last executing test programs: 3.377464852s ago: executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000005f00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='mm_page_alloc\x00', r0}, 0x10) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000002c0)={{}, {0x4}}, 0xfe44, 0x0) 3.276308898s ago: executing program 4: r0 = socket(0x200000100000011, 0x803, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100)="4dcdc7d96a760000002f00050000000000060000", 0x34, 0x0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) 3.252281182s ago: executing program 4: r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x7, 0x1, 0x1}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000006c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x20, 0x0, 0x1}}) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) unshare(0x4000400) poll(&(0x7f0000001480)=[{r1}], 0x1, 0x0) 2.775663896s ago: executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200001400a685b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) sendmsg$tipc(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) close(r0) 2.764352098s ago: executing program 0: r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000016000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f00000000c0)=@filename='\x00', 0x0, &(0x7f0000000100)='./file0\x00') 2.753263409s ago: executing program 0: socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f00090581", @ANYRES16], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r2, 0xc018480b, &(0x7f00000000c0)={0x2, 0xffffffff, 0x0, 0x0, 0x400000}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x2, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='ext4_ext_rm_leaf\x00'}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) 2.437726549s ago: executing program 2: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x36, 0x4, 0x0, 0x0, 0xd8, 0x64, 0x0, 0x0, 0x29, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x5, 0x4]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x1, [{@private=0xa010100}, {@multicast1, 0x5}, {@remote, 0x8}, {@dev, 0x659}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x8, [{@dev}, {@remote, 0x4}, {@multicast2, 0x7}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @noop, @lsrr={0x83, 0xf, 0xdc, [@private=0xa010102, @rand_addr=0x64010102, @multicast1]}, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.093384443s ago: executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x8, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xffe9}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) mincore(&(0x7f0000f0c000/0x3000)=nil, 0x0, &(0x7f0000afaf0a)=""/246) 1.98099998s ago: executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) mkdir(0x0, 0x0) chdir(0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x70}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) pivot_root(&(0x7f00000004c0)='./file0\x00', 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000400)="580000001400192340834b80040d8c560a067fbc45ff810500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000fff5dd000000100001000c0808004149004001040800", 0x58}], 0x1) 1.956905964s ago: executing program 1: r0 = socket(0x200000100000011, 0x803, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100)="4dcdc7d96a760000002f00050000000000060000", 0x34, 0x0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) 1.946758466s ago: executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200001400a685b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) sendmsg$tipc(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) close(r0) 1.933703518s ago: executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000f20000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000007f1600850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r1}, 0x10) select(0x0, 0x0, 0x0, 0x0, 0x0) 1.521339182s ago: executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) unshare(0x60600) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) openat(r1, &(0x7f0000000140)='./file0/file0\x00', 0xa4b40, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0) 1.467841681s ago: executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r1 = add_key$keyring(&(0x7f0000000280), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1451c2, 0x0) ftruncate(r2, 0x2007ffb) sendfile(r2, r2, 0x0, 0x800000009) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0xfff, 0x5}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) lseek(r2, 0x0, 0x4) keyctl$clear(0x7, r1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket(0x10, 0x803, 0x0) r7 = socket(0x200000100000011, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r8, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff024}, {0x6}]}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000280)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x0, 0x8}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32, @ANYBLOB], 0x48}}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x9, 0x5, 0x2, 0x0, r3, 0x8, '\x00', 0x0, r0, 0x1, 0x0, 0x0, 0xb}, 0xfffffffffffffdd6) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffff9c}, @generic={0x6e}, @map_fd={0x18, 0x0, 0x1, 0x0, r9}, @exit], {0x95, 0x0, 0x7000}}, &(0x7f0000000000)='GPL\x00'}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r10, 0xfffffd39, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfe66, &(0x7f0000000240)=[0x0, 0x0], 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffc18, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x7}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r11 = syz_open_dev$vcsu(&(0x7f0000000180), 0x8ff, 0x10000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000380)={'ip6gre0\x00', 0x0, 0x29, 0xff, 0x1, 0x8, 0x13, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, 0x8, 0x700, 0x80000000, 0x60}}) r13 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000640)='bpf_lsm_bpf_map_alloc_security\x00') bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x12, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r11}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000001}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}}, @map_val={0x18, 0xb, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x3}, @map_idx={0x18, 0x3, 0x5, 0x0, 0xe}, @ldst={0x2, 0x1, 0x2, 0xc, 0x1, 0x4, 0x8}, @alu={0x4, 0x0, 0xa, 0x9, 0x0, 0x0, 0xfffffffffffffff9}]}, &(0x7f00000001c0)='syzkaller\x00', 0x7ff, 0xfe, &(0x7f0000000500)=""/254, 0x40f00, 0x5c, '\x00', r12, 0x10, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000600)={0x1f, 0x0, 0x6, 0x1}, 0x10, r13, r4, 0x3, 0x0, &(0x7f0000000680)=[{0x5, 0x4, 0x4, 0x6}, {0x3, 0x3, 0x4, 0x2}, {0x2, 0x5, 0x7, 0x9}], 0x10, 0x8}, 0x90) 1.313760184s ago: executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x40802) write$evdev(r1, &(0x7f0000000000), 0x100000008) ioctl$FS_IOC_RESVSP(r1, 0x80084503, 0x0) 1.122860575s ago: executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b}, 0x48) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = dup(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$KVM_GET_MSR_INDEX_LIST(r1, 0xc004ae0a, &(0x7f00000000c0)=ANY=[]) 1.090868439s ago: executing program 1: bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000801f000000000000000000940000000fad413e550000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r0}, 0x10) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000178500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) write$cgroup_int(r2, &(0x7f00000001c0), 0xfffffdef) 951.607201ms ago: executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)='0', 0x1}], 0x1}, 0x4040001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, 0x0, &(0x7f0000000040)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) recvmsg(r0, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r0, &(0x7f00000038c0)={0x0, 0x0, 0x0}, 0x1) 846.265027ms ago: executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sync_file_range(r0, 0x2a8e3a6e, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000002140)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file0\x00', 0xc908, &(0x7f0000000300)=ANY=[@ANYBLOB="b8d380b0df2aabe97b376dff4ba0d76802839671189b86bc0c2626df65ab5d5d17b50afef1c0bcddc65c720b8255c9db022eae7364b441b8797ddd2dd328e88da74a14087a3825818cdc942f8d219921ef89425991fe81beae272088b4e7dbae9a3a22dc60368932dba1b8aa761057b708574b99fbe7cfd99556a6f5ccc224d1b28e0b3f5c39c27f0a87a7c6887552db54e1e6843286d1b01b6f23a0db5cfd72c3e886", @ANYRESDEC=0x0], 0x1, 0x14d3, &(0x7f00000015c0)="$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") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x280404) r3 = open(&(0x7f00000005c0)='./bus\x00', 0x0, 0x0) pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x74000}], 0x2, 0x101000, 0x0, 0x8) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000180)={0x0, 0x200}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000002c000099000040"]) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) r7 = syz_open_pts(r1, 0x80001) write$binfmt_aout(r7, &(0x7f0000000180)=ANY=[], 0x20000673) syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x2000084c, &(0x7f0000000740)=ANY=[], 0x1, 0x1500, &(0x7f0000002ac0)="$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") 722.551197ms ago: executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x0, 0x1c, &(0x7f00000003c0)=@framed={{}, [@ringbuf_query, @snprintf, @printk={@x}]}, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree_skb\x00', r3}, 0x10) close(r2) sendmsg$unix(r1, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0) 669.932005ms ago: executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) write$binfmt_script(r1, 0x0, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x9504, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) 578.301289ms ago: executing program 2: bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000005000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r0, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) r3 = socket(0x10, 0x3, 0x9) connect$netlink(r3, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$TIPC_CMD_GET_MAX_PORTS(r3, &(0x7f0000000b00)={&(0x7f0000000a00), 0xc, &(0x7f0000000ac0)={&(0x7f0000000200)={0x1c}, 0x1c}}, 0x0) 505.24547ms ago: executing program 2: r0 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x6, &(0x7f0000000140)={0x14, {{0x29, 0x0, 0x43000000, @mcast1}}}, 0x88) 477.154205ms ago: executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x1, 0xb}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000500)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38) 469.189206ms ago: executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 460.591477ms ago: executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @broadcast}, {0x0, @dev}, 0x3c, {0x2, 0x0, @empty}}) 397.189637ms ago: executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) mkdir(0x0, 0x0) chdir(0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x70}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) pivot_root(&(0x7f00000004c0)='./file0\x00', 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000400)="580000001400192340834b80040d8c560a067fbc45ff810500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000fff5dd000000100001000c0808004149004001040800", 0x58}], 0x1) 384.93867ms ago: executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000f20000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000007f1600850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r1}, 0x10) select(0x0, 0x0, 0x0, 0x0, 0x0) 48.514762ms ago: executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000110020850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x3a, &(0x7f0000000240)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(r5, &(0x7f0000000280)=ANY=[], 