last executing test programs: 9.636380189s ago: executing program 4 (id=1977): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000480)=0x102, 0x4) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cf84ded40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c86e00f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec231fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895012f1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c3405000000000000003871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d37261774cc5a3bf6b466cb72812da518ff602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d50a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a31b16ac5fb73fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953f88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a5fe1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9d66ebbc8bab4ea81232fbef665f6212f875b2a00000000000000aceb111b66a500ca52fd8f848088c67ee65dfdcc4c580e9bc18c1699dca07d019bf1bf9dd3da480d6c155d7e60674ce88ab5ae07a9d16e22792d99986b531ab4e592ab5925da779e700cf20309a2137877690dc5c07956fc82d7b3bb46d3138041af18508938c9be4e5d0a98073463a5cff6c146d020743da474cb81677a6f389f0e00c33b70b7f8bab95435c27167f365a29fb09cbf35bf192f6a65616fa2ad9a6c7ca3a3ecd96aaecd993e8badb40e7eb8a22b0015e70c885cd519e28448168c6d914265998bff74ea1b0e651a6cae9419096248a0e41573827ad60fafce6e6540734c1f23f75337d836c31497e8112969a039d65aa297e2b046b5f4d11116a89f9f65693d4dc3e70fbfe0b2044fdb3f87e887d1daae8e38a0c19f668f776e19a02bb2449ee4384f6536879c85d7e41bc0276ee2b125d41ff358323311703ec01d64a573bdeb75bdcc87d01de38365ab9222713d2d1640a742d62fefb5403b2ed9969c32a0841e8c36b0107bb888eb14ac62e6d4bdfaeb9ee7436b97bf3825a19d6c8997ce285edf1d277ed703f560460417bfe702af833e83c5b987befb6d1fcf765ab7ea537d9dafb622a1ba8686cb9b1c63b84470364942e90d1cf856cead864f5e38c83b9ed86cc5725a20299ce512b165"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) sendto$packet(r0, &(0x7f00000000c0)="3f033608260812002c001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c152bfdf9435e3ffe46", 0xe90c, 0xa0c4, &(0x7f0000000540)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 9.63067477s ago: executing program 4 (id=1978): bpf$PROG_LOAD(0x5, 0x0, 0x0) io_setup(0x9, &(0x7f00000000c0)=0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000100)='[\x8b\xa4[\x13\x9b\x00w#\x9b\x94\xb6@\x874L\xf5U\xd7\xcb+3,\x999\xa9\":|\x98\xc5\x93\xba\x8d\xff\x14\x8ag+\xcd\xb1\x96d&\x8dn\x00\xdb\xd2\r!A\x1dZ\x16\xa3\x84\xa1\f\\%$\xd3\x9f\xf4a\xdb\x10\xd1&\x83\xba\x9d\x91\xf7\x92\xfb}\x91\x8d\xbav5{\xe4M;\xa2:\xe0\xfc\xa2G\xd3bBM\xe3i\xfc\x01\xc2\xa1|\x90\xd5\x8d;U\xe2', 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/sync_on_suspend', 0x20001, 0x0) io_submit(r0, 0x1, &(0x7f0000000040)=[&(0x7f0000001500)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000100)='9', 0x20000101}]) 9.547659962s ago: executing program 4 (id=1979): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000029c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) close(0xffffffffffffffff) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0xc0000012}) epoll_pwait(r1, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000640)={0x0, 0x0, 0x4, "0b0f2d5e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.401661575s ago: executing program 4 (id=1993): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x30}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x3, 0x6, 0xa, 0xa}, {0x7, 0x1, 0x6, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 7.344873107s ago: executing program 4 (id=1994): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='kvm_fpu\x00', r4}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7.202549233s ago: executing program 4 (id=1998): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) setrlimit(0x0, &(0x7f0000000000)={0x100000000}) r1 = socket$netlink(0x10, 0x3, 0xa) r2 = dup(r1) r3 = open(&(0x7f0000000140)='./file1\x00', 0x10f0c2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) ioctl$int_in(r2, 0x5452, &(0x7f0000000080)=0xfffffffffffffff8) ftruncate(r3, 0x200004) sendfile(r2, r3, 0x0, 0x80001d00c0d1) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x29, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) r5 = dup(r4) write$cgroup_subtree(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="00667265657a7772202bd1930931450131e268756765746c7cc03b30925ecb995d5b3a"], 0x2d) 6.561346907s ago: executing program 3 (id=2012): r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000280)={0x0, 0x0, 0x4}) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) r3 = dup3(r0, r1, 0x0) ioctl$MON_IOCG_STATS(r3, 0xc0109207, &(0x7f0000000180)) 6.333718476s ago: executing program 3 (id=2013): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x83000000}, {0x85, 0x0, 0x0, 0x71}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='ext4_writepages_result\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='ext4_writepages_result\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_pid(r2, &(0x7f0000000980), 0x12) 6.152826983s ago: executing program 3 (id=2014): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) memfd_create(0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) unshare(0x62040200) 6.132109494s ago: executing program 3 (id=2015): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x30}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x3, 0x6, 0xa, 0xa}, {0x7, 0x1, 0x6, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 6.103867545s ago: executing program 3 (id=2018): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='kvm_fpu\x00', r4}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.034352968s ago: executing program 3 (id=2020): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000240)={[{@bsdgroups}, {@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@nolazytime}, {@errors_continue}, {@grpjquota}, {@errors_remount}, {@nobarrier}]}, 0x1, 0x46a, &(0x7f0000000980)="$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") chdir(0x0) open(0x0, 0x0, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, 0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1b96, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{}, [{}]}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000d40)={0x2c, &(0x7f0000000780)=ANY=[@ANYBLOB="00000700000007007673ed26b029a925ac675bd612"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) socket$inet6(0xa, 0x80001, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB], 0x18}, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r2, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r2, 0x2, &(0x7f0000000740)={0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, 0x0) r3 = syz_open_dev$hidraw(&(0x7f0000000280), 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000940), 0x0, 0x0) ioctl$HIDIOCGFEATURE(r3, 0xc0404807, &(0x7f0000000000)={0x0, "1cf250d2528722061e2daedcbbf930dedf4904d8f9e64f62c3d0e156e87ed3dbfac38f0c1faada797532454dd344c00c8a007369f5d86fe64007aa38577e4db7"}) syz_open_dev$hidraw(0x0, 0x0, 0x0) ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0xc0404807, 0x0) write$hidraw(0xffffffffffffffff, 0x0, 0x0) ioctl$HIDIOCGRDESC(r3, 0x90044802, &(0x7f0000000d80)={0x121, "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"}) 1.660983936s ago: executing program 0 (id=2085): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000029c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) close(0xffffffffffffffff) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0xc0000012}) epoll_pwait(r1, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000640)={0x0, 0x0, 0x4, "0b0f2d5e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.525713271s ago: executing program 1 (id=2086): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000900)='mm_page_alloc\x00', r1}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x0) mmap(&(0x7f000001a000/0x3000)=nil, 0x3000, 0xf, 0x11012, r3, 0x0) pread64(r2, &(0x7f000001a240)=""/102400, 0x19000, 0x0) 1.448773084s ago: executing program 1 (id=2087): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r2}, 0x38) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) bind$inet6(r3, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) syz_emit_ethernet(0xd2, &(0x7f0000000900)=ANY=[@ANYBLOB="ffffffffbfff00000000000086dd600489f1009c1100fc010000000000000025030000000000ff02000000000000000000000000000100000e22"], 0x0) 1.433333594s ago: executing program 1 (id=2088): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) pwrite64(r0, &(0x7f0000003a00)='\t', 0x1, 0x81) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r2 = socket(0x2, 0x3, 0xff) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000004c0)={{&(0x7f000042a000/0x2000)=nil, 0x2000}, 0x6}) sendmmsg$unix(r2, &(0x7f0000002fc0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000005c0)="18fcae977278aeffab01b11015896dd2979391ede335535b8440ca4f71a0665a", 0x20}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000500)="7dcc2c9d4eaf588822e6a9cc8eec13d9754bb76c", 0x14}], 0x1}}], 0x2, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x6c, r3, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x80000001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x27}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r4 = gettid() process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) r5 = userfaultfd(0x80001) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000006d00000095"], 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) io_setup(0x3ff, &(0x7f0000000500)=0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='mm_lru_activate\x00', r7}, 0x10) io_destroy(r8) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) r9 = fcntl$dupfd(r5, 0x0, r5) ioctl$UFFDIO_ZEROPAGE(r9, 0xc018aa06, &(0x7f0000000240)={{&(0x7f00003ea000/0x400000)=nil, 0x400000}}) munmap(&(0x7f000047f000/0x3000)=nil, 0x3000) r10 = getpid() process_vm_readv(r10, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='fscache_active\x00', r7}, 0x10) 1.360152608s ago: executing program 1 (id=2089): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x39000, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYRES16=r2], 0xfe, 0x216, &(0x7f0000000e00)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x0, 0x0, 0x5}, 0x48) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') pread64(r5, &(0x7f0000000180)=""/43, 0xfd8a, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000045c0)={{r4}, &(0x7f0000004540), &(0x7f0000004580)}, 0x20) rt_sigsuspend(&(0x7f0000000280)={[0x2]}, 0x8) memfd_create(&(0x7f0000000080), 0x0) splice(r2, 0x0, r1, 0x0, 0xd, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@ipv6_getroute={0x24, 0x12, 0x1, 0x0, 0x0, {0x2}, [@RTA_PREF={0x5}]}, 0x24}}, 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfffffe3e) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='timer_start\x00', r7}, 0x10) openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x4000, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 1.142405006s ago: executing program 1 (id=2090): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000008c0)='sys_enter\x00', r1}, 0x10) munlock(&(0x7f0000e4a000/0x1000)=nil, 0x1000) 1.141958106s ago: executing program 1 (id=2091): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0xfff) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a0435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000020000402505a1a44000000001010902"], 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000580)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 1.113231697s ago: executing program 0 (id=2092): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRES64], 0xd, 0x2a0, &(0x7f0000000840)="$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") r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r3, &(0x7f0000000080)="7b934a23d1dda2c1", 0x8, 0x0, &(0x7f0000000340)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_int(r3, 0x0, 0x14, &(0x7f0000000040)=0x4c54, 0x1) recvmmsg(r3, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=""/215, 0xd7}, 0x2}], 0x1, 0x0, 0x0) write$cgroup_devices(r2, &(0x7f0000000140)=ANY=[], 0xffdd) mkdir(&(0x7f0000000540)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1adc51, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r6 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) sendfile(r6, r5, 0x0, 0x80000c00) 969.833822ms ago: executing program 0 (id=2094): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16, @ANYBLOB="0000000000000000b702000001000000850000"], &(0x7f0000000200)='GPL\x00', 0xfffffffb, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x5, 0x0, 0x0}, 0x90) write$cgroup_devices(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e0306003c5c9801288463"], 0xffdd) inotify_init1(0x0) r7 = gettid() r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r8, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_fallocate_exit\x00', r10}, 0x10) r11 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x441, 0x0) fallocate(r11, 0x0, 0x0, 0x1000005) fcntl$setown(r1, 0x8, r7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 880.770846ms ago: executing program 0 (id=2096): r0 = syz_open_dev$hiddev(&(0x7f0000000080), 0x25, 0x0) ioctl$HIDIOCSREPORT(r0, 0x400c4808, &(0x7f0000000180)={0x3, 0xffffffff, 0x7}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000020018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='ext4_remove_blocks\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000d8ffffffb703000008000000b70400000000925e8500000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000730135000000000095000000000000004d6c8aac63e3b08de4e7312d489547b3b60d3dfe986fc08b807f928cffbf473f78c22201d6a86baaa7"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000080)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='ext4_remove_blocks\x00', r4}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, 0x0, &(0x7f00000005c0)}, 0x20) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r6, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002302230102090500000010000020"]) r7 = memfd_create(&(0x7f0000002280)='\xcaB\x89\xed`@>\x89=\x9e', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r7, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(r6, 0x4008550c, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) 427.005563ms ago: executing program 0 (id=2097): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r2}, 0x38) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) bind$inet6(r3, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) syz_emit_ethernet(0xd2, &(0x7f0000000900)=ANY=[@ANYBLOB="ffffffffbfff00000000000086dd600489f1009c1100fc010000000000000025030000000000ff02000000000000000000000000000100000e22"], 0x0) 385.055555ms ago: executing program 2 (id=2100): mkdir(&(0x7f0000000400)='./file1\x00', 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000079000000090000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r2, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000013c0)={0x0, 0x1, 0x6, @broadcast}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c00000010004b0400f4ed00000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c0002800800040000000000060006"], 0x4c}}, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r5 = creat(&(0x7f0000000180)='./file1\x00', 0x80) eventfd(0x400) ioctl$VHOST_SET_VRING_ERR(r5, 0x4008af22, &(0x7f0000000200)={0x2}) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r7, 0x4c81, 0xfffffffffffffffc) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0)={0x0, 0x6}, 0x10}, 0x90) 376.761535ms ago: executing program 0 (id=2101): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x39000, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYRES16=r2], 0xfe, 0x216, &(0x7f0000000e00)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x0, 0x0, 0x5}, 0x48) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') pread64(r5, &(0x7f0000000180)=""/43, 