last executing test programs: 12.852151991s ago: executing program 2 (id=1129): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f00000003c0), r0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000fc0), r0) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="47880000000000ff12000600000008000100000e000000000300", @ANYRES32=0x0, @ANYBLOB], 0x24}}, 0x0) 12.845511702s ago: executing program 2 (id=1130): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="1201000000000010c41090ea40000000000109022400010000000009040000010301000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="002205000000"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000680)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r3, &(0x7f0000000000), 0xe) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r4}, 0x10) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='dm_u,\x00']) r5 = syz_usb_connect$cdc_ncm(0x0, 0x90, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7e, 0x2, 0x1, 0x0, 0xc0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x1c}, [@mbim_extended={0x8, 0x24, 0x1c, 0x3, 0x9}, @country_functional={0xe, 0x24, 0x7, 0x32, 0x3, [0x6, 0x209, 0x800, 0xc9]}, @mbim={0xc, 0x24, 0x1b, 0x0, 0x0, 0x7, 0x80, 0x7, 0x49}]}}}}}]}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000bc0)={0xffffffffffffffff}) ioctl$AUTOFS_IOC_PROTOSUBVER(r6, 0x80049367, &(0x7f0000000140)) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000700)={0x44, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x20, 0x80, 0x1c, {0x0, 0xf6f, 0x0, 0x0, 0x40}}, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00'}, 0x10) listen(r3, 0x0) request_key(&(0x7f0000000240)='asymmetric\x00', &(0x7f0000000780)={'syz', 0x0}, &(0x7f0000000740)='logon\x00', 0x0) (fail_nth: 5) 7.95842999s ago: executing program 2 (id=1146): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000400)='locks_get_lock_context\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) 7.95816368s ago: executing program 2 (id=1147): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='unmap\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x11, &(0x7f0000000100)={[{@nombcache}, {@resgid}, {@norecovery}, {@commit={'commit', 0x3d, 0x5}}, {@nombcache}]}, 0x8, 0x601, &(0x7f0000000ac0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) socket$nl_generic(0x10, 0x3, 0x10) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 7.954827851s ago: executing program 2 (id=1148): add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) (async) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) write$cgroup_int(r0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000002c0)={&(0x7f0000000040)="b5541245c8600e4fd87ac38dd850b880b7bdf1fe472bdfc76f7e933e88225e46074358019c77a1c97e129295e918e9d96efe143a819ac0e78226d49a34e238c4377e04fd127c1a3782dae58197fc1c41de5363ee11", &(0x7f00000000c0)=""/180, &(0x7f0000000180)="35b5fbc56f57b3d97e3c7bcaf65c79e08acf2fc41f841cc832558b8edca71c18c8f736457006943fd2e4ee7efc7fe45440e81bb25428cb8a589b475e87440daf1d0c8cc2e0aca298576edd40512cdb721de0e663662ec9defb68191447e68ef6b786e6f22d3ba4ea8bc2aff07466a53cdeee74b076a45489fc0987f7e203dfcae94f6763b28adcb66727261c91acc29fe15fbdad3dc2cdc6ec83f334755a935524568b635dbcd58490821b49ef3b7c20bc01b6b75113bd6f66b36122ba6e3a9dec7284b3b4755b8611cf2d56f5", &(0x7f0000000280)="caac909c7c6334a457b6205d5d30d96ea4568cad8512cc84c2c215a55b612bd2", 0x3, r0, 0x4}, 0x38) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000002c0)={&(0x7f0000000040)="b5541245c8600e4fd87ac38dd850b880b7bdf1fe472bdfc76f7e933e88225e46074358019c77a1c97e129295e918e9d96efe143a819ac0e78226d49a34e238c4377e04fd127c1a3782dae58197fc1c41de5363ee11", &(0x7f00000000c0)=""/180, &(0x7f0000000180)="35b5fbc56f57b3d97e3c7bcaf65c79e08acf2fc41f841cc832558b8edca71c18c8f736457006943fd2e4ee7efc7fe45440e81bb25428cb8a589b475e87440daf1d0c8cc2e0aca298576edd40512cdb721de0e663662ec9defb68191447e68ef6b786e6f22d3ba4ea8bc2aff07466a53cdeee74b076a45489fc0987f7e203dfcae94f6763b28adcb66727261c91acc29fe15fbdad3dc2cdc6ec83f334755a935524568b635dbcd58490821b49ef3b7c20bc01b6b75113bd6f66b36122ba6e3a9dec7284b3b4755b8611cf2d56f5", &(0x7f0000000280)="caac909c7c6334a457b6205d5d30d96ea4568cad8512cc84c2c215a55b612bd2", 0x3, r0, 0x4}, 0x38) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 7.954709181s ago: executing program 2 (id=1149): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000180)=ANY=[], &(0x7f00000000c0)='syzkaller\x00'}, 0x90) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) getpid() r3 = syz_open_procfs(r2, &(0x7f0000000600)='fd/4\x00') ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40305839, &(0x7f0000000240)) 6.538535477s ago: executing program 1 (id=1157): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x30}}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0xffffffff, 0xffffffff, 0x5, 0x2000, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x1, 0x9}, 0x48) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2040003, &(0x7f00000000c0)={[], [{@smackfsdef}]}, 0x1, 0x4f8, &(0x7f00000014c0)="$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") write$P9_RXATTRCREATE(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x6, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000002c7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r3}, 0x10) setregid(0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000001c0)={0x10}) socketpair$unix(0x1, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000b80), 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) 5.981948222s ago: executing program 0 (id=1158): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000400)='locks_get_lock_context\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r2, 0x0, &(0x7f0000000000)) 5.373945352s ago: executing program 0 (id=1160): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000240)='./bus\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x1, 0x54f4, &(0x7f0000005600)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000001500), 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x9}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000ecff850000000400000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b708000000001b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000e00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) close(r3) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYBLOB, @ANYRES32=0x0], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffeca50000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='kmem_cache_free\x00', r7}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r9, &(0x7f00000004c0)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r10 = dup(r9) write$FUSE_BMAP(r10, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r10, &(0x7f0000000700)=ANY=[@ANYBLOB="4d01"], 0x138) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r9}}) lgetxattr(&(0x7f0000000240)='./file0\x00', &(0x7f00000020c0)=@known='user.incfs.metadata\x00', 0x0, 0x2) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) flistxattr(r11, 0x0, 0x0) r12 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fc00101}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000003c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r12, 0xc0182101, &(0x7f0000000300)={r13}) 5.373565262s ago: executing program 1 (id=1161): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB], 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000080)='./file0\x00', 0x450, &(0x7f0000005f80)=ANY=[@ANYBLOB="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", @ANYRES32=0xffffffffffffffff], 0x2, 0x5558, &(0x7f0000000a00)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x12, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70300000000000085000000dcb54f5885371d5cd7bf31000000b7000000000000008520003901000000185200000d0000000000000000000000df37fcff0100"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/power/wake_lock', 0x0, 0x9) ioctl$F2FS_IOC_SET_PIN_FILE(r2, 0x4004f50d, &(0x7f0000000180)=0xfffffff9) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x3, 0x0, r3, 0xe1d, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x4}, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x0, 0x23, &(0x7f0000006480)=ANY=[@ANYBLOB="18280000", @ANYRES32=r7, @ANYBLOB="0000000018000000b7080000000000007b8af8ff00000000b7080000050000007b8af0ff00000000bfa100000000000007010000f8ff", @ANYRES32, @ANYRES64=r6, @ANYRES32=0x1, @ANYBLOB="0000000000000000b703000001000000850000000c000000b70000000000000018230000e933c3f321a941a0a17e278a47b38031f5310de7c4229a2a3e6183df41210a1fe3fde3e84121198543f5ffa8fdd5cfb353c77ad68be977e04e672d62866e494bf91c19085a022c754933302494544deb66a9e82055bbbdead16f29846c95502ef03efe1f2680ea1bb869ddc8712005", @ANYRES32, @ANYBLOB="000000000600000018160000", @ANYRESDEC, @ANYRESOCT=r1, @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000"], &(0x7f0000000280)='syzkaller\x00', 0x401, 0x1000, &(0x7f0000000c00)=""/4096, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000003c0)={0x1, 0x4, 0x8009, 0x8000000}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000400)=[r7, r7, r7], &(0x7f0000000640)=[{0x1, 0x4, 0xb, 0x6}, {0x2, 0x4, 0x1, 0x5}, {0x5, 0x3, 0xa, 0xa}], 0x10, 0x100}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x90) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b708000000005aab7b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r10}, 0x10) r11 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) 3.855012975s ago: executing program 0 (id=1164): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000840)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 3.853338345s ago: executing program 1 (id=1165): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0xc}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000000)={0x2, 0x0, [{0x80000008, 0xfffffffa, 0x1, 0x4, 0x7}, {0x80000001, 0x8, 0x0, 0xb1a, 0x9}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000280)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r3, 0x2) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) close_range(r3, 0xffffffffffffffff, 0x0) 3.852884235s ago: executing program 4 (id=1167): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0x8, 0x8, 0x0, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a00)=ANY=[@ANYBLOB="b702000022000000bfa300000000000007030000007effff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000050404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf27fb6d2c643db7e2d5fb4b0936cdf827fb43a431ca711fcd0cdfa146ed3d09a6175037958e27106e225b7937f02008b5e5a076d83923dd29c034055b67dafe6c8dc525d78c07f34e4d5b3185b310efcfa89147a09000000f110026e6d2ef831ab7ea0c34f17e3ad6eecbb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b0a341a2d7cbdb9cd38bdb2ca8e0500009cb20d03e7564c35a8d36774d5e5003a14817ac61e4dd19699a13477bf7e060e3670ef0e789f65f105006704902cbe7bc04b82d2789cb132b8667c214733a18c8b6619f28d9961b626c57c2691208173656d60a17e3c184b751c51160fbcbbdb5b1e7be6148ba532e60a0ac346dfebd31a080600000002000000ff000000334d83239dd27080e71113610e10d858e8327ef01fb6c86acac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e957bc73ddc4eabba08ab1e1ad828267d4eadd3957663e88535c133f7130856f756436303767d2e24f29e5dad9796edb697a6ea0182babc190ae2ebf8aad34732181feb215139f15ea7e8cb0bae7c34d5ac5e7c805210600000000000000c3dec04b25dfc17975238345d4f71ab158c36657b7218baa0700f781c0a99bd50499ccc421ace5e845885efb5b9964ecbeba3da8223fe5308e4e65ee93e107000000f8ddebf70132a4d0175b989b8eccf707882042e716df9b57b290c661d4e85031086197bcc5cb0e221a0c34323c129102b6ff0100002e88a1940b3c02ed9c92d6f64b1282dc51bb0015982730711c599e1c72ffa11ed8be1a6830d7507005154c46bd3ca96318c570f0721fc7aa2a5836ba99fe1f86468694f22cdf550ef091a78098534f0d973059594119d06d5ea9a8d0857382ec6e2a071474cfc12346e47ad97f4ead7cf70a9d1cdac944779dc08a705414888700a30e2366c6a06b3367a389ca39059787790017b0689a173db9c24db65c1e00015c1d093dab18fd0699fe3304000000323e9c7080397bc49d70c060d57bc88fbe3bbaa058b040362ab926150363fb099408885afc2bf9a46a076b7babfcddeff8c35030669ea69f5e4be1b8e0d6697e97186f9ae97d5670dba6623279f73db9dec75070cd9ab0fda6b069ef6d2857ca3e4effcf7462710d133d541da86e0477e4a6cc999dc21c3ef408e6b178e7c9f274d7fafc8d757d33dfa35aa2000034837d365e63845f3c1092f8dde8af3904ea0f4b82649b83ed4fa0f873339c4cadecc13219ba7518aa4f7db34ead13484742067ab743c1d82a5687f2ed690000000000000000000000000000000000000000000099d4fa0000000000003f0ecdc7c82e72919c91d2039afe17e95edeeeba72205beff7771bcb293747b88486cacee403000000a2919a4bff2ed893f2c814679fa69fc7e0cf761f918725704a01c56009a9f748e5aaf30a10bd8c409b1870c1f75e26b45264e3d3f8e0048e55ae289ce2ad779ce71d4dc30cbb2cc4289d2f884d66cddc76eb7f601110ff39053c262279f4ef00fbdb8c338615a9ec84f27a9f3938ae736138b8c1ec220c1540bf3d162dc1c27fa30f0dc60b9f257db5d1c7ed2e152cb2cf06f8edb30177fead735a952ffce676a93110904d5ee2abdab2ef3ff84c4d61443f73552195c7ccfbf9f03c44432eaa3b7501d4239354da8de21eada75d3a3afb2c76ff0700007981699b6c0f0e946766f57544ff52cef0dd811bec4e3c0a30f2d7d19d26d2503a3ea376721b8eded3bc475958dd498ee2b2d6146e33fc0de1dc2e0516ac565ddb1d4ae89e6712824a85eb9ee0a3b68c9e209756623adf685dd715d68ed11e4b4d5502f5124948f8f98c615cac3666c58f785c3f758be352a71871d5c081197d37980e4f4e26b5476fb20407ff7098b7174bef66fa03a99b5c1c20b378065fac4ef9ac2d0d804b9400000060e5d3f1749f6aecf69ba83a71caa9bdddc679f1b826f54b6563a4be1fd82b73c8c2bc65f63982b951fb058fd3c7b6341c4580376b6c16bd94d2da66059de81abfa15eeeb88b6ae5882ad341032c73f1285e21fff5a1d138e061b1dc7bbda199b5fab8e0719e9cd69b47dcb52b0be6a3a73afdf328132e1d4f21065716be0c53a23940d07188b015fa341dbc92231c8b5e5717eac184f46c9f61b69f55cd2231bcf821052429a1f250e8b734be0605a15f25923d599544b319319ff0a32621019347df460a098119a6f47eb1bac47946d7a009cbc6ec74c19a93cc7c7138b28c95270116181fd5f553572548104d2ad0e10d3663488e664401453f22f0d76d2162635365258af61ae1f46f4a7862f302d91e3f7c2781f602220522e84602a939a8d5e4137ae31ccd397404dc72e06715a6503d4d865182803ee6725da7293b23daeebefd6fce7411c9624a7e8d5ba5a13e1c32adc4f32744a8c6882a72475e4280a4d9a47c003c6ed3071330c58145be813a10788a720a6b5a498ca2b42496c479a0a71e2f6f9bad8c84bc6be20281bde0b348cf2c60538a505ad4a0510eebb023e4954c9eb6cd70627f5c03d867dbf3ad5d1f1dc852064dd0efafc3df20ec8faf3d194db76127f88f284fa1b71ab964fdd2474471da76373e65e9a8bf844bdfdd348bc7d00c4c7e7afe8a1f8cde79b7a6c5aafe954b8ba37818e40c14b37c23f9f614576b689436fef2f27f8b1e756e00262e22bca49c43fd73e7e99b2fa44a8c1db99c2cf2735ad6c5fabf082e0df0f8ba7e24272165f2f5b28230c02b53d44bd84bf6770157e96bbb96b5e1f165c87e7ad68a3600b3d357fa9a7d53c281d88ebb175a4dbb82130e6970982947913110f091d21760d985afd3163f2e6880682432f9b3b97d57a9f980ede51116a3d04d58872a07d6a7e12db673acd2f7b8988d833e71943fe2c1c60100f36b955c56b55bfd3ecf0af694c71a03f2996c15b1ba971de1cb9c7e6a0000000000000014783ef54c51199317413f98dca8ff3d0bda50f6c0af58dbd6c031b1a5a7512c5896514adfa17d31429c68db50a93d88199defd3b4625fea426ff9293a28a544a6a9e2a79b55daa1b3c6b14c4ec6d164e902ce4913843d65d841973468729ea12bf6d3499036dbb66718f3497855c3baa6cc07c0fa388ec9df0617c1a28ef5a595ee267a76175b8a057e6efaf4fefe46def451f2858fe71a53e77b1a44e98843bb3a40102da3703dfb9f61bdcea2fb810b32d52e2157a150a63ea6135d1cf6f864c2e6887dd7245bc5d61dc5a114d10ffb22e76678bbfc1e3865d17d128306d1b81884a934cb00000000000000000098a4526e6468987dbc63bff7590eb388afaba43d811996333eef7e9f472bee293f0c40d434b8be07cbd52325296e22802493edb5c590ad208bac683a8b2d4c9d2d57ff846ae8c422e0b28546671f11d8157bb762c91f3fbc8b8e21589c92446ae65d408c0637ffcc2d44d715ce003dd1e12b085e186d069a55c2e96efbe5024d61a56a36d988c0f51a973a6c545b28211a92000000001501aed8972af0fcd540a9d4e293690c5e697b3a1480e46df5371bca1cfb28a57c1b3c956ec81397e81fbf870a67385fea04220423f52ad8178b9fd04bdc7e5fee4bd52db996e633792118efdb6b88023e80da74fdf723c7f05e96d738989f2c8b1e6b3a9716b6130a09e2698b12d8ae4d329f305fde3e8dec42eae3c69988ad568543a715755110c8dff124a6ba9ee1dc32ea7d17a35a420133c7df262a30cbff8790d80fd4def27ff1b268014daec1b0d1d2864bf010801f092efac0b349b86631d2a7455a72c0e7f43730b78e9beb255188acb12f3770fcc2223ba034181d9c3acef5b6d9ee77883ca12cfd68a5db88cc94c65a9fd1d070387a351905240b0b1920429109032ddc3cf9bf4ba32f594d45478bca432bdeb1a21fd5b5c2c416ed8eeabade9e2002b4e714dc3d7476fa52fedc0d0e6bed973e3aa468597810c13a8c40d9845bf0080850f309ec4dc5f88ef54b6674d8402f8ccd86d33edb1894e46b793641e9bf407b7c8b2b4b555f07467c96828163ce30fd4c24b108df352bc32eae5b1e3adecf6cf8d2bc3549f49c14a553683499b707a422e98082456c0dcf3f7155db062dfad1e92af9708dca9b70a77f4b88c06f8ee7a43df5f5ac21a6ed194102abaa0970000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r2, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000040)="76389e147583ddd0569ba56a5cfd55", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.94413117s ago: executing program 0 (id=1168): r0 = socket$inet6(0xa, 0x3, 0xff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) (async) syz_emit_ethernet(0x134, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd6002000800fe2c00fe8000000000000000000000000000bbff02000000000000000000000000000132"], 0x0) (async) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) (async) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast1}, 0x1c) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='module_request\x00', r3}, 0x10) socketpair(0x0, 0x0, 0x0, &(0x7f00000006c0)) r4 = dup2(r0, r0) write$P9_RSTATFS(r4, &(0x7f0000000140)={0x84, 0x9, 0x0, {0x0, 0x0, 0x0, 0xfffffffffffffffc}}, 0x43) 2.94387687s ago: executing program 1 (id=1169): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000400)='locks_get_lock_context\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r2, 0x0, &(0x7f0000000000)) 2.9431248s ago: executing program 4 (id=1171): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) chdir(0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x2, 0x2}}, 0x10) listen(r1, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r5, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='mm_page_alloc\x00', r6}, 0x10) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, 0x0, 0x5000) sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0) close(r2) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r8) r9 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r9, 