0x40) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[], 0x24}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0x4) 0s ago: executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x2, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r2}, 0x10) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil) kernel console output (not intermixed with test programs): mode [ 350.130534][ T416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 350.140348][ T7415] device veth1_macvtap entered promiscuous mode [ 350.151798][ T416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 350.162111][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 350.174680][ T537] usb 5-1: Using ep0 maxpacket: 32 [ 350.227851][ T45] device bridge_slave_1 left promiscuous mode [ 350.234414][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.242953][ T45] device bridge_slave_0 left promiscuous mode [ 350.249808][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.298171][ T45] device veth1_macvtap left promiscuous mode [ 350.304541][ T45] device veth0_vlan left promiscuous mode [ 350.474507][ T537] usb 5-1: config 0 has no interfaces? [ 350.540081][ T7434] syz-executor.3[7434] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 350.540136][ T7434] syz-executor.3[7434] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 350.575406][ T808] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0037/input/input23 [ 350.600009][ T808] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0037/input/input24 [ 350.612542][ T808] uclogic 0003:256C:006D.0037: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.0-1/input0 [ 350.634460][ T537] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 350.643392][ T537] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.651263][ T537] usb 5-1: Product: syz [ 350.655307][ T537] usb 5-1: Manufacturer: syz [ 350.659657][ T537] usb 5-1: SerialNumber: syz [ 350.665711][ T537] usb 5-1: config 0 descriptor?? [ 350.670892][ T7438] device sit0 entered promiscuous mode [ 350.778785][ T1354] usb 1-1: USB disconnect, device number 23 [ 350.908261][ T7408] UDC core: couldn't find an available UDC or it's busy: -16 [ 350.915807][ T7408] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 350.923681][ T537] usb 5-1: USB disconnect, device number 24 [ 351.034588][ T20] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 351.137808][ T7462] device sit0 entered promiscuous mode [ 351.165644][ T45] device bridge_slave_1 left promiscuous mode [ 351.171780][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.179290][ T45] device bridge_slave_0 left promiscuous mode [ 351.185332][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.193204][ T45] device veth1_macvtap left promiscuous mode [ 351.199320][ T45] device veth0_vlan left promiscuous mode [ 351.231612][ T7468] loop1: detected capacity change from 0 to 256 [ 351.272537][ T7468] attempt to access beyond end of device [ 351.272537][ T7468] loop1: rw=2049, want=268, limit=256 [ 351.274494][ T20] usb 4-1: Using ep0 maxpacket: 8 [ 351.365121][ T7480] sock: sock_timestamping_bind_phc: sock not bind to device [ 351.404538][ T20] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 351.415418][ T20] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 351.425130][ T20] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 351.461760][ T7495] syz-executor.1[7495] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 351.461810][ T7495] syz-executor.1[7495] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 351.497831][ T7497] cgroup: fork rejected by pids controller in /syz1 [ 351.761120][ T20] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 351.770412][ T20] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 351.778271][ T20] usb 4-1: SerialNumber: syz [ 351.804509][ T7444] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 351.811314][ T7444] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 351.864331][ T808] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 351.927893][ T7502] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.934957][ T7502] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.944693][ T7502] device bridge_slave_0 entered promiscuous mode [ 351.951585][ T7502] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.958486][ T7502] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.965821][ T7502] device bridge_slave_1 entered promiscuous mode [ 352.011250][ T7502] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.018322][ T7502] bridge0: port 2(bridge_slave_1) entered forwarding state [ 352.025604][ T7502] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.032522][ T7502] bridge0: port 1(bridge_slave_0) entered forwarding state [ 352.040186][ T7444] bridge: RTM_NEWNEIGH with invalid ether address [ 352.047470][ T7444] syz-executor.3[7444] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 352.047544][ T7444] syz-executor.3[7444] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 352.062458][ T7444] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 352.066102][ T6779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 352.075753][ T7444] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 352.095112][ T6779] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.102416][ T6779] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.123105][ T6779] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 352.131226][ T6779] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.138095][ T6779] bridge0: port 1(bridge_slave_0) entered forwarding state [ 352.145407][ T6779] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 352.153759][ T6779] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.160603][ T6779] bridge0: port 2(bridge_slave_1) entered forwarding state [ 352.167868][ T6779] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 352.177293][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 352.193291][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 352.205653][ T7502] device veth0_vlan entered promiscuous mode [ 352.212631][ T6779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 352.220488][ T6779] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 352.227931][ T6779] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 352.238164][ T808] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 352.255812][ T6779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 352.265793][ T7502] device veth1_macvtap entered promiscuous mode [ 352.277938][ T6779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 352.278788][ T808] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 352.296107][ T808] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 352.305648][ T808] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.314093][ T808] usb 5-1: config 0 descriptor?? [ 352.322939][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 352.554719][ T20] cdc_ether: probe of 4-1:1.0 failed with error -71 [ 352.561415][ T20] usb-storage 4-1:1.0: USB Mass Storage device detected [ 352.584682][ T20] usb-storage 4-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 352.592533][ T20] scsi host1: usb-storage 4-1:1.0 [ 352.597940][ T45] device bridge_slave_1 left promiscuous mode [ 352.598995][ T20] usb 4-1: USB disconnect, device number 23 [ 352.610609][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.617783][ T401] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 352.625829][ T45] device bridge_slave_0 left promiscuous mode [ 352.641610][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.650594][ T45] device veth1_macvtap left promiscuous mode [ 352.656617][ T45] device veth0_vlan left promiscuous mode [ 352.786458][ T7521] sock: sock_timestamping_bind_phc: sock not bind to device [ 352.794601][ T808] hid (null): bogus close delimiter [ 353.014571][ T808] usb 5-1: language id specifier not provided by device, defaulting to English [ 353.184414][ T401] usb 2-1: New USB device found, idVendor=19d2, idProduct=1015, bcdDevice=b6.87 [ 353.197571][ T401] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.205545][ T401] usb 2-1: Product: syz [ 353.209752][ T401] usb 2-1: Manufacturer: syz [ 353.214164][ T401] usb 2-1: SerialNumber: syz [ 353.219502][ T401] usb 2-1: config 0 descriptor?? [ 353.264819][ T401] cdc_ether 2-1:0.0: skipping garbage [ 353.270198][ T401] usb 2-1: bad CDC descriptors [ 353.290991][ T7529] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.298011][ T7529] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.305359][ T7529] device bridge_slave_0 entered promiscuous mode [ 353.312551][ T7529] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.319542][ T7529] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.330181][ T7529] device bridge_slave_1 entered promiscuous mode [ 353.405065][ T7529] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.412029][ T7529] bridge0: port 2(bridge_slave_1) entered forwarding state [ 353.419312][ T7529] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.426180][ T7529] bridge0: port 1(bridge_slave_0) entered forwarding state [ 353.448728][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 353.491282][ T808] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0038/input/input25 [ 353.540974][ T808] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0038/input/input26 [ 353.559410][ T808] uclogic 0003:256C:006D.0038: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.4-1/input0 [ 353.599960][ T26] usb 2-1: USB disconnect, device number 22 [ 353.690214][ T20] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.697487][ T20] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.712437][ T401] usb 5-1: USB disconnect, device number 25 [ 353.756253][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 353.764383][ T20] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.771250][ T20] bridge0: port 1(bridge_slave_0) entered forwarding state [ 353.778892][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 353.787041][ T20] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.793892][ T20] bridge0: port 2(bridge_slave_1) entered forwarding state [ 353.804494][ T808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 353.816280][ T808] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 353.835262][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 353.843139][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 353.851092][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 353.859691][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 353.872019][ T7529] device veth0_vlan entered promiscuous mode [ 353.878217][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 353.886085][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 353.893905][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 353.901591][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 353.916520][ T7529] device veth1_macvtap entered promiscuous mode [ 353.924431][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 353.932417][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 353.940639][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 353.952599][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 353.960866][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 353.970430][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 353.978630][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 354.015417][ T45] device veth1_macvtap left promiscuous mode [ 354.021418][ T45] device veth0_vlan left promiscuous mode [ 354.084365][ T60] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 354.229407][ T7561] sock: sock_timestamping_bind_phc: sock not bind to device [ 354.724401][ T60] usb 1-1: config 0 has an invalid interface number: 32 but max is 0 [ 354.732313][ T60] usb 1-1: config 0 has no interface number 0 [ 354.755612][ T60] usb 