last executing test programs: 13.025648499s ago: executing program 1 (id=1942): r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000009000/0x4000)=nil) ioperm(0x0, 0xf4, 0x9a0) futex(&(0x7f0000004000), 0x5, 0x0, 0x0, &(0x7f0000004000), 0x8000000) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x7800007, 0x12, r1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x14b042, 0x0) syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000009640)='./file0\x00', 0x840, &(0x7f00000000c0)={[{@lazytime}, {@uqnoenforce}, {@quota}, {@filestreams}, {@noalign}, {@allocsize={'allocsize', 0x3d, [0x33, 0x39, 0x6d]}}, {@largeio}]}, 0x4, 0x968d, &(0x7f000001c300)="$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") chdir(&(0x7f0000000a40)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.sectors_recursive\x00', 0x26e1, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_PANIC(0xffffffffffffffff, 0x5100) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x1000}}) r3 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) fstat(r3, 0x0) read$FUSE(r2, &(0x7f0000002300)={0x2020}, 0x2020) 9.66112369s ago: executing program 1 (id=1955): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe94, 0x30, 0x25, 0x0, 0x0, {}, [{0xe80, 0x1, [@m_pedit={0xe7c, 0x1, 0x0, 0x0, {{0xa}, {0xe50, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x2c, 0x5, 0x0, 0x1, [{0x28, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x2, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe94}}, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000880), 0x200000000000002, 0x862b01) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x12, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x359, 0x0, 0x0, 0x0, 0xff}, {}, {}, [@call={0x85, 0x0, 0x0, 0x2a}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x4a99, 0xc3, &(0x7f0000000180)=""/195, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000300)={0x5, 0x3, 0x4, 0x20}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x1], 0x0, 0x10, 0xd1}, 0x90) dup(r3) ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x40305829, &(0x7f0000000440)={0x15, "3b8200000013000010da567a170123f612e7384b54"}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000500)={'syztnl1\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x29, 0x1f, 0x7, 0x2, 0x11, @private0={0xfc, 0x0, '\x00', 0x1}, @remote, 0x20, 0xf9a0, 0x83, 0x6}}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in=@multicast1, @in=@multicast1, 0x0, 0x0, 0x0, 0xffff, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x400000}}, 0xb8}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in=@multicast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}}}, 0xb8}}, 0x0) write$char_usb(r2, &(0x7f0000000040)="e2", 0x2250) 9.520395729s ago: executing program 3 (id=1957): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c03406910927c6b0b55b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfe79578e51bc53099e90f4580d760551b5b342f7cbdb9cd38bdb2209c676b2ac2deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f132020000002cbe7bc04b82d2789cb1b2b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c41146dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a42b359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780c70014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e506d1387b63112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece08ac772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2ef0ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a3f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099bdae7ed04935c2c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adeb988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ffa3c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe4a3ced846891180604b6dd2499d16d7d9158ffffff069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb0814040000007874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dbae3428d2129ecfce1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296c6a298c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f050000000000000026049fe86e09623524f390bf79b441b75fc790c58e273cd905deb28c13c1ed1c0d9cae846b03008cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc48f97496079654f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b4749c28eb5167e9936ed327fb237a56224e49d9ea956d1798571b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecf743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be182724d95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd0403a099f32468f1561f058960d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b656dc0e32384f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bbe3e8ef76f57a2d0e69115d33394e86e4b83c0f3c2a34635f3eee4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cd082027c641ec4355eb4acff90756d1a1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8cc3fe28bc3586844f5fecb92aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a5906002fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128ab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0afd9ae134400f70b5e6aefb7eee403502732df858a2ea033b6c91c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80ffb8f386bb79f5589829b6b0679b5d65a00000000000000e6ff00000000000000000000faff0000bab50bc8508a9644d3e7c328b0ff22035c8073f8c1f0e3da7339fc81d4ab3ef2857ef70a81d8a1628da28c942571880e22df7cabae56d5ff5e483c9c1f5a258b8f1f34cc300312f76a374a6e9b3f9dbd7f538a80b00f97e47895b3201c5126feca0888956a7d768198d9c2109ac508a47ebb99c539ef45af7d87b308117a9e321a3861bc42cf41942c31268a4020221d7b1622585094eddd83c7f4acdd7f5c23d8b730bf03118261edada8b8487a3b1b7548a4687a91f12bf70bb1df3bfe7d4b92ad6fcbf401efd6eb004cf20016ad8d1dad136dd856ffca238b39482811f9c8524bf182f1956a3d044423927df28880bbd11c06407220df8e1d1d483d947d990dc175803d765ca14a915a0040b641959ad3e776b4bb4852fea12983dc18b7404914a6137dc4a78f1e0d331c60a9019c21698cd18753491df962f496f2395563e9c3d7b1228d0e488cf7e50a29541aa757f2e2ee9ff4433d65db0de5a123d569e39dce481156cbec584c9a32a8e3b032fa003192c891d83119bc950abac9147b9fcb0acd9a207b5ceb7e8ed1d91c000000000000000000000000000000141258373281153fa27e586ea82650f070d8851ac9e7ac07b37a6479d4017b5b5af3ff4c91235df4f657d77e386a329aec4d766369c86b62b01ceb028c6fcf206883633cb143016b9f5351a45a8cb4ea110ba700000000000000883416b6eff6a793c71deb7d780c4f51d86ece127c0714144916f397d398ad2fe72b710b932c15c2369cb5d2d2f6ae420672c4a626195a891ac51825077fbc286aa3866bbf18a4a8b836ea8c90af0d5f0aff55b50bc18c27875ed2628b91224b7fa9fd10ccd7c1b1a92bac529df981a6d30100e68555553625c0e91a51000000000000000000fe030f85b294f3ea1fce314a9dcefbe3b64e83c35c5e95734786ca78315793cc0e6e776d2ec07c55cd89541ec25e074e840287011cab538d79e1569df321282071d49a4dc5fb2d7da1d05249d0e153fd04aca2", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="feff03076844268cb89e14f04305", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000b05000/0x2000)=nil, 0x2000, 0x1000004, 0x10, 0xffffffffffffffff, 0x27c97000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_UIE_ON(r4, 0x7003) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b0000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) ioctl$RTC_SET_TIME(r4, 0x4024700a, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x17, 0x0, 0x4f}) 8.241844259s ago: executing program 3 (id=1959): syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x40, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00', @ANYRES16=0x0, @ANYBLOB="488704fc7069c67cf931332a956adbca2acc36c31e29a292c36cd66f95ba7d1c3a911af812b8518b98261fe4a951a56f0d5b90fc712c0d52d51032a76275ac864d20b000cbee372197c092ed7400746df2ef807cbb93ab932757b7bc6d26e5019a94d79cb52fc1d543453382144eedb8b472c1aefaacb98d2875dc93469c7b036f59ce8dedf3159a28318d51a43e99cbebaed2429ae83c8e147c40bf50e2f276a1a6e524786775bf46b18abdc5d97d2359e15b8ee17ee1e9241c6fb11b5fcca3fbb0d86e507b9dc3e005a8dd8042da6f4c6283f80636fa26"], 0x1, 0x166, &(0x7f00000004c0)="$eJzs281KOlEYx/Hf+K7/lyyrRbQQgmiTowZWO7sU0UmksSTbKEF0Kd1fLdrVJsNhnHCUAlOnnO9n4/n5cPQZ8IzPZgQgtKrKy5ChxDDsprJ3OSPolgAsycB9fRsACJ/oy6fl9PAmAWAVPZ1JHUmPz7d1RRMT88GwXh3VI8nJ+r20E3PrRkpp/3zxIO2P9huZqfszXv3P1PrB3uj7/+qf/mtNWa1rQzm33vD2b39jEgIAIDwMFfx57I2Izlu2VfRy3MklLyecXPblIy8nnVyoX9mNRV0CgBlFvjj/Ud/5j/nOP4Dfq9vrX9Rs27qe8yK/sE9mEarFq/tD/Sn9hGYR8I0JwMKZN+2O2e31D1vtWtNqWpeVcqVyWjw5LpnO4G+Oj/+ueDDNApirjz/9oDsBAAAAAAAAAAAAAACz2tRW0C0AAAAAWJJlPE4U9DUCAAAAAAAAAAAAAAAAALBq3gMAAP//nLEaFQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102376, 0xfffffffffffffe6b) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000140), 0x4, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000640)={0x200, 0x200, 0x1, {0x3, @pix={0x0, 0x0, 0x3447504d, 0x7, 0x0, 0x8, 0xdf3f56e02e316d71, 0x7fff, 0x0, 0x3, 0x2, 0x1}}, 0x1}) r6 = dup(r4) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="3b0000000000efff400101c0"]) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r7, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x4) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x0) sync() open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) 7.463885546s ago: executing program 3 (id=1962): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff}, 0x6) close_range(r0, 0xffffffffffffffff, 0x0) 7.174241747s ago: executing program 3 (id=1963): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000010018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x6, [@union={0xd, 0x4, 0x0, 0x5, 0x1, 0x1, [{0x8, 0x2}, {0xe, 0x5, 0x7}, {0x0, 0x0, 0xb1}, {0x3, 0x0, 0x5}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x4, 0x9}}]}, {0x0, [0x2e, 0x0, 0x0, 0x5f]}}, &(0x7f0000000380)=""/195, 0x72, 0xc3, 0x0, 0x81}, 0x20) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000001300)) r4 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r4, &(0x7f0000000300)={&(0x7f0000000800), 0x10, &(0x7f0000000880)={&(0x7f0000000840)=@can={{}, 0x0, 0x0, 0x0, 0x0, "ded27feeba7ca62a"}, 0x10}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 5.556943843s ago: executing program 1 (id=1965): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x90) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)='I', 0x1, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = dup2(0xffffffffffffffff, r3) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000140), 0xfc, 0x566, &(0x7f0000000680)="$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") alarm(0x1f) alarm(0xe8) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) fcntl$setstatus(r3, 0x4, 0x42c00) write$binfmt_misc(r3, &(0x7f0000000100)=ANY=[], 0x6) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x6, 0x4, 0x5b, 0x8a}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r2}, 0xc) 5.336774999s ago: executing program 1 (id=1967): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x81000000, 0xfffffffffffffffc) unshare(0x0) unshare(0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002, 0xfff, @remote}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x22049851, &(0x7f0000000200)={0xa, 0x2, 0x0, @loopback, 0x10001}, 0x1c) unshare(0x2000000) socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3c6ffff01000000010000005600000025000000190004000400000047fd17e5ffff0800040000000000000000", 0x39}], 0x1) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt(0xffffffffffffffff, 0x3a, 0x400, 0x0, &(0x7f00000000c0)) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x12, &(0x7f00000002c0), 0x0) unshare(0x900) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f00000001c0)=0x1) unshare(0x40000000) setreuid(0xee00, 0x0) unshare(0x20780) keyctl$join(0x1, 0x0) keyctl$session_to_parent(0x12) unshare(0x40060000) write$binfmt_misc(r1, &(0x7f0000000300)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200002b3, 0x0) 4.895100276s ago: executing program 3 (id=1969): getpid() socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)) socket$unix(0x1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000422cfd1dc9928dcfe60000000000"], 0x14}}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000000)=0x400) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000001005300000000000000008500000041000000850000007d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$xfs(&(0x7f000000b840), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000380)={[{@grpquota}, {@filestreams}, {@logbufs={'logbufs', 0x3d, 0x3}}]}, 0x1, 0xb862, &(0x7f0000017140)="$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") 3.718208839s ago: executing program 0 (id=1973): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) 3.481311327s ago: executing program 2 (id=1974): mknod(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) sendmmsg$unix(r2, &(0x7f0000003780)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000340)}, {&(0x7f00000005c0)}, {&(0x7f0000000140)="65eb9b36f1dddf13042894656eb1ab6cf32f6d47e8eb223c490d97cd7d9e7920deb598a60fd05edfc0040f", 0x2b}, {0x0}], 0x4}}, {{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000dc0)="58cf2e3b238ab7b8f029ecde01abde47a904ef24afe68c38f24bbe2573968f727c51106739ed185d25f75a3999441db7aca5813efc624c8bb8780f250ff4f9f54c7aa47cfbd86aada015f5b2136b58", 0x4f}, {0x0}, {0x0}, {&(0x7f0000001000)}, {0x0}, {&(0x7f00000011c0)}], 0x6, &(0x7f0000001300)=[@rights={{0x10}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [r0, r1]}}], 0x78, 0x10}}, {{0x0, 0x0, &(0x7f00000014c0)}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003300)}}], 0x4, 0x0) 3.417433482s ago: executing program 4 (id=1975): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r0, &(0x7f0000000380), 0x20000000}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) syz_clone(0x50900000, 0x0, 0x0, 0x0, 0x0, 0x0) 3.107421764s ago: executing program 0 (id=1976): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 2.837347752s ago: executing program 0 (id=1977): ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0xfffffffd}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r2, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='kfree\x00', r3}, 0x10) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x10000}, 0x48) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000140)={r4, 0x0, 0x0}, 0x20) 2.778266043s ago: executing program 3 (id=1978): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000400)='jbd2_handle_stats\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000400)='jbd2_handle_stats\x00', r2}, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) 2.721403577s ago: executing program 4 (id=1979): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_clone(0xcc001200, 0x0, 0x0, 0x0, 0x0, 0x0) 2.72104088s ago: executing program 2 (id=1980): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4b}}, &(0x7f0000003ff6)='GPL\x00'}, 0x90) 2.636937432s ago: executing program 2 (id=1981): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x8}, 0xfffffffffffffffc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 2.624848541s ago: executing program 1 (id=1982): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000100)='X', 0x1}], 0x1) 2.577260177s ago: executing program 0 (id=1983): r0 = socket(0x10, 0x0, 0x0) write(r0, &(0x7f0000000140)="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", 0x148) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x23010, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x23029, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180), &(0x7f00000001c0)=@v1={0x1000000, [{0x8, 0x6}]}, 0xc, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40106614, &(0x7f0000002640)={0x1, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x0, 0xfffffffffffffffe, 0x0, 0x0) 2.339845119s ago: executing program 2 (id=1984): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1d}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r2, @ANYBLOB="0100000000000000240012000c000100627269646765"], 0x44}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c000000100001040000eb040100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r4], 0x3c}}, 0x0) 2.21747288s ago: executing program 1 (id=1985): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090003206d0414c340000000000109022400010000a000090400000103010100092100080001220100090581", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) syz_usb_disconnect(r0) 1.461468204s ago: executing program 4 (id=1986): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in=@private, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x100000}, 0x0, 0x6e6bb0}}, 0xb8}}, 0x0) 1.428055898s ago: executing program 0 (id=1987): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) execveat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0xfffffffffffffffe, 0x0, 0x0) 1.392804751s ago: executing program 4 (id=1988): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, 0x32) r5 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x3fb, 0x400, 0x70bd28, 0x25dfdbfb, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x8084}, 0x40) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, 0x0, 0x0) setuid(0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) 366.281137ms ago: executing program 0 (id=1989): mkdirat(0xffffffffffffff9c, 0x0, 0x0) pipe2$9p(&(0x7f0000000240), 