685.163779][ T3079] Buffer I/O error on dev loop9, logical block 128, lost async page write [ 1685.172727][ T3082] Buffer I/O error on dev loop9, logical block 128, lost async page write [ 1685.188926][ T3079] Buffer I/O error on dev loop9, logical block 128, lost async page write [ 1685.218887][ T3084] incfs: Backing dir is not set, filesystem can't be mounted. [ 1685.226538][ T3084] incfs: mount failed -2 [ 1685.424758][T11899] usbhid 4-1:0.0: can't add hid device: -71 [ 1685.430934][T11899] usbhid: probe of 4-1:0.0 failed with error -71 [ 1685.447247][T11899] usb 4-1: USB disconnect, device number 50 [ 1686.691959][ T3097] 9pnet: Insufficient options for proto=fd [ 1686.941642][ T3105] loop3: detected capacity change from 0 to 512 [ 1686.980949][ T3105] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1687.001081][ T3105] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 1687.019321][ T3105] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.12477: casefold flag without casefold feature [ 1687.033349][ T3105] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.12477: couldn't read orphan inode 15 (err -117) [ 1687.051372][ T3105] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,jqfmt=vfsv0,,errors=continue. Quota mode: writeback. [ 1687.127435][ T3105] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1687.136219][ T3105] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1687.311553][ T3116] loop9: detected capacity change from 0 to 128 [ 1687.331408][ T3118] loop2: detected capacity change from 0 to 128 [ 1687.387802][ T3120] loop5: detected capacity change from 0 to 128 [ 1687.537587][ T3116] handle_bad_sector: 17 callbacks suppressed [ 1687.537609][ T3116] attempt to access beyond end of device [ 1687.537609][ T3116] loop9: rw=2049, want=129, limit=128 [ 1687.580192][ T3116] Buffer I/O error on dev loop9, logical block 128, lost async page write [ 1687.700688][ T3120] attempt to access beyond end of device [ 1687.700688][ T3120] loop5: rw=2049, want=129, limit=128 [ 1687.715996][ T3121] attempt to access beyond end of device [ 1687.715996][ T3121] loop2: rw=2049, want=129, limit=128 [ 1687.974189][ T3122] attempt to access beyond end of device [ 1687.974189][ T3122] loop5: rw=2049, want=129, limit=128 [ 1688.014021][ T3129] xt_TCPMSS: Only works on TCP SYN packets [ 1688.022161][ T3122] attempt to access beyond end of device [ 1688.022161][ T3122] loop5: rw=2049, want=129, limit=128 [ 1688.037530][ T3121] attempt to access beyond end of device [ 1688.037530][ T3121] loop2: rw=2049, want=129, limit=128 [ 1688.183390][ T3133] incfs: Backing dir is not set, filesystem can't be mounted. [ 1688.191022][ T3133] incfs: mount failed -2 [ 1689.471375][ T3142] loop0: detected capacity change from 0 to 1024 [ 1689.494609][ T3145] loop3: detected capacity change from 0 to 128 [ 1689.502036][ T3144] netlink: 96 bytes leftover after parsing attributes in process `syz.9.12489'. [ 1689.594579][ T3142] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 1689.601402][ T3148] bridge0: port 3(vlan2) entered blocking state [ 1689.613110][ T3142] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1689.620669][ T3148] bridge0: port 3(vlan2) entered disabled state [ 1689.628167][ T3142] EXT4-fs error (device loop0): ext4_free_blocks:6218: comm syz.0.12488: Freeing blocks not in datazone - block = 0, count = 4096 [ 1689.663564][ T3142] EXT4-fs (loop0): 1 orphan inode deleted [ 1689.671847][ T3142] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1689.695155][ T3145] attempt to access beyond end of device [ 1689.695155][ T3145] loop3: rw=2049, want=129, limit=128 [ 1689.711760][ T3145] buffer_io_error: 5 callbacks suppressed [ 1689.711776][ T3145] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 1691.573125][ T3162] loop0: detected capacity change from 0 to 128 [ 1691.585486][ T3166] loop3: detected capacity change from 0 to 128 [ 1691.831660][ T3162] attempt to access beyond end of device [ 1691.831660][ T3162] loop0: rw=2049, want=129, limit=128 [ 1691.844455][ T3166] attempt to access beyond end of device [ 1691.844455][ T3166] loop3: rw=2049, want=129, limit=128 [ 1691.855609][ T3162] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 1691.864550][ T3166] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 1691.874326][ T3166] attempt to access beyond end of device [ 1691.874326][ T3166] loop3: rw=2049, want=129, limit=128 [ 1691.898699][ T3166] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 1692.691169][ T3183] netlink: 96 bytes leftover after parsing attributes in process `syz.3.12503'. [ 1693.093283][ T3190] loop9: detected capacity change from 0 to 128 [ 1693.460155][ T3190] attempt to access beyond end of device [ 1693.460155][ T3190] loop9: rw=2049, want=129, limit=128 [ 1693.486942][ T3190] Buffer I/O error on dev loop9, logical block 128, lost async page write [ 1693.562685][ T3196] xt_time: unknown flags 0xc [ 1693.800697][ T3184] incfs: Backing dir is not set, filesystem can't be mounted. [ 1693.808233][ T3184] incfs: mount failed -2 [ 1693.913469][ T3202] loop9: detected capacity change from 0 to 512 [ 1694.006220][ T3194] loop3: detected capacity change from 0 to 40427 [ 1694.014972][ T3202] EXT4-fs (loop9): Test dummy encryption mode enabled [ 1694.030377][ T3202] EXT4-fs (loop9): Quota format mount options ignored when QUOTA feature is enabled [ 1694.152361][ T3202] EXT4-fs error (device loop9): ext4_orphan_get:1401: inode #15: comm syz.9.12511: casefold flag without casefold feature [ 1694.171567][ T3194] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1694.198330][ T3202] EXT4-fs error (device loop9): ext4_orphan_get:1406: comm syz.9.12511: couldn't read orphan inode 15 (err -117) [ 1694.232938][ T3202] EXT4-fs (loop9): mounted filesystem without journal. Opts: test_dummy_encryption,jqfmt=vfsv0,,errors=continue. Quota mode: writeback. [ 1694.285217][ T3194] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1694.312644][ T3202] overlayfs: missing 'lowerdir' [ 1694.841451][T28194] attempt to access beyond end of device [ 1694.841451][T28194] loop3: rw=2049, want=45104, limit=40427 [ 1694.947399][ T3215] loop9: detected capacity change from 0 to 128 [ 1695.141862][ T3215] attempt to access beyond end of device [ 1695.141862][ T3215] loop9: rw=2049, want=129, limit=128 [ 1695.152847][ T3215] Buffer I/O error on dev loop9, logical block 128, lost async page write [ 1695.301326][ T3222] netlink: 96 bytes leftover after parsing attributes in process `syz.9.12516'. [ 1695.541455][ T3229] netlink: 96 bytes leftover after parsing attributes in process `syz.0.12519'. [ 1696.508707][ T3237] loop9: detected capacity change from 0 to 128 [ 1696.529191][ T3221] incfs: Backing dir is not set, filesystem can't be mounted. [ 1696.536699][ T3221] incfs: mount failed -2 [ 1696.787333][ T3237] attempt to access beyond end of device [ 1696.787333][ T3237] loop9: rw=2049, want=129, limit=128 [ 1696.799201][ T3237] Buffer I/O error on dev loop9, logical block 128, lost async page write [ 1696.808114][ T3237] attempt to access beyond end of device [ 1696.808114][ T3237] loop9: rw=2049, want=129, limit=128 [ 1696.821250][ T3237] Buffer I/O error on dev loop9, logical block 128, lost async page write [ 1697.990517][ T3249] incfs: Backing dir is not set, filesystem can't be mounted. [ 1697.998039][ T3249] incfs: mount failed -2 [ 1698.378044][ T3255] netlink: 96 bytes leftover after parsing attributes in process `syz.9.12526'. [ 1698.705301][ T3254] loop5: detected capacity change from 0 to 128 [ 1698.713251][ T3262] loop0: detected capacity change from 0 to 128 [ 1698.744603][ T3266] loop2: detected capacity change from 0 to 512 [ 1698.767931][T22365] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1698.819387][ T3266] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1698.826325][ T3266] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 1698.839240][ T3266] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.12532: casefold flag without casefold feature [ 1698.852852][ T3266] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.12532: couldn't read orphan inode 15 (err -117) [ 1698.861175][ T3267] attempt to access beyond end of device [ 1698.861175][ T3267] loop0: rw=2049, want=129, limit=128 [ 1698.875936][ T3267] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 1698.876012][ T3266] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,jqfmt=vfsv0,,errors=continue. Quota