1-1: config 0 interface 32 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 354.785066][ T60] usb 1-1: config 0 interface 32 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 354.797610][ T60] usb 1-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 354.807357][ T60] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.815993][ T60] usb 1-1: config 0 descriptor?? [ 354.865510][ T7588] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.872376][ T7588] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.887867][ T7588] device bridge_slave_0 entered promiscuous mode [ 354.895771][ T7588] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.902810][ T7588] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.910360][ T7588] device bridge_slave_1 entered promiscuous mode [ 355.343747][ T60] logitech-djreceiver 0003:046D:C71B.0039: unknown main item tag 0x0 [ 355.396632][ T60] logitech-djreceiver 0003:046D:C71B.0039: unknown main item tag 0x0 [ 355.892121][ T60] logitech-djreceiver 0003:046D:C71B.0039: unknown main item tag 0x0 [ 355.967957][ T60] logitech-djreceiver 0003:046D:C71B.0039: unknown main item tag 0x0 [ 356.028907][ T60] logitech-djreceiver 0003:046D:C71B.0039: unknown main item tag 0x0 [ 356.043103][ T60] logitech-djreceiver 0003:046D:C71B.0039: hidraw0: USB HID v0.00 Device [HID 046d:c71b] on usb-dummy_hcd.0-1/input32 [ 356.061736][ T60] usb 1-1: USB disconnect, device number 24 [ 356.364852][ T6779] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 356.546099][ T45] device bridge_slave_1 left promiscuous mode [ 356.552284][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.585830][ T45] device bridge_slave_0 left promiscuous mode [ 356.593447][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.611496][ T45] device veth1_macvtap left promiscuous mode [ 356.620629][ T45] device veth0_vlan left promiscuous mode [ 356.751650][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 356.759477][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 356.863378][ T6779] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 357.025294][ T6779] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 357.046112][ T808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 357.056839][ T808] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 357.068758][ T808] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.075762][ T808] bridge0: port 1(bridge_slave_0) entered forwarding state [ 357.105755][ T6779] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 357.123915][ T6779] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.259436][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 357.298269][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 357.412371][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 357.489976][ T26] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.496899][ T26] bridge0: port 2(bridge_slave_1) entered forwarding state [ 357.953876][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 358.027238][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 358.258517][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 358.311790][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 358.458936][ T6779] usb 5-1: config 0 descriptor?? [ 358.496177][ T7588] device veth0_vlan entered promiscuous mode [ 358.510100][ T7588] device veth1_macvtap entered promiscuous mode [ 358.529378][ T808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 358.542217][ T808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 358.561596][ T808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 358.574616][ T808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 358.582638][ T808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 358.590817][ T808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 358.599823][ T808] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 358.608627][ T808] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 358.617612][ T808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 358.627293][ T808] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 358.636857][ T808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 358.774058][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 358.801275][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 358.934334][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 358.934348][ T30] audit: type=1400 audit(1718701986.792:13424): avc: denied { module_load } for pid=7675 comm="syz-executor.1" path="/sys/kernel/notes" dev="sysfs" ino=1140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 358.934390][ T7677] Invalid ELF header magic: != ELF [ 359.014628][ T6779] hid (null): bogus close delimiter [ 359.037108][ T7677] loop1: detected capacity change from 0 to 256 [ 359.070927][ T7677] FAT-fs (loop1): Directory bread(block 64) failed [ 359.077588][ T7677] FAT-fs (loop1): Directory bread(block 65) failed [ 359.083989][ T7677] FAT-fs (loop1): Directory bread(block 66) failed [ 359.090302][ T7677] FAT-fs (loop1): Directory bread(block 67) failed [ 359.246002][ T7677] FAT-fs (loop1): Directory bread(block 68) failed [ 359.256047][ T45] device bridge_slave_1 left promiscuous mode [ 359.264555][ T7677] FAT-fs (loop1): Directory bread(block 69) failed [ 359.272773][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.293257][ T6779] usb 5-1: language id specifier not provided by device, defaulting to English [ 359.303480][ T45] device bridge_slave_0 left promiscuous mode [ 359.312110][ T7677] FAT-fs (loop1): Directory bread(block 70) failed [ 359.322336][ T7677] FAT-fs (loop1): Directory bread(block 71) failed [ 359.332058][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.340409][ T45] device veth1_macvtap left promiscuous mode [ 359.346322][ T45] device veth0_vlan left promiscuous mode [ 359.359666][ T7677] FAT-fs (loop1): Directory bread(block 72) failed [ 359.367392][ T7677] FAT-fs (loop1): Directory bread(block 73) failed [ 359.448712][ T7687] syz-executor.3[7687] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 359.448788][ T7687] syz-executor.3[7687] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 359.482558][ T30] audit: type=1400 audit(1718701987.342:13425): avc: denied { map } for pid=7696 comm="syz-executor.3" path="socket:[50403]" dev="sockfs" ino=50403 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 359.533176][ T7699] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 359.551159][ T30] audit: type=1400 audit(1718701987.412:13426): avc: denied { mounton } for pid=7702 comm="syz-executor.2" path="/root/syzkaller-testdir3149231928/syzkaller.rED3d9/16/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 359.559641][ T7705] loop1: detected capacity change from 0 to 512 [ 359.715064][ T7705] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #16: comm syz-executor.1: iget: bad extended attribute block 128 [ 359.734524][ T7705] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz-executor.1: couldn't read orphan inode 16 (err -117) [ 359.735774][ T6779] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.003A/input/input27 [ 359.747068][ T7705] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 359.953294][ T7705] ext4 filesystem being mounted at /root/syzkaller-testdir3025459081/syzkaller.g1BtSh/5/file1 supports timestamps until 2038 (0x7fffffff) [ 360.070608][ T6779] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.003A/input/input28 [ 360.079300][ T7705] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz-executor.1: bg 0: block 352: padding at end of block bitmap is not set [ 360.097348][ T6779] uclogic 0003:256C:006D.003A: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.4-1/input0 [ 360.097770][ T7705] EXT4-fs error (device loop1): ext4_xattr_block_set:2191: inode #12: comm syz-executor.1: bad block 0 [ 360.131092][ T6779] usb 5-1: USB disconnect, device number 26 [ 360.150429][ T7705] Quota error (device loop1): write_blk: dquota write failed [ 360.158456][ T7705] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 360.269349][ T7732] syz-executor.1[7732] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 360.269399][ T7732] syz-executor.1[7732] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 360.548793][ T7758] loop1: detected capacity change from 0 to 512 [ 360.599828][ T7758] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #16: comm syz-executor.1: iget: bad extended attribute block 128 [ 360.623059][ T7758] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz-executor.1: couldn't read orphan inode 16 (err -117) [ 360.637335][ T7758] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 360.649285][ T7758] ext4 filesystem being mounted at /root/syzkaller-testdir3025459081/syzkaller.g1BtSh/10/file1 supports timestamps until 2038 (0x7fffffff) [ 360.677383][ T7758] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz-executor.1: bg 0: block 352: padding at end of block bitmap is not set [ 360.692288][ T7758] EXT4-fs error (device loop1): ext4_xattr_block_set:2191: inode #12: comm syz-executor.1: bad block 0 [ 360.719624][ T7758] Quota error (device loop1): write_blk: dquota write failed [ 360.727612][ T7758] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 360.842785][ T7785] Invalid ELF header magic: != ELF [ 360.854382][ T26] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 360.864370][ T6779] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 360.927648][ T7798] loop1: detected capacity change from 0 to 512 [ 360.950810][ T7798] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 360.961799][ T7798] ext4 filesystem being mounted at /root/syzkaller-testdir3025459081/syzkaller.g1BtSh/16/file0 supports timestamps until 2038 (0x7fffffff) [ 361.014364][ T2489] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 361.265946][ T7816] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 361.312235][ T7822] Invalid ELF header magic: != ELF [ 361.317403][ T26] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 361.326362][ T26] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.334846][ T26] usb 3-1: config 0 descriptor?? [ 361.382176][ T7825] netem: change failed [ 361.386302][ T6779] usb 5-1: config 0 has an invalid interface number: 32 but max is 0 [ 361.394601][ T6779] usb 5-1: config 0 has no interface number 0 [ 361.400515][ T6779] usb 5-1: config 0 interface 32 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 361.411505][ T6779] usb 5-1: config 0 interface 32 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 361.421525][ T6779] usb 5-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 361.430490][ T6779] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.439127][ T6779] usb 5-1: config 0 descriptor?? [ 361.484593][ T2489] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 361.495526][ T2489] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 361.505136][ T2489] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 361.514041][ T2489] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.522537][ T2489] usb 4-1: config 0 descriptor?? [ 361.549628][ T7841] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 361.917546][ T30] audit: type=1400 audit(1718701989.782:13427): avc: denied { accept } for pid=7865 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 361.938578][ T30] audit: type=1326 audit(1718701989.802:13428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7865 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f056602ef29 code=0x0 [ 361.940036][ T6779] logitech-djreceiver 0003:046D:C71B.003B: unknown main item tag 0x0 [ 361.970728][ T6779] logitech-djreceiver 0003:046D:C71B.003B: unknown main item tag 0x0 [ 361.980407][ T6779] logitech-djreceiver 0003:046D:C71B.003B: unknown main item tag 0x0 [ 361.985001][ T7869] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 