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext2\x00', &(0x7f0000000480)='./file0\x00', 0x2004000, &(0x7f0000000800), 0xfa, 0x4a9, &(0x7f0000001180)="$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") ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00'}, 0x10) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c00000013000100"/20, @ANYRES32, @ANYBLOB], 0x3c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000500)={'syztnl0\x00', 0x0, 0x700, 0x7, 0xfffffff7, 0x0, {{0xe, 0x4, 0x0, 0x9, 0x38, 0x65, 0x0, 0x0, 0x2f, 0x0, @empty, @remote, {[@noop, @ssrr={0x89, 0x23, 0xf4, [@local, @remote, @local, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, @local, @local]}]}}}}}) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000003140)=""/4096, 0x8}], 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffff, 0x0, "585406ff0001e900000000000000000400"}) ioctl$TIOCSTI(r1, 0x5412, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000b1000000000100400018150000", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @private=0xa010100}, {0x0, @broadcast}, 0x8, {0x2, 0x0, @private}, 'gretap0\x00'}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000200)=""/233, 0xe9}], 0x1, 0xfff, 0x0) 350.166876ms ago: executing program 2 (id=1990): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x280, 0x158, 0xc8, 0x8, 0x0, 0x5803, 0x220, 0x2e8, 0x2e8, 0x220, 0x2e8, 0x3, 0x0, {[{{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1_vlan\x00', 'tunl0\x00'}, 0x0, 0xa8, 0xe8, 0x0, {0x0, 0x2000000000000}}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "bf3a1024c0f1864984a2e076bc48ee207f6edb69b4847930a6b408bc8f60"}}, {{@ipv6={@private1, @ipv4={'\x00', '\xff\xff', @remote}, [], [], 'ip6gre0\x00', 'caif0\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e0) 293.547542ms ago: executing program 4 (id=1991): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000700)={{r0}, &(0x7f0000000680), &(0x7f00000006c0)='%+9llu \x00'}, 0x20) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448e0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r4 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 33.374957ms ago: executing program 2 (id=1992): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003002000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000017000000950000000000000060bda108010da26a15544b2a4c738e0fa0f897aa278b325764f2dcd6b865984f599ffe6cad199d36bc80e98b17249acf845992d69cc4a092d0655f0e225d2f568bd76a618d10b49d26440819e5f1e36c54"], &(0x7f00000005c0)='GPL\x00'}, 0x80) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000600)={r4, r3, 0x25, 0x0, @val=@tcx={@link_id=0xffffffffffffffff}}, 0x40) syz_emit_ethernet(0xfdef, &(0x7f0000000a40)=ANY=[], 0x0) 0s ago: executing program 4 (id=1993): ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(r0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1}, 0x0, 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r1, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='kfree\x00', r2}, 0x10) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x10000}, 0x48) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000140)={r3, 0x0, 0x0}, 0x20) kernel console output (not intermixed with test programs): 0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 567.648515][ C0] synchronize_rcu+0x11b/0x360 [ 567.653384][ C0] ? __pfx_synchronize_rcu+0x10/0x10 [ 567.658959][ C0] lockdep_unregister_key+0x556/0x610 [ 567.664479][ C0] ? __pfx_lockdep_unregister_key+0x10/0x10 [ 567.670444][ C0] ? rcu_is_watching+0x15/0xb0 [ 567.675334][ C0] ? qdisc_reset+0x3bf/0x5b0 [ 567.680019][ C0] __qdisc_destroy+0x165/0x410 [ 567.684919][ C0] dev_shutdown+0x9b/0x440 [ 567.689471][ C0] unregister_netdevice_many_notify+0x9c7/0x1d20 [ 567.696654][ C0] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 567.703588][ C0] ? unregister_netdevice_queue+0x26b/0x370 [ 567.709541][ C0] ? batadv_softif_destroy_netlink+0x1e0/0x270 [ 567.715875][ C0] default_device_exit_batch+0xa0f/0xa90 [ 567.721603][ C0] ? __pfx___might_resched+0x10/0x10 [ 567.727044][ C0] ? __pfx_default_device_exit_batch+0x10/0x10 [ 567.733341][ C0] ? cfg802154_pernet_exit+0xc3/0xe0 [ 567.738863][ C0] ? __pfx_default_device_exit_batch+0x10/0x10 [ 567.745166][ C0] cleanup_net+0x89d/0xcc0 [ 567.749655][ C0] ? __pfx_cleanup_net+0x10/0x10 [ 567.754706][ C0] ? process_scheduled_works+0x945/0x1830 [ 567.760650][ C0] process_scheduled_works+0xa2c/0x1830 [ 567.766368][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 567.772497][ C0] ? assign_work+0x364/0x3d0 [ 567.777317][ C0] worker_thread+0x86d/0xd40 [ 567.781978][ C0] ? __kthread_parkme+0x169/0x1d0 [ 567.787215][ C0] ? __pfx_worker_thread+0x10/0x10 [ 567.792503][ C0] kthread+0x2f0/0x390 [ 567.796692][ C0] ? __pfx_worker_thread+0x10/0x10 [ 567.801868][ C0] ? __pfx_kthread+0x10/0x10 [ 567.806656][ C0] ret_from_fork+0x4b/0x80 [ 567.811150][ C0] ? __pfx_kthread+0x10/0x10 [ 567.815888][ C0] ret_from_fork_asm+0x1a/0x30 [ 567.820735][ C0] [ 567.823866][ C0] [ 567.823866][ C0] Showing all locks held in the system: [ 567.831633][ C0] 5 locks held by kworker/u8:0/11: [ 567.836955][ C0] #0: ffff888015edd948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 567.847972][ C0] #1: ffffc90000107d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 567.858720][ C0] #2: ffffffff8f5f1f50 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 567.868267][ C0] #3: ffffffff8f5feac8 (rtnl_mutex){+.+.}-{3:3}, at: default_device_exit_batch+0xe9/0xa90 [ 567.878501][ C0] #4: ffffffff8e33abf8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 567.889564][ C0] 2 locks held by kworker/u8:9/2824: [ 567.894965][ C0] #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 567.906814][ C0] #1: ffffc9000984fd00 ((reaper_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 567.917713][ C0] 1 lock held by dhcpcd/4761: [ 567.922439][ C0] #0: ffffffff8f5feac8 (rtnl_mutex){+.+.}-{3:3}, at: devinet_ioctl+0x2ce/0x1bc0 [ 567.931768][ C0] 2 locks held by getty/4855: [ 567.936541][ C0] #0: ffff88802a99b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 567.946444][ C0] #1: ffffc9000312b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 567.956703][ C0] 6 locks held by kworker/u9:3/5102: [ 567.962028][ C0] #0: ffff88807e45a948 ((wq_completion)hci0){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 567.972953][ C0] #1: ffffc900037f7d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 567.986065][ C0] #2: ffff88807d984d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 567.996086][ C0] #3: ffff88807d984078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 568.005979][ C0] #4: ffffffff8f76de28 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x185/0x340 [ 568.015856][ C0] #5: ffffffff8e33abf8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 568.027213][ C0] 3 locks held by kworker/0:3/5146: [ 568.032454][ C0] #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 568.043586][ C0] #1: ffffc90003487d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 568.054755][ C0] #2: ffffffff8f5feac8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 568.063917][ C0] 2 locks held by kworker/u8:12/5926: [ 568.069419][ C0] #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 568.081413][ C0] #1: ffffc9000926fd00 (connector_reaper_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 568.092523][ C0] 1 lock held by syz-executor/12033: [ 568.098177][ C0] #0: ffffffff8f5feac8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x847/0x1180 [ 568.107862][ C0] 4 locks held by syz.1.1644/12180: [ 568.113114][ C0] #0: ffff888015efa420 (sb_writers#5){.+.+}-{0:0}, at: vfs_write+0x227/0xc90 [ 568.122202][ C0] #1: ffff88801f65a370 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}, at: shmem_file_write_iter+0x83/0x120 [ 568.133561][ C0] #2: ffffc90000007c00 (net/core/rtnetlink.c:83){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 [ 568.143995][ C0] #3: ffffffff8e335820 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 568.154006][ C0] 1 lock held by syz.4.1649/12196: [ 568.159210][ C0] #0: ffffffff8f5feac8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x847/0x1180 [ 568.168852][ C0] 1 lock held by syz.4.1649/12199: [ 568.174558][ C0] #0: ffffffff8f5feac8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x847/0x1180 [ 568.184277][ C0] 1 lock held by syz.4.1649/12200: [ 568.189392][ C0] #0: ffffffff8f5feac8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x847/0x1180 [ 568.198999][ C0] 1 lock held by syz.0.1650/12202: [ 568.204212][ C0] #0: ffffffff8f5feac8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x847/0x1180 [ 568.213860][ C0] 3 locks held by syz.0.1650/12203: [ 568.219091][ C0] #0: ffffffff8f6682f0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 568.227503][ C0] #1: ffffffff8f6681a8 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x121/0xec0 [ 568.236624][ C0] #2: ffffffff8f5feac8 (rtnl_mutex){+.+.}-{3:3}, at: team_nl_options_set_doit+0x9b/0x1090 [ 568.247131][ C0] 2 locks held by syz.3.1651/12206: [ 568.252384][ C0] #0: ffffffff8f6682f0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 568.260891][ C0] #1: ffffffff8f6681a8 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x121/0xec0 [ 568.270104][ C0] [ 568.272469][ C0] ============================================= [ 568.272469][ C0] [ 568.301735][ T5107] Bluetooth: hci0: command 0x0406 tx timeout [ 568.795588][T12199] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 568.804054][T12200] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1649'. [ 568.862902][T12202] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1650'. [ 569.124652][T12033] bridge0: port 1(bridge_slave_0) entered blocking state [ 569.188345][T12033] bridge0: port 1(bridge_slave_0) entered disabled state [ 569.231484][T12221] IPv4: Oversized IP packet from 172.20.20.24 [ 569.231970][T12033] bridge_slave_0: entered allmulticast mode [ 569.238416][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 569.250229][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 569.260787][T12033] bridge_slave_0: entered promiscuous mode [ 569.740080][ T5146] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 570.094079][T12033] bridge0: port 2(bridge_slave_1) entered blocking state [ 570.107000][T12033] bridge0: port 2(bridge_slave_1) entered disabled state [ 570.172426][T12033] bridge_slave_1: entered allmulticast mode [ 570.243129][T12033] bridge_slave_1: entered promiscuous mode [ 570.384462][ T5146] usb 1-1: Using ep0 maxpacket: 16 [ 570.397891][ T5146] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 570.431321][ T5146] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 570.449077][ T5146] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.470465][T12227] binder_alloc: 12226: binder_alloc_buf, no vma [ 570.498879][T12033] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 570.513273][ T5146] usb 1-1: config 0 descriptor?? [ 570.537873][T12033] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 570.829366][T12033] team0: Port device team_slave_0 added [ 570.907460][T12033] team0: Port device team_slave_1 added [ 570.918305][T12239] loop3: detected capacity change from 0 to 4096 [ 570.943625][T12221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 570.962080][T12239] ntfs3: Unknown parameter 'foce' [ 570.976296][T12221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 571.012586][ T5146] hid (null): nested delimiters [ 571.040500][ T5146] hid (null): report_id 24797 is invalid [ 571.061278][ T5146] hid (null): report_id 2838798905 is invalid [ 571.087790][ T5146] hid (null): unknown global tag 0xc [ 571.109924][ T5146] hid (null): unknown global tag 0xa5 [ 571.126234][T12033] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 571.145198][ T5146] hid (null): unknown global tag 0xd [ 571.326865][ T5146] hid (null): unknown global tag 0xc [ 571.335812][ T5146] hid-generic 0003:0158:0100.0017: unknown main item tag 0x1 [ 571.344295][ T5146] hid-generic 0003:0158:0100.0017: unexpected long global item [ 571.352778][ T5146] hid-generic 0003:0158:0100.0017: probe with driver hid-generic failed with error -22 [ 571.355463][T12033] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 571.366758][ T5146] usb 1-1: USB disconnect, device number 48 [ 571.388581][ C1] vkms_vblank_simulate: vblank timer overrun [ 571.578048][T12033] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 571.678662][T12251] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1664'. [ 571.725771][T12033] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 571.762331][T12033] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 571.848238][T12033] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 572.104439][T12033] hsr_slave_0: entered promiscuous mode [ 572.141706][T12033] hsr_slave_1: entered promiscuous mode [ 572.178000][T12033] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 572.211521][T12033] Cannot create hsr debugfs directory [ 572.568618][T12279] PM: Enabling pm_trace changes system date and time during resume. [ 572.568618][T12279] PM: Correct system time has to be restored manually after resume. [ 573.562652][ T46] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 573.793273][ T46] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 573.829163][ T46] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 573.851750][ T46] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 573.893919][ T46] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 573.929145][ T46] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 573.986029][ T46] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 574.014086][ T46] usb 1-1: Product: syz [ 574.028758][ T46] usb 1-1: Manufacturer: syz [ 574.060066][ T46] cdc_wdm 1-1:1.0: skipping garbage [ 574.072433][ T46] cdc_wdm 1-1:1.0: skipping garbage [ 574.087098][ T46] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 574.101000][ T46] cdc_wdm 1-1:1.0: Unknown control protocol [ 575.450449][ C1] wdm_int_callback: 135 callbacks suppressed [ 575.450477][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 575.463133][ C1] wdm_int_callback: 135 callbacks suppressed [ 575.463154][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 575.475471][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 575.482387][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 575.488581][ C1] hrtimer: interrupt took 38180052 ns [ 575.494149][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 575.500797][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 575.507148][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 575.513806][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 575.520319][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 575.526977][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 575.533405][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 575.540007][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 575.546289][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 575.552888][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 575.559194][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 575.565801][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 575.572720][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 575.579352][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 575.585665][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 575.592273][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 575.633648][ T8] usb 1-1: USB disconnect, device number 49 [ 575.633794][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 575.847526][T12307] loop4: detected capacity change from 0 to 16 [ 575.989672][T12307] erofs: (device loop4): mounted with root inode @ nid 36. [ 577.247622][T12325] syz.4.1674: attempt to access beyond end of device [ 577.247622][T12325] loop4: rw=0, sector=8, nr_sectors = 16 limit=16 [ 577.371898][T12033] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 577.490096][T12033] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 577.565441][T12033] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 577.700145][T12033] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 577.968429][ T5148] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 578.014074][T12033] 8021q: adding VLAN 0 to HW filter on device bond0 [ 578.060748][T12033] 8021q: adding VLAN 0 to HW filter on device team0 [ 578.080448][ T5146] bridge0: port 1(bridge_slave_0) entered blocking state [ 578.087686][ T5146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 578.130615][ T5146] bridge0: port 2(bridge_slave_1) entered blocking state [ 578.137845][ T5146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 578.188291][ T5148] usb 2-1: Using ep0 maxpacket: 16 [ 578.206931][ T5148] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 578.244682][ T5148] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 578.273873][ T5148] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 578.302341][ T5148] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 578.341816][ T5148] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 578.398679][ T5148] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 578.448172][ T5148] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 578.456261][ T5148] usb 2-1: Manufacturer: syz [ 578.503070][ T5148] usb 2-1: config 0 descriptor?? [ 578.917898][ T5148] rc_core: IR keymap rc-hauppauge not found [ 578.940321][ T5148] Registered IR keymap rc-empty [ 578.945899][ T5148] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 578.993790][T12033] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 579.057952][ T5148] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 579.127016][ T5148] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 579.184388][ T5148] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input73 [ 579.261895][T12033] veth0_vlan: entered promiscuous mode [ 579.342347][T12033] veth1_vlan: entered promiscuous mode [ 579.383859][ T5148] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 579.468140][ T5148] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 579.532782][T12033] veth0_macvtap: entered promiscuous mode [ 579.587933][ T5148] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 579.615529][T12033] veth1_macvtap: entered promiscuous mode [ 579.657847][ T5148] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 579.708923][ T5148] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 579.726643][T12033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 579.790260][T12033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 579.807618][ T5148] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 579.818632][T12033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 579.862308][ T5148] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 579.987527][T12033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 579.997854][ T5148] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 580.057611][T12033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 580.072947][T12328] loop3: detected capacity change from 0 to 65536 [ 580.090569][ T5148] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 580.125044][T12033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.150903][T12033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 580.202915][T12328] workqueue: Failed to create a rescuer kthread for wq "xfs-blockgc/loop3": -EINTR [ 580.528530][T12033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.874349][ T5148] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 580.919428][ T5148] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 580.923150][T12033] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 580.956894][ T5148] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 581.013294][ T5148] usb 2-1: USB disconnect, device number 30 [ 581.196047][T12033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 581.302314][T12033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.384641][T12033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 581.448872][T12033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.911975][T12033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 582.077693][T12033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 582.140891][T12033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 582.196230][T12033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 582.248314][T12033] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 582.290121][T12033] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.300510][T12033] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.310439][T12033] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.323472][T12033] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.687613][ T2809] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 582.735412][ T2809] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 582.847809][ T5926] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 582.865015][ T5926] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 583.065912][ T5146] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 583.078686][T12417] loop3: detected capacity change from 0 to 1024 [ 583.189965][T12417] hfsplus: failed to load root directory [ 583.292608][ T5146] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 583.339333][ T5146] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 583.400325][ T5146] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 583.485240][ T5146] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 583.582639][ T5146] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 583.600159][T12421] loop2: detected capacity change from 0 to 8192 [ 583.634500][ T5146] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 583.704942][ T5146] usb 5-1: Product: syz [ 583.725198][ T5146] usb 5-1: Manufacturer: syz [ 583.783622][ T5146] cdc_wdm 5-1:1.0: skipping garbage [ 583.810213][ T5146] cdc_wdm 5-1:1.0: skipping garbage [ 583.844107][ T5146] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 583.943205][ T5146] cdc_wdm 5-1:1.0: Unknown control protocol [ 584.670795][T12442] loop2: detected capacity change from 0 to 16 [ 584.847715][T12442] erofs: (device loop2): mounted with root inode @ nid 36. [ 584.895301][ C1] wdm_int_callback: 189 callbacks suppressed [ 584.895330][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 584.907974][ C1] wdm_int_callback: 189 callbacks suppressed [ 584.907997][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 584.920339][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 584.926985][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 584.933336][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 584.940026][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 584.946405][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 584.953047][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 584.959550][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 584.966176][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 584.972501][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 584.979122][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 584.985404][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 584.992025][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 584.998366][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 585.005026][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 585.011347][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 585.017972][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 585.024335][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 585.030970][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 585.131392][ T29] audit: type=1800 audit(1719869817.676:135): pid=12448 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1695" name="bus" dev="sda1" ino=2061 res=0 errno=0 [ 585.172217][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 585.172235][ T5146] usb 5-1: USB disconnect, device number 45 [ 585.193036][T12444] syz.2.1696: attempt to access beyond end of device [ 585.193036][T12444] loop2: rw=0, sector=8, nr_sectors = 16 limit=16 [ 585.374734][ T29] audit: type=1804 audit(1719869817.736:136): pid=12448 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1695" name="/root/syzkaller.2lgCIU/38/bus" dev="sda1" ino=2061 res=1 errno=0 [ 586.912871][T12410] loop4: detected capacity change from 0 to 4096 [ 586.951656][T12410] ntfs3: Bad value for 'uid' [ 587.844941][T12468] loop3: detected capacity change from 0 to 32768 [ 587.883869][T12468] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1700 (12468) [ 587.965116][T12468] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 587.987615][T12468] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 588.024748][T12468] BTRFS info (device loop3): disk space caching is enabled [ 588.063384][ T5180] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 588.245166][T12468] BTRFS info (device loop3): rebuilding free space tree [ 588.293432][ T5180] usb 1-1: Using ep0 maxpacket: 8 [ 588.317920][T12468] BTRFS info (device loop3): disabling free space tree [ 588.320589][ T5180] usb 1-1: config 3 has an invalid interface number: 209 but max is 1 [ 588.337451][T12491] loop4: detected capacity change from 0 to 8192 [ 588.344672][T12468] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 588.353214][ T5180] usb 1-1: config 3 has an invalid interface number: 163 but max is 1 [ 588.377616][T12468] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 588.411827][T12491] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 588.431157][ T5180] usb 1-1: config 3 has no interface number 0 [ 588.465824][ T5180] usb 1-1: config 3 has no interface number 1 [ 588.491519][ T5180] usb 1-1: config 3 interface 209 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 588.530606][ T5180] usb 1-1: config 3 interface 163 altsetting 8 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 588.599620][ T5180] usb 1-1: config 3 interface 163 altsetting 8 has a duplicate endpoint with address 0x7, skipping [ 588.666063][ T5180] usb 1-1: config 3 interface 209 has no altsetting 0 [ 588.703494][ T5180] usb 1-1: config 3 interface 163 has no altsetting 0 [ 588.825223][ T5180] usb 1-1: Dual-Role OTG device on HNP port [ 588.854099][ T5180] usb 1-1: New USB device found, idVendor=2040, idProduct=7070, bcdDevice=19.44 [ 588.894680][ T5180] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.902746][ T5180] usb 1-1: Product: ᜡ౲Ꝛற⬮濤椽씤윷壥䴠쟂퇵姙篈ꍷٖퟔꭂꔈ䚤樓䖁慝骂얾柃璘ず깜䠖⫢垻醒솑悼ﶀ´贔驾屫জ䐱ꅮ欚背砀ὅ龜哢屖ꑟ帏醠랝쒇磈ᑘ泀棕ꞓ戦〧쯰ᬗ埶褴绖⮩뒍ཏ䌢⃽㪹㧅ꅺ䫵擠䦾銓뇰踉髫詓鵢쀥㞋绪잁왯놂 [ 588.990554][T11692] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 589.051543][ T5180] usb 1-1: Manufacturer: Џ [ 589.071296][ T5180] usb 1-1: SerialNumber: Ћ [ 589.359493][T12529] netlink: 'syz.3.1707': attribute type 4 has an invalid length. [ 589.386686][T12529] netlink: 'syz.3.1707': attribute type 4 has an invalid length. [ 589.542799][ T46] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 589.645364][ T5180] dvb-usb: found a 'Hauppauge Nova-T Stick' in cold state, will try to load a firmware [ 589.785781][ T46] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 589.808049][ T5180] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 589.817100][ T46] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 589.817136][ T46] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 589.877424][ T5180] dib0700: firmware download failed at 7 with -22 [ 589.937610][ T46] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 589.955924][ T5180] dvb-usb: found a 'Hauppauge Nova-T Stick' in cold state, will try to load a firmware [ 590.003975][ T5180] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 590.018217][ T46] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 590.053336][ T5180] dib0700: firmware download failed at 7 with -22 [ 590.086639][ T46] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 590.133530][ T5180] usb 1-1: USB disconnect, device number 50 [ 590.145535][ T46] usb 3-1: Product: syz [ 590.191502][ T46] usb 3-1: Manufacturer: syz [ 590.286026][ T46] cdc_wdm 3-1:1.0: skipping garbage [ 590.327180][ T46] cdc_wdm 3-1:1.0: skipping garbage [ 590.348532][ T46] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 590.381559][ T46] cdc_wdm 3-1:1.0: Unknown control protocol [ 590.566165][T12559] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1716'. [ 590.633341][ T8] usb 5-1: new low-speed USB device number 46 using dummy_hcd [ 590.874231][ T8] usb 5-1: config index 0 descriptor too short (expected 6427, got 27) [ 590.907313][ T8] usb 5-1: config 0 has an invalid interface number: 21 but max is 0 [ 590.953278][ C1] wdm_int_callback: 750 callbacks suppressed [ 590.953304][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 590.965899][ C1] wdm_int_callback: 750 callbacks suppressed [ 590.965916][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 590.978300][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 590.984922][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 590.991223][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 590.997822][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 591.004104][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 591.010693][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 591.016974][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 591.023566][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 591.029881][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 591.036499][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 591.042755][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 591.049376][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 591.055631][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 591.062225][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 591.068510][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 591.075104][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 591.081366][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 591.087980][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 591.108114][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 591.117044][ T5148] usb 3-1: USB disconnect, device number 51 [ 591.154206][ T8] usb 5-1: config 0 has no interface number 0 [ 591.207925][ T8] usb 5-1: config 0 interface 21 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 591.229184][ T8] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 591.241883][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.269328][ T8] usb 5-1: config 0 descriptor?? [ 592.310845][T12574] loop3: detected capacity change from 0 to 512 [ 592.340423][T12574] EXT4-fs: quotafile must be on filesystem root [ 593.943592][ T46] usb 5-1: USB disconnect, device number 46 [ 594.503488][T12592] kvm: vcpu 0: requested 32 ns lapic timer period limited to 200000 ns [ 594.526530][T12599] loop3: detected capacity change from 0 to 1024 [ 594.650036][ T5148] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 594.874609][ T5148] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 594.906196][ T5148] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 594.932775][T12606] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1725'. [ 594.946149][ T5148] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 594.984049][ T5148] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 595.007243][T12606] batman_adv: batadv0: Adding interface: bridge1 [ 595.032049][T12606] batman_adv: batadv0: The MTU of interface bridge1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 595.059026][ T5148] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 595.074782][ T5148] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 595.090775][ T5148] usb 5-1: Product: syz [ 595.101965][T12606] batman_adv: batadv0: Not using interface bridge1 (retrying later): interface not active [ 595.121179][ T5148] usb 5-1: Manufacturer: syz [ 595.188188][ T5148] cdc_wdm 5-1:1.0: skipping garbage [ 595.204399][ T5148] cdc_wdm 5-1:1.0: skipping garbage [ 595.227963][ T5148] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 595.265041][ T5148] cdc_wdm 5-1:1.0: Unknown control protocol [ 595.357901][T12616] loop2: detected capacity change from 0 to 16 [ 595.401289][T12616] erofs: (device loop2): mounted with root inode @ nid 36. [ 595.551380][ T5926] hfsplus: b-tree write err: -5, ino 4 [ 595.660547][T12617] syz.2.1728: attempt to access beyond end of device [ 595.660547][T12617] loop2: rw=0, sector=8, nr_sectors = 16 limit=16 [ 596.071358][ C1] wdm_int_callback: 70 callbacks suppressed [ 596.071385][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 596.083935][ C1] wdm_int_callback: 70 callbacks suppressed [ 596.083957][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 596.095982][ C1] vkms_vblank_simulate: vblank timer overrun [ 596.102063][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 596.108690][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 596.114950][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 596.121582][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 596.127873][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 596.134470][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 596.140810][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 596.147420][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 596.153705][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 596.160330][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 596.166588][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 596.173196][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 596.179521][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 596.186143][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 596.192418][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 596.199014][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 596.205270][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 596.211885][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 