0x11b, 0x3, &(0x7f00000001c0)=0x20000, 0x4) setsockopt$XDP_UMEM_REG(r9, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000280)={'ip6tnl0\x00'}) setsockopt$XDP_UMEM_COMPLETION_RING(r9, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r9, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) 1.937584362s ago: executing program 0 (id=1172): eventfd(0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='mm_page_alloc\x00', r1}, 0x10) syz_read_part_table(0x5c3, &(0x7f00000005c0)="$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") 1.937262502s ago: executing program 1 (id=1173): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) close(0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a80)={@map=r1, 0xffffffffffffffff, 0x15, 0x0, 0x0, @prog_id}, 0x20) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x200000, &(0x7f0000000180), 0xfc, 0x57c, &(0x7f00000013c0)="$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") openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) unshare(0x0) mount(&(0x7f00000004c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x14113e, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x50}, [@ldst={0x2, 0x0, 0xb}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f00000001c0)=""/210, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x27}, 0x48) write$binfmt_script(r2, &(0x7f0000000280), 0x208e24b) pwritev2(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0x7500}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x13, r4, 0x0) connect$netlink(r4, &(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x10000000}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r3}, 0xfffffffffffffe56) socketpair(0x6, 0x5, 0x3, &(0x7f0000000080)={0xffffffffffffffff}) fchdir(r5) syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f00000006c0)=ANY=[@ANYBLOB="12010000020000102505a1a4400000000101090244000101000000090400001602020000052406000005240000000d240f01000a00000000000000090581032000000000090582020000000000090503020002000000"], 0x0) 1.936360502s ago: executing program 4 (id=1175): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000042020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, &(0x7f00000002c0)={0x28}, 0x28) ioctl$KVM_SET_CPUID(r3, 0x5421, &(0x7f00000002c0)=ANY=[]) 828.461553ms ago: executing program 0 (id=1176): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x1, 0x0, 0x0) setitimer(0x0, &(0x7f0000000700)={{}, {0x0, 0xea60}}, 0x0) close(0x3) prlimit64(0x0, 0x10, &(0x7f0000000780)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000008c0)=[{{&(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000680)=[{&(0x7f0000000380)="7b4c006890bd29e0fcc3447f0ccd2d8fb54ca935cae3e087a0f74b8cb45b752d8be753260d4e6b79476bd4510dbb2290792ec8ee268ee75ab6bc4890c367d290a95ceae38b3f226ed6977cebfde01d151254a4f2f699b5ac2d2fe9ea1f189462c9e0a670cadfeb2752e3fd", 0x6b}, {&(0x7f0000000500)="cce69f244ed8e6ea22778e30078d1f27e453b9e3dd62afbc41a0ed246e01c5025b277537901fed815d125d8b7c94601cd3cbbfbdfaf973e7bca711b20105c62b39e556b1baffacc792d5561e61fd73098af78402674dfa9af2e69c5b199ccff9abc8d49b3af978f789b6f9f3dc94f6cc7152943c017c0cb722914945ff7a2f6d1d6fae638001eafa2216718c8db705b1c87e8a5ea35e4245a21cc44be20e6a76596ac1fd8c6d49681da7732a7e8a5ee6cccf9e3a3fb93eb0a60b746691b9f72260d8100e57c94ba087", 0xc9}, {&(0x7f0000000440)="9e30768a58a897956e0e36fcf79fdba662b53adc15c2721d58d81b", 0x1b}, {&(0x7f0000000600)="693b39f0ada40f30d5398871582c4e677e69007cfa1920445f4edb1a938153fca6147877f0904418c2239fcd25935440e0ee32da2137a54584fcb7ee9f9d05ff3a", 0x41}], 0x4, &(0x7f0000000880)=[@cred={{0x1c, 0x1, 0x2, {r0}}}], 0x20, 0x800}}], 0x1, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(&(0x7f00000007c0), 0x4, 0xfffffffd, &(0x7f0000000800), &(0x7f0000000840), 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000000087f7554da34e1529bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @rand_addr, 0x1}, 0x1c) listen(r3, 0x16a9) syz_emit_ethernet(0x6a, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaac4bc9cac968686dd6000000000340600fe8000000000000000000000000000aafe8000000000000000000000000000aa00104e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="d0c20000907800001e0e00406dec3820ec187cbe66d602040000030300fe0af989d463e2c4e2da00"], 0x0) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_l2cap(r5, &(0x7f0000000000), 0xe) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="640000000206030300000000000000000000000005000100070000000900020073797a31000000001400078008001340000000000800124000000000050005000a000000050004000000000016000300686173683a6e6574", @ANYRES8=r1, @ANYRES8=r3], 0x64}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x5, 0xc}, 0x48) pipe(&(0x7f0000000100)) 828.177912ms ago: executing program 3 (id=1177): socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) syz_emit_ethernet(0x37, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000081000000080045000025000000000011777800000000ffffffff00004e20001190780100000047a861e9af"], 0x0) 822.630463ms ago: executing program 4 (id=1178): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000840)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 120.2719ms ago: executing program 1 (id=1179): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0xc}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000000)={0x2, 0x0, [{0x80000008, 0xfffffffa, 0x1, 0x4, 0x7}, {0x80000001, 0x8, 0x0, 0xb1a, 0x9}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000280)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r3, 0x2) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) close_range(r3, 0xffffffffffffffff, 0x0) 120.07352ms ago: executing program 3 (id=1180): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x11, &(0x7f0000000100)={[{@nombcache}, {@resgid}, {@norecovery}, {@commit={'commit', 0x3d, 0x5}}, {@nombcache}]}, 0x8, 0x601, &(0x7f0000000ac0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) socket$nl_generic(0x10, 0x3, 0x10) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 119.64441ms ago: executing program 4 (id=1181): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffff7a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) setxattr(&(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000140)='$\x00', 0x2, 0x0) 90.349643ms ago: executing program 3 (id=1182): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000400)='locks_get_lock_context\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r2, 0x0, &(0x7f0000000000)) 90.181513ms ago: executing program 4 (id=1183): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000006c0)={'lo\x00', 0x0}) bind$packet(r3, &(0x7f0000000000)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg$inet(r3, &(0x7f0000000380)=[{{0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x6000}}], 0x300, 0x0) 48.059696ms ago: executing program 3 (id=1184): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0xc}, 0x48) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000000)={0x2, 0x0, [{0x80000008, 0xfffffffa, 0x1, 0x4, 0x7}, {0x80000001, 0x8, 0x0, 0xb1a, 0x9}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r0}, &(0x7f00000005c0), &(0x7f0000000600)}, 0x20) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r1, 0x2) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) close_range(r1, 0xffffffffffffffff, 0x0) 47.567096ms ago: executing program 3 (id=1185): eventfd(0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='mm_page_alloc\x00', r1}, 0x10) syz_read_part_table(0x5c3, &(0x7f00000005c0)="$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") 0s ago: executing program 3 (id=1186): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x6, 0x6, 0xffffffa7, 0x80, 0x1, 0x410, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x4, 0x4}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000001200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x800448d2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000002c7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x0, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c) getsockopt$inet6_buf(r4, 0x29, 0x18, 0x0, &(0x7f00000000c0)) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) getsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, &(0x7f00000004c0)=[{}, {}, {}], &(0x7f00000003c0)=0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x2, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x5}, 0x48) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f00000001c0)={0x0, r6, 0x8, 0xfffffffffffffffd, 0x1}) writev(r6, &(0x7f000000e440)=[{&(0x7f000000e040)="5872971726edd26e372f6387fc5a4f8dfa4723fe548192cd2dfb3d3864a36fbe4fbbbf70b864c3de508047ba895ead599ca9d682a8b41b77a29798f6716b7d68e9c9fd56d09326f11c5e8c048a236abbf8502609bed7", 0x56}, {&(0x7f000000e100)}], 0x2) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000007900)=ANY=[@ANYBLOB="98010000100013070000000000000008000000ff000000000000000000000000ff01000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000ff010000000000000000000000000001008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005d001400636d616328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000088000000000000000a55b0ca9cce0a36b0d3e44f23ee468415000000"], 0x198}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, 0xb0cc4a69b0d7da67, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) kernel console output (not intermixed with test programs): [ 169.468984][ T5] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 12336, setting to 1024 [ 169.480871][ T5] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 169.491533][ T5] usb 4-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 169.505201][ T5] usb 4-1: config 250 interface 228 has no altsetting 0 [ 169.550780][ T3454] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 169.567772][ T3454] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 169.575905][ T3454] F2FS-fs (loop0): Unrecognized mount option "ÿ01777777777777777777777" or missing value [ 169.596589][ T53] usb 2-1: Using ep0 maxpacket: 8 [ 169.626257][ T5] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 169.638968][ T5] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 169.647345][ T5] usb 4-1: Product: syz [ 169.651548][ T5] usb 4-1: SerialNumber: syz [ 169.696663][ T5] hub 4-1:250.228: bad descriptor, ignoring hub [ 169.702859][ T5] hub: probe of 4-1:250.228 failed with error -5 [ 169.716346][ T53] usb 2-1: config index 0 descriptor too short (expected 5924, got 36) [ 169.728658][ T53] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 169.737182][ T53] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 169.746019][ T53] usb 2-1: config 250 has no interface number 0 [ 169.755719][ T53] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 169.767336][ T53] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 169.777804][ T53] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 12336, setting to 1024 [ 169.789485][ T53] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 169.800039][ T53] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 169.813716][ T53] usb 2-1: config 250 interface 228 has no altsetting 0 [ 169.814212][ T3465] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 169.830915][ T3465] EXT4-fs (loop2): invalid journal inode [ 169.836642][ T3465] EXT4-fs (loop2): can't get journal size [ 169.848968][ T3465] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,resgid=0x0000000000000000,norecovery,commit=0x0000000000000005,nombcache,,errors=continue [ 169.906954][ T5] usblp 4-1:250.228: usblp0: USB Bidirectional printer dev 20 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 169.956215][ T53] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 169.965229][ T53] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 169.973869][ T53] usb 2-1: Product: syz [ 169.978405][ T53] usb 2-1: SerialNumber: syz [ 170.016736][ T53] hub 2-1:250.228: bad descriptor, ignoring hub [ 170.023726][ T53] hub: probe of 2-1:250.228 failed with error -5 [ 170.056632][ T3470] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 170.076003][ T3470] EXT4-fs (loop2): invalid journal inode [ 170.081534][ T3470] EXT4-fs (loop2): can't get journal size [ 170.096649][ T3470] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,resgid=0x0000000000000000,norecovery,commit=0x0000000000000005,nombcache,,errors=continue [ 170.159681][ T3476] fuse: Bad value for 'rootmode' [ 170.256577][ T2265] usb 4-1: USB disconnect, device number 20 [ 170.291244][ T2265] usblp0: removed [ 170.369333][ T53] usblp 2-1:250.228: usblp0: USB Bidirectional printer dev 28 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 170.475431][ T24] kauditd_printk_skb: 3 callbacks suppressed [ 170.475444][ T24] audit: type=1326 audit(1720116819.859:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3480 comm="syz.4.869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ca4c63bd9 code=0x7ffc0000 [ 170.504892][ T24] audit: type=1326 audit(1720116819.859:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3480 comm="syz.4.869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ca4c63bd9 code=0x7ffc0000 [ 170.528510][ T24] audit: type=1326 audit(1720116819.859:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3480 comm="syz.4.869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f5ca4c63bd9 code=0x7ffc0000 [ 170.552720][ T24] audit: type=1326 audit(1720116819.859:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3480 comm="syz.4.869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ca4c63bd9 code=0x7ffc0000 [ 170.576930][ T53] usb 2-1: USB disconnect, device number 28 [ 170.583184][ T24] audit: type=1326 audit(1720116819.859:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3480 comm="syz.4.869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ca4c63bd9 code=0x7ffc0000 [ 170.606528][ T53] usblp0: removed [ 170.826673][ T3497] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 171.306171][ T53] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 171.345101][ T3507] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.356176][ T3507] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.363561][ T3507] device bridge_slave_0 entered promiscuous mode [ 171.372014][ T3507] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.379001][ T3507] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.386391][ T3507] device bridge_slave_1 entered promiscuous mode [ 171.434546][ T3507] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.441430][ T3507] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.448549][ T3507] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.455306][ T3507] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.522606][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 171.533260][ T5] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.556345][ T53] usb 5-1: Using ep0 maxpacket: 8 [ 171.566733][ T5] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.617016][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 171.625805][ T15] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.632667][ T15] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.640537][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 171.649163][ T15] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.656012][ T15] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.663674][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 171.672859][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 171.676174][ T3504] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 171.680648][ T53] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 171.714882][ T3507] device veth0_vlan entered promiscuous mode [ 171.720804][ T3504] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 171.721895][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 171.737387][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 171.739166][ T3504] F2FS-fs (loop0): Unrecognized mount option "ÿ01777777777777777777777" or missing value [ 171.745403][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 171.763966][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 171.779406][ T3507] device veth1_macvtap entered promiscuous mode [ 171.786661][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 171.796407][ T53] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 171.806222][ T53] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 171.810889][ T2285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 171.815212][ T53] usb 5-1: SerialNumber: syz [ 171.834647][ T2287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 171.866596][ T53] usb-storage 5-1:1.0: USB Mass Storage device detected [ 171.878123][ T24] audit: type=1400 audit(1720116821.269:929): avc: denied { sys_admin } for pid=3524 comm="syz.1.878" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 171.916544][ T53] usb-storage 5-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 171.928135][ T24] audit: type=1326 audit(1720116821.289:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3520 comm="syz.3.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68df32dbd9 code=0x7ffc0000 [ 171.958084][ T24] audit: type=1326 audit(1720116821.289:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3520 comm="syz.3.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f68df32dbd9 code=0x7ffc0000 [ 171.981588][ T24] audit: type=1326 audit(1720116821.289:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3520 comm="syz.3.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68df32dbd9 code=0x7ffc0000 [ 172.004707][ T24] audit: type=1326 audit(1720116821.289:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3520 comm="syz.3.