361.988468][ T6779] logitech-djreceiver 0003:046D:C71B.003B: unknown main item tag 0x0 [ 362.005636][ T6779] logitech-djreceiver 0003:046D:C71B.003B: unknown main item tag 0x0 [ 362.014424][ T6779] logitech-djreceiver 0003:046D:C71B.003B: hidraw0: USB HID v0.00 Device [HID 046d:c71b] on usb-dummy_hcd.4-1/input32 [ 362.027081][ T2489] hid (null): bogus close delimiter [ 362.145651][ T39] usb 5-1: USB disconnect, device number 27 [ 362.244427][ T2489] usb 4-1: language id specifier not provided by device, defaulting to English [ 362.254404][ T26] usb 3-1: Cannot set autoneg [ 362.258947][ T26] MOSCHIP usb-ethernet driver: probe of 3-1:0.0 failed with error -71 [ 362.267562][ T26] usb 3-1: USB disconnect, device number 16 [ 362.344421][ T6779] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 362.675368][ T2489] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.003C/input/input29 [ 362.689214][ T2489] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.003C/input/input30 [ 362.701697][ T2489] uclogic 0003:256C:006D.003C: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.3-1/input0 [ 362.761147][ T7883] input: syz0 as /devices/virtual/input/input31 [ 362.878403][ T808] usb 4-1: USB disconnect, device number 24 [ 362.984442][ T39] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 363.154421][ T6779] usb 2-1: New USB device found, idVendor=19d2, idProduct=1015, bcdDevice=b6.87 [ 363.163293][ T6779] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.171128][ T6779] usb 2-1: Product: syz [ 363.175115][ T6779] usb 2-1: Manufacturer: syz [ 363.181833][ T6779] usb 2-1: SerialNumber: syz [ 363.187490][ T6779] usb 2-1: config 0 descriptor?? [ 363.234337][ T39] usb 5-1: Using ep0 maxpacket: 16 [ 363.234790][ T6779] cdc_ether 2-1:0.0: skipping garbage [ 363.244690][ T6779] usb 2-1: bad CDC descriptors [ 363.354692][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 363.365522][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 363.375100][ T39] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 363.387706][ T39] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 363.396515][ T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.404929][ T39] usb 5-1: config 0 descriptor?? [ 363.445462][ T2489] usb 2-1: USB disconnect, device number 23 [ 363.486308][ T7908] Invalid ELF header magic: != ELF [ 363.733550][ T7915] input: syz0 as /devices/virtual/input/input32 [ 363.873685][ T30] audit: type=1400 audit(1718701991.732:13429): avc: denied { setopt } for pid=7930 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 363.907266][ T7935] Invalid ELF header magic: != ELF [ 363.944946][ T39] microsoft 0003:045E:07DA.003D: unknown main item tag 0x0 [ 363.952199][ T39] microsoft 0003:045E:07DA.003D: No inputs registered, leaving [ 363.960014][ T39] microsoft 0003:045E:07DA.003D: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 363.971271][ T39] microsoft 0003:045E:07DA.003D: no inputs found [ 363.977588][ T39] microsoft 0003:045E:07DA.003D: could not initialize ff, continuing anyway [ 364.019454][ T7940] loop1: detected capacity change from 0 to 128 [ 364.038259][ T6779] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 364.075399][ T7940] FAT-fs (loop1): bogus sectors per cluster 0 [ 364.081376][ T7940] FAT-fs (loop1): Can't find a valid FAT filesystem [ 364.214167][ T7940] input: syz0 as /devices/virtual/input/input34 [ 364.328837][ T39] usb 5-1: USB disconnect, device number 28 [ 364.644425][ T6779] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 364.653598][ T6779] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.671544][ T6779] usb 4-1: config 0 descriptor?? [ 364.702788][ T7965] loop1: detected capacity change from 0 to 256 [ 364.741762][ T7965] FAT-fs (loop1): Directory bread(block 64) failed [ 364.748206][ T7965] FAT-fs (loop1): Directory bread(block 65) failed [ 364.754566][ T7965] FAT-fs (loop1): Directory bread(block 66) failed [ 364.760955][ T7965] FAT-fs (loop1): Directory bread(block 67) failed [ 364.767318][ T7965] FAT-fs (loop1): Directory bread(block 68) failed [ 364.773577][ T7965] FAT-fs (loop1): Directory bread(block 69) failed [ 364.779942][ T7965] FAT-fs (loop1): Directory bread(block 70) failed [ 364.786299][ T7965] FAT-fs (loop1): Directory bread(block 71) failed [ 364.792660][ T7965] FAT-fs (loop1): Directory bread(block 72) failed [ 364.798932][ T7965] FAT-fs (loop1): Directory bread(block 73) failed [ 364.864353][ T39] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 364.875861][ T7971] netem: change failed [ 365.134409][ T39] usb 3-1: Using ep0 maxpacket: 32 [ 365.254650][ T39] usb 3-1: config 0 has no interfaces? [ 365.414403][ T39] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 365.423444][ T39] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.431312][ T39] usb 3-1: Product: syz [ 365.435301][ T39] usb 3-1: Manufacturer: syz [ 365.439839][ T39] usb 3-1: SerialNumber: syz [ 365.444983][ T39] usb 3-1: config 0 descriptor?? [ 365.474334][ T6] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 365.532032][ T30] audit: type=1326 audit(1718701993.392:13430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7964 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39c02dbf29 code=0x7fc00000 [ 365.556468][ T30] audit: type=1326 audit(1718701993.392:13431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7964 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f39c02dbf29 code=0x7fc00000 [ 365.580496][ T6779] usb 4-1: Cannot set autoneg [ 365.585214][ T6779] MOSCHIP usb-ethernet driver: probe of 4-1:0.0 failed with error -71 [ 365.593398][ T30] audit: type=1326 audit(1718701993.392:13432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7964 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39c02dbf29 code=0x7fc00000 [ 365.617349][ T30] audit: type=1326 audit(1718701993.392:13433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7964 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39c02dbf29 code=0x7fc00000 [ 365.617851][ T6779] usb 4-1: USB disconnect, device number 25 [ 365.686914][ T7961] UDC core: couldn't find an available UDC or it's busy: -16 [ 365.694258][ T7961] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 365.702139][ T7640] usb 3-1: USB disconnect, device number 17 [ 365.734341][ T6] usb 5-1: Using ep0 maxpacket: 16 [ 366.064423][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 366.076364][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 366.086004][ T6] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 366.098861][ T6] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 366.107723][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.116002][ T6] usb 5-1: config 0 descriptor?? [ 366.351359][ T8025] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 366.361003][ T8025] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 366.595231][ T6] microsoft 0003:045E:07DA.003E: unknown main item tag 0x0 [ 366.602626][ T6] microsoft 0003:045E:07DA.003E: No inputs registered, leaving [ 366.610345][ T6] microsoft 0003:045E:07DA.003E: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 366.621565][ T6] microsoft 0003:045E:07DA.003E: no inputs found [ 366.627692][ T6] microsoft 0003:045E:07DA.003E: could not initialize ff, continuing anyway [ 366.734349][ T39] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 366.754370][ T1572] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 366.798066][ T6779] usb 5-1: USB disconnect, device number 29 [ 366.824403][ T26] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 366.994384][ T1572] usb 3-1: Using ep0 maxpacket: 8 [ 367.064390][ T26] usb 2-1: Using ep0 maxpacket: 32 [ 367.094407][ T39] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 367.103318][ T39] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.112213][ T39] usb 1-1: config 0 descriptor?? [ 367.117167][ T1572] usb 3-1: New USB device found, idVendor=046d, idProduct=0850, bcdDevice=6b.da [ 367.126221][ T1572] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.134978][ T1572] usb 3-1: config 0 descriptor?? [ 367.174886][ T1572] usb 3-1: cannot find UAC_HEADER [ 367.179760][ T1572] snd-usb-audio: probe of 3-1:0.0 failed with error -22 [ 367.186800][ T26] usb 2-1: config 0 has no interfaces? [ 367.344431][ T26] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 367.353643][ T26] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.361557][ T26] usb 2-1: Product: syz [ 367.366403][ T26] usb 2-1: Manufacturer: syz [ 367.377343][ T6] usb 3-1: USB disconnect, device number 18 [ 367.379696][ T26] usb 2-1: SerialNumber: syz [ 367.388796][ T26] usb 2-1: config 0 descriptor?? [ 367.628736][ T8077] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 367.628895][ T8048] UDC core: couldn't find an available UDC or it's busy: -16 [ 367.637913][ T8077] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 367.653204][ T8048] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 367.669735][ T6] usb 2-1: USB disconnect, device number 24 [ 367.670079][ T8073] netlink: 116 bytes leftover after parsing attributes in process `syz-executor.4'. [ 367.684937][ T8073] Zero length message leads to an empty skb [ 367.902018][ T8079] tipc: Started in network mode [ 367.906800][ T8079] tipc: Node identity 5, cluster identity 4711 [ 367.912822][ T8079] tipc: Node number set to 5 [ 367.999119][ T8093] incfs: Can't find or create .index dir in ./file0 [ 368.005942][ T8093] incfs: mount failed -14 [ 368.044389][ T39] usb 1-1: Cannot set autoneg [ 368.048991][ T39] MOSCHIP usb-ethernet driver: probe of 1-1:0.0 failed with error -71 [ 368.057722][ T39] usb 1-1: USB disconnect, device number 25 [ 368.197708][ T8103] incfs: Can't find or create .index dir in ./file0 [ 368.204227][ T8103] incfs: mount failed -14 [ 368.308561][ T8108] tipc: Started in network mode [ 368.313322][ T8108] tipc: Node identity 5, cluster identity 4711 [ 368.319302][ T8108] tipc: Node number set to 5 [ 369.004340][ T39] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 369.038620][ T8137] tipc: Started in network mode [ 369.043314][ T8137] tipc: Node identity 5, cluster identity 4711 [ 369.049375][ T8137] tipc: Node number set to 5 [ 369.254334][ T39] usb 4-1: Using ep0 maxpacket: 32 [ 369.464516][ T39] usb 4-1: config 0 has no interfaces? [ 369.624433][ T39] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 369.633342][ T39] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.634913][ T8172] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 369.641247][ T39] usb 4-1: Product: syz [ 369.650227][ T8172] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 369.654237][ T39] usb 4-1: Manufacturer: syz [ 369.668194][ T39] usb 4-1: SerialNumber: syz [ 369.673440][ T39] usb 4-1: config 0 descriptor?? [ 369.921867][ T8123] UDC core: couldn't find an available UDC or it's busy: -16 [ 369.929322][ T8123] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 370.406005][ T30] audit: type=1400 audit(1718701998.272:13434): avc: denied { connect } for pid=8183 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 371.522345][ T39] usb 4-1: USB disconnect, device number 26 [ 372.078608][ T8245] incfs: Can't find or create .index dir in ./file0 [ 372.085115][ T8245] incfs: mount failed -14 [ 372.454343][ T26] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 372.746648][ T26] usb 2-1: Using ep0 maxpacket: 8 [ 372.824431][ T26] usb 2-1: unable to get BOS descriptor or descriptor too short [ 372.944397][ T26] usb 2-1: config index 0 descriptor too short (expected 16914, got 18) [ 372.952597][ T26] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 372.962617][ T26] usb 2-1: config 0 has no interfaces? [ 373.164426][ T26] usb 2-1: New USB device found, idVendor=0bb4, idProduct=0a9b, bcdDevice=30.9b [ 373.173605][ T26] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.183106][ T26] usb 2-1: Product: syz [ 373.187530][ T26] usb 2-1: Manufacturer: syz [ 373.191944][ T26] usb 2-1: SerialNumber: syz [ 373.198658][ T26] usb 2-1: config 0 descriptor?? [ 373.303428][ T30] audit: type=1400 audit(1718702001.162:13435): avc: denied { read } for pid=8297 comm="syz-executor.4" path="socket:[53947]" dev="sockfs" ino=53947 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 373.447255][ T6] usb 2-1: USB disconnect, device number 25 [ 373.593626][ T30] audit: type=1326 audit(1718702001.452:13436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8287 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63be6cf29 code=0x7fc00000 [ 373.617756][ T6779] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 373.628979][ T30] audit: type=1326 audit(1718702001.452:13437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8287 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fa63be6cf29 code=0x7fc00000 [ 373.653983][ T30] audit: type=1326 audit(1718702001.452:13438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8287 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63be6cf29 code=0x7fc00000 [ 373.678273][ T30] audit: type=1326 audit(1718702001.452:13439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8287 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63be6cf29 code=0x7fc00000 [ 373.702330][ T30] audit: type=1326 audit(1718702001.452:13440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8287 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63be6cf29 code=0x7fc00000 [ 373.726278][ T30] audit: type=1326 audit(1718702001.452:13441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8287 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63be6cf29 code=0x7fc00000 [ 373.750420][ T30] audit: type=1326 audit(1718702001.452:13442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8287 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63be6cf29 code=0x7fc00000 [ 373.774527][ T30] audit: type=1326 audit(1718702001.452:13443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8287 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63be6cf29 code=0x7fc00000 [ 373.798442][ T30] audit: type=1326 audit(1718702001.452:13444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8287 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63be6cf29 code=0x7fc00000 [ 374.234388][ T6779] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 374.243275][ T6779] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.261657][ T6779] usb 5-1: config 0 descriptor?? [ 375.184407][ T6779] usb 5-1: Cannot set autoneg [ 375.188961][ T6779] MOSCHIP usb-ethernet driver: probe of 5-1:0.0 failed with error -71 [ 375.197608][ T6779] usb 5-1: USB disconnect, device number 30 [ 375.263790][ T8352] loop1: detected capacity change from 0 to 256 [ 375.732231][ T8374] SELinux: security_context_str_to_sid(sysadm_u) failed for (dev ?, type ?) errno=-22 [ 375.742304][ T8374] SELinux: security_context_str_to_sid(sysadm_u) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 375.937589][ T8378] netlink: 116 bytes leftover after parsing attributes in process `syz-executor.4'. [ 377.520932][ T8452] loop1: detected capacity change from 0 to 1024 [ 377.582914][ T8452] EXT4-fs (loop1): Ignoring removed orlov option [ 377.589261][ T8452] EXT4-fs (loop1): Test dummy encryption mode enabled [ 377.596107][ T8452] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 377.606979][ T8452] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (12914!=20869) [ 377.617040][ T8452] EXT4-fs (loop1): invalid journal inode [ 377.622515][ T8452] EXT4-fs (loop1): can't get journal size [ 377.629129][ T8452] EXT4-fs (loop1): mounted filesystem without journal. Opts: data=writeback,norecovery,orlov,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 377.885414][ T8465] loop1: detected capacity change from 0 to 40427 [ 377.905066][ T8465] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 377.912607][ T8465] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 377.923161][ T8465] F2FS-fs (loop1): Found nat_bits in checkpoint [ 377.946068][ T8465] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 377.952983][ T8465] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 377.994009][ T8465] F2FS-fs (loop1): Inconsistent error blkaddr:5663, sit bitmap:0 [ 378.001688][ T8465] CPU: 0 PID: 8465 Comm: syz-executor.1 Tainted: G W 5.15.149-syzkaller-00165-g85445b5a2107 #0 [ 378.013132][ T8465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 378.023028][ T8465] Call Trace: [ 378.026149][ T8465] [ 378.028928][ T8465] dump_stack_lvl+0x151/0x1b7 [ 378.033525][ T8465] ? io_uring_drop_tctx_refs+0x190/0x190 [ 378.038994][ T8465] ? set_page_dirty+0x1a4/0x300 [ 378.043690][ T8465] dump_stack+0x15/0x17 [ 378.047671][ T8465] f2fs_is_valid_blkaddr+0xc87/0x12d0 [ 378.052882][ T8465] f2fs_truncate_data_blocks_range+0x64e/0xea0 [ 378.058873][ T8465] f2fs_do_truncate_blocks+0x4d2/0xcc0 [ 378.064166][ T8465] ? addrs_per_block+0x110/0x110 [ 378.068937][ T8465] ? f2fs_mark_inode_dirty_sync+0x99/0xa0 [ 378.074491][ T8465] f2fs_truncate_blocks+0x111/0x310 [ 378.079527][ T8465] do_convert_inline_dir+0xb0a/0x1ec0 [ 378.084734][ T8465] ? f2fs_try_convert_inline_dir+0x320/0x320 [ 378.090548][ T8465] ? __kasan_check_write+0x14/0x20 [ 378.095495][ T8465] ? __switch_to+0x62a/0x1190 [ 378.100007][ T8465] ? _find_next_bit+0x1b2/0x200 [ 378.104695][ T8465] ? f2fs_room_for_filename+0xbc/0xd0 [ 378.109910][ T8465] f2fs_add_inline_entry+0x3ef/0x770 [ 378.115028][ T8465] ? do_convert_inline_dir+0x1ec0/0x1ec0 [ 378.120490][ T8465] ? __init_rwsem+0x1c0/0x1c0 [ 378.125004][ T8465] ? f2fs_setup_filename+0x141/0x360 [ 378.130128][ T8465] ? f2fs_init_casefolded_name+0x7d/0x460 [ 378.135693][ T8465] f2fs_add_dentry+0x1cd/0x340 [ 378.140282][ T8465] ? f2fs_add_regular_entry+0xb30/0xb30 [ 378.145663][ T8465] ? down_read_trylock+0x1f9/0x300 [ 378.150609][ T8465] f2fs_do_add_link+0x2a0/0x3c0 [ 378.155297][ T8465] ? f2fs_add_dentry+0x340/0x340 [ 378.160070][ T8465] ? f2fs_down_read+0x9f/0x190 [ 378.164674][ T8465] f2fs_create+0x108b/0x1510 [ 378.169098][ T8465] ? f2fs_lookup+0xd80/0xd80 [ 378.173523][ T8465] path_openat+0x13a8/0x2f40 [ 378.177955][ T8465] ? do_filp_open+0x460/0x460 [ 378.182467][ T8465] do_filp_open+0x21c/0x460 [ 378.186801][ T8465] ? vfs_tmpfile+0x2c0/0x2c0 [ 378.191235][ T8465] do_sys_openat2+0x13f/0x830 [ 378.195740][ T8465] ? __kasan_slab_free+0x11/0x20 [ 378.200517][ T8465] ? do_sys_open+0x220/0x220 [ 378.204953][ T8465] ? __kasan_check_write+0x14/0x20 [ 378.209907][ T8465] ? switch_fpu_return+0x1ed/0x3d0 [ 378.214839][ T8465] __x64_sys_creat+0x11f/0x160 [ 378.219694][ T8465] ? __x64_compat_sys_openat+0x290/0x290 [ 378.225167][ T8465] ? __kasan_check_read+0x11/0x20 [ 378.230025][ T8465] ? exit_to_user_mode_prepare+0x7e/0xa0 [ 378.235492][ T8465] do_syscall_64+0x3d/0xb0 [ 378.239745][ T8465] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 378.245476][ T8465] RIP: 0033:0x7f39c02dbf29 [ 378.249727][ T8465] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 378.269171][ T8465] RSP: 002b:00007f39bf6560c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 378.277415][ T8465] RAX: ffffffffffffffda RBX: 00007f39c0412f80 RCX: 00007f39c02dbf29 [ 378.285223][ T8465] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000300 [ 378.293037][ T8465] RBP: 00007f39c034b074 R08: 0000000000000000 R09: 0000000000000000 [ 378.300848][ T8465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 378.308658][ T8465] R13: 000000000000000b R14: 00007f39c0412f80 R15: 00007ffc722703d8 [ 378.316475][ T8465] [ 378.961349][ T8507] loop1: detected capacity change from 0 to 40427 [ 378.977159][ T8507] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 378.984857][ T8507] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 378.998207][ T8507] F2FS-fs (loop1): Found nat_bits in checkpoint [ 379.025335][ T8507] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 379.032433][ T8507] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 379.063548][ T8507] F2FS-fs (loop1): Inconsistent error blkaddr:5663, sit bitmap:0 [ 379.071212][ T8507] CPU: 1 PID: 8507 Comm: syz-executor.1 Tainted: G W 5.15.149-syzkaller-00165-g85445b5a2107 #0 [ 379.082658][ T8507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 379.092549][ T8507] Call Trace: [ 379.095671][ T8507] [ 379.098452][ T8507] dump_stack_lvl+0x151/0x1b7 [ 379.102962][ T8507] ? io_uring_drop_tctx_refs+0x190/0x190 [ 379.108429][ T8507] ? set_page_dirty+0x1a4/0x300 [ 379.113116][ T8507] dump_stack+0x15/0x17 [ 379.117109][ T8507] f2fs_is_valid_blkaddr+0xc87/0x12d0 [ 379.122319][ T8507] f2fs_truncate_data_blocks_range+0x64e/0xea0 [ 379.128311][ T8507] f2fs_do_truncate_blocks+0x4d2/0xcc0 [ 379.133600][ T8507] ? addrs_per_block+0x110/0x110 [ 379.138374][ T8507] ? f2fs_mark_inode_dirty_sync+0x99/0xa0 [ 379.143927][ T8507] f2fs_truncate_blocks+0x111/0x310 [ 379.148962][ T8507] do_convert_inline_dir+0xb0a/0x1ec0 [ 379.154172][ T8507] ? f2fs_try_convert_inline_dir+0x320/0x320 [ 379.159986][ T8507] ? do_filp_open+0x21c/0x460 [ 379.164497][ T8507] ? do_sys_openat2+0x13f/0x830 [ 379.169187][ T8507] ? __x64_sys_creat+0x11f/0x160 [ 379.173959][ T8507] ? _find_next_bit+0x1b2/0x200 [ 379.178648][ T8507] ? f2fs_room_for_filename+0xbc/0xd0 [ 379.183851][ T8507] f2fs_add_inline_entry+0x3ef/0x770 [ 379.188975][ T8507] ? do_convert_inline_dir+0x1ec0/0x1ec0 [ 379.194441][ T8507] ? __init_rwsem+0x1c0/0x1c0 [ 379.198956][ T8507] ? f2fs_setup_filename+0x141/0x360 [ 379.204074][ T8507] ? f2fs_init_casefolded_name+0x7d/0x460 [ 379.209631][ T8507] f2fs_add_dentry+0x1cd/0x340 [ 379.214230][ T8507] ? f2fs_add_regular_entry+0xb30/0xb30 [ 379.219613][ T8507] ? down_read_trylock+0x1f9/0x300 [ 379.224557][ T8507] f2fs_do_add_link+0x2a0/0x3c0 [ 379.229245][ T8507] ? f2fs_add_dentry+0x340/0x340 [ 379.234018][ T8507] ? f2fs_down_read+0x9f/0x190 [ 379.238618][ T8507] ? f2fs_get_link+0x110/0x110 [ 379.243216][ T8507] ? f2fs_lookup+0x262/0xd80 [ 379.247647][ T8507] f2fs_create+0x108b/0x1510 [ 379.252072][ T8507] ? f2fs_lookup+0xd80/0xd80 [ 379.256497][ T8507] path_openat+0x13a8/0x2f40 [ 379.260940][ T8507] ? do_filp_open+0x460/0x460 [ 379.265440][ T8507] do_filp_open+0x21c/0x460 [ 379.269778][ T8507] ? vfs_tmpfile+0x2c0/0x2c0 [ 379.274209][ T8507] do_sys_openat2+0x13f/0x830 [ 379.278716][ T8507] ? __kasan_slab_free+0x11/0x20 [ 379.283493][ T8507] ? do_sys_open+0x220/0x220 [ 379.287919][ T8507] ? __kasan_check_write+0x14/0x20 [ 379.292863][ T8507] ? switch_fpu_return+0x1ed/0x3d0 [ 379.297813][ T8507] __x64_sys_creat+0x11f/0x160 [ 379.302412][ T8507] ? __x64_compat_sys_openat+0x290/0x290 [ 379.307880][ T8507] ? __kasan_check_read+0x11/0x20 [ 379.312739][ T8507] ? exit_to_user_mode_prepare+0x7e/0xa0 [ 379.318208][ T8507] do_syscall_64+0x3d/0xb0 [ 379.322462][ T8507] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 379.328189][ T8507] RIP: 0033:0x7f39c02dbf29 [ 379.332447][ T8507] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 379.351904][ T8507] RSP: 002b:00007f39bf6560c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 379.360127][ T8507] RAX: ffffffffffffffda RBX: 00007f39c0412f80 RCX: 00007f39c02dbf29 [ 379.367942][ T8507] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000300 [ 379.375755][ T8507] RBP: 00007f39c034b074 R08: 0000000000000000 R09: 0000000000000000 [ 379.383651][ T8507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 379.391553][ T8507] R13: 000000000000000b R14: 00007f39c0412f80 R15: 00007ffc722703d8 [ 379.399455][ T8507] [ 379.604583][ T8540] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 379.613685][ T8540] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 380.035066][ T8555] SELinux: security_context_str_to_sid(sysadm_u) failed for (dev ?, type ?) errno=-22 [ 380.045181][ T8555] SELinux: security_context_str_to_sid(sysadm_u) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 380.873753][ T8602] loop1: detected capacity change from 0 to 512 [ 380.907473][ T8602] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsdgroups,,errors=continue. Quota mode: writeback. [ 380.925286][ T8602] ext4 filesystem being mounted at /root/syzkaller-testdir3025459081/syzkaller.g1BtSh/83/file0 supports timestamps until 2038 (0x7fffffff) [ 380.954456][ T8602] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 380.976988][ T8602] EXT4-fs (loop1): Delayed block allocation failed for inode 16 at logical offset 0 with max blocks 1 with error 28 [ 380.996569][ T8602] EXT4-fs (loop1): This should not happen!! Data will be lost [ 380.996569][ T8602] [ 381.008866][ T8602] EXT4-fs (loop1): Total free blocks count 0 [ 381.024637][ T8602] EXT4-fs (loop1): Free/Dirty block details [ 381.034013][ T8602] EXT4-fs (loop1): free_blocks=39629 [ 381.045093][ T8602] EXT4-fs (loop1): dirty_blocks=1 [ 381.050020][ T8602] EXT4-fs (loop1): Block reservation details [ 381.065070][ T8602] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 381.352634][ T8640] netlink: 116 bytes leftover after parsing attributes in process `syz-executor.0'. [ 381.659988][ T8646] loop1: detected capacity change from 0 to 1024 [ 381.704114][ T8646] EXT4-fs (loop1): Ignoring removed orlov option [ 381.712280][ T8646] EXT4-fs (loop1): Test dummy encryption mode enabled [ 381.756062][ T8646] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 381.772077][ T8646] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (12914!