596.900474][ T9669] usb 5-1: USB disconnect, device number 47 [ 596.900529][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 597.581358][ T5099] kernel write not supported for file /input/mice (pid: 5099 comm: kworker/1:3) [ 600.195186][ T29] audit: type=1804 audit(1719869832.744:137): pid=12659 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1738" name="/root/syzkaller.6B3umU/221/file0" dev="sda1" ino=2059 res=1 errno=0 [ 600.410060][T12662] loop4: detected capacity change from 0 to 2048 [ 600.451925][T12662] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 600.524867][T12662] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 600.641595][ T29] audit: type=1804 audit(1719869833.194:138): pid=12662 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1739" name="/root/syzkaller.6B3umU/222/file0/bus" dev="loop4" ino=1367 res=1 errno=0 [ 600.750956][T12662] netlink: 'syz.4.1739': attribute type 1 has an invalid length. [ 600.762380][ T29] audit: type=1800 audit(1719869833.224:139): pid=12662 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1739" name="bus" dev="loop4" ino=1367 res=0 errno=0 [ 600.798612][ T29] audit: type=1804 audit(1719869833.284:140): pid=12662 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1739" name="/root/syzkaller.6B3umU/222/file0/bus" dev="loop4" ino=1367 res=1 errno=0 [ 600.829773][ T29] audit: type=1804 audit(1719869833.294:141): pid=12662 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1739" name="/root/syzkaller.6B3umU/222/file0/bus" dev="loop4" ino=1367 res=1 errno=0 [ 600.870467][ T29] audit: type=1804 audit(1719869833.414:142): pid=12662 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1739" name="/root/syzkaller.6B3umU/222/file0/bus" dev="loop4" ino=1367 res=1 errno=0 [ 601.081947][ T29] audit: type=1800 audit(1719869833.414:143): pid=12662 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1739" name="bus" dev="loop4" ino=1367 res=0 errno=0 [ 601.134474][ T29] audit: type=1804 audit(1719869833.474:144): pid=12667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1739" name="/root/syzkaller.6B3umU/222/file0/bus" dev="loop4" ino=1367 res=1 errno=0 [ 601.213334][ T29] audit: type=1800 audit(1719869833.474:145): pid=12667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1739" name="bus" dev="loop4" ino=1367 res=0 errno=0 [ 601.868391][T12680] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1744'. [ 602.020220][ T5102] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 602.116556][ T5148] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 603.346232][ T5148] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 603.367425][ T5148] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 603.406748][T12695] netlink: 172 bytes leftover after parsing attributes in process `syz.1.1749'. [ 603.417829][ T5148] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 603.448784][ T5148] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 603.492073][ T5148] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 603.551288][ T5148] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 603.574280][ T5148] usb 5-1: Product: syz [ 603.598072][ T5148] usb 5-1: Manufacturer: syz [ 603.637836][ T5148] cdc_wdm 5-1:1.0: skipping garbage [ 603.650146][ T5148] cdc_wdm 5-1:1.0: skipping garbage [ 603.670849][ T5148] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 603.694420][ T5148] cdc_wdm 5-1:1.0: Unknown control protocol [ 603.767780][ T9669] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 603.997408][ T9669] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 604.033572][ T9669] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 604.071300][ T9669] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.102354][ T9669] usb 1-1: Product: syz [ 604.114244][ T9669] usb 1-1: Manufacturer: syz [ 604.123820][ T9669] usb 1-1: SerialNumber: syz [ 604.169911][ T9669] cdc_ether 1-1:1.0: skipping garbage [ 604.192973][ T9669] usb 1-1: bad CDC descriptors [ 604.226396][ C1] wdm_int_callback: 3741 callbacks suppressed [ 604.226416][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 604.239140][ C1] wdm_int_callback: 3741 callbacks suppressed [ 604.239155][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 604.251491][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 604.258125][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 604.264488][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 604.271199][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 604.277589][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 604.284236][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 604.290880][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 604.297496][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 604.303808][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 604.310456][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 604.316789][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 604.323499][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 604.329839][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 604.336486][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 604.342809][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 604.349434][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 604.355724][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 604.362339][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 604.414195][ T5148] usb 5-1: USB disconnect, device number 48 [ 604.414256][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 604.613240][ T5099] IPVS: starting estimator thread 0... [ 604.676883][T12713] loop2: detected capacity change from 0 to 16 [ 604.737833][T12714] IPVS: using max 22 ests per chain, 52800 per kthread [ 604.756054][T12713] erofs: (device loop2): mounted with root inode @ nid 36. [ 604.899397][ T29] audit: type=1800 audit(1719869837.456:146): pid=12717 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1752" name="bus" dev="sda1" ino=2061 res=0 errno=0 [ 605.054930][ T5099] usb 1-1: USB disconnect, device number 51 [ 605.086763][ T5148] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 605.125328][T12718] syz.2.1753: attempt to access beyond end of device [ 605.125328][T12718] loop2: rw=0, sector=8, nr_sectors = 16 limit=16 [ 605.299606][ T5148] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 605.318581][ T5148] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid wMaxPacketSize 0 [ 605.369665][ T5148] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 605.440159][ T5148] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 605.477352][ T5148] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.527279][ T5148] usb 4-1: config 0 descriptor?? [ 605.624926][T12722] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1756'. [ 605.958880][ T5148] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 606.013777][ T5148] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 606.034092][ T5148] plantronics 0003:047F:FFFF.0018: No inputs registered, leaving [ 606.071331][ T5148] plantronics 0003:047F:FFFF.0018: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 606.226856][T12678] loop4: detected capacity change from 0 to 4096 [ 606.288959][T12678] ntfs3: Bad value for 'uid' [ 606.309736][ T5148] usb 4-1: USB disconnect, device number 38 [ 607.025955][T12735] kvm: vcpu 0: requested 32 ns lapic timer period limited to 200000 ns [ 607.805488][ T5107] Bluetooth: hci0: command 0x0406 tx timeout [ 608.689257][T12762] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1767'. [ 608.803007][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 608.803029][ T29] audit: type=1800 audit(1719869841.348:148): pid=12766 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1766" name="bus" dev="sda1" ino=2035 res=0 errno=0 [ 608.872433][ T29] audit: type=1804 audit(1719869841.348:149): pid=12766 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1766" name="/root/syzkaller.2lgCIU/55/bus" dev="sda1" ino=2035 res=1 errno=0 [ 610.110502][T12778] loop3: detected capacity change from 0 to 1024 [ 610.236692][ T29] audit: type=1804 audit(1719869842.779:150): pid=12790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1774" name="/root/syzkaller.z56RzA/172/bus" dev="sda1" ino=2054 res=1 errno=0 [ 610.335306][ T29] audit: type=1804 audit(1719869842.779:151): pid=12790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1774" name="/root/syzkaller.z56RzA/172/bus" dev="sda1" ino=2054 res=1 errno=0 [ 610.372930][ T29] audit: type=1804 audit(1719869842.839:152): pid=12790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1774" name="/root/syzkaller.z56RzA/172/bus" dev="sda1" ino=2054 res=1 errno=0 [ 610.442861][ T8] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 610.446335][ T29] audit: type=1804 audit(1719869842.839:153): pid=12790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1774" name="/root/syzkaller.z56RzA/172/bus" dev="sda1" ino=2054 res=1 errno=0 [ 610.549947][ T29] audit: type=1804 audit(1719869842.839:154): pid=12790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1774" name="/root/syzkaller.z56RzA/172/bus" dev="sda1" ino=2054 res=1 errno=0 [ 610.630790][ T29] audit: type=1804 audit(1719869842.839:155): pid=12790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1774" name="/root/syzkaller.z56RzA/172/bus" dev="sda1" ino=2054 res=1 errno=0 [ 610.695041][ T8] usb 2-1: config 1 interface 0 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 610.715735][ T8] usb 2-1: config 1 interface 0 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 610.778306][ T8] usb 2-1: config 1 interface 0 has no altsetting 0 [ 610.814759][ T8] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 610.860121][T12806] loop2: detected capacity change from 0 to 16 [ 610.862028][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.894927][ T8] usb 2-1: Product: 枇櫚䖋峩퓦薢錎褩캫톢쏧㳦谷꣼⪤綾๿䰅ﳹ鑪ﴂ탨鼜ᩭK鼁ち舟糄ꮠ䂺遾㛊壤Ꭽ㼎姼굸뱨ꚠ⺺꓂鹺부ᅥ㾥㦗英ꁰ≊緪躿枞Ё㹖耠㐊넶臱昲⮣挮ퟎ꿁中ܹ岣 [ 610.946221][T12806] erofs: (device loop2): mounted with root inode @ nid 36. [ 610.992327][ T8] usb 2-1: Manufacturer: 䵼鑻殛魐䦻ퟢ߂쀦ߚ螒ꏽẉ [ 611.219302][ T8] usb 2-1: SerialNumber: ࠀ [ 611.976163][T12785] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 611.991600][T12785] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 612.304637][ T8] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 612.357860][ T5936] hfsplus: b-tree write err: -5, ino 4 [ 612.404127][ T8] usb 2-1: USB disconnect, device number 31 [ 612.509587][T12821] syz.2.1778: attempt to access beyond end of device [ 612.509587][T12821] loop2: rw=0, sector=8, nr_sectors = 16 limit=16 [ 612.695378][ T29] audit: type=1800 audit(1719869845.260:156): pid=12826 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1782" name="bus" dev="sda1" ino=2059 res=0 errno=0 [ 612.717133][T12825] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1783'. [ 612.746039][ T29] audit: type=1804 audit(1719869845.300:157): pid=12826 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1782" name="/root/syzkaller.2lgCIU/57/bus" dev="sda1" ino=2059 res=1 errno=0 [ 612.934317][ T46] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 613.176730][ T46] usb 1-1: Using ep0 maxpacket: 16 [ 613.190162][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 613.207201][ T46] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 613.278201][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.305046][ T46] usb 1-1: config 0 descriptor?? [ 613.352347][ T5148] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 613.553554][ T5148] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 613.599184][ T5148] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 613.665055][ T5148] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 613.712702][ T5148] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 613.733713][T12823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 613.760837][T12823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 613.796938][ T46] hid (null): nested delimiters [ 613.808014][ T5148] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 613.827232][ T46] hid (null): report_id 24797 is invalid [ 613.852711][ T5148] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 613.866497][ T46] hid (null): report_id 2838798905 is invalid [ 613.873305][ T5148] usb 4-1: Product: syz [ 613.877606][ T5148] usb 4-1: Manufacturer: syz [ 613.890362][ T46] hid (null): unknown global tag 0xc [ 613.920212][ T5148] cdc_wdm 4-1:1.0: skipping garbage [ 613.930210][ T46] hid (null): unknown global tag 0xa5 [ 613.964230][ T5148] cdc_wdm 4-1:1.0: skipping garbage [ 613.969848][ T46] hid (null): unknown global tag 0xd [ 614.000809][ T46] hid (null): unknown global tag 0xc [ 614.009887][ T5148] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 614.075547][ T5148] cdc_wdm 4-1:1.0: Unknown control protocol [ 614.092987][ T46] hid-generic 0003:0158:0100.0019: unknown main item tag 0x1 [ 614.133781][ T46] hid-generic 0003:0158:0100.0019: unexpected long global item [ 614.175965][ T46] hid-generic 0003:0158:0100.0019: probe with driver hid-generic failed with error -22 [ 614.186718][T12818] loop4: detected capacity change from 0 to 32768 [ 614.244764][T12818] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1781 (12818) [ 614.282151][ T46] usb 1-1: USB disconnect, device number 52 [ 614.374785][ T5148] usb 4-1: USB disconnect, device number 39 [ 614.418189][T12818] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 614.484659][T12818] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 614.504936][T12818] BTRFS info (device loop4): disk space caching is enabled [ 614.686959][ T29] audit: type=1804 audit(1719869847.231:158): pid=12841 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1787" name="/root/syzkaller.8Q40jN/13/bus" dev="sda1" ino=2051 res=1 errno=0 [ 614.810051][ T29] audit: type=1804 audit(1719869847.251:159): pid=12841 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1787" name="/root/syzkaller.8Q40jN/13/bus" dev="sda1" ino=2051 res=1 errno=0 [ 614.842173][ T29] audit: type=1804 audit(1719869847.301:160): pid=12841 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1787" name="/root/syzkaller.8Q40jN/13/bus" dev="sda1" ino=2051 res=1 errno=0 [ 614.926532][ T29] audit: type=1804 audit(1719869847.301:161): pid=12841 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1787" name="/root/syzkaller.8Q40jN/13/bus" dev="sda1" ino=2051 res=1 errno=0 [ 614.946627][T12818] BTRFS info (device loop4): rebuilding free space tree [ 615.032678][ T29] audit: type=1804 audit(1719869847.301:162): pid=12841 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1787" name="/root/syzkaller.8Q40jN/13/bus" dev="sda1" ino=2051 res=1 errno=0 [ 615.036796][T12818] BTRFS info (device loop4): disabling free space tree [ 615.114021][T12818] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 615.125356][T12830] loop3: detected capacity change from 0 to 4096 [ 615.135417][T12830] ntfs3: Bad value for 'uid' [ 615.169897][ T29] audit: type=1804 audit(1719869847.341:163): pid=12841 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1787" name="/root/syzkaller.8Q40jN/13/bus" dev="sda1" ino=2051 res=1 errno=0 [ 615.240059][T12818] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 615.432058][ T8210] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 617.126925][T12869] binder: 12866:12869 unknown command 0 [ 617.166426][T12869] binder: 12866:12869 ioctl c0306201 200003c0 returned -22 [ 617.411131][T12879] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1795'. [ 618.510040][T12885] IPv4: Oversized IP packet from 172.20.20.24 [ 618.516584][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 618.523013][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 618.664701][ T29] audit: type=1800 audit(1719869851.223:164): pid=12890 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1796" name="bus" dev="sda1" ino=2055 res=0 errno=0 [ 618.721144][ T29] audit: type=1804 audit(1719869851.223:165): pid=12890 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1796" name="/root/syzkaller.z56RzA/179/bus" dev="sda1" ino=2055 res=1 errno=0 [ 618.867987][ T8] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 619.067873][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 619.079889][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 619.107831][ T8] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 619.128581][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.149494][ T8] usb 4-1: config 0 descriptor?? [ 619.430011][ T5099] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 619.480218][ T5102] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 619.491212][ T5102] Bluetooth: hci2: Injecting HCI hardware error event [ 619.503820][ T5107] Bluetooth: hci2: hardware error 0x00 [ 619.550361][T12903] loop2: detected capacity change from 0 to 8192 [ 619.593565][T12885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 619.633832][ T5099] usb 1-1: Using