mode: writeback. [ 1698.884885][ T3262] attempt to access beyond end of device [ 1698.884885][ T3262] loop0: rw=2049, want=129, limit=128 [ 1698.916086][ T3262] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 1698.926561][ T3267] attempt to access beyond end of device [ 1698.926561][ T3267] loop0: rw=2049, want=129, limit=128 [ 1698.941359][ T3267] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 1698.946225][ T3266] overlayfs: missing 'lowerdir' [ 1699.006214][ T3254] attempt to access beyond end of device [ 1699.006214][ T3254] loop5: rw=2049, want=129, limit=128 [ 1699.019565][ T3254] Buffer I/O error on dev loop5, logical block 128, lost async page write [ 1699.021563][ T3274] bridge0: port 3(vlan2) entered blocking state [ 1699.036464][ T3274] bridge0: port 3(vlan2) entered disabled state [ 1699.201044][T22365] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1699.220329][T22365] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1699.234540][T22365] usb 4-1: New USB device found, idVendor=06a3, idProduct=0ccb, bcdDevice= 0.00 [ 1699.251050][T22365] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1699.869844][T22365] usb 4-1: config 0 descriptor?? [ 1699.907593][T22365] usb 4-1: can't set config #0, error -71 [ 1699.926594][T22365] usb 4-1: USB disconnect, device number 51 [ 1700.028889][ T3295] incfs: Backing dir is not set, filesystem can't be mounted. [ 1700.036569][ T3295] incfs: mount failed -2 [ 1700.531988][ T3303] loop3: detected capacity change from 0 to 128 [ 1701.041706][ T3304] attempt to access beyond end of device [ 1701.041706][ T3304] loop3: rw=2049, want=129, limit=128 [ 1701.069532][ T3304] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 1701.091367][ T3303] attempt to access beyond end of device [ 1701.091367][ T3303] loop3: rw=2049, want=129, limit=128 [ 1701.132296][ T3303] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 1701.154339][ T3303] attempt to access beyond end of device [ 1701.154339][ T3303] loop3: rw=2049, want=129, limit=128 [ 1701.190942][ T3303] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 1701.397688][ T3311] loop5: detected capacity change from 0 to 128 [ 1701.495121][ T3318] incfs: Backing dir is not set, filesystem can't be mounted. [ 1701.502830][ T3318] incfs: mount failed -2 [ 1702.556051][ T3706] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1702.580497][ T3311] attempt to access beyond end of device [ 1702.580497][ T3311] loop5: rw=2049, want=129, limit=128 [ 1702.592904][ T3311] Buffer I/O error on dev loop5, logical block 128, lost async page write [ 1702.709096][ T3334] loop5: detected capacity change from 0 to 128 [ 1703.044305][ T3336] attempt to access beyond end of device [ 1703.044305][ T3336] loop5: rw=2049, want=129, limit=128 [ 1703.055531][ T3336] Buffer I/O error on dev loop5, logical block 128, lost async page write [ 1703.064278][ T3334] attempt to access beyond end of device [ 1703.064278][ T3334] loop5: rw=2049, want=129, limit=128 [ 1703.075363][ T3706] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1703.086839][ T3334] Buffer I/O error on dev loop5, logical block 128, lost async page write [ 1703.095401][ T3706] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1703.108883][ T3334] Buffer I/O error on dev loop5, logical block 128, lost async page write [ 1703.117463][ T3706] usb 3-1: New USB device found, idVendor=06a3, idProduct=0ccb, bcdDevice= 0.00 [ 1703.127812][ T3706] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1703.143469][ T3706] usb 3-1: config 0 descriptor?? [ 1703.214070][ T3339] loop5: detected capacity change from 0 to 128 [ 1703.405683][ T3342] Buffer I/O error on dev loop5, logical block 128, lost async page write [ 1703.651348][ T3346] xt_TCPMSS: Only works on TCP SYN packets [ 1703.730556][ T3342] Buffer I/O error on dev loop5, logical block 128, lost async page write [ 1703.775452][ T3706] usbhid 3-1:0.0: can't add hid device: -71 [ 1703.781454][ T3706] usbhid: probe of 3-1:0.0 failed with error -71 [ 1703.796831][ T3706] usb 3-1: USB disconnect, device number 55 [ 1703.840635][ T3355] incfs: Backing dir is not set, filesystem can't be mounted. [ 1703.874148][ T3355] incfs: mount failed -2 [ 1704.900297][ T3385] 9pnet: Insufficient options for proto=fd [ 1705.074821][T18706] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1705.117842][ T30] audit: type=1326 audit(1763616961.958:16914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3401 comm="syz.9.12582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd72abdc749 code=0x7ffc0000 [ 1705.144729][ T3706] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 1705.167727][ T30] audit: type=1326 audit(1763616961.978:16915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3401 comm="syz.9.12582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7fd72abdc749 code=0x7ffc0000 [ 1705.192174][ T30] audit: type=1326 audit(1763616961.978:16916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3401 comm="syz.9.12582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd72abdc749 code=0x7ffc0000 [ 1705.464670][T18706] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1705.476868][T18706] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1705.486162][T18706] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1705.502751][T18706] usb 1-1: config 0 descriptor?? [ 1705.512678][ T3416] netlink: 312 bytes leftover after parsing attributes in process `syz.3.12589'. [ 1705.985024][T18706] keytouch 0003:0926:3333.002B: fixing up Keytouch IEC report descriptor [ 1706.001079][T18706] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.002B/input/input256 [ 1706.118249][T18706] keytouch 0003:0926:3333.002B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 1706.187037][T18706] usb 1-1: USB disconnect, device number 27 [ 1706.205292][T22365] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 1706.224327][ T3706] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1706.239827][ T3706] usb 6-1: config 220 has 2 interfaces, different from the descriptor's value: 3 [ 1706.249232][ T3706] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1706.262670][ T3706] usb 6-1: config 220 interface 0 has no altsetting 0 [ 1706.269508][ T3706] usb 6-1: config 220 interface 1 has no altsetting 0 [ 1706.285715][ T3446] bridge0: port 1(bridge_slave_0) entered blocking state [ 1706.292752][ T3446] bridge0: port 1(bridge_slave_0) entered disabled state [ 1706.300333][ T3446] device bridge_slave_0 entered promiscuous mode [ 1706.307463][ T3446] bridge0: port 2(bridge_slave_1) entered blocking state [ 1706.315012][ T3446] bridge0: port 2(bridge_slave_1) entered disabled state [ 1706.322469][ T3446] device bridge_slave_1 entered promiscuous mode [ 1706.418513][ T3446] bridge0: port 2(bridge_slave_1) entered blocking state [ 1706.425589][ T3446] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1706.432905][ T3446] bridge0: port 1(bridge_slave_0) entered blocking state [ 1706.439952][ T3446] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1706.464151][ T3706] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1706.473276][ T702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1706.474934][ T3706] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1706.488654][ T702] bridge0: port 1(bridge_slave_0) entered disabled state [ 1706.495867][ T3706] usb 6-1: Product: syz [ 1706.500168][ T702] bridge0: port 2(bridge_slave_1) entered disabled state [ 1706.503850][ T3706] usb 6-1: Manufacturer: syz [ 1706.514578][ T3706] usb 6-1: SerialNumber: syz [ 1706.522501][ T702] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1706.531024][ T702] bridge0: port 1(bridge_slave_0) entered blocking state [ 1706.538077][ T702] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1706.547121][ T702] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1706.555979][ T702] bridge0: port 2(bridge_slave_1) entered blocking state [ 1706.563007][ T702] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1706.581074][ T702] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1706.589225][ T702] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1706.604062][T22365] usb 10-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1706.605600][ T702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1706.618276][T22365] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1706.638240][ T3446] device