0xfd8a, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000045c0)={{r4}, &(0x7f0000004540), &(0x7f0000004580)}, 0x20) rt_sigsuspend(&(0x7f0000000280)={[0x2]}, 0x8) memfd_create(&(0x7f0000000080), 0x0) splice(r2, 0x0, r1, 0x0, 0xd, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@ipv6_getroute={0x24, 0x12, 0x1, 0x0, 0x0, {0x2}, [@RTA_PREF={0x5}]}, 0x24}}, 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfffffe3e) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='timer_start\x00', r7}, 0x10) openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x4000, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 262.79668ms ago: executing program 2 (id=2102): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000008c0)='sys_enter\x00', r1}, 0x10) munlock(&(0x7f0000e4a000/0x1000)=nil, 0x1000) 247.57984ms ago: executing program 2 (id=2103): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000010a850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) fsync(r1) 230.153691ms ago: executing program 2 (id=2104): mkdir(&(0x7f0000000280)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000002c00)=ANY=[@ANYBLOB="b0"], 0xb0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)=0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000780)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',privport,access=', @ANYRESDEC=r4]) lstat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000d80)) 206.569782ms ago: executing program 2 (id=2105): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRES64], 0xd, 0x2a0, &(0x7f0000000840)="$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") r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r3, &(0x7f0000000080)="7b934a23d1dda2c1", 0x8, 0x0, &(0x7f0000000340)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_int(r3, 0x0, 0x14, &(0x7f0000000040)=0x4c54, 0x1) recvmmsg(r3, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=""/215, 0xd7}, 0x2}], 0x1, 0x0, 0x0) write$cgroup_devices(r2, &(0x7f0000000140)=ANY=[], 0xffdd) mkdir(&(0x7f0000000540)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1adc51, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r6 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) sendfile(r6, r5, 0x0, 0x80000c00) 0s ago: executing program 2 (id=2106): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16, @ANYBLOB="0000000000000000b702000001000000850000"], &(0x7f0000000200)='GPL\x00', 0xfffffffb, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x5, 0x0, 0x0}, 0x90) write$cgroup_devices(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e0306003c5c9801288463"], 0xffdd) inotify_init1(0x0) r7 = gettid() r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r8, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_fallocate_exit\x00', r10}, 0x10) r11 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x441, 0x0) fallocate(r11, 0x0, 0x0, 0x1000005) fcntl$setown(r1, 0x8, r7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): to_bridge: link becomes ready [ 190.692412][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 190.700932][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.707906][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.715437][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 190.724558][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 190.733183][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.740422][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.754522][ T20] usb 4-1: USB disconnect, device number 21 [ 190.758985][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 190.769527][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 190.777421][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 190.785739][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 190.803694][ T5466] device veth0_vlan entered promiscuous mode [ 190.811407][ T2148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 190.825691][ T2148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 190.833999][ T2148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 190.843220][ T2148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 190.847822][ T4012] usb 4-1.1: new full-speed USB device number 22 using dummy_hcd [ 190.851556][ T2148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 190.865559][ T4012] usb 4-1.1: parent hub has no TT [ 190.866182][ T2148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 190.871423][ T4012] usb 4-1-port1: attempt power cycle [ 190.937239][ T5481] udc-core: couldn't find an available UDC or it's busy [ 190.944223][ T5481] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 191.024535][ T5466] device veth1_macvtap entered promiscuous mode [ 191.063844][ T5485] syz.1.1762[5485] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 191.063907][ T5485] syz.1.1762[5485] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 191.145601][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 191.166776][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 191.175019][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 191.182777][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 191.191046][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 191.201046][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 191.211069][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 191.447999][ T7] device bridge_slave_1 left promiscuous mode [ 191.457696][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.466332][ T7] device bridge_slave_0 left promiscuous mode [ 191.484058][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.493614][ T7] device veth1_macvtap left promiscuous mode [ 191.499748][ T7] device veth0_vlan left promiscuous mode [ 191.595178][ T5492] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1762'. [ 191.604673][ T5492] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1762'. [ 192.068768][ T5522] sch_fq: defrate 0 ignored. [ 192.439686][ T5528] EXT4-fs (loop1): mounted filesystem without journal. Opts: commit=0x0000000000000005,,errors=continue [ 192.496728][ T5536] syz.2.1784[5536] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 192.496793][ T5536] syz.2.1784[5536] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 192.687209][ T5542] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1784'. [ 192.707258][ T5542] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1784'. [ 192.988000][ T5] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 193.227780][ T5] usb 2-1: Using ep0 maxpacket: 32 [ 193.347903][ T5] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.358874][ T5] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.369067][ T5] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 193.378131][ T5] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.400340][ T5] usb 2-1: config 0 descriptor?? [ 193.439515][ T5] hub 2-1:0.0: USB hub found [ 193.554559][ T5545] F2FS-fs (loop2): Found nat_bits in checkpoint [ 193.586891][ T5545] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 193.600140][ T5545] attempt to access beyond end of device [ 193.600140][ T5545] loop2: rw=2049, want=45104, limit=40427 [ 193.641038][ T5540] netlink: 252 bytes leftover after parsing attributes in process `syz.1.1785'. [ 193.657988][ T5] hub 2-1:0.0: 1 port detected [ 194.347935][ T5] hub 2-1:0.0: activate --> -90 [ 194.730122][ T5560] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.737013][ T5560] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.744444][ T5560] device bridge_slave_0 entered promiscuous mode [ 194.751642][ T5560] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.758539][ T5560] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.765809][ T5560] device bridge_slave_1 entered promiscuous mode [ 194.778530][ T5567] udc-core: couldn't find an available UDC or it's busy [ 194.785399][ T5567] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 194.820663][ T5560] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.827534][ T5560] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.834662][ T5560] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.841630][ T5560] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.863888][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 194.872016][ T25] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.879488][ T25] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.899217][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 194.907237][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.914102][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.922201][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 194.930384][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.937387][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.944648][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 194.952653][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 194.966504][ T2148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 194.978840][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 194.986730][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 194.995135][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 195.003588][ T5560] device veth0_vlan entered promiscuous mode [ 195.014920][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 195.024807][ T5560] device veth1_macvtap entered promiscuous mode [ 195.039418][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 195.048287][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 195.076679][ T330] print_req_error: 42 callbacks suppressed [ 195.076699][ T330] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 195.077653][ T5570] sch_fq: defrate 0 ignored. [ 195.083916][ T330] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 195.120271][ T330] buffer_io_error: 16 callbacks suppressed [ 195.120282][ T330] Buffer I/O error on dev loop0p4, logical block 2097136, async page read [ 195.142908][ T330] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 195.154670][ T330] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 195.166096][ T330] Buffer I/O error on dev loop0p4, logical block 2097136, async page read [ 195.204524][ T388] usb 2-1: USB disconnect, device number 32 [ 195.221376][ T5572] EXT4-fs (loop0): mounted filesystem without journal. Opts: commit=0x0000000000000005,,errors=continue [ 195.585954][ T5] usb 2-1.1: new full-speed USB device number 33 using dummy_hcd [ 195.593639][ T5] usb 2-1.1: parent hub has no TT [ 195.598635][ T5] usb 2-1-port1: attempt power cycle [ 195.619728][ T330] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 195.635187][ T5584] device vlan2 entered promiscuous mode [ 195.640633][ T5584] device syz_tun entered promiscuous mode [ 195.646297][ T330] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 195.659830][ T330] Buffer I/O error on dev loop0p4, logical block 2097136, async page read [ 195.668653][ T5584] device syz_tun left promiscuous mode [ 195.763703][ T5580] F2FS-fs (loop0): Unrecognized mount option "nobarrimr" or missing value [ 195.773920][ T24] audit: type=1400 audit(2000000148.006:721): avc: denied { mount } for pid=5579 comm="syz.0.1796" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 195.831338][ T24] audit: type=1400 audit(2000000148.056:722): avc: denied { unmount } for pid=5560 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 195.872166][ T24] audit: type=1326 audit(2000000148.086:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5593 comm="syz.0.1800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe231bfef19 code=0x7ffc0000 [ 195.900763][ T24] audit: type=1326 audit(2000000148.086:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5593 comm="syz.0.1800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe231bfef19 code=0x7ffc0000 [ 195.930431][ T24] audit: type=1326 audit(2000000148.086:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5593 comm="syz.0.1800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe231bfef19 code=0x7ffc0000 [ 195.963643][ T24] audit: type=1326 audit(2000000148.086:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5593 comm="syz.0.1800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe231bfef19 code=0x7ffc0000 [ 195.988194][ T24] audit: type=1326 audit(2000000148.086:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5593 comm="syz.0.1800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe231bfef19 code=0x7ffc0000 [ 196.020946][ T330] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 196.033361][ T330] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 196.046054][ T330] Buffer I/O error on dev loop0p4, logical block 2097136, async page read [ 196.054853][ T24] audit: type=1326 audit(2000000148.086:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5593 comm="syz.0.1800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe231bfef19 code=0x7ffc0000 [ 196.080627][ T24] audit: type=1326 audit(2000000148.086:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5593 comm="syz.0.1800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe231bfef19 code=0x7ffc0000 [ 196.104504][ T24] audit: type=1326 audit(2000000148.086:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5593 comm="syz.0.1800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe231bfef19 code=0x7ffc0000 [ 196.216812][ T330] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 196.445615][ T5600] EXT4-fs (loop2): 1 orphan inode deleted [ 196.451479][ T5600] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 196.468160][ T5600] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038 (0x7fffffff) [ 196.478349][ T330] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 196.494998][ T330] Buffer I/O error on dev loop0p4, logical block 2097136, async page read [ 196.529502][ T5602] F2FS-fs (loop0): Found nat_bits in checkpoint [ 196.567844][ T325] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 196.601520][ T5602] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 196.638283][ T5602] attempt to access beyond end of device [ 196.638283][ T5602] loop0: rw=2049, want=45104, limit=40427 [ 196.852306][ T5628] F2FS-fs (loop1): Unrecognized mount option "nobarrimr" or missing value [ 196.875146][ T5635] udc-core: couldn't find an available UDC or it's busy [ 196.878181][ T853] Buffer I/O error on dev loop0p4, logical block 2097136, async page read [ 196.882708][ T5635] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 196.902628][ T5635] netlink: 252 bytes leftover after parsing attributes in process `syz.0.1813'. [ 196.957895][ T325] usb 4-1: New USB device found, idVendor=2833, idProduct=0211, bcdDevice=54.5a [ 196.966856][ T325] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.977443][ T325] usb 4-1: config 0 descriptor?? [ 197.502583][ T330] Buffer I/O error on dev loop0p4, logical block 2097136, async page read [ 197.512785][ T5648] EXT4-fs (loop2): 1 orphan inode deleted [ 197.519669][ T5648] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 197.528548][ T5648] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038 (0x7fffffff) [ 197.631242][ T5656] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.638625][ T5656] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.649222][ T5656] device bridge_slave_0 entered promiscuous mode [ 197.657439][ T5656] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.665517][ T5656] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.672889][ T5656] device bridge_slave_1 entered promiscuous mode [ 197.704558][ T5668] device vlan2 entered promiscuous mode [ 197.710149][ T5668] device syz_tun entered promiscuous mode [ 197.716497][ T5668] device syz_tun left promiscuous mode [ 197.758510][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 197.766236][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 197.782793][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 197.792678][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 197.801105][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.807985][ T325] usb 