=20869) [ 381.805352][ T8646] EXT4-fs (loop1): invalid journal inode [ 381.816114][ T8646] EXT4-fs (loop1): can't get journal size [ 381.865331][ T8646] EXT4-fs (loop1): mounted filesystem without journal. Opts: data=writeback,norecovery,orlov,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 382.065003][ T10] tipc: Left network mode [ 382.073927][ T8662] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.081989][ T8662] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.090729][ T8662] device bridge_slave_0 entered promiscuous mode [ 382.097762][ T8662] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.104979][ T8662] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.112536][ T8662] device bridge_slave_1 entered promiscuous mode [ 382.199998][ T8662] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.206891][ T8662] bridge0: port 2(bridge_slave_1) entered forwarding state [ 382.213988][ T8662] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.220773][ T8662] bridge0: port 1(bridge_slave_0) entered forwarding state [ 382.281574][ T30] kauditd_printk_skb: 69 callbacks suppressed [ 382.281588][ T30] audit: type=1326 audit(1718702010.142:13514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8692 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5913fdbf29 code=0x0 [ 382.292712][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 382.756334][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.778581][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.800721][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 382.808811][ T26] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.815672][ T26] bridge0: port 1(bridge_slave_0) entered forwarding state [ 382.823305][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 382.831456][ T26] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.838327][ T26] bridge0: port 2(bridge_slave_1) entered forwarding state [ 382.845561][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 382.853453][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 382.872473][ T8662] device veth0_vlan entered promiscuous mode [ 382.879279][ T6779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 382.887888][ T6779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 382.896701][ T6779] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 382.904008][ T6779] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 382.920768][ T8662] device veth1_macvtap entered promiscuous mode [ 382.928278][ T7640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 382.942298][ T6779] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 382.950468][ T6779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 382.958893][ T6779] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 382.966983][ T6779] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 383.237054][ T8703] netlink: 116 bytes leftover after parsing attributes in process `syz-executor.1'. [ 383.254971][ T10] device bridge_slave_1 left promiscuous mode [ 383.262177][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.295269][ T10] device bridge_slave_0 left promiscuous mode [ 383.302148][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.343185][ T10] device veth1_macvtap left promiscuous mode [ 384.384894][ T8753] SELinux: security_context_str_to_sid(unconfined_u) failed for (dev ?, type ?) errno=-22 [ 384.395148][ T8753] SELinux: security_context_str_to_sid(unconfined_u) failed for (dev sda1, type ext4) errno=-22 [ 385.211950][ T8786] SELinux: security_context_str_to_sid(unconfined_u) failed for (dev ?, type ?) errno=-22 [ 385.222237][ T8786] SELinux: security_context_str_to_sid(unconfined_u) failed for (dev sda1, type ext4) errno=-22 [ 385.482758][ T8808] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1099 sclass=netlink_route_socket pid=8808 comm=syz-executor.1 [ 385.654336][ T26] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 385.764348][ T7640] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 385.864782][ T39] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 386.014431][ T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 386.025305][ T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 386.034832][ T26] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 386.043639][ T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.051964][ T26] usb 4-1: config 0 descriptor?? [ 386.104398][ T39] usb 5-1: Using ep0 maxpacket: 8 [ 386.124432][ T7640] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 386.135276][ T7640] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 386.144125][ T7640] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.152710][ T7640] usb 1-1: config 0 descriptor?? [ 386.161605][ T8812] SELinux: Context $ is not valid (left unmapped). [ 386.168655][ T30] audit: type=1400 audit(1718702014.042:13515): avc: denied { relabelto } for pid=8811 comm="syz-executor.1" name="file0" dev="sda1" ino=1952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="$" [ 386.194203][ T30] audit: type=1400 audit(1718702014.062:13516): avc: denied { rmdir } for pid=8662 comm="syz-executor.1" name="file0" dev="sda1" ino=1952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="$" [ 386.254492][ T39] usb 5-1: New USB device found, idVendor=046d, idProduct=0850, bcdDevice=6b.da [ 386.263416][ T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.277525][ T39] usb 5-1: config 0 descriptor?? [ 386.286764][ T8818] loop1: detected capacity change from 0 to 512 [ 386.315234][ T8818] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 386.315550][ T39] usb 5-1: cannot find UAC_HEADER [ 386.329123][ T39] snd-usb-audio: probe of 5-1:0.0 failed with error -22 [ 386.346470][ T8818] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #17: comm syz-executor.1: iget: bad i_size value: -6917529027641081756 [ 386.360031][ T8818] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz-executor.1: couldn't read orphan inode 17 (err -117) [ 386.372304][ T8818] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 386.461277][ T8829] syz-executor.1[8829] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 386.461325][ T8829] syz-executor.1[8829] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 386.520970][ T39] usb 5-1: USB disconnect, device number 31 [ 386.538375][ T26] hid (null): bogus close delimiter [ 386.664850][ T7640] keytouch 0003:0926:3333.0040: fixing up Keytouch IEC report descriptor [ 386.674039][ T7640] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0040/input/input36 [ 386.734449][ T26] usb 4-1: language id specifier not provided by device, defaulting to English [ 386.766261][ T7640] keytouch 0003:0926:3333.0040: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 387.066189][ T7640] usb 1-1: USB disconnect, device number 26 [ 387.113312][ T8856] syz-executor.1[8856] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 387.113364][ T8856] syz-executor.1[8856] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 387.175599][ T26] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.003F/input/input37 [ 387.199806][ T26] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.003F/input/input38 [ 387.213220][ T26] uclogic 0003:256C:006D.003F: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.3-1/input0 [ 387.229453][ T8853] netlink: 116 bytes leftover after parsing attributes in process `syz-executor.4'. [ 387.270274][ T8867] loop1: detected capacity change from 0 to 1024 [ 387.315354][ T8867] EXT4-fs (loop1): Ignoring removed orlov option [ 387.321966][ T8867] EXT4-fs (loop1): Test dummy encryption mode enabled [ 387.328733][ T8867] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 387.339420][ T8867] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (12914!=20869) [ 387.349850][ T8867] EXT4-fs (loop1): invalid journal inode [ 387.355355][ T8867] EXT4-fs (loop1): can't get journal size [ 387.361839][ T8867] EXT4-fs (loop1): mounted filesystem without journal. Opts: data=writeback,norecovery,orlov,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 387.379870][ T2489] usb 4-1: USB disconnect, device number 27 [ 387.854351][ T26] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 387.894633][ T39] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 388.094335][ T26] usb 1-1: Using ep0 maxpacket: 8 [ 388.214429][ T26] usb 1-1: New USB device found, idVendor=046d, idProduct=0850, bcdDevice=6b.da [ 388.223591][ T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.232072][ T26] usb 1-1: config 0 descriptor?? [ 388.254465][ T39] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 388.265414][ T39] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 388.274334][ T2489] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 388.278684][ T26] usb 1-1: cannot find UAC_HEADER [ 388.294322][ T39] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 388.303157][ T39] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.311130][ T26] snd-usb-audio: probe of 1-1:0.0 failed with error -22 [ 388.325294][ T39] usb 2-1: config 0 descriptor?? [ 388.346050][ T8910] netlink: 116 bytes leftover after parsing attributes in process `syz-executor.4'. [ 388.491720][ T26] usb 1-1: USB disconnect, device number 27 [ 388.694472][ T2489] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 388.705439][ T2489] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 388.714217][ T2489] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.722753][ T2489] usb 4-1: config 0 descriptor?? [ 388.805126][ T39] plantronics 0003:047F:FFFF.0041: No inputs registered, leaving [ 388.813801][ T39] plantronics 0003:047F:FFFF.0041: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 389.024854][ T7640] usb 2-1: USB disconnect, device number 26 [ 389.085708][ T8923] syz-executor.4[8923] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 389.085758][ T8923] syz-executor.4[8923] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 389.099571][ T8923] incfs: Can't find or create .index dir in ./file0 [ 389.118305][ T8923] incfs: mount failed -14 [ 389.204900][ T2489] keytouch 0003:0926:3333.0042: fixing up Keytouch IEC report descriptor [ 389.214742][ T2489] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0042/input/input39 [ 389.239389][ T30] audit: type=1400 audit(1718702017.102:13517): avc: denied { connect } for pid=8934 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 389.296680][ T2489] keytouch 0003:0926:3333.0042: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 389.674355][ T6] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 389.690682][ T39] usb 4-1: USB disconnect, device number 28 [ 389.694351][ C0] keytouch 0003:0926:3333.0042: usb_submit_urb(ctrl) failed: -19 [ 389.739361][ T8953] syz-executor.1[8953] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 389.739414][ T8953] syz-executor.1[8953] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 389.754579][ T8953] incfs: Can't find or create .index dir in ./file0 [ 389.772772][ T8953] incfs: mount failed -14 [ 389.914483][ T6] usb 1-1: Using ep0 maxpacket: 8 [ 390.034436][ T6] usb 1-1: New USB device found, idVendor=046d, idProduct=0850, bcdDevice=6b.da [ 390.043353][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.051685][ T6] usb 1-1: config 0 descriptor?? [ 390.094840][ T6] usb 1-1: cannot find UAC_HEADER [ 390.099801][ T6] snd-usb-audio: probe of 1-1:0.0 failed with error -22 [ 390.307572][ T6] usb 1-1: USB disconnect, device number 28 [ 391.261756][ T8995] incfs: Error accessing: ./file0. [ 391.266766][ T8995] incfs: mount failed -20 [ 391.311837][ T9002] loop1: detected capacity change from 0 to 16 [ 391.335672][ T9002] erofs: (device loop1): mounted with root inode @ nid 36. [ 391.504724][ T6] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 391.865012][ T6] usb 4-1: Using ep0 maxpacket: 8 [ 391.994664][ T6] usb 4-1: New USB device found, idVendor=10b8, idProduct=0bb9, bcdDevice=2f.22 [ 392.008143][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.025610][ T9015] syz-executor.0[9015] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 392.028503][ T9015] syz-executor.0[9015] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 392.072308][ T6] usb 4-1: config 0 descriptor?? [ 392.226493][ T9015] incfs: Can't find or create .index dir in ./file0 [ 392.233003][ T9015] incfs: mount failed -14 [ 392.260403][ T9020] incfs: Error accessing: ./file0. [ 392.265477][ T9020] incfs: mount failed -20 [ 392.689336][ T39] usb 4-1: USB disconnect, device number 29 [ 392.784975][ T9033] netlink: 116 bytes leftover after parsing attributes in process `syz-executor.4'. [ 393.119240][ T45] tipc: Left network mode [ 393.299135][ T9050] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.314420][ T26] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 393.357379][ T9050] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.389536][ T9050] device bridge_slave_0 entered promiscuous mode [ 393.408827][ T9050] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.416878][ T9050] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.463874][ T9050] device bridge_slave_1 entered promiscuous mode [ 393.526299][ T9050] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.533183][ T9050] bridge0: port 2(bridge_slave_1) entered forwarding state [ 393.540293][ T9050] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.547060][ T9050] bridge0: port 1(bridge_slave_0) entered forwarding state [ 393.585907][ T1354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 393.593796][ T1354] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.601486][ T1354] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.614524][ T1354] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 393.614736][ T7640] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 393.622662][ T1354] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.636588][ T1354] bridge0: port 1(bridge_slave_0) entered forwarding state [ 393.661348][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 393.669390][ T6] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.676234][ T6] bridge0: port 2(bridge_slave_1) entered forwarding state [ 393.695022][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 393.702731][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 393.712975][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 393.724392][ T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 393.726264][ T2489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 393.735812][ T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 393.743812][ T2489] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 393.752249][ T26] usb 2-1: New USB device found, idVendor=05ac, idProduct=029c, bcdDevice= 0.00 [ 393.759819][ T2489] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 393.768181][ T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.783467][ T26] usb 2-1: config 0 descriptor?? [ 393.789671][ T9050] device veth0_vlan entered promiscuous mode [ 393.800017][ T1354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 393.809098][ T9050] device veth1_macvtap entered promiscuous mode [ 393.818535][ T2489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 393.828176][ T45] device bridge_slave_1 left promiscuous mode [ 393.834099][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.841609][ T45] device bridge_slave_0 left promiscuous mode [ 393.847604][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.855389][ T45] device veth1_macvtap left promiscuous mode [ 393.861206][ T45] device veth0_vlan left promiscuous mode [ 393.919311][ T2489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 393.934374][ T1572] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 394.034479][ T7640] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 395.054925][ T7640] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 395.068038][ T7640] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 395.076997][ T7640] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.091197][ T7640] usb 5-1: config 0 descriptor?? [ 395.105710][ T26] apple 0003:05AC:029C.0043: unbalanced delimiter at end of report description [ 395.115038][ T26] apple 0003:05AC:029C.0043: parse failed [ 395.120668][ T26] apple: probe of 0003:05AC:029C.0043 failed with error -22 [ 395.158713][ T9085] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9085 comm=syz-executor.0 [ 395.164397][ T1572] usb 4-1: Using ep0 maxpacket: 8 [ 395.294745][ T1572] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 395.305280][ T1572] usb 4-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 395.315851][ T1572] usb 4-1: config 179 has no interface number 0 [ 395.322204][ T2489] usb 2-1: USB disconnect, device number 27 [ 395.327991][ T1572] usb 4-1: config 179 interface 65 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 395.342789][ T1572] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 395.351864][ T1572] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.454355][ T6779] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 395.565165][ T7640] plantronics 0003:047F:FFFF.0044: No inputs registered, leaving [ 395.573587][ T7640] plantronics 0003:047F:FFFF.0044: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 395.598173][ T7640] usb 4-1: USB disconnect, device number 30 [ 395.724346][ T6779] usb 1-1: Using ep0 maxpacket: 8 [ 395.774657][ T26] usb 5-1: USB disconnect, device number 32 [ 395.864435][ T6779] usb 1-1: New USB device found, idVendor=10b8, idProduct=0bb9, bcdDevice=2f.22 [ 395.873526][ T6779] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.882007][ T6779] usb 1-1: config 0 descriptor?? [ 396.137132][ T26] usb 1-1: USB disconnect, device number 29 [ 396.143565][ T30] audit: type=1326 audit(1718702023.992:13518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9129 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb429c4af29 code=0x0 [ 396.211478][ T30] audit: type=1326 audit(1718702024.072:13519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9134 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63be6cf29 code=0x7ffc0000 [ 396.235798][ T30] audit: type=1326 audit(1718702024.072:13520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9134 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63be6cf29 code=0x7ffc0000 [ 396.259893][ T6779] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 396.267350][ T30] audit: type=1326 audit(1718702024.082:13521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9134 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7fa63be6cf29 code=0x7ffc0000 [ 396.291426][ T30] audit: type=1326 audit(1718702024.082:13522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9134 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63be6cf29 code=0x7ffc0000 [ 396.317474][ T30] audit: type=1326 audit(1718702024.082:13523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9134 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63be6cf29 code=0x7ffc0000 [ 396.502015][ T9153] syz-executor.4[9153] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 396.502072][ T9153] syz-executor.4[9153] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 396.517317][ T9153] incfs: Can't find or create .index dir in ./file0 [ 396.535361][ T9153] incfs: mount failed -14 [ 396.544389][ T6779] usb 2-1: Using ep0 maxpacket: 32 [ 396.634354][ T1572] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 396.669369][ T30] audit: type=1326 audit(1718702024.532:13524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9158 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f056602ef29 code=0x7ffc0000 [ 396.693919][ T30] audit: type=1326 audit(1718702024.532:13525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9158 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f056602ef29 code=0x7ffc0000 [ 396.717893][ T30] audit: type=1326 audit(1718702024.532:13526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9158 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7f056602ef29 code=0x7ffc0000 [ 396.717893][ T6779] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 396.717924][ T30] audit: type=1326 audit(1718702024.532:13527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9158 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f056602ef29 code=0x7ffc0000 [ 396.742399][ T6779] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 396.884356][ T1572] usb 4-1: Using ep0 maxpacket: 8 [ 396.964436][ T6779] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 396.973452][ T6779] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.974329][ T26] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 396.981435][ T6779] usb 2-1: Product: syz [ 396.993354][ T6779] usb 2-1: Manufacturer: syz [ 396.997910][ T6779] usb 2-1: SerialNumber: syz [ 397.004400][ T1572] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 397.012595][ T1572] usb 4-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 397.022951][ T1572] usb 4-1: config 179 has no interface number 0 [ 397.029233][ T1572] usb 4-1: config 179 interface 65 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 397.042724][ T1572] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 397.051804][ T1572] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.255014][ T6779] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 28 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 397.296755][ T6779] usb 4-1: USB disconnect, device number 31 [ 397.354404][ T26] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 397.365131][ T26] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 397.377781][ T26] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 397.386622][ T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.394944][ T26] usb 1-1: config 0 descriptor?? [ 397.875458][ T26] plantronics 0003:047F:FFFF.0045: No inputs registered, leaving [ 397.893826][ T26] plantronics 0003:047F:FFFF.0045: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 397.924336][ T1572] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 