veth0_vlan entered promiscuous mode [ 1706.640507][T22365] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1706.654866][ T702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1706.655843][T22365] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1706.668916][ T3446] device veth1_macvtap entered promiscuous mode [ 1706.681675][T22365] usb 10-1: config 0 descriptor?? [ 1706.687279][ T702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1706.710042][ T702] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1706.718106][ T702] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1706.724507][T22365] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 1706.756327][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1706.787600][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1706.905903][ T347] device bridge_slave_1 left promiscuous mode [ 1706.961917][ T347] bridge0: port 2(bridge_slave_1) entered disabled state [ 1707.126442][ T347] device bridge_slave_0 left promiscuous mode [ 1707.164612][ T347] bridge0: port 1(bridge_slave_0) entered disabled state [ 1707.203900][ T3706] usb 6-1: selecting invalid altsetting 0 [ 1707.247702][ T3706] usb 6-1: USB disconnect, device number 60 [ 1707.494601][ T30] audit: type=1400 audit(1763616964.339:16917): avc: denied { mounton } for pid=3484 comm="syz.2.12613" path="/366/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 1707.647870][ T3491] device batadv_slave_0 entered promiscuous mode [ 1708.889307][T22365] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1708.900453][T11899] usb 10-1: USB disconnect, device number 21 [ 1709.901010][ T30] audit: type=1326 audit(1763616966.740:16918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3557 comm="syz.9.12643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd72abdc749 code=0x7ffc0000 [ 1709.924779][ T30] audit: type=1326 audit(1763616966.740:16919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3557 comm="syz.9.12643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd72abdc749 code=0x7ffc0000 [ 1709.942382][T22365] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1709.957387][ T30] audit: type=1326 audit(1763616966.740:16920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3557 comm="syz.9.12643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd72abdc749 code=0x7ffc0000 [ 1709.958871][T22365] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1709.984134][ T30] audit: type=1326 audit(1763616966.740:16921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3557 comm="syz.9.12643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd72abdc749 code=0x7ffc0000 [ 1709.996660][T22365] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1710.018329][ T30] audit: type=1326 audit(1763616966.740:16922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3557 comm="syz.9.12643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=267 compat=0 ip=0x7fd72abdc749 code=0x7ffc0000 [ 1710.028948][T22365] usb 3-1: config 0 descriptor?? [ 1710.046413][ T30] audit: type=1326 audit(1763616966.740:16923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3557 comm="syz.9.12643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd72abdc749 code=0x7ffc0000 [ 1710.172274][ T595] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1710.179931][ T3706] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 1710.292294][ T20] usb 10-1: new full-speed USB device number 22 using dummy_hcd [ 1710.422118][ T3706] usb 6-1: Using ep0 maxpacket: 32 [ 1710.422183][ T595] usb 4-1: Using ep0 maxpacket: 32 [ 1710.552220][ T3706] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1710.563691][ T595] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1710.574320][ T3706] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1710.584434][ T595] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1710.595780][ T3706] usb 6-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 1710.604938][ T595] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1710.615227][ T3706] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1710.623335][ T595] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1710.639136][ T3706] usb 6-1: config 0 descriptor?? [ 1710.645764][ T595] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1710.652802][ T595] usb 4-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1710.661927][ T595] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1710.673506][ T595] usb 4-1: config 0 descriptor?? [ 1710.692031][ T20] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1710.732107][ T20] usb 10-1: not running at top speed; connect to a high speed hub [ 1710.812126][ T20] usb 10-1: config 1 has an invalid interface number: 138 but max is 0 [ 1710.820558][ T20] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1710.831070][ T20] usb 10-1: config 1 has no interface number 0 [ 1710.837479][ T20] usb 10-1: config 1 interface 138 altsetting 252 endpoint 0xC has an invalid bInterval 0, changing to 10 [ 1710.849064][ T20] usb 10-1: config 1 interface 138 altsetting 252 endpoint 0xC has invalid maxpacket 255, setting to 64 [ 1710.860439][ T20] usb 10-1: config 1 interface 138 has no altsetting 0 [ 1711.022019][ T20] usb 10-1: New USB device found, idVendor=0cb8, idProduct=c90b, bcdDevice= d.ae [ 1711.031425][ T20] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1711.039702][ T20] usb 10-1: Product: syz [ 1711.044171][ T20] usb 10-1: Manufacturer: syz [ 1711.048931][ T20] usb 10-1: SerialNumber: syz [ 1711.071977][ T3564] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 1711.164330][ T595] hid-thrustmaster 0003:044F:B65D.002C: unknown main item tag 0x0 [ 1711.172445][ T595] hid-thrustmaster 0003:044F:B65D.002C: unknown main item tag 0x0 [ 1711.180281][ T595] hid-thrustmaster 0003:044F:B65D.002C: unknown main item tag 0x0 [ 1711.189323][ T595] hid-thrustmaster 0003:044F:B65D.002C: unknown main item tag 0x0 [ 1711.197354][ T3706] logitech 0003:046D:C29C.002D: hidraw0: USB HID vb4.30 Device [HID 046d:c29c] on usb-dummy_hcd.5-1/input0 [ 1711.209193][ T595] hid-thrustmaster 0003:044F:B65D.002C: unknown main item tag 0x0 [ 1711.217966][ T595] hid-thrustmaster 0003:044F:B65D.002C: hidraw1: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.3-1/input0 [ 1711.230145][ T595] hid-thrustmaster 0003:044F:B65D.002C: Wrong number of endpoints? [ 1711.304329][ T595] usb 3-1: USB disconnect, device number 56 [ 1711.391634][ C0] hid-thrustmaster 0003:044F:B65D.002C: Unknown packet type 0x0, unable to proceed further with wheel init [ 1711.403259][ T3706] logitech 0003:046D:C29C.002D: no inputs found [ 1711.411544][ T3706] usb 6-1: USB disconnect, device number 61 [ 1711.427657][ T3585] fido_id[3585]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1711.451682][T19503] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 1711.465889][ T20] usb 10-1: USB disconnect, device number 22 [ 1711.600451][T31811] usb 4-1: USB disconnect, device number 52 [ 1711.691485][T19503] usb 1-1: Using ep0 maxpacket: 8 [ 1711.771449][ T595] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1711.811517][T19503] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1711.822995][T19503] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1711.832965][T19503] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1711.843034][T19503] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 1711.854418][T19503] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1711.864622][T19503] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1711.874297][T19503] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1711.885649][T19503] usb 1-1: config 0 descriptor?? [ 1711.903224][ T3575] raw-gadget.4 gadget: fail, usb_ep_enable returned -22 [ 1712.011288][ T595] usb 3-1: Using ep0 maxpacket: 16 [ 1712.140031][ T3627] input: syz0 as /devices/virtual/input/input257 [ 1712.211488][ T595] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1712.371207][ T595] usb 3-1: New USB device found, idVendor=0738, idProduct=1709, bcdDevice= 0.40 [ 1712.380395][ T595] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1712.388470][ T595] usb 3-1: Product: syz [ 1712.392700][ T595] usb 3-1: Manufacturer: syz [ 1712.397293][ T595] usb 3-1: SerialNumber: syz [ 1712.411108][ T20] usb 4-1: new full-speed USB device number 53 using dummy_hcd [ 1712.771612][ T20] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1712.860974][ T595] usbhid 