4-1: language id specifier not provided by device, defaulting to English [ 197.808157][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.824180][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 197.833271][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 197.841510][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.848382][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.863053][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 197.871008][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 197.879263][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 197.895173][ T2148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 197.912287][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 197.921566][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 197.929460][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 197.937504][ T5656] device veth0_vlan entered promiscuous mode [ 197.952222][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 197.962265][ T5656] device veth1_macvtap entered promiscuous mode [ 197.973091][ T5670] F2FS-fs (loop2): Unrecognized mount option "nobarrimr" or missing value [ 197.975582][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 198.023019][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 198.036450][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 198.046811][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 198.087906][ T325] uvcvideo: Found UVC 0.00 device (2833:0211) [ 198.094866][ T325] uvcvideo: No valid video chain found. [ 198.112109][ T325] usb 4-1: USB disconnect, device number 26 [ 198.324767][ T5681] F2FS-fs (loop4): Found nat_bits in checkpoint [ 198.361683][ T5681] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 198.426832][ T5698] EXT4-fs (loop0): 1 orphan inode deleted [ 198.432797][ T5698] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 198.469611][ T5698] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038 (0x7fffffff) [ 198.762496][ T330] Buffer I/O error on dev loop0p4, logical block 2097136, async page read [ 199.679636][ T330] Buffer I/O error on dev loop0p4, logical block 2097136, async page read [ 199.809933][ T5728] F2FS-fs (loop0): Unrecognized mount option "nobarrimr" or missing value [ 199.923424][ T330] Buffer I/O error on dev loop0p4, logical block 2097136, async page read [ 199.931900][ T2699] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 200.023411][ T5738] EXT4-fs (loop0): 1 orphan inode deleted [ 200.029191][ T5738] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 200.037996][ T5738] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038 (0x7fffffff) [ 200.073605][ T5743] udc-core: couldn't find an available UDC or it's busy [ 200.080582][ T5743] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 200.091452][ T330] print_req_error: 10 callbacks suppressed [ 200.091467][ T330] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 200.109153][ T330] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 200.217829][ T325] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 200.297871][ T2699] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.309006][ T2699] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.318625][ T2699] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 200.327520][ T2699] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.340551][ T2699] usb 5-1: config 0 descriptor?? [ 200.362762][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 2. Dropping request. Check SNMP counters. [ 200.457802][ T325] usb 4-1: Using ep0 maxpacket: 16 [ 200.604880][ T330] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 200.616772][ T330] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 200.628548][ T330] buffer_io_error: 1 callbacks suppressed [ 200.628558][ T330] Buffer I/O error on dev loop0p4, logical block 2097136, async page read [ 200.667826][ T325] usb 4-1: config 2 has an invalid interface number: 177 but max is 3 [ 200.676005][ T325] usb 4-1: config 2 has an invalid interface number: 21 but max is 3 [ 200.684301][ T325] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 200.694427][ T325] usb 4-1: config 2 has 2 interfaces, different from the descriptor's value: 4 [ 200.703392][ T325] usb 4-1: config 2 has no interface number 0 [ 200.709668][ T325] usb 4-1: config 2 has no interface number 1 [ 200.715599][ T325] usb 4-1: config 2 interface 177 altsetting 5 endpoint 0xD has an invalid bInterval 22, changing to 7 [ 200.726759][ T325] usb 4-1: config 2 interface 177 altsetting 5 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 200.737811][ T325] usb 4-1: config 2 interface 177 altsetting 5 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 200.748746][ T325] usb 4-1: config 2 interface 177 altsetting 5 has an invalid endpoint with address 0x0, skipping [ 200.759423][ T325] usb 4-1: config 2 interface 177 altsetting 5 has an invalid endpoint with address 0x0, skipping [ 200.770072][ T325] usb 4-1: config 2 interface 177 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 200.780932][ T325] usb 4-1: config 2 interface 177 altsetting 5 endpoint 0xC has an invalid bInterval 154, changing to 7 [ 200.792889][ T325] usb 4-1: config 2 interface 177 altsetting 5 endpoint 0xC has invalid wMaxPacketSize 0 [ 200.802577][ T325] usb 4-1: config 2 interface 177 altsetting 5 has an invalid endpoint with address 0x0, skipping [ 200.813191][ T325] usb 4-1: config 2 interface 21 altsetting 188 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 200.826215][ T325] usb 4-1: config 2 interface 177 has no altsetting 0 [ 200.833154][ T2699] hid (null): bogus close delimiter [ 200.839222][ T325] usb 4-1: config 2 interface 21 has no altsetting 0 [ 200.849554][ T5755] F2FS-fs (loop0): Found nat_bits in checkpoint [ 200.891528][ T5755] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 201.037850][ T2699] usb 5-1: language id specifier not provided by device, defaulting to English [ 201.047390][ T325] usb 4-1: New USB device found, idVendor=1b3d, idProduct=0147, bcdDevice=a4.9c [ 201.057133][ T325] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.067044][ T325] usb 4-1: Product: х [ 201.071982][ T325] usb 4-1: Manufacturer: 菤稹퍓䳊捉諭뭋䣢ᖩ扫寛䤴彏酣竾㛆焰ꓛ꘺젃킟틦띠邤᜝휣ꑅ솽귾柗㝼豲✸ﳴฌ쒸⭋Ｄ㝆졏纓萭鋊ಷ桐膡⟛椏ꐚ氭ꪼ죣ଶǶڰ淩ᔨᄶ뵌즱☭Ἆ᪀릮驴௮싖·⅋棣뾠ⰸ✥뛩嘾収⨙㽌ﱦ룉第䌿ᥙꌾ頇豬䑆쯍䲒䓣鰠숞➴₡玘곚젦 [ 201.121613][ T325] usb 4-1: SerialNumber: Г [ 201.778296][ T325] ftdi_sio 4-1:2.177: FTDI USB Serial Device converter detected [ 201.786544][ T325] usb 4-1: Detected FT2232C [ 201.791356][ T325] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 12 [ 201.809264][ T853] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 201.817843][ T325] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 201.827710][ T853] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 201.839544][ T853] Buffer I/O error on dev loop0p4, logical block 2097136, async page read [ 201.847951][ T325] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 201.848603][ T325] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 201.868162][ T853] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 201.880264][ T853] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 201.891929][ T853] Buffer I/O error on dev loop0p4, logical block 2097136, async page read [ 201.908490][ T325] ftdi_sio 4-1:2.21: FTDI USB Serial Device converter detected [ 201.918297][ T325] usb 4-1: Detected FT2232C [ 201.924071][ T853] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 201.936128][ T853] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 201.938003][ T325] ftdi_sio ttyUSB1: Unable to read latency timer: -71 [ 201.948304][ T853] Buffer I/O error on dev loop0p4, logical block 2097136, async page read [ 201.977833][ T325] ftdi_sio ttyUSB1: Unable to write latency timer: -71 [ 201.985382][ T325] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB1 [ 202.004623][ T325] usb 4-1: USB disconnect, device number 27 [ 202.029100][ T325] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 202.045028][ T325] ftdi_sio 4-1:2.177: device disconnected [ 202.052424][ T325] ftdi_sio ttyUSB1: FTDI USB Serial Device converter now disconnected from ttyUSB1 [ 202.062199][ T325] ftdi_sio 4-1:2.21: device disconnected [ 202.128910][ T5778] F2FS-fs (loop0): Unrecognized mount option "nobarrimr" or missing value [ 202.188197][ T2699] uclogic 0003:256C:006D.001F: v1 buttonpad probing failed: -71 [ 202.195683][ T2699] uclogic 0003:256C:006D.001F: failed probing parameters: -71 [ 202.203485][ T2699] uclogic: probe of 0003:256C:006D.001F failed with error -71 [ 202.212353][ T2699] usb 5-1: USB disconnect, device number 27 [ 202.234280][ T5781] EXT4-fs (loop1): 1 orphan inode deleted [ 202.239906][ T5781] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 202.249009][ T5781] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038 (0x7fffffff) [ 202.266012][ T24] kauditd_printk_skb: 158 callbacks suppressed [ 202.266028][ T24] audit: type=1326 audit(2000000154.486:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5780 comm="syz.1.1856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ac33a7f19 code=0x7ffc0000 [ 202.325111][ T24] audit: type=1326 audit(2000000154.536:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5780 comm="syz.1.1856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ac33a7f19 code=0x7ffc0000 [ 202.333200][ T330] Buffer I/O error on dev loop0p4, logical block 2097136, async page read [ 202.348458][ T24] audit: type=1326 audit(2000000154.536:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5780 comm="syz.1.1856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9ac33a7f19 code=0x7ffc0000 [ 202.379682][ T24] audit: type=1326 audit(2000000154.536:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5780 comm="syz.1.1856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ac33a7f19 code=0x7ffc0000 [ 202.395168][ T330] Buffer I/O error on dev loop0p4, logical block 2097136, async page read [ 202.404380][ T24] audit: type=1326 audit(2000000154.536:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5780 comm="syz.1.1856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ac33a7f19 code=0x7ffc0000 [ 202.434771][ T24] audit: type=1326 audit(2000000154.536:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5780 comm="syz.1.1856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9ac33a7f19 code=0x7ffc0000 [ 202.458398][ T24] audit: type=1326 audit(2000000154.536:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5780 comm="syz.1.1856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ac33a7f19 code=0x7ffc0000 [ 202.481696][ T24] audit: type=1326 audit(2000000154.536:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5780 comm="syz.1.1856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ac33a7f19 code=0x7ffc0000 [ 202.504992][ T24] audit: type=1326 audit(2000000154.536:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5780 comm="syz.1.1856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f9ac33a7f19 code=0x7ffc0000 [ 202.528363][ T24] audit: type=1326 audit(2000000154.536:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5780 comm="syz.1.1856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ac33a7f19 code=0x7ffc0000 [ 202.552770][ T7] tipc: Left network mode [ 202.586910][ T5790] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.593853][ T5790] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.601219][ T5790] device bridge_slave_0 entered promiscuous mode [ 202.612664][ T5790] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.619784][ T5790] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.626995][ T5790] device bridge_slave_1 entered promiscuous mode [ 202.669355][ T5790] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.676208][ T5790] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.683367][ T5790] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.690234][ T5790] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.723904][ T5801] futex_wake_op: syz.4.1863 tries to shift op by 32; fix this program [ 202.732346][ T2699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 202.739789][ T2699] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.747135][ T2699] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.776870][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 202.788461][ T325] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.795542][ T325] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.855012][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 202.863367][ T325] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.870250][ T325] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.877519][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 202.898000][ T2148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 202.907048][ T2148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 202.917880][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 202.926300][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 202.933749][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 202.969146][ T5790] device veth0_vlan entered promiscuous mode [ 203.141870][ T5790] device veth1_macvtap entered promiscuous mode [ 203.242373][ T4012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 203.258394][ T4012] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 203.260920][ T330] Buffer I/O error on dev loop0p4, logical block 2097136, async page read [ 203.276837][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 2. Dropping request. Check SNMP counters. [ 203.277426][ T4012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 203.429056][ T5814] F2FS-fs (loop0): Unrecognized mount option "nobarrimr" or missing value [ 203.511797][ T7] device veth1_macvtap left promiscuous mode [ 203.512731][ T330] Buffer I/O error on dev loop0p4, logical block 2097136, async page read [ 203.518235][ T7] device veth0_vlan left promiscuous mode [ 203.562775][ T5823] EXT4-fs (loop0): 1 orphan inode deleted [ 203.569521][ T5823] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 203.578435][ T5823] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038 (0x7fffffff) [ 203.671724][ T330] Buffer I/O error on dev loop0p4, logical block 2097136, async page read [ 203.713556][ T330] Buffer I/O error on dev loop0p4, logical block 2097136, async page read [ 203.722227][ T5834] futex_wake_op: syz.4.1873 tries to shift op by 32; fix this program [ 203.917917][ T926] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 204.017884][ T25] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 204.157832][ T926] usb 2-1: Using ep0 maxpacket: 16 [ 204.358080][ T926] usb 2-1: config 2 has an invalid interface number: 177 but max is 3 [ 204.366104][ T926] usb 2-1: config 2 has an invalid interface number: 21 but max is 3 [ 204.374118][ T926] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 204.384443][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.395171][ T325] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 204.402502][ T926] usb 2-1: config 2 has 2 interfaces, different from the descriptor's value: 4 [ 204.411343][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.420815][ T926] usb 2-1: config 2 has no interface number 0 [ 204.426690][ T926] usb 2-1: config 2 has no interface number 1 [ 204.432721][ T25] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 204.441594][ T926] usb 2-1: config 2 interface 177 altsetting 5 endpoint 0xD has an invalid bInterval 22, changing to 7 [ 204.452603][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.460886][ T926] usb 2-1: config 2 interface 177 altsetting 5 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 204.472200][ T25] usb 5-1: config 0 descriptor?? [ 204.477026][ T926] usb 2-1: config 2 interface 177 altsetting 5 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 204.487761][ T926] usb 2-1: config 2 interface 177 altsetting 5 has an invalid endpoint with address 0x0, skipping [ 204.498506][ T926] usb 2-1: config 2 interface 177 altsetting 5 has an invalid endpoint with address 0x0, skipping [ 204.509795][ T926] usb 2-1: config 2 interface 177 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 204.520345][ T926] usb 2-1: config 2 interface 177 altsetting 5 endpoint 0xC has an invalid bInterval 154, changing to 7 [ 204.531512][ T926] usb 2-1: config 2 interface 177 altsetting 5 endpoint 0xC has invalid wMaxPacketSize 0 [ 204.541366][ T926] usb 2-1: config 2 interface 177 altsetting 5 has an invalid endpoint with address 0x0, skipping [ 204.551972][ T926] usb 2-1: config 2 interface 21 altsetting 188 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 204.565095][ T926] usb 2-1: config 2 interface 177 has no altsetting 0 [ 204.571724][ T926] usb 2-1: config 2 interface 21 has no altsetting 0 [ 204.647844][ T325] usb 4-1: Using ep0 maxpacket: 8 [ 204.737865][ T926] usb 2-1: New USB device found, idVendor=1b3d, idProduct=0147, bcdDevice=a4.9c [ 204.746864][ T926] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.755414][ T926] usb 2-1: Product: х [ 204.759484][ T926] usb 2-1: Manufacturer: 菤稹퍓䳊捉諭뭋䣢ᖩ扫寛䤴彏酣竾㛆焰ꓛ꘺젃킟틦띠邤᜝휣ꑅ솽귾柗㝼豲✸ﳴฌ쒸⭋Ｄ㝆졏纓萭鋊ಷ桐膡⟛椏ꐚ氭ꪼ죣ଶǶڰ淩ᔨᄶ뵌즱☭Ἆ᪀릮驴௮싖·⅋棣뾠ⰸ✥뛩嘾収⨙㽌ﱦ룉第䌿ᥙꌾ頇豬䑆쯍䲒䓣鰠숞➴₡玘곚젦 [ 204.790943][ T325] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.801898][ T325] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.811646][ T325] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 204.824490][ T926] usb 2-1: SerialNumber: Г [ 204.829018][ T325] usb 4-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 204.838778][ T325] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.900998][ T325] usb 4-1: config 0 descriptor?? [ 204.948563][ T25] hid (null): bogus close delimiter [ 205.183343][ T5851] fuseblk: Bad value for 'fd' [ 205.194269][ T25] usb 5-1: language id specifier not provided by device, defaulting to English [ 205.229949][ T926] ftdi_sio 2-1:2.177: FTDI USB Serial Device converter detected [ 205.237959][ T926] usb 2-1: Detected FT2232C [ 205.242358][ T926] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 12 [ 205.267989][ T926] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 205.288014][ T926] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 205.295590][ T926] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 205.307873][ T325] usbhid 4-1:0.0: can't add hid device: -71 [ 205.313676][ T325] usbhid: probe of 4-1:0.0 failed with error -71 [ 205.320659][ T325] usb 4-1: USB disconnect, device number 28 [ 205.338199][ T926] ftdi_sio 2-1:2.21: FTDI USB Serial Device converter detected [ 205.345890][ T926] usb 2-1: Detected FT2232C [ 205.367931][ T926] ftdi_sio ttyUSB1: Unable to read latency timer: -71 [ 205.387831][ T926] ftdi_sio ttyUSB1: Unable to write latency timer: -71 [ 205.395194][ T926] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB1 [ 205.409175][ T926] usb 2-1: USB disconnect, device number 37 [ 205.424851][ T926] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 205.434745][ T926] ftdi_sio 2-1:2.177: device disconnected [ 205.441782][ T926] ftdi_sio ttyUSB1: FTDI USB Serial Device converter now disconnected from ttyUSB1 [ 205.451452][ T926] ftdi_sio 2-1:2.21: device disconnected [ 205.718168][ T5862] futex_wake_op: syz.0.1885 tries to shift op by 32; fix this program [ 205.721878][ T330] print_req_error: 26 callbacks suppressed [ 205.721900][ T330] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 205.751481][ T387] kernel write not supported for file /rfkill (pid: 387 comm: kworker/0:5) [ 205.778940][ T330] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 205.792067][ T330] buffer_io_error: 7 callbacks suppressed [ 205.792079][ T330] Buffer I/O error on dev loop0p4, logical block 2097136, async page read [ 205.826723][ T330] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 205.838791][ T330] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 205.862201][ T330] Buffer I/O error on dev loop0p4, logical block 2097136, async page read [ 205.875365][ T5874] EXT4-fs (loop0): Ignoring removed orlov option [ 205.881644][ T5874] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 205.908200][ T5874] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue [ 205.933304][ T5872] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.940944][ T5872] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.949868][ T5872] device bridge_slave_0 entered promiscuous mode [ 205.958653][ T5872] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.965506][ T5872] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.983473][ T5872] device bridge_slave_1 entered promiscuous mode [ 206.072001][ T5872] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.078982][ T5872] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.086198][ T5872] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.093051][ T5872] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.107886][ T25] uclogic 0003:256C:006D.0020: v1 buttonpad probing failed: -71 [ 206.115809][ T25] uclogic 0003:256C:006D.0020: failed probing parameters: -71 [ 206.123535][ T25] uclogic: probe of 0003:256C:006D.0020 failed with error -71 [ 206.136846][ T25] usb 5-1: USB disconnect, device number 28 [ 206.162251][ T387] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.170199][ T387] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.188702][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 206.196334][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 206.225337][ T926] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 206.234046][ T926] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.240956][ T926] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.248707][ T926] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 206.257161][ T926] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.264073][ T926] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.283592][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 206.292740][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 206.312744][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 206.324777][ T2148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 206.332920][ T2148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 206.340436][ T2148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 206.349078][ T5872] device veth0_vlan entered promiscuous mode [ 206.363247][ T5872] device veth1_macvtap entered promiscuous mode [ 206.370268][ T2148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 206.386021][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 206.394672][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 206.420897][ T2334] device bridge_slave_1 left promiscuous mode [ 206.426947][ T2334] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.434954][ T2334] device bridge_slave_0 left promiscuous mode [ 206.442768][ T2334] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.452570][ T2334] device veth1_macvtap left promiscuous mode [ 206.458523][ T2334] device veth0_vlan left promiscuous mode [ 206.950089][ T5560] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /33/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 206.972324][ T5560] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 33: comm syz-executor: path /33/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 206.996574][ T5560] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 34: comm syz-executor: path /33/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 207.018596][ T5560] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 35: comm syz-executor: path /33/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 207.040641][ T5560] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 36: comm syz-executor: path /33/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 207.062747][ T5560] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 37: comm syz-executor: path /33/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 207.084311][ T5560] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 38: comm syz-executor: path /33/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 207.197074][ T5560] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 39: comm syz-executor: path /33/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 207.270515][ T5560] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 40: comm syz-executor: path /33/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 207.294791][ T5560] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 41: comm syz-executor: path /33/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 207.321809][ T5560] EXT4-fs warning (device loop0): ext4_empty_dir:3039: inode #11: comm syz-executor: directory missing '.' [ 207.338427][ T926] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 207.346806][ T5560] EXT4-fs warning (device loop0): ext4_empty_dir:3039: inode #11: comm syz-executor: directory missing '.' [ 207.360389][ T5560] EXT4-fs warning (device loop0): ext4_empty_dir:3039: inode #11: comm syz-executor: directory missing '.' [ 207.373888][ T5560] EXT4-fs warning (device loop0): ext4_empty_dir:3039: inode #11: comm syz-executor: directory missing '.' [ 207.388202][ T5560] EXT4-fs warning (device loop0): ext4_empty_dir:3039: inode #11: comm syz-executor: directory missing '.' [ 207.401359][ T5560] EXT4-fs warning (device loop0): ext4_empty_dir:3039: inode #11: comm syz-executor: directory missing '.' [ 207.414654][ T5560] EXT4-fs warning (device loop0): ext4_empty_dir:3039: inode #11: comm syz-executor: directory missing '.' [ 207.428012][ T5560] EXT4-fs warning (device loop0): ext4_empty_dir:3039: inode #11: comm syz-executor: directory missing '.' [ 207.442339][ T5560] EXT4-fs warning (device loop0): ext4_empty_dir:3039: inode #11: comm syz-executor: directory missing '.' [ 207.456933][ T5560] EXT4-fs warning (device loop0): ext4_empty_dir:3039: inode #11: comm syz-executor: directory missing '.' [ 207.627872][ T926] usb 5-1: Using ep0 maxpacket: 16 [ 207.747980][ T20] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 207.782169][ T5907] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.789087][ T5907] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.796349][ T5907] device bridge_slave_0 entered promiscuous mode [ 207.803435][ T5907] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.810315][ T5907] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.819046][ T5907] device bridge_slave_1 entered promiscuous mode [ 207.832803][ T24] kauditd_printk_skb: 78 callbacks suppressed [ 207.832858][ T24] audit: type=1107 audit(2000000160.056:977): pid=5911 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='Z 6$5G%w [ 207.832858][ T24] [ 207.832858][ T24] [ 207.832858][ T24] dav;AO1?p_ZʿM/R޴dx.P†M^z]^)A@?\e>hu_I;l̲ ǀqsz]ހ0gd]cJ[cd&@R VhƲ,.gQ'wojX"N OUޕUqa+|T6Nb;N)\; Q-4PGh*…Ñ.I{׹f:%ybER\Gߊ kC:F$c'͕+a#g78o'?\M~2~h?2|$A3泥zaSQ9LN򪜤i.ru4ӷT8Raf71y詶l[ D4~rHSBN (VYz 6/c<7kO+H~Ѭ,qlMhOq}`!^?nm'X'Y-!_1nk]Ur>1'!x0О1#3FO=}NqAD|7 6glA(w3>*!gΦgB# N)- [ 207.847854][ T926] usb 5-1: config 2 has an invalid interface number: 177 but max is 3 [ 207.881383][ T5907] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.934428][ T926] usb 5-1: config 2 has an invalid interface number: 21 but max is 3 [ 207.938332][ T5907] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.938436][ T5907] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.946049][ T926] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 207.953295][ T5907] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.984435][ T926] usb 5-1: config 2 has 2 interfaces, different from the descriptor's value: 4 [ 207.993302][ T926] usb 5-1: config 2 has no interface number 0 [ 207.999408][ T926] usb 5-1: config 2 has no interface number 1 [ 208.005306][ T926] usb 5-1: config 2 interface 177 altsetting 5 endpoint 0xD has an invalid bInterval 22, changing to 7 [ 208.016195][ T926] usb 5-1: config 2 interface 177 altsetting 5 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 208.027068][ T926] usb 5-1: config 2 interface 177 altsetting 5 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 208.037773][ T926] usb 5-1: config 2 interface 177 altsetting 5 has an invalid endpoint with address 0x0, skipping [ 208.048185][ T20] usb 2-1: Using ep0 maxpacket: 8 [ 208.053034][ T926] usb 5-1: config 2 interface 177 altsetting 5 has an invalid endpoint with address 0x0, skipping [ 208.063476][ T926] usb 5-1: config 2 interface 177 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 208.074073][ T926] usb 5-1: config 2 interface 177 altsetting 5 endpoint 0xC has an invalid bInterval 154, changing to 7 [ 208.085186][ T926] usb 5-1: config 2 interface 177 altsetting 5 endpoint 0xC has invalid wMaxPacketSize 0 [ 208.094901][ T926] usb 5-1: config 2 interface 177 altsetting 5 has an invalid endpoint with address 0x0, skipping [ 208.105441][ T926] usb 5-1: config 2 interface 21 altsetting 188 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 208.118375][ T926] usb 5-1: config 2 interface 177 has no altsetting 0 [ 208.124907][ T926] usb 5-1: config 2 interface 21 has no altsetting 0 [ 208.133308][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 208.141387][ T387] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.149463][ T387] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.174000][ T2148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 208.178047][ T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.182981][ T2148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 208.203197][ T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.204272][ T2148] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.213918][ T20] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 208.219630][ T2148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.221393][ T2148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 208.232979][ T20] usb 2-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 208.241510][ T2148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 208.264719][ T20] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.266024][ T20] usb 2-1: config 0 descriptor?? [ 208.278243][ T2148] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.285100][ T2148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.287921][ T926] usb 5-1: New USB device found, idVendor=1b3d, idProduct=0147, bcdDevice=a4.9c [ 208.293141][ T2148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 208.309409][ T2148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 208.318648][ T2148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 208.326693][ T2148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 208.328318][ T926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.345001][ T926] usb 5-1: Product: х [ 208.349026][ T926] usb 5-1: Manufacturer: 菤稹퍓䳊捉諭뭋䣢ᖩ扫寛䤴彏酣竾㛆焰ꓛ꘺젃킟틦띠邤᜝휣ꑅ솽귾柗㝼豲✸ﳴฌ쒸⭋Ｄ㝆졏纓萭鋊ಷ桐膡⟛椏ꐚ氭ꪼ죣ଶǶڰ淩ᔨᄶ뵌즱☭Ἆ᪀릮驴௮싖·⅋棣뾠ⰸ✥뛩嘾収⨙㽌ﱦ룉第䌿ᥙꌾ頇豬䑆쯍䲒䓣鰠숞➴₡玘곚젦 [ 208.380381][ T926] usb 5-1: SerialNumber: Г [ 208.402227][ T4012] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 208.410716][ T4012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 208.436003][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 208.443924][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 208.452072][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 208.459451][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 208.468594][ T5907] device veth0_vlan entered promiscuous mode [ 208.495955][ T5921] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.503088][ T5921] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.510669][ T5921] device bridge_slave_0 entered promiscuous mode [ 208.511573][ T5905] fuseblk: Bad value for 'fd' [ 208.522623][ T5907] device veth1_macvtap entered promiscuous mode [ 208.529759][ T4012] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 208.538198][ T4012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 