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68df32dbd9 code=0x7ffc0000 [ 172.059132][ T357] print_req_error: 322 callbacks suppressed [ 172.059148][ T357] blk_update_request: I/O error, dev loop0, sector 108 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 172.077921][ T1501] blk_update_request: I/O error, dev loop0, sector 58 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 172.092869][ T1452] blk_update_request: I/O error, dev loop0, sector 1008 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 172.123993][ T1501] blk_update_request: I/O error, dev loop0, sector 58 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 172.135075][ T1452] blk_update_request: I/O error, dev loop0, sector 1008 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 172.161576][ T3535] EXT4-fs (loop1): Ignoring removed orlov option [ 172.167859][ T357] blk_update_request: I/O error, dev loop0, sector 108 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 172.176196][ T3535] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 172.178729][ T357] buffer_io_error: 286 callbacks suppressed [ 172.178738][ T357] Buffer I/O error on dev loop0p1, logical block 8, async page read [ 172.193914][ T1452] Buffer I/O error on dev loop0p3, logical block 8, async page read [ 172.200468][ T357] blk_update_request: I/O error, dev loop0, sector 109 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 172.218100][ T1501] Buffer I/O error on dev loop0p2, logical block 8, async page read [ 172.218253][ T357] Buffer I/O error on dev loop0p1, logical block 9, async page read [ 172.234096][ T357] blk_update_request: I/O error, dev loop0, sector 110 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 172.244829][ T1501] blk_update_request: I/O error, dev loop0, sector 59 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 172.245845][ T357] Buffer I/O error on dev loop0p1, logical block 10, async page read [ 172.263758][ T357] blk_update_request: I/O error, dev loop0, sector 111 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 172.274721][ T357] Buffer I/O error on dev loop0p1, logical block 11, async page read [ 172.282750][ T357] Buffer I/O error on dev loop0p1, logical block 12, async page read [ 172.282911][ T1452] Buffer I/O error on dev loop0p3, logical block 9, async page read [ 172.299200][ T1501] Buffer I/O error on dev loop0p2, logical block 9, async page read [ 172.315108][ T1501] Buffer I/O error on dev loop0p2, logical block 10, async page read [ 172.326500][ T110] device bridge_slave_1 left promiscuous mode [ 172.335608][ T110] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.335977][ T3535] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue [ 172.376820][ T110] device bridge_slave_0 left promiscuous mode [ 172.382795][ T110] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.506197][ T15] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 172.693691][ T2285] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 172.979938][ T2286] usb 5-1: USB disconnect, device number 27 [ 172.996187][ T2285] usb 2-1: Using ep0 maxpacket: 8 [ 173.026217][ T2288] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 173.086667][ T15] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.097641][ T15] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.107540][ T15] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 173.116240][ T2285] usb 2-1: config index 0 descriptor too short (expected 5924, got 36) [ 173.116786][ T15] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.133955][ T2285] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 173.142462][ T15] usb 4-1: config 0 descriptor?? [ 173.152452][ T2285] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 173.166518][ T2285] usb 2-1: config 250 has no interface number 0 [ 173.182692][ T2285] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 173.194404][ T2285] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 173.206827][ T2285] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 12336, setting to 1024 [ 173.218529][ T2285] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 173.229130][ T2285] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 173.252761][ T2285] usb 2-1: config 250 interface 228 has no altsetting 0 [ 173.376364][ T2285] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 173.385404][ T2285] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 173.393875][ T2285] usb 2-1: Product: syz [ 173.398646][ T2288] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 173.409325][ T2288] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 173.418266][ T2285] usb 2-1: SerialNumber: syz [ 173.466923][ T2285] hub 2-1:250.228: bad descriptor, ignoring hub [ 173.473034][ T2285] hub: probe of 2-1:250.228 failed with error -5 [ 173.516347][ T2288] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 173.525202][ T2288] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 173.546166][ T2288] usb 1-1: SerialNumber: syz [ 173.686877][ T2285] usblp 2-1:250.228: usblp0: USB Bidirectional printer dev 29 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 173.773232][ T3551] fuse: Bad value for 'rootmode' [ 173.966218][ T15] usb 4-1: language id specifier not provided by device, defaulting to English [ 174.076276][ T2286] usb 2-1: USB disconnect, device number 29 [ 174.083244][ T2286] usblp0: removed [ 174.417212][ T15] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0016/input/input20 [ 174.429582][ T3559] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 174.442112][ T3559] EXT4-fs (loop2): invalid journal inode [ 174.447840][ T3559] EXT4-fs (loop2): can't get journal size [ 174.458177][ T3559] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,resgid=0x0000000000000000,norecovery,commit=0x0000000000000005,nombcache,,errors=continue [ 174.476755][ T15] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0016/input/input21 [ 174.504553][ T15] uclogic 0003:256C:006D.0016: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.3-1/input0 [ 174.533570][ T3565] binder: BINDER_SET_CONTEXT_MGR already set [ 174.541210][ T3565] binder: 3564:3565 ioctl 4018620d 200001c0 returned -16 [ 174.591927][ T3579] netlink: 216 bytes leftover after parsing attributes in process `syz.2.898'. [ 174.619305][ T15] usb 4-1: USB disconnect, device number 21 [ 174.899140][ T3576] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 174.910940][ T3576] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 174.928327][ T3576] F2FS-fs (loop1): Unrecognized mount option "ÿ01777777777777777777777" or missing value [ 175.079546][ T3573] F2FS-fs (loop4): Unrecognized mount option "a´H‹lloc_mode=reuse" or missing value [ 175.209209][ T3591] overlayfs: failed to resolve './file0': -2 [ 175.780556][ T3597] fuse: Bad value for 'rootmode' [ 175.786937][ T2288] usb 1-1: 0:2 : does not exist [ 175.800366][ T2288] usb 1-1: unit 5: unexpected type 0x0c [ 175.809040][ T24] kauditd_printk_skb: 67 callbacks suppressed [ 175.809052][ T24] audit: type=1326 audit(1720116825.199:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3600 comm="syz.0.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f8844bbd9 code=0x7ffc0000 [ 175.853942][ T2288] usb 1-1: USB disconnect, device number 24 [ 175.862705][ T24] audit: type=1326 audit(1720116825.239:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3600 comm="syz.0.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9f8844bbd9 code=0x7ffc0000 [ 175.866173][ T15] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 175.893923][ T24] audit: type=1326 audit(1720116825.239:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3600 comm="syz.0.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f8844bbd9 code=0x7ffc0000 [ 175.917345][ T24] audit: type=1326 audit(1720116825.239:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3600 comm="syz.0.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f8844bbd9 code=0x7ffc0000 [ 175.942681][ T3599] EXT4-fs (loop4): Ignoring removed orlov option [ 175.956478][ T357] udevd[357]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 175.986540][ T3599] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 176.000482][ T24] audit: type=1326 audit(1720116825.239:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3600 comm="syz.0.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9f8844bbd9 code=0x7ffc0000 [ 176.031060][ T3599] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue [ 176.081569][ T24] audit: type=1326 audit(1720116825.239:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3600 comm="syz.0.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f8844bbd9 code=0x7ffc0000 [ 176.081586][ T24] audit: type=1326 audit(1720116825.239:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3600 comm="syz.0.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f8844bbd9 code=0x7ffc0000 [ 176.081602][ T24] audit: type=1326 audit(1720116825.239:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3600 comm="syz.0.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9f8844bbd9 code=0x7ffc0000 [ 176.081617][ T24] audit: type=1326 audit(1720116825.239:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3600 comm="syz.0.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f8844bbd9 code=0x7ffc0000 [ 176.081632][ T24] audit: type=1326 audit(1720116825.239:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3600 comm="syz.0.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f8844bbd9 code=0x7ffc0000 [ 176.206654][ T15] usb 4-1: Using ep0 maxpacket: 8 [ 176.239943][ T3611] incfs: Error accessing: ./file0. [ 176.253309][ T3611] incfs: mount failed -20 [ 176.294523][ T3615] syz.1.910[3615] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 176.294577][ T3615] syz.1.910[3615] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 176.336224][ T15] usb 4-1: config index 0 descriptor too short (expected 5924, got 36) [ 176.368749][ T15] usb 4-1: config 250 has an invalid interface number: 228 but max is -1 [ 176.386178][ T15] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 176.395100][ T15] usb 4-1: config 250 has no interface number 0 [ 176.408578][ T2288] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 176.426157][ T15] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 176.437951][ T15] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 176.448818][ T15] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 12336, setting to 1024 [ 176.460624][ T15] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 176.474672][ T15] usb 4-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 176.488403][ T15] usb 4-1: config 250 interface 228 has no altsetting 0 [ 176.616235][ T15] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 176.625239][ T15] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 176.633704][ T15] usb 4-1: Product: syz [ 176.638177][ T15] usb 4-1: SerialNumber: syz [ 176.646154][ T2288] usb 5-1: Using ep0 maxpacket: 8 [ 176.696706][ T15] hub 4-1:250.228: bad descriptor, ignoring hub [ 176.704458][ T15] hub: probe of 4-1:250.228 failed with error -5 [ 176.766198][ T2288] usb 5-1: config index 0 descriptor too short (expected 5924, got 36) [ 176.774277][ T2288] usb 5-1: config 250 has an invalid interface number: 228 but max is -1 [ 176.782548][ T2288] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 176.791383][ T2288] usb 5-1: config 250 has no interface number 0 [ 176.797489][ T2288] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 176.808833][ T2288] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 176.819196][ T2286] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 176.826606][ T2288] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 12336, setting to 1024 [ 176.838241][ T2288] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 176.848771][ T2288] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 176.862412][ T2288] usb 5-1: config 250 interface 228 has no altsetting 0 [ 176.907024][ T15] usblp 4-1:250.228: usblp0: USB Bidirectional printer dev 22 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 176.986236][ T2288] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 176.995155][ T2288] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 177.003557][ T2288] usb 5-1: Product: syz [ 177.007785][ T2288] usb 5-1: SerialNumber: syz [ 177.046774][ T2288] hub 5-1:250.228: bad descriptor, ignoring hub [ 177.054366][ T2288] hub: probe of 5-1:250.228 failed with error -5 [ 177.196534][ T2286] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.207459][ T2286] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.217529][ T2286] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 177.226571][ T2286] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.236562][ T15] usb 4-1: USB disconnect, device number 22 [ 177.241321][ T2286] usb 1-1: config 0 descriptor?? [ 177.247479][ T15] usblp0: removed [ 177.257071][ T2288] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 28 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 177.596264][ T2288] usb 5-1: USB disconnect, device number 28 [ 177.604855][ T2288] usblp0: removed [ 177.700356][ T3633] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=28613 [ 177.711463][ T3633] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=28613 [ 177.966598][ T2286] usb 1-1: language id specifier not provided by device, defaulting to English [ 177.979347][ T3641] fuse: Bad value for 'rootmode' [ 178.286965][ T3643] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 178.299265][ T3643] EXT4-fs (loop4): invalid journal inode [ 178.304879][ T3643] EXT4-fs (loop4): can't get journal size [ 178.316727][ T3643] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,resgid=0x0000000000000000,norecovery,commit=0x0000000000000005,nombcache,,errors=continue [ 178.409741][ T3650] syz.2.921[3650] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 178.409783][ T3650] syz.2.921[3650] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 178.418114][ T2286] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0017/input/input22 [ 178.446979][ T3650] syz.2.921[3650] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 178.447245][ T3650] syz.2.921[3650] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 178.458558][ T2286] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0017/input/input23 [ 178.485910][ T2286] uclogic 0003:256C:006D.0017: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.0-1/input0 [ 178.621251][ T344] usb 1-1: USB disconnect, device number 25 [ 178.669038][ T2285] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 178.717710][ T3659] netlink: 28 bytes leftover after parsing attributes in process `syz.3.924'. [ 179.066204][ T2285] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 179.076179][ T2285] usb 5-1: config 1 interface 0 altsetting 253 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 179.089103][ T2285] usb 5-1: config 1 interface 0 has no altsetting 0 [ 179.147707][ T357] print_req_error: 206 callbacks suppressed [ 179.147722][ T357] blk_update_request: I/O error, dev loop0, sector 108 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 179.147804][ T1501] blk_update_request: I/O error, dev loop0, sector 58 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 179.154151][ T1452] blk_update_request: I/O error, dev loop0, sector 1008 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 179.165512][ T1501] blk_update_request: I/O error, dev loop0, sector 58 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 179.176676][ T357] blk_update_request: I/O error, dev loop0, sector 108 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 179.187627][ T2285] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 179.198117][ T1452] blk_update_request: I/O error, dev loop0, sector 1008 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 179.226158][ T2285] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 179.229014][ T357] buffer_io_error: 182 callbacks suppressed [ 179.229023][ T357] Buffer I/O error on dev loop0p1, logical block 8, async page read [ 179.246176][ T2285] usb 5-1: SerialNumber: syz [ 179.254868][ T1501] Buffer I/O error on dev loop0p2, logical block 8, async page read [ 179.255648][ T357] blk_update_request: I/O error, dev loop0, sector 109 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 179.274038][ T357] Buffer I/O error on dev loop0p1, logical block 9, async page read [ 179.275442][ T1501] blk_update_request: I/O error, dev loop0, sector 59 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 179.282099][ T357] blk_update_request: I/O error, dev loop0, sector 110 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 179.302846][ T1452] Buffer I/O error on dev loop0p3, logical block 8, async page read [ 179.303840][ T357] Buffer I/O error on dev loop0p1, logical block 10, async page read [ 179.311799][ T2285] usb 5-1: bad CDC descriptors [ 179.335653][ T357] blk_update_request: I/O error, dev loop0, sector 111 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 179.337927][ T1452] Buffer I/O error on dev loop0p3, logical block 9, async page read [ 179.357834][ T357] Buffer I/O error on dev loop0p1, logical block 11, async page read [ 179.364998][ T1501] Buffer I/O error on dev loop0p2, logical block 9, async page read [ 179.377708][ T1452] Buffer I/O error on dev loop0p3, logical block 10, async page read [ 179.385636][ T1452] Buffer I/O error on dev loop0p3, logical block 11, async page read [ 179.400755][ T3675] SELinux: security_context_str_to_sid(s) failed for (dev bpf, type bpf) errno=-22 [ 179.558323][ T2285] usb 5-1: USB disconnect, device number 29 [ 179.641623][ T3679] overlayfs: failed to resolve './file0': -2 [ 179.676277][ T344] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 179.926181][ T2286] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 180.036250][ T344] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 242, changing to 11 [ 180.048861][ T344] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50582, setting to 1024 [ 180.060144][ T344] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 180.068982][ T344] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.084391][ T344] usb 3-1: config 0 descriptor?? [ 180.106216][ T3675] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 180.165038][ T3692] fuse: Bad value for 'rootmode' [ 180.196448][ T2286] usb 4-1: Using ep0 maxpacket: 8 [ 180.341100][ T3694] netlink: 12 bytes leftover after parsing attributes in process `syz.4.935'. [ 180.353138][ T3694] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3694 comm=syz.4.935 [ 180.366339][ T2286] usb 4-1: config index 0 descriptor too short (expected 5924, got 36) [ 180.375511][ T2286] usb 4-1: config 250 has an invalid interface number: 228 but max is -1 [ 180.385313][ T2286] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 180.404502][ T2286] usb 4-1: config 250 has no interface number 0 [ 180.414756][ T2286] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 180.433355][ T2286] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 180.449443][ T2286] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 12336, setting to 1024 [ 180.466226][ T2286] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 180.480719][ T2286] usb 4-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 180.500261][ T2286] usb 4-1: config 250 interface 228 has no altsetting 0 [ 180.636285][ T2286] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 180.647228][ T2286] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 180.659428][ T2286] usb 4-1: Product: syz [ 180.665436][ T2286] usb 4-1: SerialNumber: syz [ 180.706579][ T2286] hub 4-1:250.228: bad descriptor, ignoring hub [ 180.713187][ T2286] hub: probe of 4-1:250.228 failed with error -5 [ 180.719606][ T3697] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 180.727465][ T3697] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 180.736344][ T3697] F2FS-fs (loop4): invalid crc value [ 180.742702][ T3697] F2FS-fs (loop4): Found nat_bits in checkpoint [ 180.764842][ T3697] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 180.771754][ T3697] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 180.836216][ T15] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 180.860853][ T24] kauditd_printk_skb: 151 callbacks suppressed [ 180.860866][ T24] audit: type=1326 audit(1720116830.249:1162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3707 comm="syz.0.938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f8844bbd9 code=0x7ffc0000 [ 180.890864][ T24] audit: type=1326 audit(1720116830.259:1163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3707 comm="syz.0.938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9f8844bbd9 code=0x7ffc0000 [ 180.914326][ T24] audit: type=1326 audit(1720116830.259:1164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3707 comm="syz.0.938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f8844bbd9 code=0x7ffc0000 [ 180.941238][ T24] audit: type=1326 audit(1720116830.259:1165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3707 comm="syz.0.938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9f8844bbd9 code=0x7ffc0000 [ 180.965173][ T2286] usblp 4-1:250.228: usblp0: USB Bidirectional printer dev 23 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 180.965344][ T24] audit: type=1326 audit(1720116830.259:1166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3707 comm="syz.0.938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f8844bbd9 code=0x7ffc0000 [ 181.000043][ T24] audit: type=1326 audit(1720116830.259:1167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3707 comm="syz.0.938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9f8844bbd9 code=0x7ffc0000 [ 181.023274][ T24] audit: type=1326 audit(1720116830.259:1168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3707 comm="syz.0.938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f8844bbd9 code=0x7ffc0000 [ 181.047420][ T24] audit: type=1326 audit(1720116830.259:1169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3707 comm="syz.0.938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9f8844bbd9 code=0x7ffc0000 [ 181.070742][ T24] audit: type=1326 audit(1720116830.259:1170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3707 comm="syz.0.938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f8844bbd9 code=0x7ffc0000 [ 181.094198][ T344] usb 3-1: string descriptor 0 read error: -71 [ 181.200351][ T24] audit: type=1326 audit(1720116830.259:1171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3707 comm="syz.0.938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7f9f8844bbd9 code=0x7ffc0000 [ 181.321216][ T15] usb 2-1: Using ep0 maxpacket: 16 [ 181.346253][ T344] uclogic 0003:256C:006D.0018: failed retrieving string descriptor #200: -71 [ 181.354895][ T344] uclogic 0003:256C:006D.0018: failed retrieving pen parameters: -71 [ 181.362794][ T344] uclogic 0003:256C:006D.0018: failed probing pen v2 parameters: -71 [ 181.370829][ T344] uclogic 0003:256C:006D.0018: failed probing parameters: -71 [ 181.378195][ T344] uclogic: probe of 0003:256C:006D.0018 failed with error -71 [ 181.386380][ T344] usb 3-1: USB disconnect, device number 23 [ 181.446276][ T15] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.446284][ T2285] usb 4-1: USB disconnect, device number 23 [ 181.463276][ T15] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 181.463508][ T2285] usblp0: removed [ 181.476277][ T15] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 181.488331][ T15] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.497110][ T15] usb 2-1: config 0 descriptor?? [ 181.981447][ T15] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0019/input/input24 [ 182.185207][ T3701] ------------[ cut here ]------------ [ 182.221893][ T3701] WARNING: CPU: 0 PID: 3701 at mm/page_alloc.c:5332 __alloc_pages_nodemask+0x4f6/0xaf0 [ 182.233673][ T3701] Modules linked in: [ 182.238491][ T3701] CPU: 1 PID: 3701 Comm: syz.1.937 Not tainted 5.10.218-syzkaller-00638-g3feee789f446 #0 [ 182.248807][ T3701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 182.272939][ T3701] RIP: 0010:__alloc_pages_nodemask+0x4f6/0xaf0 [ 182.279417][ T3701] Code: 84 24 20 01 00 00 0f 85 bb 03 00 00 4c 89 f8 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 f7 c3 00 20 00 00 0f 85 c1 fc ff ff <0f> 0b 45 31 ff eb 98 31 db 8b 7c 24 10 e9 6c fc ff ff 48 89 df 44 [ 182.302308][ T15] microsoft 0003:045E:07DA.0019: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 182.317489][ T3701] RSP: 0018:ffffc9000124f9e0 EFLAGS: 00010246 [ 182.326869][ T3701] RAX: ffffc9000124fab0 RBX: 0000000000040dc0 RCX: 0000000000000000 [ 182.336851][ T3701] RDX: 0000000000000018 RSI: 0000000000000000 RDI: ffffc9000124fac8 [ 182.344716][ T3701] RBP: ffffc9000124fb58 R08: dffffc0000000000 R09: ffffc9000124fab0 [ 182.352681][ T3701] R10: 0000000000000000 R11: dffffc0000000001 R12: 000000000000001a [ 182.360765][ T3701] R13: dffffc0000000000 R14: 1ffff92000249f4c R15: 000000000000001a [ 182.368937][ T3701] FS: 00007f4de6b986c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 182.378136][ T3701] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 182.384588][ T3701] CR2: 000000110c2c4f04 CR3: 00000001202d1000 CR4: 00000000003506b0 [ 182.393233][ T3701] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 182.401244][ T3701] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 182.409379][ T3701] Call Trace: [ 182.412540][ T3701] ? show_regs+0x58/0x60 [ 182.416808][ T3701] ? __warn+0x160/0x2f0 [ 182.421100][ T3701] ? __alloc_pages_nodemask+0x4f6/0xaf0 [ 182.426857][ T3701] ? report_bug+0x3d9/0x5b0 [ 182.431286][ T3701] ? __alloc_pages_nodemask+0x4f6/0xaf0 [ 182.436829][ T3701] ? handle_bug+0x41/0x70 [ 182.441014][ T3701] ? exc_invalid_op+0x1b/0x50 [ 182.448913][ T3701] ? asm_exc_invalid_op+0x12/0x20 [ 182.453864][ T3701] ? __alloc_pages_nodemask+0x4f6/0xaf0 [ 182.459531][ T3701] ? release_firmware_map_entry+0x192/0x192 [ 182.465298][ T3701] ? plist_check_list+0x254/0x270 [ 182.470591][ T3701] ? compat_start_thread+0x80/0x80 [ 182.475581][ T3701] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 182.481339][ T3701] ? preempt_schedule_irq+0xe7/0x140 [ 182.486663][ T3701] ? preempt_schedule_notrace+0x140/0x140 [ 182.492419][ T3701] ? irqentry_exit+0x4f/0x60 [ 182.497175][ T3701] ? sysvec_reschedule_ipi+0x83/0x160 [ 182.502590][ T3701] kmalloc_order+0x4c/0x170 [ 182.506991][ T3701] kmalloc_order_trace+0x18/0x90 [ 182.511816][ T3701] __kmalloc+0x1f1/0x330 [ 182.515994][ T3701] input_mt_init_slots+0xcf/0xa50 [ 182.520809][ T3701] ? __x32_compat_sys_ioctl+0x90/0x90 [ 182.525951][ T3701] uinput_create_device+0x522/0x630 [ 182.531289][ T3701] uinput_ioctl_handler+0xa63/0x16a0 [ 182.536470][ T53] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 182.543871][ T3701] ? selinux_file_ioctl+0x3cc/0x540 [ 182.548835][ T3701] ? uinput_release+0x50/0x50 [ 182.553311][ T3701] ? __fget_files+0x31e/0x380 [ 182.557951][ T3701] uinput_ioctl+0x28/0x30 [ 182.562116][ T3701] ? uinput_poll+0x120/0x120 [ 182.566826][ T3701] __se_sys_ioctl+0x114/0x190 [ 182.616242][ T3701] __x64_sys_ioctl+0x7b/0x90 [ 182.621100][ T3701] do_syscall_64+0x34/0x70 [ 182.625661][ T3701] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 182.635524][ T3743] fuse: Bad value for 'rootmode' [ 182.644079][ T3701] RIP: 0033:0x7f4de7937bd9 [ 182.649322][ T3701] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 182.670453][ T3701] RSP: 002b:00007f4de6b98048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 182.680276][ T3701] RAX: ffffffffffffffda RBX: 00007f4de7ac6038 RCX: 00007f4de7937bd9 [ 182.689107][ T3701] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000008 [ 182.698365][ T3701] RBP: 00007f4de79a6aa1 R08: 0000000000000000 R09: 0000000000000000 [ 182.707134][ T3701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 182.715146][ T3701] R13: 000000000000006e R14: 00007f4de7ac6038 R15: 00007fff714f42c8 [ 182.723148][ T3701] ---[ end trace 9bd055eb1a49b9f9 ]--- [ 182.820641][ T3749] loop0: p1 < > p2 p3 p4 < p5 > [ 182.826514][ T3749] loop0: p3 size 16744448 extends beyond EOD, truncated [ 182.866744][ T3749] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 182.874956][ T3749] netlink: 'syz.0.951': attribute type 1 has an invalid length. [ 182.914846][ T93] loop0: p1 < > p2 p3 p4 < p5 > [ 182.921603][ T93] loop0: p3 size 16744448 extends beyond EOD, truncated [ 183.047567][ T53] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 183.061717][ T53] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 183.081773][ T53] usb 3-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= f.00 [ 183.091690][ T53] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.231324][ T53] usb 3-1: config 0 descriptor?? [ 183.397383][ T3765] Alternate GPT is invalid, using primary GPT. [ 183.403465][ T3765] loop4: p1 p2 p3 [ 183.480648][ T1501] udevd[1501]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 183.480696][ T357] udevd[357]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 183.491137][ T1452] udevd[1452]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 183.751702][ T2285] usb 2-1: USB disconnect, device number 30 [ 183.766995][ T93] loop0: p1 < > p2 p3 p4 < p5 > [ 183.816246][ T93] loop0: p3 size 16744448 extends beyond EOD, truncated [ 184.056017][ T93] loop0: p1 < > p2 p3 p4 < p5 > [ 184.063543][ T93] loop0: p3 size 16744448 extends beyond EOD, truncated [ 184.194955][ T3797] fuse: Unknown parameter 'u00000000000000000000' [ 184.646208][ T15] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 184.887590][ T15] usb 5-1: Using ep0 maxpacket: 8 [ 184.888121][ T93] loop0: p1 < > p2 p3 p4 < p5 > [ 184.898181][ T93] loop0: p3 size 16744448 extends beyond EOD, truncated [ 184.915274][ T93] loop0: p1 < > p2 p3 p4 < p5 > [ 184.921639][ T93] loop0: p3 size 16744448 extends beyond EOD, truncated [ 185.219707][ T15] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 185.227854][ T15] usb 5-1: config 179 has no interface number 0 [ 185.233870][ T15] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 185.245026][ T15] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 185.256288][ T15] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 185.267433][ T15] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 185.280123][ T15] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 185.296279][ T2285] usb 3-1: USB disconnect, device number 24 [ 185.301902][ T15] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 185.315803][ T3820] syz.2.973[3820] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 185.315860][ T3820] syz.2.973[3820] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 185.318381][ T15] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.375405][ T3824] syz.2.975[3824] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 185.375442][ T3824] syz.2.975[3824] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 185.386653][ T3800] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 185.414446][ T3824] syz.2.975[3824] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 185.414491][ T3824] syz.2.975[3824] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 186.036240][ T24] kauditd_printk_skb: 45 callbacks suppressed [ 186.036269][ T24] audit: type=1400 audit(1720116835.399:1217): avc: denied { relabelfrom } for pid=3834 comm="syz.0.978" name="" dev="pipefs" ino=30038 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 186.082030][ T93] loop0: p1 < > p2 p3 p4 < p5 > [ 186.091175][ T93] loop0: p3 size 16744448 extends beyond EOD, truncated [ 186.157799][ T93] loop0: p1 < > p2 p3 p4 < p5 > [ 186.166604][ T93] loop0: p3 size 16744448 extends beyond EOD, truncated [ 186.260846][ T3845] fuse: Unknown parameter 'u00000000000000000000' [ 186.746925][ T53] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input26 [ 186.866182][ T2285] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 186.973060][ T24] audit: type=1326 audit(1720116836.359:1218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3855 comm="syz.2.984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f242b606bd9 code=0x7ffc0000 [ 186.998613][ T24] audit: type=1326 audit(1720116836.359:1219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3855 comm="syz.2.984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f242b606bd9 code=0x7ffc0000 [ 187.035877][ T3858] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 187.046699][ T3853] udc-core: couldn't find an available UDC or it's busy [ 187.054425][ T3858] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.985: iget: bad i_size value: -67835469387268086 [ 187.060742][ T24] audit: type=1326 audit(1720116836.359:1220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3855 comm="syz.2.984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f242b606bd9 code=0x7ffc0000 [ 187.067325][ T3853] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 187.101198][ T3858] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.985: couldn't read orphan inode 15 (err -117) [ 187.103024][ T93] loop0: p1 < > p2 p3 p4 < p5 > [ 187.128600][ T3858] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 187.134212][ T93] loop0: p3 size 16744448 extends beyond EOD, truncated [ 187.146329][ T3858] ext2 filesystem being mounted at /47/file0 supports timestamps until 2038 (0x7fffffff) [ 187.166557][ T24] audit: type=1326 audit(1720116836.359:1221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3855 comm="syz.2.984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f242b606bd9 code=0x7ffc0000 [ 187.193723][ T24] audit: type=1326 audit(1720116836.359:1222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3855 comm="syz.2.984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f242b606bd9 code=0x7ffc0000 [ 187.217078][ T24] audit: type=1326 audit(1720116836.359:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3855 comm="syz.2.984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f242b606bd9 code=0x7ffc0000 [ 187.240395][ T24] audit: type=1326 audit(1720116836.359:1224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3855 comm="syz.2.984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f242b606bd9 code=0x7ffc0000 [ 187.263680][ T24] audit: type=1326 audit(1720116836.359:1225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3855 comm="syz.2.984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f242b606bd9 code=0x7ffc0000 [ 187.287006][ T24] audit: type=1326 audit(1720116836.359:1226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3855 comm="syz.2.984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f242b606bd9 code=0x7ffc0000 [ 187.304187][ T93] loop0: p1 < > p2 p3 p4 < p5 > [ 187.315782][ T93] loop0: p3 size 16744448 extends beyond EOD, truncated [ 187.326563][ T2285] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 187.336883][ T2285] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 187.345776][ T2285] usb 2-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= f.00 [ 187.355075][ T2285] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.391374][ T2285] usb 2-1: config 0 descriptor?? [ 187.641587][ T93] loop0: p1 < > p2 p3 p4 < p5 > [ 187.668204][ T93] loop0: p3 size 16744448 extends beyond EOD, truncated [ 188.120992][ T93] loop0: p1 < > p2 p3 p4 < p5 > [ 188.156237][ T93] loop0: p3 size 16744448 extends beyond EOD, truncated [ 188.290622][ T3887] fuse: Unknown parameter 'u00000000000000000000' [ 188.650865][ T93] loop0: p1 < > p2 p3 p4 < p5 > [ 188.656651][ T93] loop0: p3 size 16744448 extends beyond EOD, truncated [ 188.791193][ T2289] usb 5-1: USB disconnect, device number 30 [ 188.806154][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 188.814273][ T2289] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 188.906195][ T448] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 189.178740][ T3906] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 189.188390][ T3906] EXT4-fs (loop2): invalid journal inode [ 189.193919][ T3906] EXT4-fs (loop2): can't get journal size [ 189.208712][ T3906] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,resgid=0x0000000000000000,norecovery,commit=0x0000000000000005,nombcache,,errors=continue [ 189.323967][ T3899] F2FS-fs (loop4): invalid crc value [ 189.336775][ T448] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.348031][ T3899] F2FS-fs (loop4): Found nat_bits in checkpoint [ 189.357736][ T448] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.374701][ T448] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 189.383983][ T448] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.392825][ T448] usb 4-1: config 0 descriptor?? [ 189.401465][ T3899] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 189.524946][ T93] loop0: p1 < > p2 p3 p4 < p5 > [ 189.530859][ T93] loop0: p3 size 16744448 extends beyond EOD, truncated [ 189.586956][ T2285] usb 2-1: USB disconnect, device number 31 [ 189.654394][ T93] loop0: p1 < > p2 p3 p4 < p5 > [ 189.660756][ T93] loop0: p3 size 16744448 extends beyond EOD, truncated [ 189.688474][ T93] loop0: p1 < > p2 p3 p4 < p5 > [ 189.693767][ T3936] overlayfs: failed to resolve './file0': -2 [ 189.698434][ T93] loop0: p3 size 16744448 extends beyond EOD, truncated [ 189.760519][ T3939] fuse: Bad value for 'rootmode' [ 189.917464][ T448] hid (null): bogus close delimiter [ 190.003263][ T93] loop0: p1 < > p2 p3 p4 < p5 > [ 190.008884][ T93] loop0: p3 size 16744448 extends beyond EOD, truncated [ 190.616243][ T448] uclogic 0003:256C:006D.001A: interface is invalid, ignoring [ 190.776958][ T93] loop0: p1 < > p2 p3 p4 < p5 > [ 190.782581][ T93] loop0: p3 size 16744448 extends beyond EOD, truncated [ 190.917524][ T3956] F2FS-fs (loop1): invalid crc value [ 190.933618][ T3956] F2FS-fs (loop1): Found nat_bits in checkpoint [ 190.969438][ T3956] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 191.060710][ T24] kauditd_printk_skb: 15 callbacks suppressed [ 191.060723][ T24] audit: type=1326 audit(1720116867.455:1242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3955 comm="syz.1.1017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4de7937bd9 code=0x7ffc0000 [ 191.111443][ T24] audit: type=1326 audit(1720116867.455:1243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3955 comm="syz.1.1017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4de7937bd9 code=0x7ffc0000 [ 191.135731][ T24] audit: type=1326 audit(1720116867.455:1244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3955 comm="syz.1.1017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7f4de7937bd9 code=0x7ffc0000 [ 191.161599][ T24] audit: type=1326 audit(1720116867.455:1245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3955 comm="syz.1.1017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4de7937bd9 code=0x7ffc0000 [ 191.208439][ T24] audit: type=1326 audit(1720116867.455:1246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3955 comm="syz.1.1017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4de7937bd9 code=0x7ffc0000 [ 191.361625][ T2289] usb 4-1: USB disconnect, device number 24 [ 191.688895][ T93] loop0: p1 < > p2 p3 p4 < p5 > [ 191.694479][ T93] loop0: p3 size 16744448 extends beyond EOD, truncated [ 191.791203][ T3984] fuse: Bad value for 'rootmode' [ 192.043471][ T24] audit: type=1326 audit(1720116877.433:1247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3958 comm="syz.0.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f8844bbd9 code=0x7ffc0000 [ 192.067875][ T24] audit: type=1326 audit(1720116877.433:1248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3958 comm="syz.0.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7f9f8844bbd9 code=0x7ffc0000 [ 192.093105][ T24] audit: type=1326 audit(1720116877.433:1249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3958 comm="syz.0.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f8844bbd9 code=0x7ffc0000 [ 192.094275][ T93] loop0: p1 < > p2 p3 p4 < p5 > [ 192.135749][ T93] loop0: p3 size 16744448 extends beyond EOD, truncated [ 192.167431][ T4000] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 192.185628][ T4000] EXT4-fs error (device loop4): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 192.202092][ T93] loop0: p1 < > p2 p3 p4 < p5 > [ 192.207670][ T93] loop0: p3 size 16744448 extends beyond EOD, truncated [ 192.223715][ T4000] EXT4-fs (loop4): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 192.243174][ T4000] EXT4-fs (loop4): This should not happen!! Data will be lost [ 192.243174][ T4000] [ 192.252805][ T4000] EXT4-fs (loop4): Total free blocks count 0 [ 192.259140][ T4000] EXT4-fs (loop4): Free/Dirty block details [ 192.266286][ T4000] EXT4-fs (loop4): free_blocks=2415919104 [ 192.271873][ T4000] EXT4-fs (loop4): dirty_blocks=16 [ 192.277275][ T4000] EXT4-fs (loop4): Block reservation details [ 192.283126][ T4000] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 192.291291][ T4000] FAULT_INJECTION: forcing a failure. [ 192.291291][ T4000] name failslab, interval 1, probability 0, space 0, times 0 [ 192.307902][ T4000] CPU: 1 PID: 4000 Comm: syz.4.1030 Tainted: G W 5.10.218-syzkaller-00638-g3feee789f446 #0 [ 192.318987][ T4000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 192.328873][ T4000] Call Trace: [ 192.332006][ T4000] dump_stack_lvl+0x1e2/0x24b [ 192.336517][ T4000] ? bfq_pos_tree_add_move+0x43b/0x43b [ 192.341816][ T4000] dump_stack+0x15/0x17 [ 192.345811][ T4000] should_fail+0x3c6/0x510 [ 192.350060][ T4000] ? security_file_alloc+0x29/0x120 [ 192.355095][ T4000] __should_failslab+0xa4/0xe0 [ 192.359690][ T4000] should_failslab+0x9/0x20 [ 192.364029][ T4000] kmem_cache_alloc+0x3d/0x2e0 [ 192.368634][ T4000] ? __alloc_file+0x29/0x330 [ 192.373055][ T4000] security_file_alloc+0x29/0x120 [ 192.377925][ T4000] __alloc_file+0xbf/0x330 [ 192.382166][ T4000] alloc_empty_file+0x95/0x180 [ 192.386774][ T4000] path_openat+0x105/0x3000 [ 192.391107][ T4000] ? __kasan_slab_alloc+0xc3/0xe0 [ 192.395973][ T4000] ? __kasan_slab_alloc+0xb1/0xe0 [ 192.400827][ T4000] ? slab_post_alloc_hook+0x61/0x2f0 [ 192.406072][ T4000] ? kmem_cache_alloc+0x168/0x2e0 [ 192.410927][ T4000] ? getname_flags+0xba/0x520 [ 192.415427][ T4000] ? getname+0x19/0x20 [ 192.419335][ T4000] ? __x64_sys_openat+0x243/0x290 [ 192.424191][ T4000] ? do_syscall_64+0x34/0x70 [ 192.428621][ T4000] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 192.434527][ T4000] ? do_filp_open+0x460/0x460 [ 192.439037][ T4000] do_filp_open+0x21c/0x460 [ 192.443376][ T4000] ? vfs_tmpfile+0x2b0/0x2b0 [ 192.447805][ T4000] ? get_unused_fd_flags+0x94/0xa0 [ 192.452746][ T4000] do_sys_openat2+0x13f/0x6f0 [ 192.457272][ T4000] ? do_sys_open+0x220/0x220 [ 192.461688][ T4000] ? __fdget_pos+0x2ee/0x3a0 [ 192.466117][ T4000] ? ksys_write+0x24f/0x2c0 [ 192.470453][ T4000] __x64_sys_openat+0x243/0x290 [ 192.475161][ T4000] ? __ia32_sys_open+0x270/0x270 [ 192.479934][ T4000] ? debug_smp_processor_id+0x17/0x20 [ 192.485138][ T4000] do_syscall_64+0x34/0x70 [ 192.489384][ T4000] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 192.495105][ T4000] RIP: 0033:0x7f5ca4c63bd9 [ 192.499358][ T4000] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 192.518795][ T4000] RSP: 002b:00007f5ca3ee5048 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 192.527038][ T4000] RAX: ffffffffffffffda RBX: 00007f5ca4df1f60 RCX: 00007f5ca4c63bd9 [ 192.534850][ T4000] RDX: 00000000000a4b40 RSI: 0000000020000200 RDI: 0000000000000006 [ 192.542676][ T4000] RBP: 00007f5ca3ee50a0 R08: 0000000000000000 R09: 0000000000000000 [ 192.550478][ T4000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.558287][ T4000] R13: 000000000000000b R14: 00007f5ca4df1f60 R15: 00007ffeaabfd938 [ 192.615489][ T93] loop0: p1 < > p2 p3 p4 < p5 > [ 192.635224][ T93] loop0: p3 size 16744448 extends beyond EOD, truncated [ 192.644532][ T4015] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=31014 [ 192.653729][ T4015] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=31014 [ 192.662853][ T2289] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 192.663221][ T24] audit: type=1400 audit(1720116878.063:1250): avc: denied { associate } for pid=4014 comm="syz.2.1035" name="#358" dev="tmpfs" ino=358 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="$" [ 192.768239][ T24] audit: type=1326 audit(1720116878.163:1251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4011 comm="syz.0.1034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f8844bbd9 code=0x7ffc0000 [ 192.791786][ T4021] EXT4-fs (loop2): inodes count not valid: 64 vs 32 [ 192.801554][ T93] loop0: p1 < > p2 p3 p4 < p5 > [ 192.809608][ T93] loop0: p3 size 16744448 extends beyond EOD, truncated [ 192.819624][ T4010] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 192.828980][ T4010] ext4 filesystem being mounted at /24/bus supports timestamps until 2038 (0x7fffffff) [ 192.951693][ T93] loop0: p1 < > p2 p3 p4 < p5 > [ 192.961411][ T93] loop0: p3 size 16744448 extends beyond EOD, truncated [ 193.116605][ T2289] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.172958][ T2289] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.261015][ T2289] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 193.288630][ T2289] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.320252][ T2289] usb 4-1: config 0 descriptor?? [ 194.114951][ T4036] F2FS-fs (loop2): invalid crc value [ 194.136287][ T2289] uclogic 0003:256C:006D.001B: failed retrieving string descriptor #200: -71 [ 194.151127][ T2289] uclogic 0003:256C:006D.001B: failed retrieving pen parameters: -71 [ 194.179242][ T2289] uclogic 0003:256C:006D.001B: failed probing pen v2 parameters: -71 [ 194.190105][ T4036] F2FS-fs (loop2): Found nat_bits in checkpoint [ 194.217469][ T2289] uclogic 0003:256C:006D.001B: failed probing parameters: -71 [ 194.223763][ T4036] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 194.236106][ T4036] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 194.247707][ T2289] uclogic: probe of 0003:256C:006D.001B failed with error -71 [ 194.282041][ T2289] usb 4-1: USB disconnect, device number 25 [ 194.396521][ T93] loop0: p1 < > p2 p3 p4 < p5 > [ 194.403089][ T93] loop0: p3 size 16744448 extends beyond EOD, truncated [ 194.478134][ T2993] attempt to access beyond end of device [ 194.478134][ T2993] loop2: rw=524288, want=45072, limit=40427 [ 194.491952][ T4054] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 194.506562][ T2993] attempt to access beyond end of device [ 194.506562][ T2993] loop2: rw=0, want=45072, limit=40427 [ 194.536217][ T4054] EXT4-fs (loop1): invalid journal inode [ 194.572734][ T2993] attempt to access beyond end of device [ 194.572734][ T2993] loop2: rw=2049, want=45112, limit=40427 [ 194.596411][ T4054] EXT4-fs (loop1): can't get journal size [ 194.613008][ T4054] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,resgid=0x0000000000000000,norecovery,commit=0x0000000000000005,nombcache,,errors=continue [ 194.823013][ T93] loop0: p1 < > p2 p3 p4 < p5 > [ 194.826203][ T2289] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 194.838034][ T93] loop0: p3 size 16744448 extends beyond EOD, truncated [ 194.898250][ T93] loop0: p1 < > p2 p3 p4 < p5 > [ 194.904145][ T93] loop0: p3 size 16744448 extends beyond EOD, truncated [ 195.027891][ T93] loop0: p1 < > p2 p3 p4 < p5 > [ 195.036350][ T93] loop0: p3 size 16744448 extends beyond EOD, truncated [ 195.087501][ T93] loop0: p1 < > p2 p3 p4 < p5 > [ 195.096164][ T2289] usb 4-1: Using ep0 maxpacket: 16 [ 195.101235][ T93] loop0: p3 size 16744448 extends beyond EOD, truncated [ 195.116213][ T15] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 195.126441][ T4067] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.133360][ T4067] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.170436][ T4067] device bridge_slave_0 entered promiscuous mode [ 195.177467][ T4067] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.184300][ T4067] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.191654][ T4067] device bridge_slave_1 entered promiscuous mode [ 195.216745][ T2289] usb 4-1: config index 0 descriptor too short (expected 38, got 36) [ 195.234784][ T2289] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.265683][ T2289] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.277497][ T2289] usb 4-1: New USB device found, idVendor=056a, idProduct=0018, bcdDevice= 0.00 [ 195.286396][ T2289] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.296790][ T2289] usb 4-1: config 0 descriptor?? [ 195.317433][ T4067] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.324277][ T4067] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.331401][ T4067] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.338177][ T4067] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.352275][ T93] loop0: p1 < > p2 p3 p4 < p5 > [ 195.360917][ T93] loop0: p3 size 16744448 extends beyond EOD, truncated [ 195.384191][ T448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 195.454345][ T448] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.466226][ T448] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.473405][ T93] loop0: p1 < > p2 p3 p4 < p5 > [ 195.480946][ T93] loop0: p3 size 16744448 extends beyond EOD, truncated [ 195.487968][ T2285] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 195.506030][ T2285] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.512914][ T2285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.516203][ T15] usb 2-1: config index 0 descriptor too short (expected 1080, got 56) [ 195.520296][ T2285] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 195.536929][ T2285] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.543759][ T2285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.587358][ T448] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 195.597415][ T448] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 195.731327][ T15] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 195.740837][ T15] usb 2-1: New USB device found, idVendor=0499, idProduct=1058, bcdDevice=31.95 [ 195.749671][ T15] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.758096][ T15] usb 2-1: config 0 descriptor?? [ 195.783253][ T7] device bridge_slave_1 left promiscuous mode [ 195.789341][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.797140][ T7] device bridge_slave_0 left promiscuous mode [ 195.803062][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.811002][ T7] device veth1_macvtap left promiscuous mode [ 195.811534][ T15] snd-usb-audio: probe of 2-1:0.0 failed with error -2 [ 195.816890][ T7] device veth0_vlan left promiscuous mode [ 195.883052][ T4067] device veth0_vlan entered promiscuous mode [ 195.889797][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 195.897962][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 195.905992][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 195.913710][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 195.922145][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 195.929524][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 195.940797][ T2286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 195.948763][ T2286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 195.957694][ T4067] device veth1_macvtap entered promiscuous mode [ 195.966439][ T2286] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 195.973920][ T2286] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 195.984001][ T2286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 195.993482][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 196.001567][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 196.086276][ T2289] usbhid 4-1:0.0: can't add hid device: -71 [ 196.090639][ T4064] EXT4-fs (loop1): Mount option "dioread_lock" incompatible with ext2 [ 196.092090][ T2289] usbhid: probe of 4-1:0.0 failed with error -71 [ 196.107378][ T2289] usb 4-1: USB disconnect, device number 26 [ 196.177304][ T4090] fuse: Unknown parameter '00000000000000000000' [ 196.364261][ T93] loop0: p1 < > p2 p3 p4 < p5 > [ 196.372621][ T93] loop0: p3 size 16744448 extends beyond EOD, truncated [ 196.397041][ T344] usb 2-1: USB disconnect, device number 32 [ 196.405105][ T93] loop0: p1 < > p2 p3 p4 < p5 > [ 196.410810][ T93] loop0: p3 size 16744448 extends beyond EOD, truncated [ 196.427063][ T93] loop0: p1 < > p2 p3 p4 < p5 > [ 196.432536][ T93] loop0: p3 size 16744448 extends beyond EOD, truncated [ 196.573922][ T93] loop0: p1 < > p2 p3 p4 < p5 > [ 196.579658][ T93] loop0: p3 size 16744448 extends beyond EOD, truncated [ 196.665399][ T4096] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.672322][ T4096] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.679477][ T4096] device bridge_slave_0 entered promiscuous mode [ 196.688088][ T4096] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.694908][ T4096] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.702138][ T4096] device bridge_slave_1 entered promiscuous mode [ 196.734470][ T4096] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.741329][ T4096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.748411][ T4096] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.755184][ T4096] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.772791][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 196.780195][ T344] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.787325][ T344] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.798142][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 196.806047][ T344] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.812793][ T344] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.820723][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 196.828864][ T344] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.835679][ T344] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.856702][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 196.865221][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 196.891185][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 196.905719][ T4096] device veth0_vlan entered promiscuous mode [ 196.917751][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 196.933589][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 196.943001][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 196.953494][ T4096] device veth1_macvtap entered promiscuous mode [ 196.962933][ T448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 196.973131][ T448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 196.990943][ T448] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 197.017025][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 197.025074][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 197.047171][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 197.065356][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 197.122110][ T4107] device pim6reg1 entered promiscuous mode [ 197.272570][ T93] loop0: p1 < > p2 p3 p4 < p5 > [ 197.287284][ T7] device vlan0 left promiscuous mode [ 197.292535][ T7] bridge0: port 3(vlan0) entered disabled state [ 197.299944][ T93] loop0: p3 size 16744448 extends beyond EOD, truncated [ 197.316568][ T7] device bridge_slave_1 left promiscuous mode [ 197.322523][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.353651][ T93] loop0: p1 < > p2 p3 p4 < p5 > [ 197.358932][ T7] device bridge_slave_0 left promiscuous mode [ 197.364871][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.372603][ T93] loop0: p3 size 16744448 extends beyond EOD, truncated [ 197.403425][ T7] device veth1_macvtap left promiscuous mode [ 197.426595][ T7] device veth0_vlan left promiscuous mode [ 197.504481][ T24] kauditd_printk_skb: 12 callbacks suppressed [ 197.504492][ T24] audit: type=1326 audit(1720116882.893:1264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4109 comm="syz.0.