3-1:1.0: can't add hid device: -71 [ 1712.868537][ T595] usbhid: probe of 3-1:1.0 failed with error -71 [ 1712.894050][ T595] usb 3-1: USB disconnect, device number 57 [ 1712.924237][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 1712.924269][ T30] audit: type=1400 audit(1763616969.772:16927): avc: denied { setopt } for pid=3651 comm="syz.5.12683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1712.946838][ T3656] netlink: 'syz.5.12685': attribute type 4 has an invalid length. [ 1712.957822][ T20] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1712.969242][ T20] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1712.987477][ T20] usb 4-1: Product: syz [ 1713.049796][ T20] usb 4-1: Manufacturer: syz [ 1713.054469][ T20] usb 4-1: SerialNumber: syz [ 1713.059799][ T20] usb 4-1: config 0 descriptor?? [ 1713.081397][ T3629] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1713.569208][ T3675] netlink: 8 bytes leftover after parsing attributes in process `syz.9.12692'. [ 1713.605526][ T3677] loop7: detected capacity change from 0 to 16385 [ 1713.780546][ T20] usb 4-1: USB disconnect, device number 53 [ 1713.990326][T19503] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 1714.174914][T11899] usb 1-1: USB disconnect, device number 28 [ 1714.819966][T19503] usb 10-1: config 0 has an invalid interface number: 125 but max is 0 [ 1714.831383][T19503] usb 10-1: config 0 has no interface number 0 [ 1714.939861][ T595] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1715.009958][T19503] usb 10-1: New USB device found, idVendor=0421, idProduct=007b, bcdDevice=ed.44 [ 1715.019931][T19503] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1715.028062][T19503] usb 10-1: Product: syz [ 1715.033074][T19503] usb 10-1: Manufacturer: syz [ 1715.037767][T19503] usb 10-1: SerialNumber: syz [ 1715.043379][T19503] usb 10-1: config 0 descriptor?? [ 1715.120204][T19503] rndis_host 10-1:0.125: invalid descriptor buffer length [ 1715.127347][T19503] usb 10-1: bad CDC descriptors [ 1715.132537][T19503] cdc_acm 10-1:0.125: invalid descriptor buffer length [ 1715.259752][ T20] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 1715.309661][ T595] usb 3-1: Using ep0 maxpacket: 32 [ 1715.321690][ T3706] usb 10-1: USB disconnect, device number 23 [ 1715.429646][ T595] usb 3-1: config 0 has an invalid interface number: 47 but max is 0 [ 1715.437745][ T595] usb 3-1: config 0 has no interface number 0 [ 1715.443918][ T595] usb 3-1: config 0 interface 47 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1715.454027][ T595] usb 3-1: config 0 interface 47 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 1715.499576][ T20] usb 6-1: Using ep0 maxpacket: 16 [ 1715.619604][ T20] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 1715.630432][ T595] usb 3-1: New USB device found, idVendor=08dd, idProduct=90ff, bcdDevice=7b.76 [ 1715.639501][ T595] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1715.647578][ T595] usb 3-1: Product: syz [ 1715.651760][ T595] usb 3-1: Manufacturer: syz [ 1715.656366][ T595] usb 3-1: SerialNumber: syz [ 1715.661704][ T595] usb 3-1: config 0 descriptor?? [ 1715.679596][ T3683] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1715.686648][ T3683] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1715.799469][ T20] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 1715.808785][ T20] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1715.816832][ T20] usb 6-1: Product: syz [ 1715.821066][ T20] usb 6-1: Manufacturer: syz [ 1715.825658][ T20] usb 6-1: SerialNumber: syz [ 1715.831009][ T20] usb 6-1: config 0 descriptor?? [ 1715.979391][ T595] asix 3-1:0.47 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1715.989632][ T595] asix: probe of 3-1:0.47 failed with error -71 [ 1715.997004][ T595] usb 3-1: USB disconnect, device number 58 [ 1716.071279][ T3561] usb 6-1: USB disconnect, device number 62 [ 1716.179223][ T20] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1716.189219][ T3706] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 1716.199283][T31811] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 1716.419107][ T20] usb 4-1: Using ep0 maxpacket: 32 [ 1716.429094][ T3706] usb 10-1: Using ep0 maxpacket: 16 [ 1716.549178][ T20] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 1716.557315][ T3706] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1716.568347][T31811] usb 1-1: config 0 has an invalid interface number: 151 but max is 0 [ 1716.588122][ T20] usb 4-1: config 0 has no interface number 0 [ 1716.594249][T31811] usb 1-1: config 0 has no interface number 0 [ 1716.600394][ T3706] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1716.619228][ T20] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1716.639227][ T3706] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1716.652200][ T20] usb 4-1: config 0 interface 85 has no altsetting 0 [ 1716.688904][ T3802] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12748'. [ 1716.749178][ T3706] usb 10-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 1716.758492][ T3706] usb 10-1: New USB device strings: Mfr=32, Product=0, SerialNumber=0 [ 1716.766714][ T3706] usb 10-1: Manufacturer: syz [ 1716.772039][ T3706] usb 10-1: config 0 descriptor?? [ 1716.789056][T31811] usb 1-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 1716.798122][T31811] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1716.806143][T31811] usb 1-1: Product: syz [ 1716.810437][ T20] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1716.820296][ T595] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1716.827902][T31811] usb 1-1: Manufacturer: syz [ 1716.832566][ T20] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1716.840622][T31811] usb 1-1: SerialNumber: syz [ 1716.845454][ T20] usb 4-1: Product: syz [ 1716.849953][T31811] usb 1-1: config 0 descriptor?? [ 1716.855005][ T20] usb 4-1: Manufacturer: syz [ 1716.859720][ T20] usb 4-1: SerialNumber: syz [ 1716.865323][ T20] usb 4-1: config 0 descriptor?? [ 1717.008827][ T3561] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 1717.068798][ T595] usb 3-1: Using ep0 maxpacket: 32 [ 1717.188765][ T595] usb 3-1: config 36 has an invalid interface number: 228 but max is 0 [ 1717.197018][ T595] usb 3-1: config 36 has no interface number 0 [ 1717.203302][ T595] usb 3-1: config 36 interface 228 altsetting 68 endpoint 0x7 has invalid maxpacket 49255, setting to 1024 [ 1717.214729][ T595] usb 3-1: config 36 interface 228 altsetting 68 bulk endpoint 0x7 has invalid maxpacket 1024 [ 1717.226525][ T595] usb 3-1: config 36 interface 228 has no altsetting 0 [ 1717.233598][ T3706] playstation 0003:054C:0DF2.002E: hidraw0: USB HID v0.09 Device [syz] on usb-dummy_hcd.9-1/input0 [ 1717.350610][ T20] usb 4-1: USB disconnect, device number 54 [ 1717.357894][T31811] usb 1-1: USB disconnect, device number 29 [ 1717.368775][ T3561] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1717.380756][ T3561] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1717.381301][T28649] udevd[28649]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.151/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1717.398721][ T595] usb 3-1: New USB device found, idVendor=0499, idProduct=a9a2, bcdDevice=c4.e8 [ 1717.416405][ T595] usb 3-1: New USB device strings: Mfr=1, Product=25, SerialNumber=3 [ 1717.425290][ T595] usb 3-1: Product: syz [ 1717.429679][ T3706] playstation 0003:054C:0DF2.002E: Invalid reportID received, expected 9 got 43 [ 1717.439028][ T595] usb 3-1: Manufacturer: syz [ 1717.443742][ T3706] playstation 0003:054C:0DF2.002E: Failed to retrieve DualSense pairing info: -22 [ 1717.453138][ T595] usb 3-1: SerialNumber: syz [ 1717.458009][ T3706] playstation 0003:054C:0DF2.002E: Failed to get MAC address from DualSense [ 1717.467140][ T3706] playstation 0003:054C:0DF2.002E: Failed to create dualsense. [ 1717.475319][ T3706] playstation: probe of 0003:054C:0DF2.002E failed with error -22 [ 1717.483232][ T3794] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 1717.490346][ T3561] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1717.500747][ T3561] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1717.508859][ T3561] usb 6-1: Manufacturer: syz [ 1717.517856][ T3561] usb 6-1: config 0 descriptor?? [ 1717.631691][T31811] usb 10-1: USB disconnect, device number 24 [ 1718.009505][ T3813] usb 3-1: USB disconnect, device number 59 [ 1718.459081][ T3828] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 1718.589288][ T3561] input: syz Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.002F/input/input258 [ 1718.601803][ T3561] input: syz Pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.002F/input/input259 [ 1718.614085][ T3561] uclogic 0003:256C:006D.002F: input,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.5-1/input0 [ 1719.018308][ T3561] usb 6-1: USB disconnect, device number 63 [ 1719.251056][ T3865] kvm: pic: single mode not supported [ 1719.251068][ T3865] kvm: pic: level sensitive irq not supported [ 1719.256524][ T3865] kvm: pic: non byte read [ 1719.267385][ T3865] kvm: pic: non byte read [ 1719.272145][ T3865] kvm: pic: single mode not supported [ 1719.272166][ T3865] kvm: pic: level sensitive irq not supported [ 1719.277707][ T3865] kvm: pic: non byte read [ 1719.288815][ T3865] kvm: pic: single mode not supported [ 1719.288852][ T3865] kvm: pic: non byte read [ 1719.298838][ T3865] kvm: pic: single mode not supported [ 1719.298874][ T3865] kvm: pic: non byte read [ 1719.308917][ T3865] kvm: pic: non byte read [ 1719.313535][ T3865] kvm: pic: non byte read [ 1719.318157][ T3865] kvm: pic: non byte read [ 1719.322729][ T3865] kvm: pic: non byte read [ 1719.407670][T11899] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 1719.549081][ T3874] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12776'. [ 1719.562214][ T3874] netlink: 16 bytes leftover after parsing attributes in process `syz.5.12776'. [ 1719.571328][ T3874] netlink: 16 bytes leftover after parsing attributes in process `syz.5.12776'. [ 1719.617190][ T3884] kvm [3883]: vcpu0, guest rIP: 0xfff0 vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x1000000001001, nop [ 1719.685567][T11899] usb 10-1: Using ep0 maxpacket: 16 [ 1719.847756][T11899] usb 10-1: config 0 has an invalid interface number: 105 but max is 0 [ 1719.856526][T11899] usb 10-1: config 0 has no interface number 0 [ 1720.037409][T11899] usb 10-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 1720.046711][T11899] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1720.055073][T11899] usb 10-1: Product: syz [ 1720.059698][T11899] usb 10-1: Manufacturer: syz [ 1720.064434][T11899] usb 10-1: SerialNumber: syz [ 1720.073735][T11899] usb 10-1: config 0 descriptor?? [ 1720.326783][T31314] usb 10-1: USB disconnect, device number 25 [ 1720.516652][ T30] audit: type=1326 audit(1763616977.365:16928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3900 comm="syz.3.12787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09c0f9f749 code=0x7ffc0000 [ 1720.517510][ T3901] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 1720.540498][T11899] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 1720.562638][ T30] audit: type=1326 audit(1763616977.365:16929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3900 comm="syz.3.12787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09c0f9f749 code=0x7ffc0000 [ 1720.586828][ T30] audit: type=1326 audit(1763616977.375:16930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3900 comm="syz.3.12787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7f09c0f9f749 code=0x7ffc0000 [ 1720.619066][ T30] audit: type=1326 audit(1763616977.405:16931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3900 comm="syz.3.12787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09c0f9f749 code=0x7ffc0000 [ 1720.646484][ T30] audit: type=1326 audit(1763616977.435:16932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3900 comm="syz.3.12787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09c0f9f749 code=0x7ffc0000 [ 1720.712014][ T30] audit: type=1400 audit(1763616977.565:16933): avc: denied { link } for pid=3907 comm="syz.3.12790" name="#9e" dev="tmpfs" ino=216 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1720.753816][ T30] audit: type=1400 audit(1763616977.585:16934): avc: denied { rename } for pid=3907 comm="syz.3.12790" name="#9f" dev="tmpfs" ino=216 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1720.928533][ T30] audit: type=1400 audit(1763616977.786:16935): avc: denied { mounton } for pid=3917 comm="syz.9.12794" path="/529/file0" dev="tmpfs" ino=2954 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1721.026799][T31314] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 1721.046948][T11899] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1721.086822][T11899] usb 1-1: not running at top speed; connect to a high speed hub [ 1721.166761][T11899] usb 1-1: config 0 has an invalid interface number: 88 but max is 0 [ 1721.174860][T11899] usb 1-1: config 0 has no interface number 0 [ 1721.181120][T11899] usb 1-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 10 [ 1721.192183][T11899] usb 1-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1721.201994][T11899] usb 1-1: config 0 interface 88 has no altsetting 0 [ 1721.276667][T31314] usb 4-1: Using ep0 maxpacket: 32 [ 1721.366750][T11899] usb 1-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 1721.376103][T11899] usb 1-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 1721.384281][T11899] usb 1-1: Product: syz [ 1721.388716][T11899] usb 1-1: Manufacturer: syz [ 1721.393316][T11899] usb 1-1: SerialNumber: syz [ 1721.398004][T31314] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1721.409287][T31314] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1721.419294][T11899] usb 1-1: config 0 descriptor?? [ 1721.536702][T31314] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1721.545824][T31314] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1721.554168][T31314] usb 4-1: Product: syz [ 1721.558391][T31314] usb 4-1: Manufacturer: syz [ 1721.597076][T31314] hub 4-1:4.0: USB hub found [ 1721.737471][T11899] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.88/input/input261 [ 1721.751787][T11899] usb 1-1: USB disconnect, device number 30 [ 1721.767282][T28653] udevd[28653]: Error opening device "/dev/input/event3": No such file or directory [ 1721.777115][T28653] udevd[28653]: Unable to EVIOCGABS device "/dev/input/event3" [ 1721.784762][T28653] udevd[28653]: Unable to EVIOCGABS device "/dev/input/event3" [ 1721.816462][T31314] hub 4-1:4.0: 2 ports detected [ 1722.036350][T31314] hub 4-1:4.0: hub_hub_status failed (err = -71) [ 1722.042718][T31314] hub 4-1:4.0: config failed, can't get hub status (err -71) [ 1722.076967][T31314] usb 4-1: USB disconnect, device number 55 [ 1722.794904][ T3979] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12819'. [ 1723.606775][T19503] usb 10-1: new full-speed USB device number 26 using dummy_hcd [ 1723.616956][ T4020] netlink: 96 bytes leftover after parsing attributes in process `syz.3.12834'. [ 1723.627906][ T4020] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem [ 1723.995373][T19503] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1724.006533][T19503] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1724.016640][T19503] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1724.029706][T19503] usb 10-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 1724.038951][T19503] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1724.051217][T19503] usb 10-1: config 0 descriptor?? [ 1724.308890][ T3561] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1724.556491][T19503] hid-generic 0003:0457:07DA.0030: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.9-1/input0 [ 1724.617202][ T3561] usb 4-1: Using ep0 maxpacket: 8 [ 1724.631199][ T4038] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12840'. [ 1724.735003][ T3561] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1724.745949][ T3561] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1724.756537][ T3561] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1724.765113][ T3561] usb 4-1: config 0 descriptor?? [ 1724.770233][ T20] usb 10-1: USB disconnect, device number 26 [ 1725.574536][ T20] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 1725.814419][ T20] usb 10-1: Using ep0 maxpacket: 8 [ 1725.934420][ T20] usb 10-1: config 0 has an invalid interface number: 2 but max is 0 [ 1725.942758][ T20] usb 10-1: config 0 has no interface number 0 [ 1725.949856][ T20] usb 10-1: config 0 interface 2 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1726.004359][ T20] usb 10-1: config 0 interface 2 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1726.014331][ T20] usb 10-1: config 0 interface 2 