208.546359][ T4012] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 208.554479][ T5921] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.561570][ T5921] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.569054][ T5921] device bridge_slave_1 entered promiscuous mode [ 208.596086][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 208.604756][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 208.617876][ T20] usbhid 2-1:0.0: can't add hid device: -71 [ 208.625129][ T20] usbhid: probe of 2-1:0.0 failed with error -71 [ 208.632019][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 208.633100][ T20] usb 2-1: USB disconnect, device number 38 [ 208.650863][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 208.667800][ T2148] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 208.691519][ T25] kernel write not supported for file /rfkill (pid: 25 comm: kworker/1:1) [ 208.700088][ T853] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 208.714898][ T7] device bridge_slave_1 left promiscuous mode [ 208.721652][ T926] ftdi_sio 5-1:2.177: FTDI USB Serial Device converter detected [ 208.729478][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.736885][ T926] usb 5-1: Detected FT2232C [ 208.737081][ T853] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 208.741840][ T926] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 12 [ 208.760644][ T853] Buffer I/O error on dev loop0p4, logical block 2097136, async page read [ 208.769290][ T7] device bridge_slave_0 left promiscuous mode [ 208.776992][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.784331][ T926] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 208.789623][ T853] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 208.804108][ T7] device veth1_macvtap left promiscuous mode [ 208.804215][ T853] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 208.810557][ T926] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 208.821583][ T853] Buffer I/O error on dev loop0p4, logical block 2097136, async page read [ 208.829748][ T926] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 208.845793][ T7] device veth0_vlan left promiscuous mode [ 208.888265][ T926] ftdi_sio 5-1:2.21: FTDI USB Serial Device converter detected [ 208.896126][ T926] usb 5-1: Detected FT2232C [ 208.918274][ T926] ftdi_sio ttyUSB1: Unable to read latency timer: -71 [ 208.950595][ T926] ftdi_sio ttyUSB1: Unable to write latency timer: -71 [ 208.959173][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 208.961366][ T926] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB1 [ 208.987996][ T926] usb 5-1: USB disconnect, device number 29 [ 208.996212][ T926] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 209.002921][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 209.006033][ T926] ftdi_sio 5-1:2.177: device disconnected [ 209.015305][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 209.027656][ T387] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.028897][ T926] ftdi_sio ttyUSB1: FTDI USB Serial Device converter now disconnected from ttyUSB1 [ 209.034577][ T387] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.044812][ T926] ftdi_sio 5-1:2.21: device disconnected [ 209.051905][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 209.065102][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 209.073382][ T387] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.080286][ T387] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.088028][ T2148] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.099007][ T2148] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 209.124316][ T2148] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 209.133593][ T2148] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.141353][ T5921] device veth0_vlan entered promiscuous mode [ 209.150293][ T2148] usb 4-1: config 0 descriptor?? [ 209.155371][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 209.163118][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 209.171892][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 209.180408][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 209.189101][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 209.197145][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 209.205717][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 209.219411][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 209.229327][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 209.240004][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 2. Dropping request. Check SNMP counters. [ 209.240705][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 209.259167][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 209.275277][ T5921] device veth1_macvtap entered promiscuous mode [ 209.289964][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 209.298233][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 209.306280][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 209.314464][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 209.322748][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 209.352689][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 209.371172][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 209.425582][ T5943] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.433492][ T5943] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.441003][ T5943] device bridge_slave_0 entered promiscuous mode [ 209.449072][ T5943] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.456382][ T5943] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.463770][ T5943] device bridge_slave_1 entered promiscuous mode [ 209.512004][ T5943] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.518872][ T5943] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.526005][ T5943] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.532786][ T5943] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.564778][ T330] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 209.577434][ T330] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 209.589832][ T330] Buffer I/O error on dev loop0p4, logical block 2097136, async page read [ 209.591235][ T4012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 209.605894][ T4012] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.613164][ T4012] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.634196][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 209.645780][ T387] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.652777][ T387] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.653895][ T4012] kernel write not supported for file /rfkill (pid: 4012 comm: kworker/1:10) [ 209.667704][ T2148] hid (null): bogus close delimiter [ 209.677105][ T330] Buffer I/O error on dev loop0p4, logical block 2097136, async page read [ 209.688560][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 209.693489][ T853] Buffer I/O error on dev loop0p4, logical block 2097136, async page read [ 209.696831][ T387] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.711596][ T387] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.728218][ T4012] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 209.738657][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 209.869157][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 209.901566][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 209.915174][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 209.923320][ T2148] usb 4-1: language id specifier not provided by device, defaulting to English [ 209.935246][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 209.960406][ T5943] device veth0_vlan entered promiscuous mode [ 210.012017][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 210.020191][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 210.032595][ T5943] device veth1_macvtap entered promiscuous mode [ 210.043579][ T4012] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 210.051276][ T4012] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 210.059634][ T4012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 210.076277][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 210.086704][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 210.118896][ T24] audit: type=1107 audit(2000000162.346:978): pid=5962 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='Z 6$5G%w [ 210.118896][ T24] [ 210.118896][ T24] [ 210.118896][ T24] dav;AO1?p_ZʿM/R޴dx.P†M^z]^)A@?\e>hu_I;l̲ ǀqsz]ހ0gd]cJ[cd&@R VhƲ,.gQ'wojX"N OUޕUqa+|T6Nb;N)\; Q-4PGh*…Ñ.I{׹f:%ybER\Gߊ kC:F$c'͕+a#g78o'?\M~2~h?2|$A3泥zaSQ9LN򪜤i.ru4ӷT8Raf71y詶l[ D4~rHSBN (VYz 6/c<7kO+H~Ѭ,qlMhOq}`!^?nm'X'Y-!_1nk]Ur>1'!x0О1#3FO=}NqAD|7 6glA(w3>*!gΦgB# N)- [ 210.159276][ T7] device bridge_slave_1 left promiscuous mode [ 210.253362][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.262151][ T7] device bridge_slave_0 left promiscuous mode [ 210.268325][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.276523][ T7] device veth1_macvtap left promiscuous mode [ 210.282651][ T7] device veth0_vlan left promiscuous mode [ 210.388108][ T4012] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 210.540609][ T330] Buffer I/O error on dev loop0p4, logical block 2097136, async page read [ 210.647794][ T4012] usb 2-1: Using ep0 maxpacket: 8 [ 210.796095][ T325] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 210.838682][ T4012] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.853624][ T4012] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.865180][ T4012] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 210.883694][ T4012] usb 2-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 210.899601][ T4012] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.943765][ T4012] usb 2-1: config 0 descriptor?? [ 210.958023][ T2148] uclogic 0003:256C:006D.0021: v1 buttonpad probing failed: -71 [ 210.965725][ T2148] uclogic 0003:256C:006D.0021: failed probing parameters: -71 [ 210.973392][ T2148] uclogic: probe of 0003:256C:006D.0021 failed with error -71 [ 210.982331][ T2148] usb 4-1: USB disconnect, device number 29 [ 211.047813][ T325] usb 5-1: Using ep0 maxpacket: 16 [ 211.189981][ T5961] fuseblk: Bad value for 'fd' [ 211.247949][ T325] usb 5-1: config 2 has an invalid interface number: 177 but max is 3 [ 211.256040][ T325] usb 5-1: config 2 has an invalid interface number: 21 but max is 3 [ 211.267378][ T325] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 211.277916][ T325] usb 5-1: config 2 has 2 interfaces, different from the descriptor's value: 4 [ 211.286710][ T325] usb 5-1: config 2 has no interface number 0 [ 211.292765][ T4012] usbhid 2-1:0.0: can't add hid device: -71 [ 211.298810][ T4012] usbhid: probe of 2-1:0.0 failed with error -71 [ 211.304991][ T325] usb 5-1: config 2 has no interface number 1 [ 211.311144][ T325] usb 5-1: config 2 interface 177 altsetting 5 endpoint 0xD has an invalid bInterval 22, changing to 7 [ 211.324534][ T4012] usb 2-1: USB disconnect, device number 39 [ 211.331658][ T325] usb 5-1: config 2 interface 177 altsetting 5 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 211.342512][ T325] usb 5-1: config 2 interface 177 altsetting 5 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 211.353608][ T325] usb 5-1: config 2 interface 177 altsetting 5 has an invalid endpoint with address 0x0, skipping [ 211.364104][ T325] usb 5-1: config 2 interface 177 altsetting 5 has an invalid endpoint with address 0x0, skipping [ 211.391586][ T325] usb 5-1: config 2 interface 177 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 211.402167][ T325] usb 5-1: config 2 interface 177 altsetting 5 endpoint 0xC has an invalid bInterval 154, changing to 7 [ 211.413108][ T325] usb 5-1: config 2 interface 177 altsetting 5 endpoint 0xC has invalid wMaxPacketSize 0 [ 211.422739][ T325] usb 5-1: config 2 interface 177 altsetting 5 has an invalid endpoint with address 0x0, skipping [ 211.433199][ T325] usb 5-1: config 2 interface 21 altsetting 188 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 211.446250][ T325] usb 5-1: config 2 interface 177 has no altsetting 0 [ 211.452885][ T325] usb 5-1: config 2 interface 21 has no altsetting 0 [ 211.546806][ T330] print_req_error: 6 callbacks suppressed [ 211.546825][ T330] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 211.566131][ T330] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 211.577630][ T330] Buffer I/O error on dev loop0p4, logical block 2097136, async page read [ 211.596496][ T51] kernel write not supported for file /rfkill (pid: 51 comm: kworker/0:2) [ 211.599902][ T330] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 211.620590][ T325] usb 5-1: New USB device found, idVendor=1b3d, idProduct=0147, bcdDevice=a4.9c [ 211.629551][ T325] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.637421][ T325] usb 5-1: Product: х [ 211.641389][ T325] usb 5-1: Manufacturer: 菤稹퍓䳊捉諭뭋䣢ᖩ扫寛䤴彏酣竾㛆焰ꓛ꘺젃킟틦띠邤᜝휣ꑅ솽귾柗㝼豲✸ﳴฌ쒸⭋Ｄ㝆졏纓萭鋊ಷ桐膡⟛椏ꐚ氭ꪼ죣ଶǶڰ淩ᔨᄶ뵌즱☭Ἆ᪀릮驴௮싖·⅋棣뾠ⰸ✥뛩嘾収⨙㽌ﱦ룉第䌿ᥙꌾ頇豬䑆쯍䲒䓣鰠숞➴₡玘곚젦 [ 211.643881][ T5986] device syzkaller0 entered promiscuous mode [ 211.672917][ T330] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 211.689471][ T330] Buffer I/O error on dev loop0p4, logical block 2097136, async page read [ 211.703867][ T330] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 211.715710][ T325] usb 5-1: SerialNumber: Г [ 211.735095][ T330] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 211.746597][ T330] Buffer I/O error on dev loop0p4, logical block 2097136, async page read [ 211.758165][ T2148] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 211.809456][ T24] audit: type=1107 audit(2000000164.036:979): pid=5990 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='Z 6$5G%w [ 211.809456][ T24] [ 211.809456][ T24] [ 211.809456][ T24] dav;AO1?p_ZʿM/R޴dx.P†M^z]^)A@?\e>hu_I;l̲ ǀqsz]ހ0gd]cJ[cd&@R VhƲ,.gQ'wojX"N OUޕUqa+|T6Nb;N)\; Q-4PGh*…Ñ.I{׹f:%ybER\Gߊ kC:F$c'͕+a#g78o'?\M~2~h?2|$A3泥zaSQ9LN򪜤i.ru4ӷT8Raf71y詶l[ D4~rHSBN (VYz 6/c<7kO+H~Ѭ,qlMhOq}`!^?nm'X'Y-!