ep0 maxpacket: 32 [ 619.648374][T12885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 619.666570][ T5099] usb 1-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91 [ 619.697118][ T5099] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.709993][ T8] hid (null): nested delimiters [ 619.714955][ T8] hid (null): report_id 24797 is invalid [ 619.737854][ T5099] usb 1-1: config 0 descriptor?? [ 619.745398][ T8] hid (null): report_id 2838798905 is invalid [ 619.775568][ T8] hid (null): unknown global tag 0xc [ 619.787796][ T8] hid (null): unknown global tag 0xa5 [ 619.792571][ T5099] gspca_main: sunplus-2.14.0 probing 0458:7006 [ 619.806894][ T8] hid (null): unknown global tag 0xd [ 619.830165][ T8] hid (null): unknown global tag 0xc [ 619.854556][ T8] hid-generic 0003:0158:0100.001A: unknown main item tag 0x1 [ 619.887683][ T8] hid-generic 0003:0158:0100.001A: unexpected long global item [ 619.944164][ T8] hid-generic 0003:0158:0100.001A: probe with driver hid-generic failed with error -22 [ 619.990083][ T8] usb 4-1: USB disconnect, device number 40 [ 620.249611][T12915] loop4: detected capacity change from 0 to 16 [ 620.296965][T12915] erofs: (device loop4): mounted with root inode @ nid 36. [ 620.462631][ T29] audit: type=1804 audit(1719869853.024:166): pid=12899 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1800" name="/root/syzkaller.z56RzA/180/file0/bus" dev="hugetlbfs" ino=54495 res=1 errno=0 [ 620.567062][T12918] syz.4.1804: attempt to access beyond end of device [ 620.567062][T12918] loop4: rw=0, sector=8, nr_sectors = 16 limit=16 [ 620.633425][ T29] audit: type=1804 audit(1719869853.144:167): pid=12899 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1800" name="/root/syzkaller.z56RzA/180/file0/bus" dev="hugetlbfs" ino=54495 res=1 errno=0 [ 620.747100][ T25] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 620.950782][ T25] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 620.970484][T12922] loop3: detected capacity change from 0 to 512 [ 620.977619][ T25] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 620.999968][T12922] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 621.028903][ T25] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 621.043270][ T25] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 621.094784][ T25] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 621.114016][ T25] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 621.182230][T12922] EXT4-fs (loop3): orphan cleanup on readonly fs [ 621.207392][T12922] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1806: bg 0: block 248: padding at end of block bitmap is not set [ 621.248090][T12922] Quota error (device loop3): write_blk: dquota write failed [ 621.274619][ T25] usb 3-1: Product: syz [ 621.290104][ T5099] gspca_sunplus: reg_w_riv err -71 [ 621.302242][ T25] usb 3-1: Manufacturer: syz [ 621.305388][T12922] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 621.327321][ T5099] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 621.340347][T12922] EXT4-fs error (device loop3): ext4_acquire_dquot:6862: comm syz.3.1806: Failed to acquire dquot type 1 [ 621.372544][T12922] EXT4-fs (loop3): 1 truncate cleaned up [ 621.390983][ T25] cdc_wdm 3-1:1.0: skipping garbage [ 621.422684][ T5099] usb 1-1: USB disconnect, device number 53 [ 621.428530][T12922] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 621.431823][ T25] cdc_wdm 3-1:1.0: skipping garbage [ 621.506918][ T25] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 621.545540][ T25] cdc_wdm 3-1:1.0: Unknown control protocol [ 621.610327][ T25] usb 3-1: USB disconnect, device number 52 [ 621.636959][ T5107] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 622.314959][T12919] loop2: detected capacity change from 0 to 4096 [ 622.341665][T12919] ntfs3: Bad value for 'uid' [ 622.356581][ T5146] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 622.430056][T12927] binder: 12926:12927 unknown command 0 [ 622.435829][T12927] binder: 12926:12927 ioctl c0306201 200003c0 returned -22 [ 622.577956][ T5146] usb 4-1: Using ep0 maxpacket: 8 [ 622.588193][T12929] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1808'. [ 622.621206][ T5146] usb 4-1: config index 0 descriptor too short (expected 53838, got 45) [ 622.636541][ T5146] usb 4-1: config 221 has too many interfaces: 52, using maximum allowed: 32 [ 622.646132][ T5146] usb 4-1: config 221 has an invalid descriptor of length 54, skipping remainder of the config [ 622.661893][ T5146] usb 4-1: config 221 has 0 interfaces, different from the descriptor's value: 52 [ 622.672445][ T5146] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 622.685780][ T5146] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.937495][T12922] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 622.965216][T12922] EXT4-fs error (device loop3): __ext4_remount:6505: comm syz.3.1806: Abort forced by user [ 623.013519][T12922] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 623.092751][T12922] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 623.137802][T12922] ext4 filesystem being remounted at /root/syzkaller.S9Kfa2/47/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 623.171593][ T5146] usb 4-1: string descriptor 0 read error: -71 [ 623.237108][ T5146] usb 4-1: USB disconnect, device number 41 [ 623.265097][ T29] audit: type=1800 audit(1719869855.795:168): pid=12941 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1810" name="bus" dev="sda1" ino=2009 res=0 errno=0 [ 623.345754][ T29] audit: type=1804 audit(1719869855.825:169): pid=12941 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1810" name="/root/syzkaller.2lgCIU/62/bus" dev="sda1" ino=2009 res=1 errno=0 [ 623.451692][T12939] kvm: kvm [12938]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x82001091270000 [ 623.957347][T11692] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 623.965907][T12957] loop4: detected capacity change from 0 to 512 [ 623.988427][T12957] EXT4-fs: Ignoring removed nobh option [ 624.046922][T12957] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 624.197460][T12957] ext4 filesystem being mounted at /root/syzkaller.6B3umU/235/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 624.455723][ T1245] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.462083][ T1245] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.463995][ T29] audit: type=1804 audit(1719869858.026:170): pid=12977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1820" name="/root/syzkaller.2lgCIU/64/bus" dev="sda1" ino=2059 res=1 errno=0 [ 625.502360][T12976] binder: 12974:12976 unknown command 0 [ 625.528059][T12976] binder: 12974:12976 ioctl c0306201 200003c0 returned -22 [ 625.547988][ T29] audit: type=1804 audit(1719869858.026:171): pid=12977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1820" name="/root/syzkaller.2lgCIU/64/bus" dev="sda1" ino=2059 res=1 errno=0 [ 625.615957][ T29] audit: type=1804 audit(1719869858.026:172): pid=12977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1820" name="/root/syzkaller.2lgCIU/64/bus" dev="sda1" ino=2059 res=1 errno=0 [ 625.629085][T12944] loop2: detected capacity change from 0 to 32768 [ 626.329337][T12983] fuse: Bad value for 'fd' [ 626.616108][T12973] loop3: detected capacity change from 0 to 32768 [ 626.656682][T12973] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1818 (12973) [ 626.724859][T12973] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 626.759390][T12973] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 626.764072][ T5148] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 626.812835][T12973] BTRFS info (device loop3): disk space caching is enabled [ 626.946636][ T8210] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 626.986510][ T5148] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 627.030078][ T5148] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 627.119315][ T5148] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 627.141107][T12973] BTRFS info (device loop3): rebuilding free space tree [ 627.172716][ T5148] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 627.219094][ T5148] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 627.230810][T13007] loop4: detected capacity change from 0 to 256 [ 627.247768][ T5148] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 627.269783][ T5148] usb 3-1: Product: syz [ 627.283780][ T5148] usb 3-1: Manufacturer: syz [ 627.292753][T12973] BTRFS info (device loop3): disabling free space tree [ 627.306966][T12973] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 627.331525][ T5148] cdc_wdm 3-1:1.0: skipping garbage [ 627.343832][T12973] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 627.348195][ T5148] cdc_wdm 3-1:1.0: skipping garbage [ 627.368515][ T5148] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 627.383742][ T5148] cdc_wdm 3-1:1.0: Unknown control protocol [ 627.557382][T11692] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 627.674503][ C1] wdm_int_callback: 259 callbacks suppressed [ 627.674528][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 627.687174][ C1] wdm_int_callback: 259 callbacks suppressed [ 627.687190][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 627.699467][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 627.706108][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 627.712456][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 627.719102][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 627.725420][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 627.732056][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 627.738407][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 627.745014][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 627.751283][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 627.757886][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 627.764209][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 627.770803][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 627.777156][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 627.783775][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 627.790022][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 627.796615][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 627.802876][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 627.809480][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 627.832988][ T5148] usb 3-1: USB disconnect, device number 53 [ 627.838978][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 627.982039][ T29] audit: type=1800 audit(1719869860.537:173): pid=13013 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1825" name="bus" dev="loop4" ino=1048670 res=0 errno=0 [ 628.063545][ T29] audit: type=1804 audit(1719869860.597:174): pid=13014 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1825" name=2F726F6F742F73797A6B616C6C65722E364233756D552F3233362FE91F7189591E9233614B2F627573 dev="loop4" ino=1048670 res=1 errno=0 [ 628.597940][ T29] audit: type=1804 audit(1719869861.168:175): pid=13017 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1827" name="/root/syzkaller.z56RzA/190/bus" dev="sda1" ino=2061 res=1 errno=0 [ 628.787175][T12986] loop2: detected capacity change from 0 to 4096 [ 628.800823][T13020] kvm: kvm [13019]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x82001091270000 [ 628.807638][T12986] ntfs3: Bad value for 'uid' [ 628.983245][ T5146] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 629.152345][T13034] loop3: detected capacity change from 0 to 8 [ 629.172739][ T5146] usb 5-1: Using ep0 maxpacket: 8 [ 629.180008][ T5146] usb 5-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice=14.ec [ 629.212695][ T5146] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.249464][ T5146] usb 5-1: config 0 descriptor?? [ 629.265517][ T5146] ttusb_dec_send_command: command bulk message failed: error -22 [ 629.290799][ T5146] ttusb-dec 5-1:0.0: probe with driver ttusb-dec failed with error -22 [ 629.733758][T13026] loop4: detected capacity change from 0 to 2048 [ 629.841281][T13026] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 631.035801][T13045] loop2: detected capacity change from 0 to 32768 [ 631.238033][ T5180] usb 5-1: USB disconnect, device number 49 [ 631.496667][T13055] loop3: detected capacity change from 0 to 32768 [ 631.521643][T13055] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1836 (13055) [ 631.557721][T13055] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 631.585838][T13055] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 631.618859][T13055] BTRFS info (device loop3): disk space caching is enabled [ 631.815732][T13055] BTRFS info (device loop3): rebuilding free space tree [ 631.852991][T13055] BTRFS info (device loop3): disabling free space tree [ 631.860315][T13055] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 631.874135][T13055] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 632.061493][ T5099] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 632.179190][ T8210] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 632.243010][ T29] audit: type=1804 audit(1719869864.820:176): pid=13086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1838" name="/root/syzkaller.z56RzA/193/bus" dev="sda1" ino=2041 res=1 errno=0 [ 632.301572][ T5099] usb 3-1: Using ep0 maxpacket: 8 [ 632.307194][ T29] audit: type=1804 audit(1719869864.820:177): pid=13086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1838" name="/root/syzkaller.z56RzA/193/bus" dev="sda1" ino=2041 res=1 errno=0 [ 632.342126][ T5099] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 632.352519][ T5099] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 632.381746][ T5099] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 64 [ 632.401488][ T29] audit: type=1804 audit(1719869864.840:178): pid=13086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1838" name="/root/syzkaller.z56RzA/193/bus" dev="sda1" ino=2041 res=1 errno=0 [ 632.451919][ T5099] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 632.462834][T11692] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 632.496093][ T5099] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 632.516829][ T5099] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.566008][ T5099] usbtmc 3-1:16.0: bulk endpoints not found [ 633.195178][ T29] audit: type=1804 audit(1719869865.770:179): pid=13095 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1840" name="/root/syzkaller.S9Kfa2/52/bus" dev="sda1" ino=2059 res=1 errno=0 [ 633.745058][T13089] loop4: detected capacity change from 0 to 32768 [ 633.788608][T13089] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 634.036631][T13089] XFS (loop4): Ending clean mount [ 634.100721][T13089] XFS (loop4): Quotacheck needed: Please wait. [ 634.156236][T13121] sctp: [Deprecated]: syz.0.1844 (pid 13121) Use of int in max_burst socket option deprecated. [ 634.156236][T13121] Use struct sctp_assoc_value instead [ 634.251152][ T9669] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 634.266959][T13089] XFS (loop4): Quotacheck: Done. [ 634.435085][ T8210] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 634.481825][ T9669] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 634.510491][ T9669] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 634.544798][ T9669] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 634.580481][ T9669] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 634.624155][ T9669] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 634.640010][ T9669] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 634.670558][ T9669] usb 4-1: Product: syz [ 634.677108][ T9669] usb 4-1: Manufacturer: syz [ 634.712815][ T9669] cdc_wdm 4-1:1.0: skipping garbage [ 634.737959][ T9669] cdc_wdm 4-1:1.0: skipping garbage [ 634.744223][ T5146] usb 3-1: USB disconnect, device number 54 [ 634.800212][ T9669] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 634.840419][ T9669] cdc_wdm 4-1:1.0: Unknown control protocol [ 634.917092][T13126] binder: 13125:13126 unknown command 0 [ 634.948069][T13126] binder: 13125:13126 ioctl c0306201 200003c0 returned -22 [ 635.044770][ C0] wdm_int_callback: 36 callbacks suppressed [ 635.044789][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 635.057365][ C0] wdm_int_callback: 36 callbacks suppressed [ 635.057379][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 635.069550][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 635.076157][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 635.082462][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 635.089054][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 635.095302][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 635.101929][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 635.108176][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 635.114768][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 635.121042][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 