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f8844bbd9 code=0x7ffc0000 [ 197.556193][ T24] audit: type=1326 audit(1720116882.943:1265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4109 comm="syz.0.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f8844bbd9 code=0x7ffc0000 [ 197.708371][ T4117] incfs: Options parsing error. -22 [ 197.713424][ T4117] incfs: mount failed -22 [ 197.752458][ T93] loop0: p1 < > p2 p3 p4 < p5 > [ 197.766823][ T93] loop0: p3 size 16744448 extends beyond EOD, truncated [ 197.825474][ T93] loop0: p1 < > p2 p3 p4 < p5 > [ 197.834494][ T93] loop0: p3 size 16744448 extends beyond EOD, truncated [ 197.841384][ T4117] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.848389][ T4117] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.907310][ T4103] F2FS-fs (loop2): invalid crc value [ 197.926603][ T93] loop0: p1 < > p2 p3 p4 < p5 > [ 197.937390][ T93] loop0: p3 size 16744448 extends beyond EOD, truncated [ 197.957136][ T4103] F2FS-fs (loop2): Found nat_bits in checkpoint [ 198.123687][ T4105] F2FS-fs (loop1): invalid crc value [ 198.223579][ T4103] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 198.240446][ T4105] F2FS-fs (loop1): Found nat_bits in checkpoint [ 198.259986][ T24] audit: type=1326 audit(1720116883.653:1266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4102 comm="syz.2.1055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad36e83bd9 code=0x7ffc0000 [ 198.309649][ T24] audit: type=1326 audit(1720116883.693:1267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4102 comm="syz.2.1055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7fad36e83bd9 code=0x7ffc0000 [ 198.339859][ T24] audit: type=1326 audit(1720116883.693:1268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4102 comm="syz.2.1055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad36e83bd9 code=0x7ffc0000 [ 198.364272][ T4105] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 198.398425][ T24] audit: type=1326 audit(1720116883.773:1269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4104 comm="syz.1.1056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4de7937bd9 code=0x7ffc0000 [ 198.421665][ T24] audit: type=1326 audit(1720116883.773:1270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4104 comm="syz.1.1056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4de7937bd9 code=0x7ffc0000 [ 198.445243][ T24] audit: type=1326 audit(1720116883.773:1271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4104 comm="syz.1.1056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7f4de7937bd9 code=0x7ffc0000 [ 198.472821][ T24] audit: type=1326 audit(1720116883.773:1272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4104 comm="syz.1.1056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4de7937bd9 code=0x7ffc0000 [ 198.496464][ T24] audit: type=1326 audit(1720116883.773:1273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4104 comm="syz.1.1056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4de7937bd9 code=0x7ffc0000 [ 198.521053][ T4138] syz.3.1065[4138] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 198.521111][ T4138] syz.3.1065[4138] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 198.660642][ T4145] binder: 4139:4145 ioctl 40044900 3 returned -22 [ 198.679961][ T4143] Alternate GPT is invalid, using primary GPT. [ 198.686043][ T4143] loop2: p1 p2 p3 [ 198.813307][ T4147] EXT4-fs (loop1): Ignoring removed orlov option [ 198.820878][ T93] loop0: p1 < > p2 p3 p4 < p5 > [ 198.831581][ T93] loop0: p3 size 16744448 extends beyond EOD, truncated [ 198.837828][ T4147] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 198.846643][ T357] udevd[357]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 198.858111][ T1501] udevd[1501]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 198.870052][ T1452] udevd[1452]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 198.893567][ T4147] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue [ 198.918179][ T4165] FAULT_INJECTION: forcing a failure. [ 198.918179][ T4165] name failslab, interval 1, probability 0, space 0, times 0 [ 198.918183][ T93] loop0: p1 < > p2 p3 p4 < p5 > [ 198.935349][ T4165] CPU: 0 PID: 4165 Comm: syz.0.1073 Tainted: G W 5.10.218-syzkaller-00638-g3feee789f446 #0 [ 198.946446][ T4165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 198.956343][ T4165] Call Trace: [ 198.959474][ T4165] dump_stack_lvl+0x1e2/0x24b [ 198.963985][ T4165] ? panic+0x812/0x812 [ 198.967888][ T4165] ? bfq_pos_tree_add_move+0x43b/0x43b [ 198.973185][ T4165] ? __stack_depot_save+0x468/0x4d0 [ 198.978218][ T4165] dump_stack+0x15/0x17 [ 198.982207][ T4165] should_fail+0x3c6/0x510 [ 198.986462][ T4165] ? radix_tree_node_alloc+0x198/0x3c0 [ 198.991756][ T4165] __should_failslab+0xa4/0xe0 [ 198.996357][ T4165] should_failslab+0x9/0x20 [ 199.000707][ T4165] kmem_cache_alloc+0x3d/0x2e0 [ 199.005297][ T4165] radix_tree_node_alloc+0x198/0x3c0 [ 199.010416][ T4165] idr_get_free+0x281/0x8e0 [ 199.014755][ T4165] idr_alloc+0x1a0/0x2f0 [ 199.018836][ T4165] ? idr_alloc_u32+0x320/0x320 [ 199.023434][ T4165] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 199.028384][ T4165] ? debug_smp_processor_id+0x17/0x20 [ 199.033588][ T4165] ? __radix_tree_preload+0x351/0x3d0 [ 199.038798][ T4165] p9_client_prepare_req+0x57b/0xac0 [ 199.043919][ T4165] p9_client_rpc+0x159/0x1390 [ 199.048431][ T4165] ? __kasan_check_write+0x14/0x20 [ 199.053376][ T4165] ? node_tag_clear+0x200/0x2b0 [ 199.058065][ T4165] ? p9_fid_create+0x230/0x230 [ 199.062663][ T4165] ? idr_alloc_u32+0x20b/0x320 [ 199.067272][ T4165] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 199.072213][ T4165] ? debug_smp_processor_id+0x17/0x20 [ 199.077421][ T4165] ? __radix_tree_preload+0x351/0x3d0 [ 199.082627][ T4165] p9_client_walk+0x1fe/0x7b0 [ 199.087143][ T4165] ? p9_client_rpc+0x1390/0x1390 [ 199.091914][ T4165] ? __kasan_check_write+0x14/0x20 [ 199.096862][ T4165] ? _raw_spin_lock+0xa4/0x1b0 [ 199.101458][ T4165] ? _raw_spin_trylock_bh+0x190/0x190 [ 199.106668][ T4165] ? iov_iter_kvec+0x3f/0x120 [ 199.111182][ T4165] v9fs_fid_xattr_set+0x133/0x330 [ 199.116042][ T4165] ? _raw_spin_unlock+0x4d/0x70 [ 199.120727][ T4165] ? v9fs_xattr_set+0x50/0x50 [ 199.125244][ T4165] ? v9fs_fid_lookup_with_uid+0x7df/0xd10 [ 199.130797][ T4165] ? v9fs_fid_lookup+0x118/0x160 [ 199.135567][ T4165] v9fs_xattr_handler_set+0x4c/0x60 [ 199.140610][ T4165] ? v9fs_xattr_handler_get+0x70/0x70 [ 199.145810][ T4165] __vfs_setxattr+0x404/0x450 [ 199.150325][ T4165] __vfs_setxattr_noperm+0x11d/0x4f0 [ 199.155443][ T4165] __vfs_setxattr_locked+0x1f9/0x210 [ 199.160563][ T4165] vfs_setxattr+0x112/0x2c0 [ 199.164904][ T4165] ? check_stack_object+0x114/0x130 [ 199.169939][ T4165] ? xattr_permission+0x380/0x380 [ 199.174798][ T4165] setxattr+0x1ea/0x3f0 [ 199.178789][ T4165] ? path_setxattr+0x240/0x240 [ 199.183397][ T4165] ? __mnt_want_write+0x1f6/0x270 [ 199.188249][ T4165] ? mnt_want_write+0x1ba/0x290 [ 199.192937][ T4165] path_setxattr+0x169/0x240 [ 199.197625][ T4165] ? simple_xattr_list_add+0x120/0x120 [ 199.202919][ T4165] __x64_sys_setxattr+0xc5/0xe0 [ 199.207604][ T4165] do_syscall_64+0x34/0x70 [ 199.211858][ T4165] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 199.217586][ T4165] RIP: 0033:0x7f9f8844bbd9 [ 199.221841][ T4165] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 199.241293][ T4165] RSP: 002b:00007f9f876cd048 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 199.249525][ T4165] RAX: ffffffffffffffda RBX: 00007f9f885d9f60 RCX: 00007f9f8844bbd9 [ 199.257337][ T4165] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 00000000200001c0 [ 199.265393][ T4165] RBP: 00007f9f876cd0a0 R08: 0000000000000000 R09: 0000000000000000 [ 199.273196][ T4165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 199.281001][ T4165] R13: 000000000000000b R14: 00007f9f885d9f60 R15: 00007ffd1c116178 [ 199.290625][ T93] loop0: p3 size 16744448 extends beyond EOD, truncated [ 199.342799][ T4147] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 199.357152][ T4147] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 199.374621][ T357] udevd[357]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 199.385388][ T1501] udevd[1501]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 199.385403][ T1452] udevd[1452]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 199.411223][ T93] loop0: p1 < > p2 p3 p4 < p5 > [ 199.433126][ T93] loop0: p3 size 16744448 extends beyond EOD, truncated [ 199.472262][ T93] loop0: p1 < > p2 p3 p4 < p5 > [ 199.487281][ T93] loop0: p3 size 16744448 extends beyond EOD, truncated [ 199.532931][ T4189] SELinux: Context system_u is not valid (left unmapped). [ 199.533511][ T93] loop0: p1 < > p2 p3 p4 < p5 > [ 199.557675][ T93] loop0: p3 size 16744448 extends beyond EOD, truncated [ 199.676208][ T2289] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 199.926161][ T2289] usb 2-1: Using ep0 maxpacket: 8 [ 199.987743][ T4201] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1084'. [ 200.009186][ T4202] FAT-fs (loop2): Unrecognized mount option "dma" or missing value [ 200.019169][ T4201] device bridge_slave_0 left promiscuous mode [ 200.025119][ T4201] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.038322][ T4184] fuse: Bad value for 'fd' [ 200.046328][ T2289] usb 2-1: config index 0 descriptor too short (expected 5924, got 36) [ 200.054581][ T2289] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 200.063117][ T2289] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 200.072385][ T2289] usb 2-1: config 250 has no interface number 0 [ 200.078944][ T2289] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 200.094737][ T2289] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 200.105506][ T2289] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 12336, setting to 1024 [ 200.117548][ T2289] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 200.128304][ T2289] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 200.142001][ T2289] usb 2-1: config 250 interface 228 has no altsetting 0 [ 200.195505][ T93] loop0: p1 < > p2 p3 p4 < p5 > [ 200.201490][ T93] loop0: p3 size 16744448 extends beyond EOD, truncated [ 200.248369][ T93] loop0: p1 < > p2 p3 p4 < p5 > [ 200.254035][ T93] loop0: p3 size 16744448 extends beyond EOD, truncated [ 200.266319][ T2289] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 200.275351][ T2289] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 200.284205][ T2289] usb 2-1: Product: syz [ 200.288456][ T2289] usb 2-1: SerialNumber: syz [ 200.295095][ T4209] incfs_lookup_dentry err:-5 [ 200.299814][ T4209] incfs: Can't find or create .index dir in ./file0 [ 200.308035][ T4209] incfs: mount failed -5 [ 200.335321][ T93] loop0: p1 < > p2 p3 p4 < p5 > [ 200.340610][ T4211] FAULT_INJECTION: forcing a failure. [ 200.340610][ T4211] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 200.340676][ T2289] hub 2-1:250.228: bad descriptor, ignoring hub [ 200.360274][ T2289] hub: probe of 2-1:250.228 failed with error -5 [ 200.360416][ T4211] CPU: 0 PID: 4211 Comm: syz.0.1087 Tainted: G W 5.10.218-syzkaller-00638-g3feee789f446 #0 [ 200.376461][ T93] loop0: p3 size 16744448 extends beyond EOD, [ 200.377512][ T4211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 200.377516][ T93] truncated [ 200.396357][ T4211] Call Trace: [ 200.399477][ T4211] dump_stack_lvl+0x1e2/0x24b [ 200.403987][ T4211] ? bfq_pos_tree_add_move+0x43b/0x43b [ 200.409281][ T4211] dump_stack+0x15/0x17 [ 200.413273][ T4211] should_fail+0x3c6/0x510 [ 200.417524][ T4211] should_fail_usercopy+0x1a/0x20 [ 200.422383][ T4211] _copy_to_iter+0x230/0xda0 [ 200.426814][ T4211] ? iov_iter_init+0x120/0x120 [ 200.431413][ T4211] ? preempt_count_add+0x92/0x1a0 [ 200.436273][ T4211] get_random_bytes_user+0x1e1/0x400 [ 200.441393][ T4211] ? signal_pending+0xa0/0xa0 [ 200.445907][ T4211] ? mutex_trylock+0xa0/0xa0 [ 200.450335][ T4211] ? __kasan_check_write+0x14/0x20 [ 200.455280][ T4211] ? import_single_range+0xdd/0x1c0 [ 200.460314][ T4211] __x64_sys_getrandom+0x18a/0x270 [ 200.465258][ T4211] ? add_disk_randomness+0xd0/0xd0 [ 200.470297][ T4211] ? debug_smp_processor_id+0x17/0x20 [ 200.475676][ T4211] do_syscall_64+0x34/0x70 [ 200.479929][ T4211] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 200.485654][ T4211] RIP: 0033:0x7f9f8844bbd9 [ 200.489997][ T4211] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.509437][ T4211] RSP: 002b:00007f9f876cd048 EFLAGS: 00000246 ORIG_RAX: 000000000000013e [ 200.517681][ T4211] RAX: ffffffffffffffda RBX: 00007f9f885d9f60 RCX: 00007f9f8844bbd9 [ 200.525491][ T4211] RDX: 0000000000000000 RSI: 412269194f7c77a1 RDI: 0000000020000340 [ 200.533305][ T4211] RBP: 00007f9f876cd0a0 R08: 0000000000000000 R09: 0000000000000000 [ 200.541134][ T4211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 200.549072][ T4211] R13: 000000000000000b R14: 00007f9f885d9f60 R15: 00007ffd1c116178 [ 200.571313][ T2289] usblp 2-1:250.228: usblp0: USB Bidirectional printer dev 33 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 200.697741][ T4215] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 200.706669][ T4215] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038 (0x7fffffff) [ 200.896257][ T2287] usb 2-1: USB disconnect, device number 33 [ 200.906661][ T2287] usblp0: removed [ 201.272728][ T93] loop0: p1 < > p2 p3 p4 < p5 > [ 201.278423][ T93] loop0: p3 size 16744448 extends beyond EOD, truncated [ 201.393457][ T4237] FAULT_INJECTION: forcing a failure. [ 201.393457][ T4237] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 201.395735][ T4232] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.413776][ T4232] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.421414][ T4232] device bridge_slave_0 entered promiscuous mode [ 201.426450][ T4237] CPU: 0 PID: 4237 Comm: syz.1.1097 Tainted: G W 5.10.218-syzkaller-00638-g3feee789f446 #0 [ 201.438655][ T4237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 201.448541][ T4237] Call Trace: [ 201.451677][ T4237] dump_stack_lvl+0x1e2/0x24b [ 201.456188][ T4237] ? bfq_pos_tree_add_move+0x43b/0x43b [ 201.461481][ T4237] dump_stack+0x15/0x17 [ 201.465468][ T4237] should_fail+0x3c6/0x510 [ 201.469723][ T4237] should_fail_usercopy+0x1a/0x20 [ 201.474583][ T4237] _copy_from_user+0x20/0xd0 [ 201.479008][ T4237] kstrtouint_from_user+0xca/0x2a0 [ 201.483956][ T4237] ? kstrtol_from_user+0x310/0x310 [ 201.488903][ T4237] ? snprintf+0xd6/0x120 [ 201.492983][ T4237] ? memset+0x35/0x40 [ 201.496906][ T4237] proc_fail_nth_write+0xa6/0x290 [ 201.501756][ T4237] ? security_file_permission+0x7b/0xb0 [ 201.507135][ T4237] ? proc_fail_nth_read+0x210/0x210 [ 201.512171][ T4237] ? security_file_permission+0x86/0xb0 [ 201.517548][ T4237] ? rw_verify_area+0x1c3/0x360 [ 201.522229][ T4237] ? proc_fail_nth_read+0x210/0x210 [ 201.527264][ T4237] vfs_write+0x36e/0xe70 [ 201.531345][ T4237] ? kernel_write+0x3d0/0x3d0 [ 201.535858][ T4237] ? __kasan_check_write+0x14/0x20 [ 201.540804][ T4237] ? mutex_lock+0xa5/0x110 [ 201.545054][ T4237] ? mutex_trylock+0xa0/0xa0 [ 201.549485][ T4237] ? __fdget_pos+0x2e7/0x3a0 [ 201.553909][ T4237] ? ksys_write+0x77/0x2c0 [ 201.558165][ T4237] ksys_write+0x199/0x2c0 [ 201.562328][ T4237] ? __ia32_sys_read+0x90/0x90 [ 201.566933][ T4237] ? debug_smp_processor_id+0x17/0x20 [ 201.572134][ T4237] __x64_sys_write+0x7b/0x90 [ 201.576563][ T4237] do_syscall_64+0x34/0x70 [ 201.580820][ T4237] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 201.586542][ T4237] RIP: 0033:0x7f4de793675f [ 201.590796][ T4237] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 29 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 7c 8c 02 00 48 [ 201.610236][ T4237] RSP: 002b:00007f4de6bb9040 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 201.618479][ T4237] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4de793675f [ 201.626292][ T4237] RDX: 0000000000000001 RSI: 00007f4de6bb90b0 RDI: 0000000000000005 [ 201.634102][ T4237] RBP: 00007f4de6bb90a0 R08: 0000000000000000 R09: 0000000000000000 [ 201.641914][ T4237] R10: 0000000000000042 R11: 0000000000000293 R12: 0000000000000001 [ 201.649724][ T4237] R13: 000000000000000b R14: 00007f4de7ac5f60 R15: 00007fff714f42c8 [ 201.664128][ T4232] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.675561][ T4232] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.684187][ T93] loop0: p1 < > p2 p3 p4 < p5 > [ 201.689775][ T93] loop0: p3 size 16744448 extends beyond EOD, truncated [ 201.695811][ T4232] device bridge_slave_1 entered promiscuous mode [ 201.710995][ T4242] tmpfs: Unknown parameter 'ys' [ 201.748092][ T4245] EXT4-fs (loop1): Ignoring removed orlov option [ 201.754263][ T4245] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 201.838739][ T4232] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.839368][ T4245] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue [ 201.845612][ T4232] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.873022][ T4232] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.879887][ T4232] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.927351][ T2287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 201.935814][ T2287] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.944009][ T2287] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.964247][ T448] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 201.979792][ T4256] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1101'. [ 201.989576][ T448] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.996441][ T448] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.004590][ T448] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 202.037273][ T448] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.044119][ T448] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.051508][ T448] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 202.069348][ T4256] device bridge_slave_0 left promiscuous mode [ 202.075420][ T4256] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.086723][ T2289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 202.094853][ T2289] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 202.107152][ T4232] device veth0_vlan entered promiscuous mode [ 202.116527][ T2289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 202.124392][ T2289] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 202.131927][ T2289] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 202.139461][ T2289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 202.149178][ T4232] device veth1_macvtap entered promiscuous mode [ 202.161729][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 202.174935][ T2289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 202.184312][ T3145] device bridge_slave_1 left promiscuous mode [ 202.190582][ T3145] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.198905][ T3145] device bridge_slave_0 left promiscuous mode [ 202.204961][ T3145] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.213164][ T3145] device veth1_macvtap left promiscuous mode [ 202.216320][ T448] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 202.219126][ T3145] device veth0_vlan left promiscuous mode [ 202.496163][ T448] usb 2-1: Using ep0 maxpacket: 8 [ 202.616252][ T448] usb 2-1: config index 0 descriptor too short (expected 5924, got 36) [ 202.624416][ T448] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 202.632849][ T448] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 202.641945][ T448] usb 2-1: config 250 has no interface number 0 [ 202.648069][ T448] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 202.659482][ T448] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 202.669933][ T448] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 12336, setting to 1024 [ 202.681800][ T448] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 202.692322][ T448] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 202.705735][ T448] usb 2-1: config 250 interface 228 has no altsetting 0 [ 202.714816][ T93] loop0: p1 < > p2 p3 p4 < p5 > [ 202.720684][ T93] loop0: p3 size 16744448 extends beyond EOD, truncated [ 202.737081][ T93] loop0: p1 < > p2 p3 p4 < p5 > [ 202.742515][ T93] loop0: p3 size 16744448 extends beyond EOD, truncated [ 202.762619][ T93] loop0: p1 < > p2 p3 p4 < p5 > [ 202.769615][ T93] loop0: p3 size 16744448 extends beyond EOD, truncated [ 202.789027][ T93] loop0: p1 < > p2 p3 p4 < p5 > [ 202.794659][ T93] loop0: p3 size 16744448 extends beyond EOD, truncated [ 202.826703][ T448] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 202.836727][ T448] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 202.844822][ T448] usb 2-1: Product: syz [ 202.850634][ T448] usb 2-1: SerialNumber: syz [ 202.906937][ T448] hub 2-1:250.228: bad descriptor, ignoring hub [ 202.913739][ T448] hub: probe of 2-1:250.228 failed with error -5 [ 203.014205][ T93] loop0: p1 < > p2 p3 p4 < p5 > [ 203.030389][ T93] loop0: p3 size 16744448 extends beyond EOD, truncated [ 203.116842][ T448] usblp 2-1:250.228: usblp0: USB Bidirectional printer dev 34 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 203.426172][ T2289] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 203.436405][ T448] usb 2-1: USB disconnect, device number 34 [ 203.443047][ T448] usblp0: removed [ 203.641083][ T93] loop0: p1 < > p2 p3 p4 < p5 > [ 203.646962][ T93] loop0: p3 size 16744448 extends beyond EOD, truncated [ 203.663156][ T4299] syz.0.1115[4299] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 203.663211][ T4299] syz.0.1115[4299] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 203.663866][ T93] loop0: p1 < > p2 p3 p4 < p5 > [ 203.691121][ T4299] FAULT_INJECTION: forcing a failure. [ 203.691121][ T4299] name failslab, interval 1, probability 0, space 0, times 0 [ 203.692187][ T93] loop0: p3 size 16744448 extends beyond EOD, [ 203.703654][ T2289] usb 4-1: device descriptor read/64, error -71 [ 203.715741][ T4299] CPU: 0 PID: 4299 Comm: syz.0.1115 Tainted: G W 5.10.218-syzkaller-00638-g3feee789f446 #0 [ 203.715942][ T93] truncated [ 203.726795][ T4299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 203.726800][ T4299] Call Trace: [ 203.726816][ T4299] dump_stack_lvl+0x1e2/0x24b [ 203.726835][ T4299] ? bfq_pos_tree_add_move+0x43b/0x43b [ 203.726844][ T4299] ? parse_opts+0x503/0x690 [ 203.726853][ T4299] dump_stack+0x15/0x17 [ 203.726862][ T4299] should_fail+0x3c6/0x510 [ 203.726872][ T4299] ? p9_fd_create+0x163/0x510 [ 203.726884][ T4299] __should_failslab+0xa4/0xe0 [ 203.726895][ T4299] should_failslab+0x9/0x20 [ 203.726904][ T4299] kmem_cache_alloc_trace+0x3a/0x2e0 [ 203.726913][ T4299] p9_fd_create+0x163/0x510 [ 203.726922][ T4299] ? p9_fd_create_unix+0x430/0x430 [ 203.726930][ T4299] ? kfree+0xc3/0x270 [ 203.726941][ T4299] p9_client_create+0x81b/0x1130 [ 203.726952][ T4299] ? p9_parse_header+0x6c0/0x6c0 [ 203.726961][ T4299] ? slab_post_alloc_hook+0x80/0x2f0 [ 203.726971][ T4299] ? kstrdup+0x4f/0x70 [ 203.726981][ T4299] ? __kasan_check_write+0x14/0x20 [ 203.726991][ T4299] v9fs_session_init+0x1fa/0x19b0 [ 203.727004][ T4299] ? v9fs_show_options+0x570/0x570 [ 203.727014][ T4299] ? __kasan_kmalloc+0x9/0x10 [ 203.727029][ T4299] ? v9fs_mount+0x5f/0x7b0 [ 203.839118][ T4299] v9fs_mount+0x75/0x7b0 [ 203.843190][ T4299] legacy_get_tree+0xf1/0x190 [ 203.847700][ T4299] ? incfs_get_verity_signature+0x420/0x420 [ 203.853429][ T4299] vfs_get_tree+0x88/0x290 [ 203.857684][ T4299] do_new_mount+0x2ba/0xb30 [ 203.862021][ T4299] ? do_move_mount_old+0x160/0x160 [ 203.866973][ T4299] ? security_capable+0x87/0xb0 [ 203.871656][ T4299] ? ns_capable+0x89/0xe0 [ 203.875828][ T4299] path_mount+0x56f/0xcb0 [ 203.879993][ T4299] __se_sys_mount+0x2c4/0x3b0 [ 203.884509][ T4299] ? __x64_sys_mount+0xd0/0xd0 [ 203.889105][ T4299] __x64_sys_mount+0xbf/0xd0 [ 203.893527][ T4299] do_syscall_64+0x34/0x70 [ 203.897780][ T4299] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 203.903507][ T4299] RIP: 0033:0x7f9f8844bbd9 [ 203.907763][ T4299] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.927202][ T4299] RSP: 002b:00007f9f876cd048 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 203.935446][ T4299] RAX: ffffffffffffffda RBX: 00007f9f885d9f60 RCX: 00007f9f8844bbd9 [ 203.943256][ T4299] RDX: 0000000020000b80 RSI: 0000000020000040 RDI: 0000000000000000 [ 203.951070][ T4299] RBP: 00007f9f876cd0a0 R08: 0000000020000580 R09: 0000000000000000 [ 203.958879][ T4299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 203.966690][ T4299] R13: 000000000000000b R14: 00007f9f885d9f60 R15: 00007ffd1c116178 [ 203.975547][ T344] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 203.988927][ T93] loop0: p1 < > p2 p3 p4 < p5 > [ 203.994501][ T93] loop0: p3 size 16744448 extends beyond EOD, truncated [ 204.030413][ T4304] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=32654 [ 204.041411][ T4304] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=32654 [ 204.050767][ T93] loop0: p1 < > p2 p3 p4 < p5 > [ 204.057385][ T93] loop0: p3 size 16744448 extends beyond EOD, truncated [ 204.075784][ T93] loop0: p1 < > p2 p3 p4 < p5 > [ 204.084550][ T93] loop0: p3 size 16744448 extends beyond EOD, truncated [ 204.104439][ T93] loop0: p1 < > p2 p3 p4 < p5 > [ 204.110279][ T93] loop0: p3 size 16744448 extends beyond EOD, truncated [ 204.117594][ T2289] usb 4-1: device descriptor read/64, error -71 [ 204.386234][ T2289] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 204.496206][ T344] usb 3-1: Using ep0 maxpacket: 32 [ 204.616256][ T344] usb 3-1: config 1 has an invalid interface number: 6 but max is 0 [ 204.626480][ T344] usb 3-1: config 1 has no interface number 0 [ 204.632543][ T344] usb 3-1: config 1 interface 6 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 204.676623][ T2289] usb 4-1: device descriptor read/64, error -71 [ 204.796287][ T344] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 204.805173][ T344] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.812994][ T344] usb 3-1: Product: syz [ 204.816974][ T344] usb 3-1: Manufacturer: syz [ 204.821335][ T344] usb 3-1: SerialNumber: syz [ 204.906261][ T53] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 204.948371][ T93] loop0: p1 < > p2 p3 p4 < p5 > [ 204.955001][ T93] loop0: p3 size 16744448 extends beyond EOD, truncated [ 204.972655][ T93] loop0: p1 < > p2 p3 p4 < p5 > [ 204.978296][ T93] loop0: p3 size 16744448 extends beyond EOD, truncated [ 204.990192][ T4332] overlayfs: failed to resolve './file0': -2 [ 204.998061][ T93] loop0: p1 < > p2 p3 p4 < p5 > [ 205.003389][ T93] loop0: p3 size 16744448 extends beyond EOD, truncated [ 205.066201][ T2289] usb 4-1: device descriptor read/64, error -71 [ 205.186305][ T2289] usb usb4-port1: attempt power cycle [ 205.276256][ T344] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 205.296307][ T53] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 205.307375][ T53] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 205.318544][ T53] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 205.327398][ T53] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.346244][ T4327] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 205.428875][ T24] kauditd_printk_skb: 7 callbacks suppressed [ 205.428885][ T24] audit: type=1326 audit(1720116890.823:1281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4294 comm="syz.2.1113" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f98bb731bd9 code=0x0 [ 205.516197][ T344] usb 1-1: Using ep0 maxpacket: 8 [ 205.596216][ T2289] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 205.636311][ T344] usb 1-1: config index 0 descriptor too short (expected 5924, got 36) [ 205.644447][ T344] usb 1-1: config 250 has an invalid interface number: 228 but max is -1 [ 205.652656][ T344] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 205.661525][ T344] usb 1-1: config 250 has no interface number 0 [ 205.667594][ T344] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 205.678990][ T344] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 205.689179][ T344] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 12336, setting to 1024 [ 205.700640][ T344] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 205.710961][ T344] usb 1-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 205.724239][ T344] usb 1-1: config 250 interface 228 has no altsetting 0 [ 205.776213][ T2289] usb 4-1: device descriptor read/8, error -71 [ 205.846264][ T344] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 205.855166][ T344] usb 1-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 205.863233][ T344] usb 1-1: Product: syz [ 205.867215][ T344] usb 1-1: SerialNumber: syz [ 205.906758][ T344] hub 1-1:250.228: bad descriptor, ignoring hub [ 205.912861][ T344] hub: probe of 1-1:250.228 failed with error -5 [ 206.009645][ T4337] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.016769][ T4337] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.023963][ T4337] device bridge_slave_0 entered promiscuous mode [ 206.031453][ T4337] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.038770][ T4337] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.045940][ T4337] device bridge_slave_1 entered promiscuous mode [ 206.076210][ T2289] usb 4-1: device descriptor read/8, error -71 [ 206.081438][ T4337] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.089049][ T4337] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.096164][ T4337] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.102922][ T4337] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.110859][ T344] usblp 1-1:250.228: usblp0: USB Bidirectional printer dev 26 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 206.132388][ T2287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 206.140202][ T2287] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.147681][ T2287] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.156445][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 206.164516][ T344] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.171391][ T344] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.180926][ T4342] FAULT_INJECTION: forcing a failure. [ 206.180926][ T4342] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 206.194092][ T4342] CPU: 0 PID: 4342 Comm: syz.3.1128 Tainted: G W 5.10.218-syzkaller-00638-g3feee789f446 #0 [ 206.205111][ T4342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 206.215003][ T4342] Call Trace: [ 206.218135][ T4342] dump_stack_lvl+0x1e2/0x24b [ 206.222873][ T4342] ? bfq_pos_tree_add_move+0x43b/0x43b [ 206.228116][ T4342] dump_stack+0x15/0x17 [ 206.232102][ T4342] should_fail+0x3c6/0x510 [ 206.236356][ T4342] should_fail_alloc_page+0x52/0x60 [ 206.241390][ T4342] __alloc_pages_nodemask+0x1b3/0xaf0 [ 206.246607][ T4342] ? __kernel_text_address+0x9b/0x110 [ 206.251808][ T4342] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 206.257186][ T4342] ? stack_trace_save+0x113/0x1c0 [ 206.262044][ T4342] ? stack_trace_snprint+0xf0/0xf0 [ 206.266994][ T4342] __stack_depot_save+0x3e8/0x4d0 [ 206.271855][ T4342] __kasan_slab_alloc+0xc3/0xe0 [ 206.276538][ T4342] ? __kasan_slab_alloc+0xb1/0xe0 [ 206.281398][ T4342] ? slab_post_alloc_hook+0x61/0x2f0 [ 206.286522][ T4342] ? kmem_cache_alloc+0x168/0x2e0 [ 206.291380][ T4342] ? __es_insert_extent+0x72a/0x17c0 [ 206.296505][ T4342] ? ext4_es_insert_extent+0x576/0x2d80 [ 206.301888][ T4342] ? ext4_map_blocks+0xede/0x1d10 [ 206.306741][ T4342] ? ext4_alloc_file_blocks+0x3f4/0xcd0 [ 206.312128][ T4342] ? ext4_zero_range+0x2f4/0x9b0 [ 206.316898][ T4342] ? ext4_fallocate+0x520/0x1ca0 [ 206.321678][ T4342] ? vfs_fallocate+0x492/0x570 [ 206.326271][ T4342] ? do_vfs_ioctl+0x1686/0x1a30 [ 206.330957][ T4342] ? __se_sys_ioctl+0x99/0x190 [ 206.335556][ T4342] ? __x64_sys_ioctl+0x7b/0x90 [ 206.340164][ T4342] ? do_syscall_64+0x34/0x70 [ 206.344585][ T4342] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 206.350496][ T4342] slab_post_alloc_hook+0x61/0x2f0 [ 206.355436][ T4342] ? __es_insert_extent+0x72a/0x17c0 [ 206.360565][ T4342] kmem_cache_alloc+0x168/0x2e0 [ 206.365254][ T4342] ? __es_insert_extent+0x72a/0x17c0 [ 206.370373][ T4342] __es_insert_extent+0x72a/0x17c0 [ 206.375311][ T4342] ext4_es_insert_extent+0x576/0x2d80 [ 206.380520][ T4342] ? __es_find_extent_range+0x494/0x5e0 [ 206.385907][ T4342] ? ext4_es_scan_clu+0x340/0x340 [ 206.390761][ T4342] ? _raw_read_unlock+0x25/0x40 [ 206.395445][ T4342] ? ext4_es_lookup_extent+0x33b/0x940 [ 206.400740][ T4342] ext4_map_blocks+0xede/0x1d10 [ 206.405430][ T4342] ? slab_post_alloc_hook+0x80/0x2f0 [ 206.410549][ T4342] ? ext4_issue_zeroout+0x1b0/0x1b0 [ 206.415588][ T4342] ? __ext4_journal_start_sb+0x249/0x4a0 [ 206.421058][ T4342] ext4_alloc_file_blocks+0x3f4/0xcd0 [ 206.426269][ T4342] ? trace_ext4_fallocate_enter+0x160/0x160 [ 206.431986][ T4342] ? down_read_killable+0x220/0x220 [ 206.437022][ T4342] ext4_zero_range+0x2f4/0x9b0 [ 206.441626][ T4342] ext4_fallocate+0x520/0x1ca0 [ 206.446221][ T4342] ? avc_policy_seqno+0x1b/0x70 [ 206.450907][ T4342] ? ext4_ext_truncate+0x200/0x200 [ 206.455851][ T4342] ? fsnotify_perm+0x67/0x4e0 [ 206.460364][ T4342] ? security_file_permission+0x7b/0xb0 [ 206.465756][ T4342] ? preempt_count_add+0x92/0x1a0 [ 206.470613][ T4342] vfs_fallocate+0x492/0x570 [ 206.475036][ T4342] do_vfs_ioctl+0x1686/0x1a30 [ 206.479557][ T4342] ? ioctl_has_perm+0x3f0/0x560 [ 206.484245][ T4342] ? slab_free_freelist_hook+0xc0/0x190 [ 206.489632][ T4342] ? preempt_count_add+0x92/0x1a0 [ 206.494481][ T4342] ? __x32_compat_sys_ioctl+0x90/0x90 [ 206.499697][ T4342] ? kernel_write+0x3d0/0x3d0 [ 206.504197][ T4342] ? selinux_file_ioctl+0x3cc/0x540 [ 206.509228][ T4342] ? selinux_file_alloc_security+0x120/0x120 [ 206.515042][ T4342] ? __fget_files+0x31e/0x380 [ 206.519561][ T4342] ? security_file_ioctl+0x84/0xb0 [ 206.524503][ T4342] __se_sys_ioctl+0x99/0x190 [ 206.528931][ T4342] __x64_sys_ioctl+0x7b/0x90 [ 206.533357][ T4342] do_syscall_64+0x34/0x70 [ 206.537621][ T4342] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 206.543341][ T4342] RIP: 0033:0x7fc208713bd9 [ 206.547594][ T4342] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 206.560479][ T2285] usb 3-1: USB disconnect, device number 25 [ 206.567035][ T4342] RSP: 002b:00007fc207995048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 206.567050][ T4342] RAX: ffffffffffffffda RBX: 00007fc2088a1f60 RCX: 00007fc208713bd9 [ 206.567056][ T4342] RDX: 