_1nk]Ur>1'!x0О1#3FO=}NqAD|7 6glA(w3>*!gΦgB# N)- [ 211.830393][ T330] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 211.953983][ T24] audit: type=1400 audit(2000000164.176:980): avc: denied { mount } for pid=5995 comm="syz.0.1932" name="/" dev="ramfs" ino=46112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 211.974170][ T330] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 211.987476][ T330] Buffer I/O error on dev loop0p4, logical block 2097136, async page read [ 212.009887][ T5998] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 212.019079][ T5998] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038 (0x7fffffff) [ 212.023938][ T330] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 212.042301][ T330] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 212.054298][ T330] Buffer I/O error on dev loop0p4, logical block 2097136, async page read [ 212.063644][ T24] audit: type=1400 audit(2000000164.286:981): avc: denied { unmount } for pid=5907 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 212.069165][ T325] ftdi_sio 5-1:2.177: FTDI USB Serial Device converter detected [ 212.083849][ T2148] usb 4-1: Using ep0 maxpacket: 16 [ 212.105434][ T330] Buffer I/O error on dev loop0p4, logical block 2097136, async page read [ 212.112600][ T325] usb 5-1: Detected FT2232C [ 212.121114][ T325] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 12 [ 212.132905][ T6007] udc-core: couldn't find an available UDC or it's busy [ 212.142074][ T330] Buffer I/O error on dev loop0p4, logical block 2097136, async page read [ 212.151127][ T6007] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 212.157829][ T325] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 212.187826][ T325] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 212.195119][ T325] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 212.238221][ T325] ftdi_sio 5-1:2.21: FTDI USB Serial Device converter detected [ 212.245976][ T325] usb 5-1: Detected FT2232C [ 212.267837][ T325] ftdi_sio ttyUSB1: Unable to read latency timer: -71 [ 212.287790][ T325] ftdi_sio ttyUSB1: Unable to write latency timer: -71 [ 212.295183][ T325] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB1 [ 212.304908][ T325] usb 5-1: USB disconnect, device number 30 [ 212.314973][ T6009] EXT4-fs warning (device loop1): verify_group_input:147: Cannot add at group 31 (only 1 groups) [ 212.326881][ T325] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 212.336546][ T325] ftdi_sio 5-1:2.177: device disconnected [ 212.343935][ T325] ftdi_sio ttyUSB1: FTDI USB Serial Device converter now disconnected from ttyUSB1 [ 212.353760][ T325] ftdi_sio 5-1:2.21: device disconnected [ 212.407822][ T2148] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 212.416677][ T2148] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.425024][ T2148] usb 4-1: Product: syz [ 212.429110][ T2148] usb 4-1: Manufacturer: syz [ 212.433422][ T2148] usb 4-1: SerialNumber: syz [ 212.448062][ T2148] usb 4-1: config 0 descriptor?? [ 212.659606][ T6011] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.666627][ T6011] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.674346][ T6011] device bridge_slave_0 entered promiscuous mode [ 212.686126][ T6011] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.695076][ T6011] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.695525][ T853] Buffer I/O error on dev loop0p4, logical block 2097136, async page read [ 212.702771][ T6011] device bridge_slave_1 entered promiscuous mode [ 212.773406][ T6011] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.780313][ T6011] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.787405][ T6011] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.794297][ T6011] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.843530][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 212.851605][ T15] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.868777][ T15] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.890210][ T2148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 212.898463][ T2148] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.904478][ T6016] kvm: pic: non byte read [ 212.905403][ T2148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.929706][ T6020] syz.1.1939[6020] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 212.929773][ T6020] syz.1.1939[6020] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 212.929882][ T2148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 212.962778][ T2148] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.969673][ T2148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.987160][ T2148] usb 4-1: USB disconnect, device number 30 [ 213.002459][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 213.011308][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 213.021154][ T330] Buffer I/O error on dev loop0p4, logical block 2097136, async page read [ 213.027673][ T6011] device veth0_vlan entered promiscuous mode [ 213.050166][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 213.058362][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 213.065455][ T24] audit: type=1107 audit(2000000165.286:982): pid=6022 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='Z 6$5G%w [ 213.065455][ T24] [ 213.065455][ T24] [ 213.065455][ T24] dav;AO1?p_ZʿM/R޴dx.P†M^z]^)A@?\e>hu_I;l̲ ǀqsz]ހ0gd]cJ[cd&@R VhƲ,.gQ'wojX"N OUޕUqa+|T6Nb;N)\; Q-4PGh*…Ñ.I{׹f:%ybER\Gߊ kC:F$c'͕+a#g78o'?\M~2~h?2|$A3泥zaSQ9LN򪜤i.ru4ӷT8Raf71y詶l[ D4~rHSBN (VYz 6/c<7kO+H~Ѭ,qlMhOq}`!^?nm'X'Y-!_1nk]Ur>1'!x0О1#3FO=}NqAD|7 6glA(w3>*!gΦgB# N)- [ 213.065846][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 213.157594][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 213.176812][ T6011] device veth1_macvtap entered promiscuous mode [ 213.184080][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 213.192613][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 213.200869][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 213.212657][ T330] Buffer I/O error on dev loop0p4, logical block 2097136, async page read [ 213.226060][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 213.236678][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 213.247126][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 213.257290][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 213.290160][ T20] kernel write not supported for file /rfkill (pid: 20 comm: kworker/1:0) [ 213.620675][ T2334] device bridge_slave_1 left promiscuous mode [ 213.637131][ T2334] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.655852][ T6044] udc-core: couldn't find an available UDC or it's busy [ 213.662989][ T6044] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 213.671066][ T2334] device bridge_slave_0 left promiscuous mode [ 213.677125][ T2334] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.686761][ T2334] device veth1_macvtap left promiscuous mode [ 213.692911][ T2334] device veth0_vlan left promiscuous mode [ 213.715314][ T6046] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 213.724398][ T6046] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038 (0x7fffffff) [ 213.931398][ T6053] EXT4-fs warning (device loop3): verify_group_input:147: Cannot add at group 31 (only 1 groups) [ 214.127810][ T325] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 214.205525][ T6058] syz.0.1951[6058] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 214.205589][ T6058] syz.0.1951[6058] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 214.362019][ T6060] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 214.381003][ T325] usb 5-1: Using ep0 maxpacket: 16 [ 214.386161][ T6060] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 214.395366][ T6060] F2FS-fs (loop0): invalid crc value [ 214.403120][ T6060] F2FS-fs (loop0): Found nat_bits in checkpoint [ 214.435440][ T6060] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 214.442376][ T6060] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 214.487159][ T5907] attempt to access beyond end of device [ 214.487159][ T5907] loop0: rw=2049, want=40968, limit=40427 [ 214.577903][ T325] usb 5-1: config 2 has an invalid interface number: 177 but max is 3 [ 214.589055][ T325] usb 5-1: config 2 has an invalid interface number: 21 but max is 3 [ 214.602866][ T325] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 214.612924][ T325] usb 5-1: config 2 has 2 interfaces, different from the descriptor's value: 4 [ 214.622318][ T325] usb 5-1: config 2 has no interface number 0 [ 214.628523][ T325] usb 5-1: config 2 has no interface number 1 [ 214.634492][ T325] usb 5-1: config 2 interface 177 altsetting 5 endpoint 0xD has an invalid bInterval 22, changing to 7 [ 214.645510][ T325] usb 5-1: config 2 interface 177 altsetting 5 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 214.656393][ T325] usb 5-1: config 2 interface 177 altsetting 5 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 214.667158][ T325] usb 5-1: config 2 interface 177 altsetting 5 has an invalid endpoint with address 0x0, skipping [ 214.677570][ T325] usb 5-1: config 2 interface 177 altsetting 5 has an invalid endpoint with address 0x0, skipping [ 214.687980][ T325] usb 5-1: config 2 interface 177 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 214.698501][ T325] usb 5-1: config 2 interface 177 altsetting 5 endpoint 0xC has an invalid bInterval 154, changing to 7 [ 214.709647][ T325] usb 5-1: config 2 interface 177 altsetting 5 endpoint 0xC has invalid wMaxPacketSize 0 [ 214.719375][ T325] usb 5-1: config 2 interface 177 altsetting 5 has an invalid endpoint with address 0x0, skipping [ 214.729874][ T325] usb 5-1: config 2 interface 21 altsetting 188 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 214.742823][ T325] usb 5-1: config 2 interface 177 has no altsetting 0 [ 214.748979][ T387] kernel write not supported for file /rfkill (pid: 387 comm: kworker/0:5) [ 214.749434][ T325] usb 5-1: config 2 interface 21 has no altsetting 0 [ 214.892091][ T6080] udc-core: couldn't find an available UDC or it's busy [ 214.899091][ T6080] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 214.909080][ T6080] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1959'. [ 214.909091][ T24] audit: type=1400 audit(2000000167.136:983): avc: denied { nlmsg_read } for pid=6079 comm="syz.0.1959" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 214.918135][ T325] usb 5-1: New USB device found, idVendor=1b3d, idProduct=0147, bcdDevice=a4.9c [ 214.947683][ T325] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.955836][ T325] usb 5-1: Product: х [ 214.960023][ T325] usb 5-1: Manufacturer: 菤稹퍓䳊捉諭뭋䣢ᖩ扫寛䤴彏酣竾㛆焰ꓛ꘺젃킟틦띠邤᜝휣ꑅ솽귾柗㝼豲✸ﳴฌ쒸⭋Ｄ㝆졏纓萭鋊ಷ桐膡⟛椏ꐚ氭ꪼ죣ଶǶڰ淩ᔨᄶ뵌즱☭Ἆ᪀릮驴௮싖·⅋棣뾠ⰸ✥뛩嘾収⨙㽌ﱦ룉第䌿ᥙꌾ頇豬䑆쯍䲒䓣鰠숞➴₡玘곚젦 [ 214.991151][ T325] usb 5-1: SerialNumber: Г [ 215.097828][ T387] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 215.308155][ T325] ftdi_sio 5-1:2.177: FTDI USB Serial Device converter detected [ 215.316036][ T325] usb 5-1: Detected FT2232C [ 215.320450][ T325] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 12 [ 215.338060][ T387] usb 4-1: Using ep0 maxpacket: 16 [ 215.348108][ T325] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 215.367823][ T325] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 215.375248][ T325] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 215.418292][ T325] ftdi_sio 5-1:2.21: FTDI USB Serial Device converter detected [ 215.426110][ T325] usb 5-1: Detected FT2232C [ 215.447825][ T325] ftdi_sio ttyUSB1: Unable to read latency timer: -71 [ 215.467884][ T325] ftdi_sio ttyUSB1: Unable to write latency timer: -71 [ 215.475106][ T325] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB1 [ 215.484274][ T325] usb 5-1: USB disconnect, device number 31 [ 215.493824][ T325] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 215.503200][ T325] ftdi_sio 5-1:2.177: device disconnected [ 215.510235][ T325] ftdi_sio ttyUSB1: FTDI USB Serial Device converter now disconnected from ttyUSB1 [ 215.519785][ T325] ftdi_sio 5-1:2.21: device disconnected [ 215.599591][ T6083] EXT4-fs (loop0): Ignoring removed orlov option [ 215.605988][ T6083] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 215.629173][ T6083] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue [ 215.648023][ T387] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 215.658502][ T387] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.672535][ T387] usb 4-1: Product: syz [ 215.676720][ T387] usb 4-1: Manufacturer: syz [ 215.681563][ T387] usb 4-1: SerialNumber: syz [ 215.690390][ T387] usb 4-1: config 0 descriptor?? [ 215.903199][ T6089] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.910359][ T6089] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.917744][ T6089] device bridge_slave_0 entered promiscuous mode [ 215.925071][ T6089] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.934137][ T6089] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.941927][ T6089] device bridge_slave_1 entered promiscuous mode [ 216.001864][ T6089] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.008789][ T6089] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.015868][ T6089] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.022643][ T6089] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.048952][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 216.057306][ T387] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.065215][ T387] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.083341][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 216.092412][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.099301][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.107001][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 216.115215][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.122099][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.138599][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 216.146458][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 216.160834][ T15] usb 4-1: USB disconnect, device number 31 [ 216.175854][ T4012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 216.189431][ T4012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 216.198200][ T4012] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 216.206341][ T4012] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 216.219896][ T6089] device veth0_vlan entered promiscuous mode [ 216.233812][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 216.244002][ T6089] device veth1_macvtap entered promiscuous mode [ 216.271243][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 216.290169][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 216.396216][ T6100] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 216.407864][ T6100] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038 (0x7fffffff) [ 216.448427][ T2334] device bridge_slave_1 left promiscuous mode [ 216.454421][ T2334] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.506525][ T2334] device bridge_slave_0 left promiscuous mode [ 216.528080][ T2334] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.538269][ T5907] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /26/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 216.562456][ T2334] device veth1_macvtap left promiscuous mode [ 216.577988][ T2334] device veth0_vlan left promiscuous mode [ 216.598037][ T5907] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 33: comm syz-executor: path /26/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 216.619905][ T5907] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 34: comm syz-executor: path /26/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 216.641702][ T5907] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 35: comm syz-executor: path /26/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 216.663320][ T5907] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 36: comm syz-executor: path /26/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 216.675021][ T6096] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 216.692804][ T5907] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 37: comm syz-executor: path /26/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 216.707917][ T6096] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 216.722704][ T5907] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 38: comm syz-executor: path /26/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 216.746699][ T5907] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 39: comm syz-executor: path /26/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 216.768737][ T6096] F2FS-fs (loop1): invalid crc value [ 216.774351][ T5907] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 40: comm syz-executor: path /26/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 216.798452][ T5907] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 41: comm syz-executor: path /26/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 216.824862][ T6106] EXT4-fs warning (device loop4): verify_group_input:147: Cannot add at group 31 (only 1 groups) [ 216.838063][ T6096] F2FS-fs (loop1): Found nat_bits in checkpoint [ 216.848384][ T5907] EXT4-fs warning (device loop0): ext4_empty_dir:3039: inode #11: comm syz-executor: directory missing '.' [ 216.861874][ T5907] EXT4-fs warning (device loop0): ext4_empty_dir:3039: inode #11: comm syz-executor: directory missing '.' [ 216.889663][ T5907] EXT4-fs warning (device loop0): ext4_empty_dir:3039: inode #11: comm syz-executor: directory missing '.' [ 216.967096][ T5907] EXT4-fs warning (device loop0): ext4_empty_dir:3039: inode #11: comm syz-executor: directory missing '.' [ 216.989222][ T5907] EXT4-fs warning (device loop0): ext4_empty_dir:3039: inode #11: comm syz-executor: directory missing '.' [ 217.000882][ T6096] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 217.011167][ T5907] EXT4-fs warning (device loop0): ext4_empty_dir:3039: inode #11: comm syz-executor: directory missing '.' [ 217.011630][ T6096] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 217.024158][ T5907] EXT4-fs warning (device loop0): ext4_empty_dir:3039: inode #11: comm syz-executor: directory missing '.' [ 217.043457][ T5907] EXT4-fs warning (device loop0): ext4_empty_dir:3039: inode #11: comm syz-executor: directory missing '.' [ 217.059314][ T5907] EXT4-fs warning (device loop0): ext4_empty_dir:3039: inode #11: comm syz-executor: directory missing '.' [ 217.073350][ T5907] EXT4-fs warning (device loop0): ext4_empty_dir:3039: inode #11: comm syz-executor: directory missing '.' [ 217.101284][ T5872] attempt to access beyond end of device [ 217.101284][ T5872] loop1: rw=2049, want=40968, limit=40427 [ 217.727324][ T6134] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.734458][ T6134] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.741779][ T6134] device bridge_slave_0 entered promiscuous mode [ 217.751267][ T6134] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.758236][ T6134] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.765423][ T6134] device bridge_slave_1 entered promiscuous mode [ 217.813857][ T6134] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.820760][ T6134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.827842][ T6134] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.834594][ T6134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.848552][ T325] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.855684][ T325] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.867884][ T2148] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 217.875825][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 217.883121][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 217.910075][ T926] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 217.918952][ T926] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 217.927616][ T926] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.934506][ T926] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.942130][ T926] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 217.951457][ T926] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 217.959750][ T926] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.966595][ T926] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.974044][ T926] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 217.982043][ T926] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 217.990478][ T926] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 217.998677][ T926] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 218.006463][ T926] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 218.014718][ T926] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 218.025739][ T6134] device veth0_vlan entered promiscuous mode [ 218.031941][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 218.040536][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 218.058933][ T325] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 218.059360][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 218.074068][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 218.092054][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 218.100518][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 218.111189][ T6134] device veth1_macvtap entered promiscuous mode [ 218.121219][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 218.128730][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 218.136747][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 218.150495][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 218.158585][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 218.180687][ T6150] netlink: 1028 bytes leftover after parsing attributes in process `syz.0.1975'. [ 218.185731][ T330] print_req_error: 32 callbacks suppressed [ 218.185750][ T330] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 218.190205][ T6150] sch_tbf: burst 0 is lower than device bridge_slave_0 mtu (1514) ! [ 218.196470][ T330] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 218.226844][ T330] buffer_io_error: 11 callbacks suppressed [ 218.226855][ T330] Buffer I/O error on dev loop0p4, logical block 2097136, async page read [ 218.256200][ T330] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 218.269092][ T2334] device bridge_slave_1 left promiscuous mode [ 218.269822][ T330] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 218.275147][ T2334] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.287554][ T330] Buffer I/O error on dev loop0p4, logical block 2097136, async page read [ 218.302316][ T2334] device bridge_slave_0 left promiscuous mode [ 218.308555][ T2334] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.316335][ T2334] device veth1_macvtap left promiscuous mode [ 218.322361][ T325] usb 5-1: Using ep0 maxpacket: 16 [ 218.322436][ T2334] device veth0_vlan left promiscuous mode [ 218.332975][ T2148] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.344037][ T2148] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.353730][ T2148] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice=10.00 [ 218.362573][ T2148] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.381520][ T2148] usb 2-1: config 0 descriptor?? [ 218.459990][ T6152] kvm: pic: non byte read [ 218.509708][ T6156] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 218.519333][ T6156] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038 (0x7fffffff) [ 218.597885][ T325] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 218.606745][ T325] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.615746][ T325] usb 5-1: Product: syz [ 218.619826][ T325] usb 5-1: Manufacturer: syz [ 218.622847][ T6126] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1971'. [ 218.624158][ T325] usb 5-1: SerialNumber: syz [ 218.625002][ T325] usb 5-1: config 0 descriptor?? [ 218.761409][ T6161] EXT4-fs warning (device loop0): verify_group_input:147: Cannot add at group 31 (only 1 groups) [ 218.860241][ T2148] hid-multitouch 0003:1FD2:6007.0022: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.1-1/input0 [ 218.910113][ T24] audit: type=1400 audit(2000000171.136:984): avc: denied { link } for pid=6162 comm="syz.3.1984" name="file1" dev="incremental-fs" ino=144 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 218.938715][ T5790] incfs: Unexpected inode type [ 219.050670][ T6165] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.057585][ T6165] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.064900][ T6165] device bridge_slave_0 entered promiscuous mode [ 219.074177][ T6165] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.081093][ T6165] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.088467][ T6165] device bridge_slave_1 entered promiscuous mode [ 219.105365][ T2148] usb 5-1: USB disconnect, device number 32 [ 219.150120][ T51] usb 2-1: USB disconnect, device number 40 [ 219.161956][ T6165] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.169011][ T6165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.176234][ T6165] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.183047][ T6165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.206722][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 219.214454][ T5] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.221961][ T5] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.234854][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 219.243183][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.250042][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.259187][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 219.267555][ T20] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.274422][ T20] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.292770][ T4012] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 219.300596][ T4012] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 219.315732][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 219.328396][ T4012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 219.343332][ T4012] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 219.358047][ T4012] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 219.376367][ T6165] device veth0_vlan entered promiscuous mode [ 219.392076][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 219.402078][ T6165] device veth1_macvtap entered promiscuous mode [ 219.416439][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 219.434782][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 219.501643][ T330] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 219.518190][ T330] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 219.529514][ T330] Buffer I/O error on dev loop0p4, logical block 2097136, async page read [ 219.538392][ T2334] device bridge_slave_1 left promiscuous mode [ 219.544598][ T2334] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.729662][ T2334] device bridge_slave_0 left promiscuous mode [ 219.766008][ T2334] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.786238][ T2334] device veth1_macvtap left promiscuous mode [ 219.794852][ T2334] device veth0_vlan left promiscuous mode [ 219.942835][ T6171] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.950324][ T6171] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.965701][ T330] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 219.968083][ T6171] device bridge_slave_0 entered promiscuous mode [ 219.985608][ T6186] netlink: 1028 bytes leftover after parsing attributes in process `syz.1.1992'. [ 219.995722][ T6195] udc-core: couldn't find an available UDC or it's busy [ 219.998021][ T330] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 220.002797][ T6186] sch_tbf: burst 0 is lower than device bridge_slave_0 mtu (1514) ! [ 220.021733][ T6195] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 220.032344][ T6171] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.039218][ T330] Buffer I/O error on dev loop0p4, logical block 2097136, async page read [ 220.048206][ T6171] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.055583][ T6171] device bridge_slave_1 entered promiscuous mode [ 220.061262][ T330] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 220.092512][ T330] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 220.104053][ T330] Buffer I/O error on dev loop0p4, logical block 2097136, async page read [ 220.165079][ T4012] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 220.176092][ T4012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 220.180452][ T6202] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 220.192373][ T2699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 220.200402][ T6202] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038 (0x7fffffff) [ 220.200719][ T2699] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 220.218872][ T2699] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.225752][ T2699] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.239406][ T2699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 220.253714][ T2699] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 220.269117][ T2699] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.275972][ T2699] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.296802][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 220.315205][ T2148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 220.327207][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 220.353067][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 220.366880][ T6171] device veth0_vlan entered promiscuous mode [ 220.373426][ T4012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 220.381754][ T4012] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 220.389774][ T4012] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 220.405071][ T6171] device veth1_macvtap entered promiscuous mode [ 220.413216][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 220.445050][ T4012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 220.453415][ T4012] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 220.478443][ T24] audit: type=1400 audit(2000000172.706:985): avc: denied { ioctl } for pid=6212 comm="syz.2.1989" path="/dev/usbmon0" dev="devtmpfs" ino=134 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 220.523096][ T6216] udc-core: couldn't find an available UDC or it's busy [ 220.530388][ T6216] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 220.549011][ T330] Buffer I/O error on dev loop0p4, logical block 2097136, async page read [ 220.564368][ T6216] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2002'. [ 220.581519][ T330] Buffer I/O error on dev loop0p4, logical block 2097136, async page read [ 220.600051][ T6220] EXT4-fs warning (device loop1): verify_group_input:147: Cannot add at group 31 (only 1 groups) [ 220.625626][ T6226] netlink: 1028 bytes leftover after parsing attributes in process `syz.3.2006'. [ 220.634904][ T6226] sch_tbf: burst 0 is lower than device bridge_slave_0 mtu (1514) ! [ 220.717527][ T330] Buffer I/O error on dev loop0p4, logical block 2097136, async page read [ 221.237302][ T6256] netlink: 1028 bytes leftover after parsing attributes in process `syz.2.2017'. [ 221.246614][ T6256] sch_tbf: burst 0 is lower than device bridge_slave_0 mtu (1514) ! [ 221.421701][ T6260] EXT4-fs (loop3): 1 truncate cleaned up [ 221.428406][ T6260] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsdgroups,grpquota,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,nolazytime,errors=continue,grpjquota=,errors=remount-ro,nobarrier, [ 221.469978][ T6269] device vlan2 entered promiscuous mode [ 221.491366][ T6269] device vlan0 entered promiscuous mode [ 221.505365][ T6269] device vlan0 left promiscuous mode [ 221.583633][ T330] Buffer I/O error on dev loop0p4, logical block 2097136, async page read [ 221.626950][ T330] Buffer I/O error on dev loop0p4, logical block 2097136, async page read [ 221.641881][ T6278] udc-core: couldn't find an available UDC or it's busy [ 221.654489][ T6278] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 221.665288][ T6278] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2027'. [ 221.717795][ T4012] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 221.749136][ T6285] netlink: 1028 bytes leftover after parsing attributes in process `syz.1.2030'. [ 221.758239][ T6285] sch_tbf: burst 0 is lower than device bridge_slave_0 mtu (1514) ! [ 221.859347][ T24] audit: type=1326 audit(2000000174.086:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6297 comm="syz.1.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff00a405f19 code=0x7ffc0000 [ 221.882566][ T24] audit: type=1326 audit(2000000174.086:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6297 comm="syz.1.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=194 compat=0 ip=0x7ff00a405f19 code=0x7ffc0000 [ 221.907415][ T24] audit: type=1326 audit(2000000174.086:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6297 comm="syz.1.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff00a405f19 code=0x7ffc0000 [ 221.934059][ T24] audit: type=1326 audit(2000000174.106:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6297 comm="syz.1.