635.127674][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 635.133957][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 635.140558][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 635.146817][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 635.153420][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 635.159691][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 635.166307][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 635.172583][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 635.179205][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 635.226921][ T5146] usb 4-1: USB disconnect, device number 42 [ 635.226979][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 635.521493][T13118] loop3: detected capacity change from 0 to 4096 [ 635.566017][T13118] ntfs3: Bad value for 'uid' [ 635.779541][ T46] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 635.988629][ T46] usb 3-1: Using ep0 maxpacket: 8 [ 635.995803][ T46] usb 3-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice=14.ec [ 636.032776][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.059772][ T46] usb 3-1: config 0 descriptor?? [ 636.095656][ T46] ttusb_dec_send_command: command bulk message failed: error -22 [ 636.113578][ T46] ttusb-dec 3-1:0.0: probe with driver ttusb-dec failed with error -22 [ 636.203736][ T29] audit: type=1804 audit(1719869868.772:180): pid=13142 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1851" name="/root/syzkaller.2lgCIU/71/bus" dev="sda1" ino=2061 res=1 errno=0 [ 636.246570][ T29] audit: type=1804 audit(1719869868.772:181): pid=13142 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1851" name="/root/syzkaller.2lgCIU/71/bus" dev="sda1" ino=2061 res=1 errno=0 [ 636.299251][ T29] audit: type=1804 audit(1719869868.772:182): pid=13142 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1851" name="/root/syzkaller.2lgCIU/71/bus" dev="sda1" ino=2061 res=1 errno=0 [ 636.586459][T13131] loop2: detected capacity change from 0 to 2048 [ 636.887627][ T5107] Bluetooth: hci3: command 0x0406 tx timeout [ 637.718728][T13152] loop3: detected capacity change from 0 to 1024 [ 637.746505][ T29] audit: type=1804 audit(1719869870.312:183): pid=13157 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1854" name="/root/syzkaller.6B3umU/240/bus" dev="sda1" ino=2062 res=1 errno=0 [ 637.802024][T13152] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 637.827346][ T29] audit: type=1804 audit(1719869870.322:184): pid=13157 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1854" name="/root/syzkaller.6B3umU/240/bus" dev="sda1" ino=2062 res=1 errno=0 [ 637.872617][T13149] kvm: kvm [13148]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x82001091270000 [ 637.901160][T13152] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 637.906980][ T29] audit: type=1804 audit(1719869870.352:185): pid=13157 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1854" name="/root/syzkaller.6B3umU/240/bus" dev="sda1" ino=2062 res=1 errno=0 [ 638.318950][T13164] wlan0 speed is unknown, defaulting to 1000 [ 638.494587][ T25] usb 3-1: USB disconnect, device number 55 [ 638.497771][T13157] loop4: detected capacity change from 0 to 32768 [ 638.579817][ T5180] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 638.779911][ T5180] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 638.801326][ T5180] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 638.830712][ T5180] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 638.859174][ T5180] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.880283][ T5180] usb 4-1: config 0 descriptor?? [ 638.888209][ T29] audit: type=1804 audit(1719869871.453:186): pid=13170 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1851" name="/root/syzkaller.2lgCIU/71/bus" dev="sda1" ino=2061 res=1 errno=0 [ 639.067984][ T5146] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 639.208574][ T29] audit: type=1804 audit(1719869871.783:187): pid=13166 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1856" name="/root/syzkaller.z56RzA/198/bus" dev="sda1" ino=2062 res=1 errno=0 [ 639.281838][ T5146] usb 5-1: Using ep0 maxpacket: 8 [ 639.300529][ T5146] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 639.327833][ T5146] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 639.354144][ T5146] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 64 [ 639.383611][ T5146] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 639.393313][T13176] loop2: detected capacity change from 0 to 256 [ 639.413098][ T5180] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 639.468053][ T5146] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 639.497584][ T5180] plantronics 0003:047F:FFFF.001B: No inputs registered, leaving [ 639.506024][T13177] sctp: [Deprecated]: syz.1.1858 (pid 13177) Use of int in max_burst socket option deprecated. [ 639.506024][T13177] Use struct sctp_assoc_value instead [ 639.511417][ T5146] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.554831][T13176] loop2: detected capacity change from 0 to 4096 [ 639.587283][ T5180] plantronics 0003:047F:FFFF.001B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 639.676732][ T29] audit: type=1800 audit(1719869872.243:188): pid=13178 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1859" name="bus" dev="sda1" ino=2028 res=0 errno=0 [ 639.699992][T13152] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2234: inode #15: comm syz.3.1855: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 639.736535][ T5146] usbtmc 5-1:16.0: bulk endpoints not found [ 639.792350][ T29] audit: type=1804 audit(1719869872.243:189): pid=13178 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1859" name="/root/syzkaller.8Q40jN/26/bus" dev="sda1" ino=2028 res=1 errno=0 [ 640.950157][T13188] loop2: detected capacity change from 0 to 256 [ 641.544858][T13188] loop2: detected capacity change from 0 to 4096 [ 641.864562][ T25] usb 5-1: USB disconnect, device number 50 [ 641.873368][ T29] audit: type=1800 audit(1719869874.444:190): pid=13195 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1862" name="bus" dev="sda1" ino=2030 res=0 errno=0 [ 641.978515][ T29] audit: type=1804 audit(1719869874.524:191): pid=13195 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1862" name="/root/syzkaller.8Q40jN/27/bus" dev="sda1" ino=2030 res=1 errno=0 [ 642.238521][ T46] usb 4-1: USB disconnect, device number 43 [ 642.546354][ T25] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 642.758800][ T25] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 642.775925][ T25] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 642.791493][ T25] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 642.817177][ T29] audit: type=1804 audit(1719869875.385:192): pid=13209 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1868" name="/root/syzkaller.8Q40jN/28/bus" dev="sda1" ino=2057 res=1 errno=0 [ 642.847711][ T25] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 642.890117][ T25] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 642.938568][T11692] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 642.945804][ T25] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 642.970514][ T29] audit: type=1804 audit(1719869875.395:193): pid=13209 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1868" name="/root/syzkaller.8Q40jN/28/bus" dev="sda1" ino=2057 res=1 errno=0 [ 642.985588][ T25] usb 5-1: Product: syz [ 643.054456][ T25] usb 5-1: Manufacturer: syz [ 643.081074][ T25] cdc_wdm 5-1:1.0: skipping garbage [ 643.095736][ T25] cdc_wdm 5-1:1.0: skipping garbage [ 643.105458][ T29] audit: type=1804 audit(1719869875.415:194): pid=13209 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1868" name="/root/syzkaller.8Q40jN/28/bus" dev="sda1" ino=2057 res=1 errno=0 [ 643.139522][ T25] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 643.162208][ T25] cdc_wdm 5-1:1.0: Unknown control protocol [ 643.489939][ C1] wdm_int_callback: 221 callbacks suppressed [ 643.489971][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 643.502636][ C1] wdm_int_callback: 221 callbacks suppressed [ 643.502660][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 643.514993][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 643.521653][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 643.528076][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 643.534743][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 643.541209][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 643.547857][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 643.554264][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 643.560907][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 643.567243][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 643.573878][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 643.580219][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 643.586851][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 643.593321][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 643.599963][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 643.606288][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 643.612919][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 643.619243][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 643.625878][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 643.642174][ T5204] usb 5-1: USB disconnect, device number 51 [ 643.642248][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 643.646761][ T5932] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.988078][ T5932] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.190915][ T29] audit: type=1800 audit(1719869876.766:195): pid=13216 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1872" name="bus" dev="sda1" ino=2059 res=0 errno=0 [ 644.285183][ T29] audit: type=1804 audit(1719869876.816:196): pid=13216 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1872" name="/root/syzkaller.z56RzA/204/bus" dev="sda1" ino=2059 res=1 errno=0 [ 644.288016][ T5932] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.533528][T13202] loop4: detected capacity change from 0 to 4096 [ 644.590944][T13202] ntfs3: Bad value for 'uid' [ 644.609223][ T5932] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.657897][T13209] loop2: detected capacity change from 0 to 32768 [ 645.037823][ T5107] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 645.051788][ T5107] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 645.062449][ T5107] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 645.261719][ T5107] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 645.272278][ T5107] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 645.286062][ T5107] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 646.134601][ T5932] bridge_slave_1: left allmulticast mode [ 646.140336][ T5932] bridge_slave_1: left promiscuous mode [ 646.218079][ T5932] bridge0: port 2(bridge_slave_1) entered disabled state [ 646.248548][ T5932] bridge_slave_0: left allmulticast mode [ 646.278302][ T5932] bridge_slave_0: left promiscuous mode [ 646.298986][ T5932] bridge0: port 1(bridge_slave_0) entered disabled state [ 646.746948][ T5102] Bluetooth: hci3: unexpected event for opcode 0x0c03 [ 646.942665][T13242] loop4: detected capacity change from 0 to 4096 [ 646.956679][T13242] ntfs3: Unknown parameter 'tls' [ 646.963894][ T5204] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 647.166323][ T5204] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 647.183907][T13240] loop4: detected capacity change from 0 to 2048 [ 647.190505][ T5204] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 647.229479][T13240] EXT4-fs: Ignoring removed nobh option [ 647.249266][ T5204] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 647.269907][ T5204] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 647.310853][ T5102] Bluetooth: hci0: command tx timeout [ 647.329379][ T5204] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 647.338810][ T5204] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 647.348959][ T5204] usb 3-1: Product: syz [ 647.353386][ T5204] usb 3-1: Manufacturer: syz [ 647.366408][ T5204] cdc_wdm 3-1:1.0: skipping garbage [ 647.371743][ T5204] cdc_wdm 3-1:1.0: skipping garbage [ 647.381136][ T5204] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 647.400241][ T5204] cdc_wdm 3-1:1.0: Unknown control protocol [ 647.471574][T13240] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 647.501420][T13240] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 647.803563][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 647.829386][ T5204] usb 3-1: USB disconnect, device number 56 [ 648.339485][ T5932] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 648.358214][ T5932] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 648.379784][ T5932] bond0 (unregistering): Released all slaves [ 648.493256][T13221] wlan0 speed is unknown, defaulting to 1000 [ 648.733786][T13263] loop4: detected capacity change from 0 to 256 [ 648.988100][T13239] loop2: detected capacity change from 0 to 4096 [ 649.082610][T13239] ntfs3: Bad value for 'uid' [ 649.108295][ T29] audit: type=1800 audit(1719869881.688:197): pid=13271 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1882" name="bus" dev="loop4" ino=1048671 res=0 errno=0 [ 649.287031][ T29] audit: type=1804 audit(1719869881.718:198): pid=13271 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1882" name=2F726F6F742F73797A6B616C6C65722E364233756D552F3234362FE91F7189591E9233614B2F627573 dev="loop4" ino=1048671 res=1 errno=0 [ 649.382896][ T5102] Bluetooth: hci0: command tx timeout [ 649.542839][ T29] audit: type=1804 audit(1719869882.118:199): pid=13277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1884" name="/root/syzkaller.z56RzA/209/bus" dev="sda1" ino=2047 res=1 errno=0 [ 649.654398][ T29] audit: type=1804 audit(1719869882.128:200): pid=13277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1884" name="/root/syzkaller.z56RzA/209/bus" dev="sda1" ino=2047 res=1 errno=0 [ 649.803159][ T29] audit: type=1804 audit(1719869882.128:201): pid=13277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1884" name="/root/syzkaller.z56RzA/209/bus" dev="sda1" ino=2047 res=1 errno=0 [ 649.881173][ T5932] hsr_slave_0: left promiscuous mode [ 649.935726][ T5932] hsr_slave_1: left promiscuous mode [ 649.969998][ T5932] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 649.990255][ T5932] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 650.082085][ T5932] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 650.112206][ T5932] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 650.257610][ T5932] veth1_macvtap: left promiscuous mode [ 650.328263][ T5932] veth0_macvtap: left promiscuous mode [ 650.354515][ T5932] veth1_vlan: left promiscuous mode [ 650.359929][ T5932] veth0_vlan: left promiscuous mode [ 650.823165][ T5102] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 650.834373][ T5102] Bluetooth: hci3: Injecting HCI hardware error event [ 650.848210][ T5102] Bluetooth: hci3: hardware error 0x00 [ 651.214959][T13286] loop4: detected capacity change from 0 to 32768 [ 651.255085][T13286] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1885 (13286) [ 651.276119][T13292] loop2: detected capacity change from 0 to 16 [ 651.288605][T13292] erofs: (device loop2): mounted with root inode @ nid 36. [ 651.311730][ T5180] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 651.335219][T13286] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 651.371850][T13286] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 651.390252][T13286] BTRFS info (device loop4): using free-space-tree [ 651.471638][ T5107] Bluetooth: hci0: command tx timeout [ 651.523645][ T5180] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 651.541882][ T5180] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 651.553653][ T5180] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 651.573708][ T5180] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 651.584022][T13297] syz.2.1887: attempt to access beyond end of device [ 651.584022][T13297] loop2: rw=0, sector=8, nr_sectors = 16 limit=16 [ 651.607056][ T5180] usb 2-1: SerialNumber: syz [ 651.919715][T13286] BTRFS info (device loop4): balance: start -s [ 651.972179][ T5180] usb 2-1: 0:2 : does not exist [ 651.977295][ T5180] usb 2-1: unit 5 not found! [ 651.987287][T13286] BTRFS info (device loop4): relocating block group 1048576 flags system [ 652.015218][ T5180] usb 2-1: USB disconnect, device number 32 [ 652.265991][T13286] BTRFS info (device loop4): balance: ended with status: 0 [ 652.392156][ T8210] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 652.420796][ T9945] udevd[9945]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 652.912609][ T5102] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 653.221602][ T5932] team0 (unregistering): Port device team_slave_1 