0000000020000240 RSI: 0000000040305839 RDI: 0000000000000005 [ 206.567062][ T4342] RBP: 00007fc2079950a0 R08: 0000000000000000 R09: 0000000000000000 [ 206.567068][ T4342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 206.567075][ T4342] R13: 000000000000000b R14: 00007fc2088a1f60 R15: 00007fffaac1f1c8 [ 206.633719][ T448] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 206.641747][ T448] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.648611][ T448] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.655770][ T448] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 206.663723][ T448] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 206.685550][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 206.698838][ T4337] device veth0_vlan entered promiscuous mode [ 206.708600][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 206.716747][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 206.724029][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 206.736056][ T2286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 206.745158][ T4337] device veth1_macvtap entered promiscuous mode [ 206.754474][ T448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 206.766032][ T448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 206.787599][ T2287] usb 1-1: USB disconnect, device number 26 [ 206.794186][ T2287] usblp0: removed [ 206.839320][ T4359] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1132'. [ 206.849606][ T4359] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x2 [ 206.966287][ T2285] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 207.008063][ T654] device bridge_slave_1 left promiscuous mode [ 207.018449][ T654] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.036431][ T654] device bridge_slave_0 left promiscuous mode [ 207.042354][ T654] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.057094][ T654] device veth1_macvtap left promiscuous mode [ 207.062901][ T654] device veth0_vlan left promiscuous mode [ 207.166312][ T53] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 207.174733][ T53] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input27 [ 207.193023][ T53] usb 2-1: USB disconnect, device number 35 [ 207.193072][ T93] loop0: p1 < > p2 p3 p4 < p5 > [ 207.198790][ C0] aiptek 2-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 207.214714][ T93] loop0: p3 size 16744448 extends beyond EOD, truncated [ 207.224365][ T4364] syz.1.1134 uses obsolete (PF_INET,SOCK_PACKET) [ 207.226286][ T2285] usb 3-1: Using ep0 maxpacket: 16 [ 207.356311][ T2285] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.367321][ T2285] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.376917][ T2285] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 207.385783][ T2285] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.394381][ T2285] usb 3-1: config 0 descriptor?? [ 207.546207][ T2289] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 207.606217][ T53] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 207.786345][ T2289] usb 1-1: Using ep0 maxpacket: 16 [ 207.978440][ T24] audit: type=1400 audit(1720116893.373:1282): avc: denied { mount } for pid=4346 comm="syz.2.1130" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 207.984274][ T4347] FAULT_INJECTION: forcing a failure. [ 207.984274][ T4347] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 208.000158][ T24] audit: type=1400 audit(1720116893.373:1283): avc: denied { listen } for pid=4346 comm="syz.2.1130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 208.013026][ T4347] CPU: 0 PID: 4347 Comm: syz.2.1130 Tainted: G W 5.10.218-syzkaller-00638-g3feee789f446 #0 [ 208.043598][ T4347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 208.053494][ T4347] Call Trace: [ 208.056618][ T4347] dump_stack_lvl+0x1e2/0x24b [ 208.061128][ T4347] ? panic+0x812/0x812 [ 208.065042][ T4347] ? bfq_pos_tree_add_move+0x43b/0x43b [ 208.070342][ T4347] ? __bpf_ringbuf_reserve+0x366/0x3b0 [ 208.075630][ T4347] dump_stack+0x15/0x17 [ 208.079617][ T4347] should_fail+0x3c6/0x510 [ 208.083869][ T4347] should_fail_usercopy+0x1a/0x20 [ 208.088732][ T4347] _copy_from_user+0x20/0xd0 [ 208.093154][ T4347] strndup_user+0xb3/0x150 [ 208.097418][ T4347] __se_sys_request_key+0x192/0x3b0 [ 208.102440][ T4347] ? bpf_trace_run1+0x210/0x210 [ 208.107131][ T4347] ? __x64_sys_request_key+0xb0/0xb0 [ 208.112246][ T4347] ? __bpf_trace_sys_enter+0x62/0x70 [ 208.117369][ T4347] __x64_sys_request_key+0x9b/0xb0 [ 208.122332][ T4347] do_syscall_64+0x34/0x70 [ 208.126571][ T4347] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 208.132303][ T4347] RIP: 0033:0x7f98bb731bd9 [ 208.136558][ T4347] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 208.155995][ T4347] RSP: 002b:00007f98ba9b3048 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 208.164241][ T4347] RAX: ffffffffffffffda RBX: 00007f98bb8bff60 RCX: 00007f98bb731bd9 [ 208.172047][ T4347] RDX: 0000000020000740 RSI: 0000000020000780 RDI: 0000000020000240 [ 208.179871][ T4347] RBP: 00007f98ba9b30a0 R08: 0000000000000000 R09: 0000000000000000 [ 208.187667][ T4347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.195478][ T4347] R13: 000000000000000b R14: 00007f98bb8bff60 R15: 00007ffeb27cc738 [ 208.206513][ T2289] usb 1-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=dd.1b [ 208.215402][ T2289] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.223215][ T2289] usb 1-1: Product: syz [ 208.226195][ T53] usb 2-1: Using ep0 maxpacket: 8 [ 208.227275][ T2289] usb 1-1: Manufacturer: syz [ 208.236506][ T2289] usb 1-1: SerialNumber: syz [ 208.241328][ T2289] usb 1-1: config 0 descriptor?? [ 208.256201][ T2285] usbhid 3-1:0.0: can't add hid device: -71 [ 208.262077][ T2285] usbhid: probe of 3-1:0.0 failed with error -71 [ 208.269358][ T2285] usb 3-1: USB disconnect, device number 26 [ 208.286632][ T2289] net1080: probe of 1-1:0.0 failed with error -22 [ 208.346222][ T684] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 208.353666][ T53] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 208.362534][ T53] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.371284][ T53] usb 2-1: config 0 descriptor?? [ 208.437926][ T4388] overlayfs: failed to get inode (-116) [ 208.443376][ T4388] overlayfs: failed to get inode (-116) [ 208.448936][ T4388] overlayfs: failed to get inode (-116) [ 208.454432][ T4388] overlayfs: failed to get inode (-116) [ 208.498474][ T2285] usb 1-1: USB disconnect, device number 27 [ 208.596425][ T684] usb 5-1: Using ep0 maxpacket: 32 [ 208.720588][ T24] audit: type=1400 audit(1720116894.103:1284): avc: denied { unmount } for pid=4232 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 208.743192][ T684] usb 5-1: config 0 has an invalid interface number: 217 but max is 0 [ 208.751993][ T684] usb 5-1: config 0 has no interface number 0 [ 208.796934][ T4402] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 208.827890][ T4369] udc-core: couldn't find an available UDC or it's busy [ 208.834901][ T4369] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 208.946535][ T4402] EXT4-fs (loop2): invalid journal inode [ 208.969133][ T4402] EXT4-fs (loop2): can't get journal size [ 208.970909][ T53] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 208.975616][ T4402] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,resgid=0x0000000000000000,norecovery,commit=0x0000000000000005,nombcache,,errors=continue [ 208.987191][ T53] asix 2-1:0.0 (unnamed net_device) (uninitialized): Error reading PHYID register: ffffffe0 [ 209.046365][ T684] usb 5-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=20.43 [ 209.055447][ T684] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.063780][ T684] usb 5-1: Product: syz [ 209.067973][ T684] usb 5-1: Manufacturer: syz [ 209.072411][ T684] usb 5-1: SerialNumber: syz [ 209.080135][ T684] usb 5-1: config 0 descriptor?? [ 209.116891][ T684] ftdi_sio 5-1:0.217: FTDI USB Serial Device converter detected [ 209.124741][ T684] usb 5-1: Detected FT-X [ 209.177031][ T93] loop0: p1 < > p2 p3 p4 < p5 > [ 209.182429][ T93] loop0: p3 size 16744448 extends beyond EOD, truncated [ 209.696651][ T654] device bridge_slave_1 left promiscuous mode [ 209.702577][ T654] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.709975][ T654] device bridge_slave_0 left promiscuous mode [ 209.715924][ T654] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.723602][ T654] device veth1_macvtap left promiscuous mode [ 209.729509][ T654] device veth0_vlan left promiscuous mode [ 209.826293][ T684] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 209.846523][ T684] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 209.866248][ T684] ftdi_sio 5-1:0.217: GPIO initialisation failed: -71 [ 209.873483][ T684] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 209.882887][ T684] usb 5-1: USB disconnect, device number 31 [ 209.889375][ T684] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 209.898699][ T684] ftdi_sio 5-1:0.217: device disconnected [ 211.317557][ T53] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 211.327378][ T53] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 211.337485][ T53] asix: probe of 2-1:0.0 failed with error -71 [ 211.344421][ T53] usb 2-1: USB disconnect, device number 36 [ 212.718099][ T93] loop0: p1 < > p2 p3 p4 < p5 > [ 212.729377][ T93] loop0: p3 size 16744448 extends beyond EOD, truncated [ 212.868849][ T4447] overlayfs: failed to resolve './file0': -2 [ 213.033010][ T93] loop0: p1 < > p2 p3 p4 < p5 > [ 213.038554][ T93] loop0: p3 size 16744448 extends beyond EOD, truncated [ 213.468802][ T93] loop0: p1 < > p2 p3 p4 < p5 > [ 213.474227][ T93] loop0: p3 size 16744448 extends beyond EOD, truncated [ 214.286663][ T4463] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 214.294372][ T4463] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 214.304641][ T4463] F2FS-fs (loop1): invalid crc value [ 214.315081][ T4463] F2FS-fs (loop1): Found nat_bits in checkpoint [ 214.323210][ T93] loop0: p1 < > p2 p3 p4 < p5 > [ 214.329427][ T93] loop0: p3 size 16744448 extends beyond EOD, truncated [ 214.359527][ T24] audit: type=1326 audit(1720116899.753:1285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4465 comm="syz.0.1160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f8844bbd9 code=0x7ffc0000 [ 214.401956][ T24] audit: type=1326 audit(1720116899.783:1286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4465 comm="syz.0.1160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9f8844bbd9 code=0x7ffc0000 [ 214.404741][ T4463] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 214.425578][ T24] audit: type=1326 audit(1720116899.783:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4465 comm="syz.0.1160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f8844bbd9 code=0x7ffc0000 [ 214.432029][ T4463] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 214.466112][ T24] audit: type=1326 audit(1720116899.783:1288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4465 comm="syz.0.1160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9f8844bbd9 code=0x7ffc0000 [ 214.490036][ T24] audit: type=1326 audit(1720116899.783:1289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4465 comm="syz.0.1160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f8844bbd9 code=0x7ffc0000 [ 214.513476][ T24] audit: type=1326 audit(1720116899.783:1290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4465 comm="syz.0.1160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f9f8844a517 code=0x7ffc0000 [ 214.536909][ T24] audit: type=1326 audit(1720116899.783:1291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4465 comm="syz.0.1160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f8844bbd9 code=0x7ffc0000 [ 214.560236][ T24] audit: type=1326 audit(1720116899.783:1292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4465 comm="syz.0.1160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f8844bbd9 code=0x7ffc0000 [ 214.583623][ T24] audit: type=1326 audit(1720116899.783:1293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4465 comm="syz.0.1160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f9f8844bbd9 code=0x7ffc0000 [ 214.606938][ T24] audit: type=1326 audit(1720116899.783:1294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4465 comm="syz.0.1160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f8844bbd9 code=0x7ffc0000 [ 214.940930][ T93] loop0: p1 < > p2 p3 p4 < p5 > [ 214.948984][ T93] loop0: p3 size 16744448 extends beyond EOD, truncated [ 215.618676][ T93] loop0: p1 < > p2 p3 p4 < p5 > [ 215.624061][ T93] loop0: p3 size 16744448 extends beyond EOD, truncated [ 216.509226][ T93] loop0: p1 < > p2 p3 p4 < p5 > [ 216.514694][ T93] loop0: p3 size 16744448 extends beyond EOD, truncated [ 217.521494][ T93] loop0: p1 < > p2 p3 p4 < p5 > [ 217.527315][ T93] loop0: p3 size 16744448 extends beyond EOD, truncated [ 217.550660][ T93] loop0: p1 < > p2 p3 p4 < p5 > [ 217.557183][ T93] loop0: p3 size 16744448 extends beyond EOD, truncated [ 217.776225][ T2289] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 218.016231][ T2289] usb 2-1: Using ep0 maxpacket: 16 [ 218.296267][ T2289] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 218.305102][ T2289] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.312943][ T2289] usb 2-1: Product: syz [ 218.316924][ T2289] usb 2-1: Manufacturer: syz [ 218.321346][ T2289] usb 2-1: SerialNumber: syz [ 218.326388][ T2289] usb 2-1: config 0 descriptor?? [ 218.631393][ T4508] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 218.675603][ T4508] udc-core: couldn't find an available UDC or it's busy [ 218.682573][ T4508] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 218.706291][ T2289] r8152 2-1:0.0: Unknown version 0x0000 [ 218.712358][ T2289] usb 2-1: USB disconnect, device number 37 [ 219.194837][ T3507] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /46/bus: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 SYZFAIL: control pipe read failed read=-1 want=40 (errno 4: Interrupted system call) loop exited with status 67 SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: repeatedly failed to execute the program proc=2 req=1152 state=1 status=67 (errno 9: Bad file descriptor) [ 219.562752][ T4558] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.569620][ T4558] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.577063][ T4558] device bridge_slave_0 entered promiscuous mode [ 219.584161][ T4558] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.591287][ T4558] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.598754][ T4558] device bridge_slave_1 entered promiscuous mode [ 219.633735][ T4558] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.640606][ T4558] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.647691][ T4558] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.654454][ T4558] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.672004][ T684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 219.679673][ T684] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.687032][ T684] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.697001][ T2288] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 219.704880][ T2288] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.711669][ T2288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.727083][ T2288] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 219.735010][ T2288] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.741873][ T2288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.749302][ T2288] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 219.757741][ T2288] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 219.770840][ T4558] device veth0_vlan entered promiscuous mode [ 219.777040][ T2288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 219.785179][ T2288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 219.793727][ T2288] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 219.801469][ T2288] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 219.814246][ T4558] device veth1_macvtap entered promiscuous mode [ 219.821037][ T2289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 219.831316][ T684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 219.840759][ T2289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 219.946936][ T3145] device bridge_slave_1 left promiscuous mode [ 219.952917][ T3145] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.960333][ T3145] device bridge_slave_0 left promiscuous mode [ 219.966296][ T3145] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.973665][ T3145] device veth1_macvtap left promiscuous mode [ 219.979522][ T3145] device veth0_vlan left promiscuous mode [ 221.196934][ T3145] device bridge_slave_1 left promiscuous mode [ 221.202844][ T3145] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.210129][ T3145] device bridge_slave_0 left promiscuous mode [ 221.216026][ T3145] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.223694][ T3145] device bridge_slave_1 left promiscuous mode [ 221.229655][ T3145] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.237322][ T3145] device bridge_slave_1 left promiscuous mode [ 221.243212][ T3145] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.250486][ T3145] device bridge_slave_0 left promiscuous mode [ 221.256530][ T3145] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.263907][ T3145] device bridge_slave_1 left promiscuous mode [ 221.269884][ T3145] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.277686][ T3145] device veth1_macvtap left promiscuous mode [ 221.283468][ T3145] device veth0_vlan left promiscuous mode [ 221.289272][ T3145] device veth1_macvtap left promiscuous mode [ 221.295065][ T3145] device veth0_vlan left promiscuous mode [ 221.300820][ T3145] device veth1_macvtap left promiscuous mode [ 221.306726][ T3145] device veth0_vlan left promiscuous mode [ 221.312271][ T3145] device veth1_macvtap left promiscuous mode