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff00a405f19 code=0x7ffc0000 [ 221.988386][ T4012] usb 4-1: Using ep0 maxpacket: 32 [ 222.136571][ T4012] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.169077][ T4012] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.180670][ T4012] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 222.192662][ T4012] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 222.203448][ T4012] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 222.218754][ T4012] usb 4-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 222.299115][ T4012] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.317194][ T4012] usb 4-1: config 0 descriptor?? [ 222.441070][ T24] audit: type=1326 audit(2000000174.666:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6326 comm="syz.0.2048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69e75e9f19 code=0x7ffc0000 [ 222.464418][ T24] audit: type=1326 audit(2000000174.666:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6326 comm="syz.0.2048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=194 compat=0 ip=0x7f69e75e9f19 code=0x7ffc0000 [ 222.503114][ T24] audit: type=1326 audit(2000000174.666:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6326 comm="syz.0.2048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69e75e9f19 code=0x7ffc0000 [ 222.527317][ T24] audit: type=1326 audit(2000000174.686:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6326 comm="syz.0.2048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69e75e9f19 code=0x7ffc0000 [ 222.620059][ T6339] udc-core: couldn't find an available UDC or it's busy [ 222.630563][ T6339] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 222.662524][ T6340] device vlan2 entered promiscuous mode [ 222.668107][ T6340] device vlan0 entered promiscuous mode [ 222.676340][ T6340] device vlan0 left promiscuous mode [ 222.820293][ T4012] ntrig 0003:1B96:000A.0023: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.3-1/input0 [ 223.113793][ T6350] device wireguard0 entered promiscuous mode [ 223.362417][ T330] print_req_error: 28 callbacks suppressed [ 223.362436][ T330] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 223.382693][ T330] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 223.394403][ T330] buffer_io_error: 9 callbacks suppressed [ 223.394434][ T330] Buffer I/O error on dev loop0p4, logical block 2097136, async page read [ 223.438118][ T6360] SELinux: Context system_u:object_r:dhcp_state_t:s0 is not valid (left unmapped). [ 223.846465][ T330] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 223.865056][ T330] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 223.877264][ T330] Buffer I/O error on dev loop0p4, logical block 2097136, async page read [ 223.907671][ T330] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 223.930800][ T330] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 223.952957][ T330] Buffer I/O error on dev loop0p4, logical block 2097136, async page read [ 224.477166][ T6390] device wireguard0 entered promiscuous mode [ 224.577401][ T24] kauditd_printk_skb: 9 callbacks suppressed [ 224.577415][ T24] audit: type=1326 audit(2000000176.796:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6394 comm="syz.1.2072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff00a405f19 code=0x7ffc0000 [ 224.606801][ T24] audit: type=1326 audit(2000000176.836:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6394 comm="syz.1.2072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff00a405f19 code=0x7ffc0000 [ 224.631000][ T24] audit: type=1326 audit(2000000176.836:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6394 comm="syz.1.2072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=194 compat=0 ip=0x7ff00a405f19 code=0x7ffc0000 [ 224.655212][ T24] audit: type=1326 audit(2000000176.836:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6394 comm="syz.1.2072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff00a405f19 code=0x7ffc0000 [ 224.679501][ T24] audit: type=1326 audit(2000000176.836:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6394 comm="syz.1.2072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff00a405f19 code=0x7ffc0000 [ 224.806832][ T330] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 224.825459][ T330] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 224.837539][ T330] Buffer I/O error on dev loop0p4, logical block 2097136, async page read [ 224.855470][ T330] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 224.867355][ T330] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 224.879921][ T330] Buffer I/O error on dev loop0p4, logical block 2097136, async page read [ 225.341804][ T24] audit: type=1400 audit(2000000177.566:1008): avc: denied { mounton } for pid=6414 comm="syz.2.2081" path="/15/file0/file0" dev="loop2" ino=1048698 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 225.367016][ T6416] incfs: ino conflict with backing FS 1 [ 225.461303][ T6171] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 225.468924][ T6171] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 225.591563][ T6420] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.598454][ T6420] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.605653][ T6420] device bridge_slave_0 entered promiscuous mode [ 225.612569][ T6420] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.619548][ T6420] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.626776][ T6420] device bridge_slave_1 entered promiscuous mode [ 225.668934][ T330] Buffer I/O error on dev loop0p4, logical block 2097136, async page read [ 225.682160][ T6425] udc-core: couldn't find an available UDC or it's busy [ 225.690455][ T6425] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 225.692012][ T6420] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.704593][ T6420] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.711740][ T6420] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.718496][ T6420] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.742984][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 225.763046][ T25] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.770747][ T25] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.801167][ T2699] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 225.809739][ T2699] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.816601][ T2699] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.833267][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 225.844743][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.851647][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.868446][ T2699] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 225.876870][ T2699] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 225.903797][ T2699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 225.916062][ T6420] device veth0_vlan entered promiscuous mode [ 225.928832][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 225.944844][ T6420] device veth1_macvtap entered promiscuous mode [ 225.952194][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 225.962362][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 225.969755][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 225.986818][ T2699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 225.995604][ T2699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 226.021368][ T2334] device bridge_slave_1 left promiscuous mode [ 226.027365][ T2334] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.034881][ T2334] device bridge_slave_0 left promiscuous mode [ 226.041591][ T6434] FAT-fs (loop1): Unrecognized mount option "" or missing value [ 226.043341][ T2334] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.059605][ T2334] device veth1_macvtap left promiscuous mode [ 226.065438][ T2334] device veth0_vlan left promiscuous mode [ 226.153603][ T6440] device syzkaller0 entered promiscuous mode [ 226.283273][ T6447] incfs: ino conflict with backing FS 1 [ 226.351382][ T6134] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 226.359189][ T6134] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 226.447812][ T2437] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 226.500295][ T6458] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.507280][ T6458] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.515094][ T6458] device bridge_slave_0 entered promiscuous mode [ 226.522425][ T6458] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.529955][ T6458] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.537396][ T6458] device bridge_slave_1 entered promiscuous mode [ 226.604084][ T6458] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.611015][ T6458] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.618069][ T6458] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.624824][ T6458] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.656252][ T926] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 226.665688][ T926] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.673133][ T926] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.698918][ T926] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 226.707120][ T926] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.713998][ T926] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.721643][ T926] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 226.730141][ T926] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.737104][ T926] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.744580][ T926] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 226.752665][ T926] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 226.772050][ T2148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 226.786879][ T6458] device veth0_vlan entered promiscuous mode [ 226.794340][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 226.803147][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 226.811207][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 226.825865][ T6458] device veth1_macvtap entered promiscuous mode [ 226.832300][ T2437] usb 2-1: config 128 has too many interfaces: 254, using maximum allowed: 32 [ 226.841463][ T2437] usb 2-1: config 128 has 0 interfaces, different from the descriptor's value: 254 [ 226.852624][ T2148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 226.861592][ T2148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 226.871079][ T2148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 226.927912][ T2437] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 226.945307][ T6469] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2100'. [ 226.947943][ T2437] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 226.965277][ T24] audit: type=1400 audit(2000000179.186:1009): avc: denied { read } for pid=6468 comm="syz.2.2100" name="loop-control" dev="devtmpfs" ino=110 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 226.969119][ T2437] usb 2-1: SerialNumber: syz [ 226.994997][ T24] audit: type=1400 audit(2000000179.216:1010): avc: denied { open } for pid=6468 comm="syz.2.2100" path="/dev/loop-control" dev="devtmpfs" ino=110 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 227.020649][ T24] audit: type=1400 audit(2000000179.216:1011): avc: denied { ioctl } for pid=6468 comm="syz.2.2100" path="/dev/loop-control" dev="devtmpfs" ino=110 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 227.128705][ T2334] device bridge_slave_1 left promiscuous mode [ 227.134700][ T2334] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.142447][ T2334] device bridge_slave_0 left promiscuous mode [ 227.148738][ T2334] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.159171][ T2334] device veth1_macvtap left promiscuous mode [ 227.166896][ T2334] device veth0_vlan left promiscuous mode [ 227.271134][ T2437] usb 2-1: USB disconnect, device number 41 [ 227.322356][ T24] audit: type=1400 audit(2000000179.546:1012): avc: denied { unlink } for pid=6420 comm="syz-executor" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 227.388495][ T6420] ------------[ cut here ]------------ [ 227.393841][ T6420] WARNING: CPU: 0 PID: 6420 at fs/inode.c:304 drop_nlink+0xc1/0x110 [ 227.402160][ T6420] Modules linked in: [ 227.405909][ T6420] CPU: 0 PID: 6420 Comm: syz-executor Not tainted 5.10.218-syzkaller-00638-g3feee789f446 #0 [ 227.415908][ T6420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 227.426000][ T6420] RIP: 0010:drop_nlink+0xc1/0x110 [ 227.431128][ T6420] Code: 1e 48 8d bb b8 04 00 00 be 08 00 00 00 e8 77 ce f0 ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 af 38 b3 ff <0f> 0b eb 88 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 62 ff ff ff 4c [ 227.450909][ T6420] RSP: 0018:ffffc90001517b08 EFLAGS: 00010293 [ 227.456962][ T6420] RAX: ffffffff81b771d1 RBX: 0000000000000000 RCX: ffff8881107d62c0 [ 227.465328][ T6420] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 227.473289][ T6420] RBP: ffffc90001517b30 R08: ffffffff81b77154 R09: 0000000000000003 [ 227.481086][ T6420] R10: fffff520002a2f50 R11: dffffc0000000001 R12: dffffc0000000000 [ 227.489087][ T6420] R13: 1ffff11021d15585 R14: ffff88810e8aabe0 R15: ffff88810e8aac28 [ 227.497081][ T6420] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 227.506070][ T6420] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 227.514558][ T6420] CR2: 00007f604f032710 CR3: 0000000134454000 CR4: 00000000003506b0 [ 227.522433][ T6420] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 227.530496][ T6420] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 227.538431][ T6420] Call Trace: [ 227.541537][ T6420] ? show_regs+0x58/0x60 [ 227.545604][ T6420] ? __warn+0x160/0x2f0 [ 227.549685][ T6420] ? drop_nlink+0xc1/0x110 [ 227.553849][ T6420] ? report_bug+0x3d9/0x5b0 [ 227.558261][ T6420] ? drop_nlink+0xc1/0x110 [ 227.562444][ T6420] ? handle_bug+0x41/0x70 [ 227.566608][ T6420] ? exc_invalid_op+0x1b/0x50 [ 227.571205][ T6420] ? asm_exc_invalid_op+0x12/0x20 [ 227.575986][ T6420] ? drop_nlink+0x44/0x110 [ 227.580282][ T6420] ? drop_nlink+0xc1/0x110 [ 227.584517][ T6420] ? drop_nlink+0xc1/0x110 [ 227.588867][ T6420] ? drop_nlink+0xc1/0x110 [ 227.593011][ T6420] shmem_rmdir+0x59/0x90 [ 227.597089][ T6420] vfs_rmdir+0x2b7/0x3f0 [ 227.601190][ T6420] incfs_kill_sb+0x108/0x220 [ 227.605597][ T6420] deactivate_locked_super+0xad/0x110 [ 227.610869][ T6420] deactivate_super+0xbe/0xf0 [ 227.615317][ T6420] cleanup_mnt+0x45c/0x510 [ 227.620200][ T6420] __cleanup_mnt+0x19/0x20 [ 227.624451][ T6420] task_work_run+0x129/0x190 [ 227.628945][ T6420] do_exit+0xc83/0x2a50 [ 227.632871][ T6420] ? put_task_struct+0x80/0x80 [ 227.637471][ T6420] ? __kasan_check_read+0x11/0x20 [ 227.642368][ T6420] ? __fdget_pos+0x209/0x3a0 [ 227.646740][ T6420] ? ksys_write+0x24f/0x2c0 [ 227.651168][ T6420] ? fsnotify_link_count+0x90/0x90 [ 227.656026][ T6420] ? __ia32_sys_read+0x90/0x90 [ 227.660790][ T6420] ? debug_smp_processor_id+0x17/0x20 [ 227.665968][ T6420] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 227.672188][ T6420] do_group_exit+0x141/0x310 [ 227.676678][ T6420] ? debug_smp_processor_id+0x17/0x20 [ 227.681880][ T6420] __x64_sys_exit_group+0x3f/0x40 [ 227.686757][ T6420] do_syscall_64+0x34/0x70 [ 227.691079][ T6420] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 227.696812][ T6420] RIP: 0033:0x7f604e36ff19 [ 227.701069][ T6420] Code: Unable to access opcode bytes at RIP 0x7f604e36feef. [ 227.708303][ T6420] RSP: 002b:00007ffd95b2d998 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 227.716477][ T6420] RAX: ffffffffffffffda RBX: 00007f604e3dd6bd RCX: 00007f604e36ff19 [ 227.724329][ T6420] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 227.732152][ T6420] RBP: 0000000000000009 R08: 00007ffd95b2b737 R09: 00007ffd95b2ec50 [ 227.740072][ T6420] R10: 0000000000000009 R11: 0000000000000246 R12: 00007ffd95b2ec50 [ 227.748102][ T6420] R13: 00007f604e3dd65d R14: 0000555556c6e4a8 R15: 0000000000000016 [ 227.755933][ T6420] ---[ end trace a6a26913aa78e887 ]--- [ 227.761563][ T6420] ================================================================== [ 227.769446][ T6420] BUG: KASAN: null-ptr-deref in ihold+0x20/0x60 [ 227.775511][ T6420] Write of size 4 at addr 0000000000000170 by task syz-executor/6420 [ 227.783424][ T6420] SYZFAIL: failed to recv rpc fd=3 want=4 sent=0 n=0 (errno 9: Bad file descriptor) [ 227.785580][ T6420] CPU: 1 PID: 6420 Comm: syz-execut