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0 [ 1726.024765][ T20] usb 10-1: config 0 interface 2 altsetting 0 has an invalid endpoint with address 0x6A, skipping [ 1726.344210][ T20] usb 10-1: New USB device found, idVendor=05da, idProduct=0099, bcdDevice=d5.82 [ 1726.353395][ T20] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1726.361478][ T20] usb 10-1: Product: syz [ 1726.365762][ T20] usb 10-1: Manufacturer: syz [ 1726.370504][ T20] usb 10-1: SerialNumber: syz [ 1726.375901][ T20] usb 10-1: config 0 descriptor?? [ 1726.655484][ T20] usb 10-1: USB disconnect, device number 27 [ 1726.666595][ T595] usb 4-1: USB disconnect, device number 56 [ 1726.762785][ T4096] device batadv_slave_1 entered promiscuous mode [ 1726.769771][ T4095] device batadv_slave_1 left promiscuous mode [ 1726.938552][ T4116] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12875'. [ 1727.287605][T31314] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 1727.533535][T31314] usb 1-1: Using ep0 maxpacket: 16 [ 1727.653516][T31314] usb 1-1: config 0 has an invalid interface number: 236 but max is 1 [ 1727.661780][T31314] usb 1-1: config 0 has an invalid interface number: 129 but max is 1 [ 1727.670009][T31314] usb 1-1: config 0 has no interface number 0 [ 1727.676147][T31314] usb 1-1: config 0 has no interface number 1 [ 1727.682289][T31314] usb 1-1: config 0 interface 236 has no altsetting 0 [ 1727.689143][T31314] usb 1-1: config 0 interface 129 has no altsetting 0 [ 1727.854111][T31314] usb 1-1: New USB device found, idVendor=1ace, idProduct=e9b2, bcdDevice=5c.3d [ 1727.865245][T31314] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1727.874803][T31314] usb 1-1: Product: syz [ 1727.879098][T31314] usb 1-1: Manufacturer: syz [ 1727.916785][T31314] usb 1-1: SerialNumber: syz [ 1727.952434][T31314] usb 1-1: config 0 descriptor?? [ 1728.102171][ T4158] tmpfs: Unsupported parameter 'mpol' [ 1728.210413][ T30] audit: type=1326 audit(1763616985.059:16936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4161 comm="syz.9.12895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd72abdc749 code=0x7ffc0000 [ 1728.241171][ T30] audit: type=1326 audit(1763616985.089:16937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4161 comm="syz.9.12895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd72abdc749 code=0x7ffc0000 [ 1728.265345][ T30] audit: type=1326 audit(1763616985.089:16938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4161 comm="syz.9.12895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd72ab78829 code=0x7ffc0000 [ 1728.294145][ T30] audit: type=1326 audit(1763616985.089:16939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4161 comm="syz.9.12895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd72ab78829 code=0x7ffc0000 [ 1728.323465][ T30] audit: type=1326 audit(1763616985.089:16940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4161 comm="syz.9.12895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd72abdc749 code=0x7ffc0000 [ 1728.351788][ T30] audit: type=1326 audit(1763616985.089:16941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4161 comm="syz.9.12895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd72abdc749 code=0x7ffc0000 [ 1728.381309][ T30] audit: type=1326 audit(1763616985.089:16942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4161 comm="syz.9.12895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd72abdc749 code=0x7ffc0000 [ 1728.405397][ T30] audit: type=1326 audit(1763616985.089:16943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4161 comm="syz.9.12895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd72abdc749 code=0x7ffc0000 [ 1728.432089][T31314] usb 1-1: selecting invalid altsetting 0 [ 1728.440683][T31314] usb 1-1: Found UVC 2.26 device syz (1ace:e9b2) [ 1728.451666][T31314] usb 1-1: No valid video chain found. [ 1728.466340][T31314] usb 1-1: USB disconnect, device number 31 [ 1728.480745][ T30] audit: type=1326 audit(1763616985.089:16944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4161 comm="syz.9.12895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd72abdc749 code=0x7ffc0000 [ 1728.523096][T11899] usb 4-1: new full-speed USB device number 57 using dummy_hcd [ 1728.530814][ T30] audit: type=1326 audit(1763616985.089:16945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4161 comm="syz.9.12895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd72abdc749 code=0x7ffc0000 [ 1728.622073][ T4193] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65504 sclass=netlink_route_socket pid=4193 comm=syz.9.12908 [ 1728.891308][ T4209] bridge0: port 1(bridge_slave_0) entered blocking state [ 1728.892903][T11899] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 1728.908223][ T4209] bridge0: port 1(bridge_slave_0) entered disabled state [ 1728.908307][T11899] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1728.927139][ T4209] device bridge_slave_0 entered promiscuous mode [ 1728.939080][ T4209] bridge0: port 2(bridge_slave_1) entered blocking state [ 1728.946451][ T4209] bridge0: port 2(bridge_slave_1) entered disabled state [ 1728.955214][ T4209] device bridge_slave_1 entered promiscuous mode [ 1729.002914][T11899] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 1729.012856][T11899] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1729.092865][T11899] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 1729.102755][T11899] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1729.194762][ T10] device bridge_slave_1 left promiscuous mode [ 1729.201119][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 1729.209535][ T10] device bridge_slave_0 left promiscuous mode [ 1729.215955][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 1729.264546][T11899] usb 4-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=c0.b9 [ 1729.273793][T11899] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1729.281861][T11899] usb 4-1: Product: syz [ 1729.286179][T11899] usb 4-1: Manufacturer: syz [ 1729.290820][T11899] usb 4-1: SerialNumber: syz [ 1729.299427][T11899] usb 4-1: config 0 descriptor?? [ 1729.331239][ T4209] bridge0: port 2(bridge_slave_1) entered blocking state [ 1729.338301][ T4209] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1729.345596][ T4209] bridge0: port 1(bridge_slave_0) entered blocking state [ 1729.352634][ T4209] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1729.416355][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1729.424626][ T347] bridge0: port 1(bridge_slave_0) entered disabled state [ 1729.432247][ T347] bridge0: port 2(bridge_slave_1) entered disabled state [ 1729.457803][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1729.466409][ T347] bridge0: port 1(bridge_slave_0) entered blocking state [ 1729.473460][ T347] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1729.481106][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1729.490415][ T347] bridge0: port 2(bridge_slave_1) entered blocking state [ 1729.497469][ T347] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1729.523352][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1729.602706][ T4209] device veth0_vlan entered promiscuous mode [ 1729.623894][ T4209] device veth1_macvtap entered promiscuous mode [ 1729.638493][ T595] usb 4-1: USB disconnect, device number 57 [ 1729.655378][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1729.665991][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1729.674662][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1729.683089][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1729.690433][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1729.697915][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1729.706565][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1729.723437][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1729.731723][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1730.861895][ T3561] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1731.501702][ T3561] usb 5-1: config 0 has no interfaces? [ 1731.507197][ T3561] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1731.516300][ T3561] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1731.525013][ T3561] usb 5-1: config 0 descriptor?? [ 1731.671478][ T595] usb 4-1: new low-speed USB device number 58 using dummy_hcd [ 1731.765524][T31314] usb 5-1: USB disconnect, device number 5 [ 1732.041356][ T595] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1732.048809][ T595] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1732.059531][ T595] usb 4-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1732.141308][ T595] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1732.148755][ T595] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1732.159494][ T595] usb 4-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1732.241240][ T595] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1732.248658][ T595] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1732.259400][ T595] usb 4-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1732.341382][T31314] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1732.511105][ T595] usb 4-1: string descriptor 0 read error: -22 [ 1732.517373][ T595] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1732.526410][ T595] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1732.731033][T31314] usb 5-1: config 0 has no interfaces? [ 1732.736521][T31314] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1732.745575][T31314] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1732.754189][T31314] usb 5-1: config 0 descriptor?? [ 1732.773804][ T595] usb 4-1: USB disconnect, device number 58 [ 1732.995258][ T595] usb 5-1: USB disconnect, device number 6 [ 1733.670513][ T595] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1734.030351][ T595] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1734.041199][ T595] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1734.050861][ T595] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1734.061762][ T595] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 16786, setting to 1024 [ 1734.230614][ T595] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1734.239713][ T595] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1734.248023][ T595] usb 5-1: Product: syz [ 1734.459505][ T595] usb 5-1: Manufacturer: syz [ 1734.464393][ T595] usb 5-1: SerialNumber: syz [ 1734.469687][ T595] usb 5-1: config 0 descriptor?? [ 1734.490125][ T595] usb 5-1: can't set config #0, error -71 [ 1734.496944][ T595] usb 5-1: USB disconnect, device number 7 [ 1735.262355][ T4313] tipc: Started in network mode [ 1735.267398][ T4313] tipc: Node identity ac14141b, cluster identity 4711 [ 1735.274680][ T4313] tipc: New replicast peer: 255.255.255.255 [ 1735.281260][ T4313] tipc: Enabled bearer , priority 10 [ 1735.719539][ T20] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1736.079358][ T20] usb 5-1: too many endpoints for config 0 interface 0 altsetting 144: 127, using maximum allowed: 30 [ 1736.090426][ T20] usb 5-1: config 0 interface 0 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1736.101593][ T20] usb 5-1: config 0 interface 0 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1736.111511][ T20] usb 5-1: config 0 interface 0 altsetting 144 has 1 endpoint descriptor, different from the interface descriptor's value: 127 [ 1736.124842][ T20] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1736.135790][ T20] usb 5-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 1736.144919][ T20] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1736.153853][ T20] usb 5-1: config 0 descriptor?? [ 1736.399149][T11899] tipc: Node number set to 2886997019 [ 1736.858913][ T20] usb 5-1: string descriptor 0 read error: -71 [ 1736.878865][ T20] uclogic 0003:5543:004D.0031: failed retrieving string descriptor #200: -71 [ 1736.887653][ T20] uclogic 0003:5543:004D.0031: failed retrieving pen parameters: -71 [ 1736.895764][ T20] uclogic 0003:5543:004D.0031: failed probing pen v2 parameters: -71 [ 1736.903873][ T20] uclogic 0003:5543:004D.0031: failed probing parameters: -71 [ 1736.930901][ T20] uclogic: probe of 0003:5543:004D.0031 failed with error -71 [ 1736.942005][ T20] usb 5-1: USB disconnect, device number 8 [ 1737.228696][T11899] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1737.391759][ T30] kauditd_printk_skb: 169 callbacks suppressed [ 1737.391774][ T30] audit: type=1400 audit(1763616994.254:17115): avc: denied { setopt } for pid=4342 comm="syz.4.12967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1737.392088][ T4343] ================================================================== [ 1737.425511][ T4343] BUG: KASAN: slab-out-of-bounds in xfrm_policy_inexact_list_reinsert+0x620/0x6d0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1737.434688][ T4343] Read of size 1 at addr ffff8881047fabf8 by task syz.4.12967/4343 [ 1737.442551][ T4343] [ 1737.444870][ T4343] CPU: 1 PID: 4343 Comm: syz.4.12967 Tainted: G W syzkaller #0 [ 1737.450621][ T30] audit: type=1400 audit(1763616994.304:17116): avc: denied { write } for pid=273 comm="syz-executor" path="pipe:[484]" dev="pipefs" ino=484 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 1737.453717][ T4343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1737.486661][ T4343] Call Trace: [ 1737.489937][ T4343] [ 1737.492868][ T4343] __dump_stack+0x21/0x30 [ 1737.497207][ T4343] dump_stack_lvl+0xee/0x150 [ 1737.501801][ T4343] ? show_regs_print_info+0x20/0x20 [ 1737.506996][ T4343] ? load_image+0x3a0/0x3a0 [ 1737.511503][ T4343] ? unwind_get_return_address+0x4d/0x90 [ 1737.517141][ T4343] print_address_description+0x7f/0x2c0 [ 1737.522694][ T4343] ? xfrm_policy_inexact_list_reinsert+0x620/0x6d0 [ 1737.529198][ T4343] kasan_report+0xf1/0x140 [ 1737.533610][ T4343] ? xfrm_policy_inexact_list_reinsert+0x620/0x6d0 [ 1737.540087][ T4343] __asan_report_load1_noabort+0x14/0x20 [ 1737.545695][ T4343] xfrm_policy_inexact_list_reinsert+0x620/0x6d0 [ 1737.551997][ T4343] xfrm_policy_inexact_insert_node+0x938/0xb50 [ 1737.558124][ T4343] ? xfrm_netlink_rcv+0x72/0x90 [ 1737.562947][ T4343] ? netlink_unicast+0x876/0xa40 [ 1737.567856][ T4343] ? netlink_sendmsg+0x86a/0xb70 [ 1737.572764][ T4343] ? ____sys_sendmsg+0x5a2/0x8c0 [ 1737.577672][ T4343] ? ___sys_sendmsg+0x1f0/0x260 [ 1737.582499][ T4343] ? x64_sys_call+0x4b/0x9a0 [ 1737.587065][ T4343] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1737.593110][ T4343] xfrm_policy_inexact_alloc_chain+0x53a/0xb30 [ 1737.599252][ T4343] xfrm_policy_inexact_insert+0x70/0x1130 [ 1737.604956][ T4343] ? __get_hash_thresh+0x10c/0x420 [ 1737.610049][ T4343] ? policy_hash_bysel+0x110/0x4f0 [ 1737.615142][ T4343] xfrm_policy_insert+0x126/0x9a0 [ 1737.620145][ T4343] ? xfrm_policy_construct+0x54f/0x1f00 [ 1737.625672][ T4343] xfrm_add_policy+0x4d1/0x830 [ 1737.630421][ T4343] ? xfrm_dump_sa_done+0xc0/0xc0 [ 1737.635343][ T4343] xfrm_user_rcv_msg+0x45c/0x6e0 [ 1737.640273][ T4343] ? xfrm_netlink_rcv+0x90/0x90 [ 1737.645111][ T4343] ? avc_has_perm_noaudit+0x460/0x460 [ 1737.650473][ T4343] ? x64_sys_call+0x4b/0x9a0 [ 1737.655046][ T4343] ? selinux_nlmsg_lookup+0x237/0x4c0 [ 1737.660401][ T4343] netlink_rcv_skb+0x1e0/0x430 [ 1737.665150][ T4343] ? xfrm_netlink_rcv+0x90/0x90 [ 1737.670085][ T4343] ? netlink_ack+0xb60/0xb60 [ 1737.674657][ T4343] ? wait_for_completion_killable_timeout+0x10/0x10 [ 1737.681231][ T4343] ? __netlink_lookup+0x387/0x3b0 [ 1737.686241][ T4343] xfrm_netlink_rcv+0x72/0x90 [ 1737.690904][ T4343] netlink_unicast+0x876/0xa40 [ 1737.695653][ T4343] netlink_sendmsg+0x86a/0xb70 [ 1737.700399][ T4343] ? netlink_getsockopt+0x530/0x530 [ 1737.705581][ T4343] ? sock_alloc_file+0xba/0x260 [ 1737.710417][ T4343] ? security_socket_sendmsg+0x82/0xa0 [ 1737.715857][ T4343] ? netlink_getsockopt+0x530/0x530 [ 1737.721040][ T4343] ____sys_sendmsg+0x5a2/0x8c0 [ 1737.725794][ T4343] ? __sys_sendmsg_sock+0x40/0x40 [ 1737.730807][ T4343] ? import_iovec+0x7c/0xb0 [ 1737.735385][ T4343] ___sys_sendmsg+0x1f0/0x260 [ 1737.740051][ T4343] ? __sys_sendmsg+0x250/0x250 [ 1737.744804][ T4343] ? __fdget+0x1a1/0x230 [ 1737.749031][ T4343] __x64_sys_sendmsg+0x1e2/0x2a0 [ 1737.753957][ T4343] ? ___sys_sendmsg+0x260/0x260 [ 1737.758794][ T4343] ? __kasan_check_write+0x14/0x20 [ 1737.763890][ T4343] ? switch_fpu_return+0x15d/0x2c0 [ 1737.768988][ T4343] x64_sys_call+0x4b/0x9a0 [ 1737.773387][ T4343] do_syscall_64+0x4c/0xa0 [ 1737.777785][ T4343] ? clear_bhb_loop+0x50/0xa0 [ 1737.782446][ T4343] ? clear_bhb_loop+0x50/0xa0 [ 1737.787102][ T4343] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1737.792993][ T4343] RIP: 0033:0x7fbee19cc749 [ 1737.797395][ T4343] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1737.816983][ T4343] RSP: 002b:00007fbee0434038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1737.825379][ T4343] RAX: ffffffffffffffda RBX: 00007fbee1c22fa0 RCX: 00007fbee19cc749 [ 1737.833336][ T4343] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000005 [ 1737.841290][ T4343] RBP: 00007fbee1a50f91 R08: 0000000000000000 R09: 0000000000000000 [ 1737.849243][ T4343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1737.857193][ T4343] R13: 00007fbee1c23038 R14: 00007fbee1c22fa0 R15: 00007ffcafaee8c8 [ 1737.865156][ T4343] [ 1737.868158][ T4343] [ 1737.870459][ T4343] Allocated by task 4343: [ 1737.874761][ T4343] __kasan_kmalloc+0xda/0x110 [ 1737.879429][ T4343] __kmalloc+0x13d/0x2c0 [ 1737.883672][ T4343] sk_prot_alloc+0xed/0x320 [ 1737.888158][ T4343] sk_alloc+0x38/0x430 [ 1737.892206][ T4343] pfkey_create+0x12a/0x660 [ 1737.896707][ T4343] __sock_create+0x38d/0x7a0 [ 1737.901286][ T4343] __sys_socket+0xec/0x190 [ 1737.905686][ T4343] __x64_sys_socket+0x7a/0x90 [ 1737.910344][ T4343] x64_sys_call+0x8c5/0x9a0 [ 1737.914827][ T4343] do_syscall_64+0x4c/0xa0 [ 1737.919225][ T4343] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1737.925102][ T4343] [ 1737.927406][ T4343] Last potentially related work creation: [ 1737.933097][ T4343] kasan_save_stack+0x3a/0x60 [ 1737.937755][ T4343] __kasan_record_aux_stack+0xd2/0x100 [ 1737.943196][ T4343] kasan_record_aux_stack_noalloc+0xb/0x10 [ 1737.948985][ T4343] insert_work+0x51/0x310 [ 1737.953301][ T4343] __queue_work+0x8e5/0xc60 [ 1737.957787][ T4343] queue_work_on+0xd2/0x140 [ 1737.962269][ T4343] bpf_prog_free+0x13c/0x150 [ 1737.966841][ T4343] __bpf_prog_put_rcu+0xaf/0xc0 [ 1737.971671][ T4343] rcu_do_batch+0x51d/0xba0 [ 1737.976161][ T4343] rcu_core+0x5e4/0xf80 [ 1737.980298][ T4343] rcu_core_si+0x9/0x10 [ 1737.984440][ T4343] handle_softirqs+0x250/0x560 [ 1737.989188][ T4343] run_ksoftirqd+0x28/0x40 [ 1737.993586][ T4343] smpboot_thread_fn+0x45a/0x8c0 [ 1737.998506][ T4343] kthread+0x411/0x500 [ 1738.002559][ T4343] ret_from_fork+0x1f/0x30 [ 1738.006957][ T4343] [ 1738.009260][ T4343] Second to last potentially related work creation: [ 1738.015817][ T4343] kasan_save_stack+0x3a/0x60 [ 1738.020479][ T4343] __kasan_record_aux_stack+0xd2/0x100 [ 1738.025933][ T4343] kasan_record_aux_stack_noalloc+0xb/0x10 [ 1738.031721][ T4343] call_rcu+0x105/0xfe0 [ 1738.035861][ T4343] __bpf_prog_put_noref+0x286/0x2b0 [ 1738.041042][ T4343] bpf_prog_put_deferred+0x2d4/0x3c0 [ 1738.046308][ T4343] bpf_prog_release+0x243/0x250 [ 1738.051136][ T4343] __fput+0x20b/0x8b0 [ 1738.055098][ T4343] ____fput+0x15/0x20 [ 1738.059060][ T4343] task_work_run+0x127/0x190 [ 1738.063631][ T4343] exit_to_user_mode_loop+0xd0/0xe0 [ 1738.068818][ T4343] exit_to_user_mode_prepare+0x87/0xd0 [ 1738.074263][ T4343] syscall_exit_to_user_mode+0x1a/0x30 [ 1738.079704][ T4343] do_syscall_64+0x58/0xa0 [ 1738.084104][ T4343] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1738.089982][ T4343] [ 1738.092284][ T4343] The buggy address belongs to the object at ffff8881047fa800 [ 1738.092284][ T4343] which belongs to the cache kmalloc-1k of size 1024 [ 1738.106324][ T4343] The buggy address is located 1016 bytes inside of [ 1738.106324][ T4343] 1024-byte region [ffff8881047fa800, ffff8881047fac00) [ 1738.119765][ T4343] The buggy address belongs to the page: [ 1738.125379][ T4343] page:ffffea000411fe00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1047f8 [ 1738.135600][ T4343] head:ffffea000411fe00 order:3 compound_mapcount:0 compound_pincount:0 [ 1738.143907][ T4343] flags: 0x4000000000010200(slab|head|zone=1) [ 1738.149974][ T4343] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100043080 [ 1738.158544][ T4343] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 1738.167102][ T4343] page dumped because: kasan: bad access detected [ 1738.173490][ T4343] page_owner tracks the page as allocated [ 1738.179184][ T4343] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 20815, ts 1041988055699, free_ts 1041362371569 [ 1738.200099][ T4343] post_alloc_hook+0x192/0x1b0 [ 1738.204854][ T4343] prep_new_page+0x1c/0x110 [ 1738.209337][ T4343] get_page_from_freelist+0x2cc5/0x2d50 [ 1738.214864][ T4343] __alloc_pages+0x18f/0x440 [ 1738.219434][ T4343] new_slab+0xa1/0x4d0 [ 1738.223494][ T4343] ___slab_alloc+0x381/0x810 [ 1738.228079][ T4343] __slab_alloc+0x49/0x90 [ 1738.232412][ T4343] __kmalloc_track_caller+0x169/0x2c0 [ 1738.237795][ T4343] __alloc_skb+0x21a/0x740 [ 1738.242205][ T4343] sk_stream_alloc_skb+0x21a/0xb60 [ 1738.247303][ T4343] tcp_sendmsg_locked+0xc3e/0x3590 [ 1738.252398][ T4343] tcp_sendmsg+0x2f/0x50 [ 1738.256625][ T4343] inet_sendmsg+0xa5/0xc0 [ 1738.260934][ T4343] __sys_sendto+0x423/0x580 [ 1738.265421][ T4343] __x64_sys_sendto+0xe5/0x100 [ 1738.270172][ T4343] x64_sys_call+0x178/0x9a0 [ 1738.274660][ T4343] page last free stack trace: [ 1738.279313][ T4343] free_unref_page_prepare+0x542/0x550 [ 1738.284756][ T4343] free_unref_page+0xa2/0x550 [ 1738.289413][ T4343] __free_pages+0x6c/0x100 [ 1738.293820][ T4343] __free_slab+0xe8/0x1e0 [ 1738.298148][ T4343] __unfreeze_partials+0x160/0x190 [ 1738.303254][ T4343] put_cpu_partial+0xc6/0x120 [ 1738.307923][ T4343] __slab_free+0x1d4/0x290 [ 1738.312326][ T4343] ___cache_free+0x104/0x120 [ 1738.316901][ T4343] qlink_free+0x4d/0x90 [ 1738.321036][ T4343] qlist_free_all+0x5f/0xb0 [ 1738.325519][ T4343] kasan_quarantine_reduce+0x14a/0x170 [ 1738.330965][ T4343] __kasan_slab_alloc+0x2f/0xf0 [ 1738.335797][ T4343] slab_post_alloc_hook+0x4f/0x2b0 [ 1738.340892][ T4343] kmem_cache_alloc+0xf7/0x260 [ 1738.345638][ T4343] getname_flags+0xb9/0x500 [ 1738.350123][ T4343] __x64_sys_rename+0x5f/0x90 [ 1738.354786][ T4343] [ 1738.357090][ T4343] Memory state around the buggy address: [ 1738.362697][ T4343] ffff8881047faa80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1738.370739][ T4343] ffff8881047fab00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1738.378780][ T4343] >ffff8881047fab80: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc [ 1738.386816][ T4343] ^ [ 1738.394769][ T4343] ffff8881047fac00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1738.402807][ T4343] ffff8881047fac80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1738.410841][ T4343] ================================================================== [ 1738.418877][ T4343] Disabling lock debugging due to kernel taint [ 1738.478074][T11899] usb 4-1: Using ep0 maxpacket: 16 [ 1738.678297][T11899] usb 4-1: device descriptor read/all, error -71 [ 1739.488577][ T347] device bridge_slave_1 left promiscuous mode [ 1739.494734][ T347] bridge0: port 2(bridge_slave_1) entered disabled state [ 1739.502359][ T347] device bridge_slave_0 left promiscuous mode [ 1739.508565][ T347] bridge0: port 1(bridge_slave_0) entered disabled state [ 1739.516373][ T347] device veth1_macvtap left promiscuous mode [ 1739.522434][ T347] device veth0_vlan left promiscuous mode [ 1740.140613][ T347] tipc: Disabling bearer [ 1740.145882][ T347] tipc: Left network mode [ 1741.138067][ T347] device bridge_slave_1 left promiscuous mode [ 1741.144186][ T347] bridge0: port 2(bridge_slave_1) entered disabled state [ 1741.151757][ T347] device bridge_slave_0 left promiscuous mode [ 1741.157916][ T347] bridge0: port 1(bridge_slave_0) entered disabled state [ 1741.165873][ T347] device bridge_slave_1 left promiscuous mode [ 1741.172061][ T347] bridge0: port 2(bridge_slave_1) entered disabled state [ 1741.179511][ T347] device bridge_slave_0 left promiscuous mode [ 1741.185595][ T347] bridge0: port 1(bridge_slave_0) entered disabled state [ 1741.193526][ T347] device bridge_slave_1 left promiscuous mode [ 1741.199677][ T347] bridge0: port 2(bridge_slave_1) entered disabled state [ 1741.207158][ T347] device bridge_slave_0 left promiscuous mode [ 1741.213261][ T347] bridge0: port 1(bridge_slave_0) entered disabled state [ 1741.221366][ T347] device veth1_macvtap left promiscuous mode [ 1741.227373][ T347] device veth0_vlan left promiscuous mode [ 1741.233222][ T347] device veth1_macvtap left promiscuous mode [ 1741.239279][ T347] device veth0_vlan left promiscuous mode [ 1741.245110][ T347] device veth1_macvtap left promiscuous mode [ 1741.251116][ T347] device veth0_vlan left promiscuous mode [ 1743.616193][ T347] device bridge_slave_1 left promiscuous mode [ 1743.622309][ T347] bridge0: port 2(bridge_slave_1) entered disabled state [ 1743.629987][ T347] device bridge_slave_0 left promiscuous mode [ 1743.636123][ T347] bridge0: port 1(bridge_slave_0) entered disabled state