removed [ 653.398112][ T5932] team0 (unregistering): Port device team_slave_0 removed [ 653.541533][ T5102] Bluetooth: hci0: command tx timeout [ 653.570981][T13324] loop4: detected capacity change from 0 to 2048 [ 653.627391][T13324] EXT4-fs: Ignoring removed nobh option [ 653.664149][T13324] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 653.711227][T13324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 654.008016][T13324] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1889'. [ 654.190381][ T25] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 654.386578][ T25] usb 1-1: Using ep0 maxpacket: 32 [ 654.396440][ T25] usb 1-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91 [ 654.410048][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.437101][ T25] usb 1-1: config 0 descriptor?? [ 654.453316][ T25] gspca_main: sunplus-2.14.0 probing 0458:7006 [ 654.752499][T13318] pim6reg: entered allmulticast mode [ 654.843283][T13221] chnl_net:caif_netlink_parms(): no params data found [ 655.028880][T13340] loop4: detected capacity change from 0 to 16 [ 655.078624][ T29] audit: type=1804 audit(1719869887.661:202): pid=13331 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1892" name="/root/syzkaller.z56RzA/212/file0/bus" dev="hugetlbfs" ino=56082 res=1 errno=0 [ 655.114200][T13340] erofs: (device loop4): mounted with root inode @ nid 36. [ 655.246075][ T29] audit: type=1804 audit(1719869887.701:203): pid=13331 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1892" name="/root/syzkaller.z56RzA/212/file0/bus" dev="hugetlbfs" ino=56082 res=1 errno=0 [ 655.326387][ T29] audit: type=1804 audit(1719869887.731:204): pid=13331 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1892" name="/root/syzkaller.z56RzA/212/file0/bus" dev="hugetlbfs" ino=56082 res=1 errno=0 [ 655.430078][T13346] syz.4.1895: attempt to access beyond end of device [ 655.430078][T13346] loop4: rw=0, sector=8, nr_sectors = 16 limit=16 [ 655.495697][T13221] bridge0: port 1(bridge_slave_0) entered blocking state [ 655.525815][T13221] bridge0: port 1(bridge_slave_0) entered disabled state [ 655.572727][ T25] gspca_sunplus: reg_w_riv err -71 [ 655.578772][T13221] bridge_slave_0: entered allmulticast mode [ 655.590695][ T25] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 655.627210][T13221] bridge_slave_0: entered promiscuous mode [ 655.667546][ T25] usb 1-1: USB disconnect, device number 54 [ 655.671211][ T29] audit: type=1800 audit(1719869888.241:205): pid=13348 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1894" name="bus" dev="sda1" ino=2060 res=0 errno=0 [ 655.737705][T13221] bridge0: port 2(bridge_slave_1) entered blocking state [ 655.789048][T13221] bridge0: port 2(bridge_slave_1) entered disabled state [ 655.812932][T13221] bridge_slave_1: entered allmulticast mode [ 655.835689][ T29] audit: type=1804 audit(1719869888.291:206): pid=13348 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1894" name="/root/syzkaller.2lgCIU/78/bus" dev="sda1" ino=2060 res=1 errno=0 [ 655.839893][T13221] bridge_slave_1: entered promiscuous mode [ 656.048589][ T5932] IPVS: stop unused estimator thread 0... [ 656.068456][T13221] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 656.151670][T13221] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 656.361071][ T29] audit: type=1804 audit(1719869888.932:207): pid=13360 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1897" name="/root/syzkaller.8Q40jN/33/bus" dev="sda1" ino=2034 res=1 errno=0 [ 656.438233][ T29] audit: type=1804 audit(1719869888.952:208): pid=13360 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1897" name="/root/syzkaller.8Q40jN/33/bus" dev="sda1" ino=2034 res=1 errno=0 [ 656.520667][T13221] team0: Port device team_slave_0 added [ 656.543750][ T29] audit: type=1804 audit(1719869888.952:209): pid=13360 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1897" name="/root/syzkaller.8Q40jN/33/bus" dev="sda1" ino=2034 res=1 errno=0 [ 656.568568][T13221] team0: Port device team_slave_1 added [ 656.669145][T13221] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 656.686762][T13221] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 656.736247][ T5180] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 656.783349][T13221] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 656.832640][T13221] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 656.871782][T13221] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 656.902667][T13221] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 656.950984][ T5180] usb 2-1: Using ep0 maxpacket: 32 [ 656.971208][ T5180] usb 2-1: config 0 has an invalid interface number: 127 but max is 0 [ 656.999304][ T5180] usb 2-1: config 0 has no interface number 0 [ 657.016285][ T5180] usb 2-1: config 0 interface 127 altsetting 2 endpoint 0xB has invalid wMaxPacketSize 0 [ 657.045331][ T5180] usb 2-1: config 0 interface 127 has no altsetting 0 [ 657.071608][ T5180] usb 2-1: New USB device found, idVendor=2040, idProduct=c61a, bcdDevice= e.90 [ 657.101440][ T5180] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.143265][ T5180] usb 2-1: config 0 descriptor?? [ 657.226900][T13221] hsr_slave_0: entered promiscuous mode [ 657.268492][T13221] hsr_slave_1: entered promiscuous mode [ 657.281194][T13221] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 657.325376][T13221] Cannot create hsr debugfs directory [ 657.403220][T13363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 657.429116][T13363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 657.635080][ T25] usb 2-1: USB disconnect, device number 33 [ 658.047960][ T29] audit: type=1326 audit(1719869890.462:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13372 comm="syz.0.1900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0027f75b99 code=0x7ffc0000 [ 658.279161][ T29] audit: type=1326 audit(1719869890.462:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13372 comm="syz.0.1900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0027f75b99 code=0x7ffc0000 [ 658.416486][T13360] loop2: detected capacity change from 0 to 32768 [ 660.927238][T13408] netlink: 'syz.4.1906': attribute type 1 has an invalid length. [ 660.959008][T13408] netlink: 112860 bytes leftover after parsing attributes in process `syz.4.1906'. [ 661.010485][T13408] netlink: 'syz.4.1906': attribute type 1 has an invalid length. [ 661.199609][ T5180] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 661.233697][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 661.233718][ T29] audit: type=1800 audit(1719869893.814:221): pid=13423 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1908" name="bus" dev="sda1" ino=2059 res=0 errno=0 [ 661.282566][T13422] binder: 13421:13422 unknown command 0 [ 661.293711][T13422] binder: 13421:13422 ioctl c0306201 200003c0 returned -22 [ 661.360669][T13409] loop2: detected capacity change from 0 to 2048 [ 661.369040][T13409] EXT4-fs: Ignoring removed nobh option [ 661.390236][ T29] audit: type=1804 audit(1719869893.854:222): pid=13423 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1908" name="/root/syzkaller.z56RzA/217/bus" dev="sda1" ino=2059 res=1 errno=0 [ 661.448048][ T5180] usb 2-1: Using ep0 maxpacket: 32 [ 661.467459][ T5180] usb 2-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91 [ 661.500757][ T5180] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 661.564310][ T5180] usb 2-1: config 0 descriptor?? [ 661.588961][ T5180] gspca_main: sunplus-2.14.0 probing 0458:7006 [ 661.645127][T13221] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 661.690072][T13221] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 661.750983][T13409] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1904'. [ 661.783237][T13221] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 661.858581][T13221] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 662.109528][T13436] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1911'. [ 662.207982][ T29] audit: type=1804 audit(1719869894.795:223): pid=13414 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1907" name="/root/syzkaller.2lgCIU/81/file0/bus" dev="hugetlbfs" ino=56883 res=1 errno=0 [ 662.301645][ T29] audit: type=1804 audit(1719869894.825:224): pid=13414 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1907" name="/root/syzkaller.2lgCIU/81/file0/bus" dev="hugetlbfs" ino=56883 res=1 errno=0 [ 662.323494][T13441] loop4: detected capacity change from 0 to 512 [ 662.369196][ T29] audit: type=1804 audit(1719869894.845:225): pid=13414 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1907" name="/root/syzkaller.2lgCIU/81/file0/bus" dev="hugetlbfs" ino=56883 res=1 errno=0 [ 662.445436][T13441] EXT4-fs (loop4): Test dummy encryption mode enabled [ 662.495492][ T29] audit: type=1804 audit(1719869895.005:226): pid=13444 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1913" name="/root/syzkaller.8Q40jN/35/bus" dev="sda1" ino=2059 res=1 errno=0 [ 662.518060][ C0] vkms_vblank_simulate: vblank timer overrun [ 662.537506][T13221] 8021q: adding VLAN 0 to HW filter on device bond0 [ 662.557538][T13441] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 662.565746][ T29] audit: type=1804 audit(1719869895.005:227): pid=13444 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1913" name="/root/syzkaller.8Q40jN/35/bus" dev="sda1" ino=2059 res=1 errno=0 [ 662.635096][T13221] 8021q: adding VLAN 0 to HW filter on device team0 [ 662.666193][ T29] audit: type=1804 audit(1719869895.015:228): pid=13444 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1913" name="/root/syzkaller.8Q40jN/35/bus" dev="sda1" ino=2059 res=1 errno=0 [ 662.667329][T13441] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 662.698889][ T5180] gspca_sunplus: reg_w_riv err -71 [ 662.698981][ T5180] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 662.720628][ T5180] usb 2-1: USB disconnect, device number 34 [ 662.739572][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 662.746818][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 662.821341][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 662.828586][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 662.955646][T13441] EXT4-fs (loop4): 1 truncate cleaned up [ 663.033767][T13441] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 663.116167][ T5146] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 663.288966][T13441] EXT4-fs error (device loop4): htree_dirblock_to_tree:1111: inode #2: block 13: comm syz.4.1912: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=16, rec_len=0, size=1024 fake=0 [ 663.310327][ T5146] usb 1-1: Using ep0 maxpacket: 16 [ 663.346231][ T5146] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 663.385643][ T5146] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 663.400799][ T5146] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 663.441466][ T5146] usb 1-1: config 0 descriptor?? [ 663.464868][T13463] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1912'. [ 663.501296][T13441] EXT4-fs (loop4): Remounting filesystem read-only [ 663.592840][T13221] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 663.681613][ T8210] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 663.840743][T13221] veth0_vlan: entered promiscuous mode [ 663.882467][T13449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 663.917881][T13449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 663.957435][ T5146] hid (null): nested delimiters [ 663.962415][ T5146] hid (null): report_id 24797 is invalid [ 663.971690][T13221] veth1_vlan: entered promiscuous mode [ 664.010333][ T5146] hid (null): report_id 2838798905 is invalid [ 664.044866][ T5146] hid (null): unknown global tag 0xc [ 664.082042][ T5146] hid (null): unknown global tag 0xa5 [ 664.121924][T13444] loop2: detected capacity change from 0 to 32768 [ 664.129032][ T5146] hid (null): unknown global tag 0xd [ 664.134505][ T5146] hid (null): unknown global tag 0xc [ 664.149394][T13221] veth0_macvtap: entered promiscuous mode [ 664.159256][ T5146] hid-generic 0003:0158:0100.001C: unknown main item tag 0x1 [ 664.180137][ T5146] hid-generic 0003:0158:0100.001C: unexpected long global item [ 664.197387][ T5146] hid-generic 0003:0158:0100.001C: probe with driver hid-generic failed with error -22 [ 664.218159][T13221] veth1_macvtap: entered promiscuous mode [ 664.270205][ T5146] usb 1-1: USB disconnect, device number 55 [ 664.387774][T13221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 664.417631][T13475] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 664.438082][T13221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 664.477315][T13221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 664.505112][T13221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 664.539641][T13221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 664.559330][T13221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 664.585033][T13221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 664.635047][T13221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 664.660108][T13221] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 664.771636][T13221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 664.794932][T13221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 664.828658][T13221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 664.864940][T13221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 664.875386][T13485] binder: 13484:13485 unknown command 0 [ 664.881012][T13485] binder: 13484:13485 ioctl c0306201 200003c0 returned -22 [ 664.905070][T13221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 664.944947][T13221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 664.977091][T13221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 665.008174][T13221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 665.032979][T13221] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 665.099359][T13221] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.164685][T13221] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.183752][T13221] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.244480][T13221] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.464963][ T29] audit: type=1800 audit(1719869898.046:229): pid=13489 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1920" name="bus" dev="sda1" ino=2047 res=0 errno=0 [ 666.190717][ T29] audit: type=1804 audit(1719869898.086:230): pid=13489 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1920" name="/root/syzkaller.z56RzA/220/bus" dev="sda1" ino=2047 res=1 errno=0 [ 666.570049][ T5928] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 666.622515][ T5928] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 666.765187][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 666.804079][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 666.900599][ T5148] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 667.154977][ T5148] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 667.186637][T13520] loop3: detected capacity change from 0 to 64 [ 667.193785][ T5148] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 667.193788][ T9669] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 667.240895][ T5148] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 667.283475][ T5148] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 667.349009][ T5148] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 667.382761][ T9669] usb 3-1: Using ep0 maxpacket: 16 [ 667.393602][ T5148] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 667.416645][ T9669] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 667.429604][ T5148] usb 5-1: Product: syz [ 667.443826][ T5148] usb 5-1: Manufacturer: syz [ 667.470935][ T9669] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 667.499331][ T5148] cdc_wdm 5-1:1.0: skipping garbage [ 667.516661][ T5148] cdc_wdm 5-1:1.0: skipping garbage [ 667.527889][ T9669] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 667.544344][ T5148] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 667.560853][ T5148] cdc_wdm 5-1:1.0: Unknown control protocol [ 667.603940][ T9669] usb 3-1: config 0 descriptor?? [ 667.645347][T13529] binder: 13528:13529 unknown command 0 [ 667.651051][T13529] binder: 13528:13529 ioctl c0306201 200003c0 returned -22 [ 667.753753][ T5099] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 667.953382][ T5099] usb 1-1: Using ep0 maxpacket: 16 [ 667.963031][ T5099] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 667.997299][ T5099] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 668.021065][ T5099] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.025931][T13512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 668.054093][ T5099] usb 1-1: config 0 descriptor?? [ 668.073931][T13512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 668.149159][ T9669] hid (null): nested delimiters [ 668.163575][ T46] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 668.179714][ T9669] hid (null): report_id 24797 is invalid [ 668.207050][ T9669] hid (null): report_id 2838798905 is invalid [ 668.232217][ T9669] hid (null): unknown global tag 0xc [ 668.259471][ T9669] hid (null): unknown global tag 0xa5 [ 668.297352][ T9669] hid (null): unknown global tag 0xd [ 668.320945][ T9669] hid (null): unknown global tag 0xc [ 668.358409][ C1] wdm_int_callback: 61 callbacks suppressed [ 668.358436][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 668.371091][ C1] wdm_int_callback: 61 callbacks suppressed [ 668.371110][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 668.383295][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 668.389896][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 668.396249][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 668.402855][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 668.409133][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 668.415764][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 668.422093][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 668.428753][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 668.435065][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 668.441701][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 668.448020][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 668.454644][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 668.460917][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 668.467524][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 668.473821][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 668.480447][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 668.486812][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 668.493413][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 668.502869][ T5204] usb 5-1: USB disconnect, device number 52 [ 668.502909][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 668.521665][T13525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 668.530734][T13525] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 668.541341][ T5099] hid (null): nested delimiters [ 668.549710][ T5099] hid (null): report_id 24797 is invalid [ 668.562608][ T46] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 668.574845][ T5099] hid (null): report_id 2838798905 is invalid [ 668.582390][ T46] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 668.600705][ T5099] hid (null): unknown global tag 0xc [ 668.607072][ T9669] hid-generic 0003:0158:0100.001D: unknown main item tag 0x1 [ 668.610865][ T5099] hid (null): unknown global tag 0xa5 [ 668.633389][ T46] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 668.653801][ T5099] hid (null): unknown global tag 0xd [ 668.660358][ T9669] hid-generic 0003:0158:0100.001D: unexpected long global item [ 668.673062][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 668.684805][ T5099] hid (null): unknown global tag 0xc [ 668.708644][ T46] usb 2-1: SerialNumber: syz [ 668.715823][ T9669] hid-generic 0003:0158:0100.001D: probe with driver hid-generic failed with error -22 [ 668.722653][ T5099] hid-generic 0003:0158:0100.001E: unknown main item tag 0x1 [ 668.764857][ T5099] hid-generic 0003:0158:0100.001E: unexpected long global item [ 668.805458][ T5099] hid-generic 0003:0158:0100.001E: probe with driver hid-generic failed with error -22 [ 668.808534][ T9669] usb 3-1: USB disconnect, device number 57 [ 668.846443][ T5099] usb 1-1: USB disconnect, device number 56 [ 669.181961][ T46] usb 2-1: 0:2 : does not exist [ 669.213477][ T46] usb 2-1: unit 5 not found! [ 669.293097][ T46] usb 2-1: USB disconnect, device number 35 [ 669.596800][ T9945] udevd[9945]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 670.213470][T13560] loop3: detected capacity change from 0 to 256 [ 670.756432][ T29] audit: type=1800 audit(1719869903.339:231): pid=13573 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1934" name="bus" dev="loop3" ino=1048675 res=0 errno=0 [ 670.889934][ T29] audit: type=1804 audit(1719869903.349:232): pid=13573 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1934" name=2F726F6F742F73797A6B616C6C65722E5244537754732F322FE91F7189591E9233614B2F627573 dev="loop3" ino=1048675 res=1 errno=0 [ 670.953799][T13506] loop4: detected capacity change from 0 to 4096 [ 671.060807][T13565] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1935'. [ 671.074765][T13506] ntfs3: Bad value for 'uid' [ 671.311793][T13583] loop3: detected capacity change from 0 to 64 [ 672.013762][ T29] audit: type=1804 audit(1719869904.599:233): pid=13594 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1942" name="/root/syzkaller.2lgCIU/88/bus" dev="sda1" ino=2065 res=1 errno=0 [ 672.117550][ T29] audit: type=1804 audit(1719869904.609:234): pid=13594 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1942" name="/root/syzkaller.2lgCIU/88/bus" dev="sda1" ino=2065 res=1 errno=0 [ 672.216322][ T29] audit: type=1804 audit(1719869904.639:235): pid=13594 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1942" name="/root/syzkaller.2lgCIU/88/bus" dev="sda1" ino=2065 res=1 errno=0 [ 672.377726][T13602] loop4: detected capacity change from 0 to 64 [ 672.888793][ T5146] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 672.983301][T13615] netlink: 'syz.0.1947': attribute type 3 has an invalid length. [ 672.983776][T13584] loop2: detected capacity change from 0 to 32768 [ 673.016542][T13615] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.1947'. [ 673.104354][ T5146] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 673.136425][ T5146] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 673.230951][ T5146] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 673.240256][ T5146] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 673.272428][ T5146] usb 4-1: SerialNumber: syz [ 673.607611][ T29] audit: type=1800 audit(1719869906.200:236): pid=13618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1948" name="bus" dev="sda1" ino=2049 res=0 errno=0 [ 673.720713][ T29] audit: type=1804 audit(1719869906.240:237): pid=13618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1948" name="/root/syzkaller.z56RzA/228/bus" dev="sda1" ino=2049 res=1 errno=0 [ 673.859622][ T5146] usb 4-1: 0:2 : does not exist [ 673.898333][ T5146] usb 4-1: unit 5 not found! [ 673.984051][ T5146] usb 4-1: USB disconnect, device number 44 [ 675.047759][ T9945] udevd[9945]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 676.758989][ T5146] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 676.813454][T13659] loop3: detected capacity change from 0 to 64 [ 676.885205][T13638] loop4: detected capacity change from 0 to 2048 [ 676.894802][T13638] EXT4-fs: Ignoring removed nobh option [ 676.958914][ T5146] usb 2-1: Using ep0 maxpacket: 8 [ 676.976540][ T5146] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 676.985610][ T5146] usb 2-1: config 179 has no interface number 0 [ 677.000368][ T5146] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 677.053143][ T5146] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 677.097303][T13638] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 677.147251][T13638] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 677.158741][ T5146] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 677.172782][ T5146] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 677.192992][ T5146] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 677.217093][ T5146] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 677.255046][ T5146] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 677.283958][T13642] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 677.623229][ T5146] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input81 [ 677.627604][T13669] wlan0 speed is unknown, defaulting to 1000 [ 677.678726][T13638] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1952'. [ 677.806675][T13642] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1955'. [ 678.210958][ T5099] usb 2-1: USB disconnect, device number 36 [ 678.211042][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 678.225264][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 678.245766][ T5099] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 679.636611][T13685] syz.4.1966[13685] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 679.636791][T13685] syz.4.1966[13685] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 679.656916][T13665] loop2: detected capacity change from 0 to 32768 [ 679.782466][T13687] wlan0 speed is unknown, defaulting to 1000 [ 679.947345][ T5102] Bluetooth: hci0: command 0x0406 tx timeout [ 680.276818][T13691] wlan0 speed is unknown, defaulting to 1000 [ 681.124207][T13701] loop3: detected capacity change from 0 to 65536 [ 681.130830][ T5102] Bluetooth: hci5: sending frame failed (-49) [ 681.141979][ T5107] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 681.211329][T13701] XFS (loop3): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 681.447783][T13701] XFS (loop3): Ending clean mount [ 681.470705][T13701] XFS (loop3): Quotacheck needed: Please wait. [ 681.560628][T13721] netlink: 'syz.0.1973': attribute type 1 has an invalid length. [ 681.698127][T13701] XFS (loop3): Quotacheck: Done. [ 681.736899][T13723] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 681.747161][T13723] bond1: (slave batadv1): Enslaving as a backup interface with an up link [ 681.929693][T13728] wlan0 speed is unknown, defaulting to 1000 [ 682.092455][T13221] XFS (loop3): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 682.305851][T13736] wlan0 speed is unknown, defaulting to 1000 [ 682.910413][T13749] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1984'. [ 683.335769][ T46] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 683.385988][T13754] bridge_slave_1: left allmulticast mode [ 683.398294][T13754] bridge_slave_1: left promiscuous mode [ 683.448490][T13754] bridge0: port 2(bridge_slave_1) entered disabled state [ 683.684967][T13754] bridge2: port 1(bridge_slave_1) entered blocking state [ 683.731378][T13754] bridge2: port 1(bridge_slave_1) entered disabled state [ 683.782449][ T46] usb 2-1: Using ep0 maxpacket: 32 [ 683.783742][T13754] bridge_slave_1: entered allmulticast mode [ 683.792799][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 683.810857][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 683.822322][ T46] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 683.833291][T13754] bridge_slave_1: entered promiscuous mode [ 683.839313][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.849038][T13754] bridge2: port 1(bridge_slave_1) entered blocking state [ 683.856417][T13754] bridge2: port 1(bridge_slave_1) entered forwarding state [ 683.876054][ T46] usb 2-1: config 0 descriptor?? [ 683.910231][T13753] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 684.099322][ T46] hub 2-1:0.0: USB hub found [ 684.522725][ T46] hub 2-1:0.0: 2 ports detected [ 684.673818][ T29] audit: type=1326 audit(1719869917.266:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13764 comm="syz.0.1989" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0027f75b99 code=0x0 [ 684.733673][ T46] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 684.768960][ T46] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 684.800675][ T46] usbhid 2-1:0.0: can't add hid device: -71 [ 684.813839][ T46] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 684.899032][ T46] usb 2-1: USB disconnect, device number 37 [ 685.041891][T13772] Oops: stack segment: 0000 [#1] PREEMPT SMP KASAN PTI [ 685.041925][T13772] CPU: 0 UID: 0 PID: 13772 Comm: syz.2.1992 Not tainted 6.10.0-rc6-next-20240701-syzkaller #0 [ 685.041956][T13772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 685.041968][T13772] RIP: 0010:bpf_xdp_redirect+0x59/0x1a0 [ 685.041999][T13772] Code: 81 c3 00 18 00 00 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 c5 6c 90 f8 48 8b 1b 4c 8d 63 38 4c 89 e5 48 c1 ed 03 <42> 0f b6 44 2d 00 84 c0 0f 85 d0 00 00 00 45 8b 34 24 44 89 f6 83 [ 685.042013][T13772] RSP: 0018:ffffc900048bf6f8 EFLAGS: 00010202 [ 685.042029][T13772] RAX: 1ffff11005286a80 RBX: 0000000000000000 RCX: 0000000000040000 [ 685.042041][T13772] RDX: ffffc90009021000 RSI: 00000000000018dd RDI: 00000000000018de [ 685.042053][T13772] RBP: 0000000000000007 R08: ffffffff895fac60 R09: 1ffff11017288930 [ 685.042064][T13772] R10: dffffc0000000000 R11: ffffed1017288931 R12: 0000000000000038 [ 685.042076][T13772] R13: dffffc0000000000 R14: 1ffff92000917f21 R15: 0000000000000000 [ 685.042089][T13772] FS: 00007fa0b3cf86c0(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 685.042103][T13772] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 685.042114][T13772] CR2: 0000000020010000 CR3: 0000000060ebc000 CR4: 00000000003506f0 [ 685.042129][T13772] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 685.042139][T13772] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 685.042151][T13772] Call Trace: [ 685.042158][T13772] [ 685.042165][T13772] ? __die_body+0x88/0xe0 [ 685.042190][T13772] ? die+0xcf/0x110 [ 685.042214][T13772] ? do_trap+0x15a/0x3a0 [ 685.042238][T13772] ? do_error_trap+0x1dc/0x2c0 [ 685.042261][T13772] ? __pfx_do_error_trap+0x10/0x10 [ 685.042285][T13772] ? rcu_is_watching+0x15/0xb0 [ 685.042311][T13772] ? exc_stack_segment+0x38/0x50 [ 685.042337][T13772] ? asm_exc_stack_segment+0x26/0x30 [ 685.042357][T13772] ? bpf_prog_run_generic_xdp+0x5f0/0x14c0 [ 685.042379][T13772] ? bpf_xdp_redirect+0x59/0x1a0 [ 685.042401][T13772] ? bpf_xdp_redirect+0x25/0x1a0 [ 685.042425][T13772] bpf_prog_bd73926c2776e1d5+0x1a/0x1c [ 685.042439][T13772] bpf_prog_run_generic_xdp+0x679/0x14c0 [ 685.042474][T13772] do_xdp_generic+0x673/0xb90 [ 685.042497][T13772] ? __pfx_do_xdp_generic+0x10/0x10 [ 685.042517][T13772] ? tun_get_user+0x26c8/0x4560 [ 685.042549][T13772] ? tun_get_user+0x26c8/0x4560 [ 685.042572][T13772] tun_get_user+0x2805/0x4560 [ 685.042607][T13772] ? __pfx_tun_get_user+0x10/0x10 [ 685.042634][T13772] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 685.042659][T13772] ? tun_get+0x1e/0x2f0 [ 685.042696][T13772] ? tun_get+0x1e/0x2f0 [ 685.042727][T13772] ? tun_get+0x27d/0x2f0 [ 685.042769][T13772] tun_chr_write_iter+0x113/0x1f0 [ 685.042801][T13772] vfs_write+0xa72/0xc90 [ 685.042819][T13772] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 685.042843][T13772] ? __pfx_vfs_write+0x10/0x10 [ 685.042856][T13772] ? do_futex+0x33b/0x560 [ 685.042887][T13772] ksys_write+0x1a0/0x2c0 [ 685.042904][T13772] ? __pfx_ksys_write+0x10/0x10 [ 685.042920][T13772] ? do_syscall_64+0x100/0x230 [ 685.042944][T13772] ? do_syscall_64+0xb6/0x230 [ 685.042966][T13772] do_syscall_64+0xf3/0x230 [ 685.042988][T13772] ? clear_bhb_loop+0x35/0x90 [ 685.043006][T13772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.043022][T13772] RIP: 0033:0x7fa0b2f7471f [ 685.043035][T13772] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 29 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 7c 8c 02 00 48 [ 685.043048][T13772] RSP: 002b:00007fa0b3cf8010 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 685.043064][T13772] RAX: ffffffffffffffda RBX: 00007fa0b3103fa0 RCX: 00007fa0b2f7471f [ 685.043076][T13772] RDX: 000000000000fdef RSI: 0000000020000a40 RDI: 00000000000000c8 [ 685.043086][T13772] RBP: 00007fa0b2ff677e R08: 0000000000000000 R09: 0000000000000000 [ 685.043096][T13772] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000000 [ 685.043106][T13772] R13: 000000000000000b R14: 00007fa0b3103fa0 R15: 00007ffe01e71d98 [ 685.043125][T13772] [ 685.043138][T13772] Modules linked in: [ 685.043159][T13772] ---[ end trace 0000000000000000 ]--- [ 685.442414][T13772] RIP: 0010:bpf_xdp_redirect+0x59/0x1a0 [ 685.448060][T13772] Code: 81 c3 00 18 00 00 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 c5 6c 90 f8 48 8b 1b 4c 8d 63 38 4c 89 e5 48 c1 ed 03 <42> 0f b6 44 2d 00 84 c0 0f 85 d0 00 00 00 45 8b 34 24 44 89 f6 83 [ 685.467761][T13772] RSP: 0018:ffffc900048bf6f8 EFLAGS: 00010202 [ 685.473864][T13772] RAX: 1ffff11005286a80 RBX: 0000000000000000 RCX: 0000000000040000 [ 685.481888][T13772] RDX: ffffc90009021000 RSI: 00000000000018dd RDI: 00000000000018de [ 685.481913][T13772] RBP: 0000000000000007 R08: ffffffff895fac60 R09: 1ffff11017288930 [ 685.481934][T13772] R10: dffffc0000000000 R11: ffffed1017288931 R12: 0000000000000038 [ 685.481954][T13772] R13: dffffc0000000000 R14: 1ffff92000917f21 R15: 0000000000000000 [ 685.513975][T13772] FS: 00007fa0b3cf86c0(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 685.522983][T13772] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 685.529666][T13772] CR2: 0000000020010000 CR3: 0000000060ebc000 CR4: 00000000003506f0 [ 685.537729][T13772] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 685.545792][T13772] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 685.553812][T13772] Kernel panic - not syncing: Fatal exception in interrupt [ 685.561329][T13772] Kernel Offset: disabled [ 685.565658][T13772] Rebooting in 86400 seconds..