397.962087][ T6779] usb 2-1: USB disconnect, device number 28 [ 397.977937][ T6779] usblp0: removed [ 398.093122][ T39] usb 1-1: USB disconnect, device number 30 [ 398.110427][ T9215] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.117484][ T9215] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.124852][ T9215] device bridge_slave_0 entered promiscuous mode [ 398.131637][ T9215] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.139032][ T9215] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.146413][ T9215] device bridge_slave_1 entered promiscuous mode [ 398.188600][ T9215] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.195461][ T9215] bridge0: port 2(bridge_slave_1) entered forwarding state [ 398.202539][ T9215] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.209366][ T9215] bridge0: port 1(bridge_slave_0) entered forwarding state [ 398.230585][ T7640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 398.238245][ T7640] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.245787][ T7640] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.255079][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 398.263100][ T6] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.269944][ T6] bridge0: port 1(bridge_slave_0) entered forwarding state [ 398.285398][ T7640] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 398.293452][ T7640] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.300298][ T7640] bridge0: port 2(bridge_slave_1) entered forwarding state [ 398.307566][ T7640] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 398.314671][ T1572] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 398.316029][ T7640] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 398.323353][ T1572] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 398.341344][ T1572] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 398.354482][ T1572] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 398.363284][ T1572] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.371884][ T1572] usb 5-1: config 0 descriptor?? [ 398.382783][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 398.390794][ T456] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 398.403108][ T1354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 398.411119][ T1354] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 398.419085][ T1354] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 398.429390][ T9215] device veth0_vlan entered promiscuous mode [ 398.439349][ T1354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 398.448237][ T9215] device veth1_macvtap entered promiscuous mode [ 398.457415][ T7640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 398.470752][ T1354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 398.503183][ T9234] device veth1_macvtap left promiscuous mode [ 398.509081][ T9234] device macsec0 entered promiscuous mode [ 398.514642][ T6779] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 398.523325][ T9234] device veth1_macvtap entered promiscuous mode [ 398.529595][ T9234] device macsec0 left promiscuous mode [ 398.566217][ T432] device bridge_slave_1 left promiscuous mode [ 398.572327][ T432] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.579923][ T432] device bridge_slave_0 left promiscuous mode [ 398.586042][ T432] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.593974][ T432] device veth1_macvtap left promiscuous mode [ 398.599883][ T432] device veth0_vlan left promiscuous mode [ 398.634369][ T456] usb 4-1: Using ep0 maxpacket: 8 [ 398.687697][ T9254] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. [ 398.697452][ T9254] tipc: Enabling of bearer rejected, failed to enable media [ 398.716179][ T9259] device veth1_macvtap left promiscuous mode [ 398.722000][ T9259] device macsec0 entered promiscuous mode [ 398.730719][ T9259] device veth1_macvtap entered promiscuous mode [ 398.736982][ T9259] device macsec0 left promiscuous mode [ 398.785010][ T456] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 398.794559][ T456] usb 4-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 398.804811][ T456] usb 4-1: config 179 has no interface number 0 [ 398.810838][ T456] usb 4-1: config 179 interface 65 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 398.824019][ T456] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 398.833054][ T456] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.944657][ T6779] usb 2-1: config 0 has an invalid interface number: 48 but max is 0 [ 398.959814][ T6779] usb 2-1: config 0 has no interface number 0 [ 398.972937][ T6779] usb 2-1: too many endpoints for config 0 interface 48 altsetting 120: 48, using maximum allowed: 30 [ 399.047326][ T6779] usb 2-1: config 0 interface 48 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 399.068052][ T1572] plantronics 0003:047F:FFFF.0046: unknown main item tag 0xd [ 399.082584][ T1572] plantronics 0003:047F:FFFF.0046: No inputs registered, leaving [ 399.085860][ T6779] usb 2-1: config 0 interface 48 has no altsetting 0 [ 399.091111][ T1572] plantronics 0003:047F:FFFF.0046: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 399.104938][ T6779] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 399.118094][ T6779] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.128098][ T6779] usb 2-1: config 0 descriptor?? [ 399.165763][ T9282] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. [ 399.174989][ T9282] tipc: Enabling of bearer rejected, failed to enable media [ 399.178342][ T808] usb 4-1: USB disconnect, device number 32 [ 399.204076][ T9286] device veth1_macvtap left promiscuous mode [ 399.209944][ T9286] device macsec0 entered promiscuous mode [ 399.214776][ T1354] usb 5-1: USB disconnect, device number 33 [ 399.222804][ T9286] device veth1_macvtap entered promiscuous mode [ 399.228991][ T9286] device macsec0 left promiscuous mode [ 399.854413][ T6779] usb 2-1: string descriptor 0 read error: -32 [ 399.939213][ T9307] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'. [ 399.949323][ T9307] tipc: Enabling of bearer rejected, failed to enable media [ 399.974384][ T6779] usb 2-1: Cannot read MAC address [ 399.979425][ T6779] MOSCHIP usb-ethernet driver: probe of 2-1:0.48 failed with error -71 [ 399.988862][ T6779] usb 2-1: USB disconnect, device number 29 [ 400.033340][ T9312] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.040350][ T9312] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.047929][ T9312] device bridge_slave_0 entered promiscuous mode [ 400.055039][ T9312] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.062094][ T9312] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.068471][ T9322] syz-executor.2[9322] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 400.069194][ T9322] syz-executor.2[9322] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 400.069735][ T9312] device bridge_slave_1 entered promiscuous mode [ 400.139973][ T9322] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. [ 400.189677][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 400.197818][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 400.213466][ T456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 400.222666][ T456] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 400.231277][ T456] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.238169][ T456] bridge0: port 1(bridge_slave_0) entered forwarding state [ 400.245447][ T456] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 400.253624][ T456] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 400.261787][ T456] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.268647][ T456] bridge0: port 2(bridge_slave_1) entered forwarding state [ 400.286142][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 400.293668][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 400.302106][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 400.328467][ T9312] device veth0_vlan entered promiscuous mode [ 400.336448][ T456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 400.344219][ T456] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 400.352110][ T456] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 400.359443][ T456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 400.375630][ T9312] device veth1_macvtap entered promiscuous mode [ 400.384994][ T7640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 400.394188][ T1354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 400.408746][ T1354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 400.605957][ T721] device bridge_slave_1 left promiscuous mode [ 400.612159][ T721] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.619863][ T721] device bridge_slave_0 left promiscuous mode [ 400.625976][ T721] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.633832][ T721] device veth1_macvtap left promiscuous mode [ 401.264335][ T6779] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 401.324364][ T456] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 401.534346][ T6779] usb 4-1: Using ep0 maxpacket: 8 [ 401.674422][ T6779] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 401.682875][ T6779] usb 4-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 401.693073][ T6779] usb 4-1: config 179 has no interface number 0 [ 401.699150][ T6779] usb 4-1: config 179 interface 65 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 401.712135][ T6779] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 401.721369][ T456] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 401.956878][ T6779] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.964810][ T456] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 401.977280][ T456] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 401.990227][ T456] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 401.999778][ T456] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.016142][ T456] usb 1-1: config 0 descriptor?? [ 402.353176][ T6779] usb 4-1: USB disconnect, device number 33 [ 402.555118][ T456] plantronics 0003:047F:FFFF.0047: unknown main item tag 0xd [ 402.563049][ T456] plantronics 0003:047F:FFFF.0047: No inputs registered, leaving [ 402.571786][ T456] plantronics 0003:047F:FFFF.0047: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 402.834710][ T1354] usb 1-1: USB disconnect, device number 31 [ 404.195975][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 404.195990][ T30] audit: type=1400 audit(1718702032.062:13533): avc: denied { module_load } for pid=9412 comm="syz-executor.4" path="/root/syzkaller-testdir3889375608/syzkaller.mNjBUR/10/bus/bus" dev="overlay" ino=1972 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=system permissive=1 [ 404.230300][ T9414] Invalid ELF header type: 0 != 1 [ 404.311663][ T9420] loop1: detected capacity change from 0 to 256 [ 404.926840][ T9438] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 404.937498][ T9438] tipc: Started in network mode [ 404.942491][ T9438] tipc: Node identity memory.en, cluster identity 8 [ 405.134539][ T1354] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 405.268944][ T9445] device syzkaller0 entered promiscuous mode [ 405.440804][ T808] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 405.575225][ T1354] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 405.588576][ T1354] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 405.600555][ T1354] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 405.763851][ T1354] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 405.772776][ T1354] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.783937][ T1354] usb 1-1: config 0 descriptor?? [ 405.804430][ T808] usb 5-1: Using ep0 maxpacket: 16 [ 405.944643][ T808] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 405.957540][ T808] usb 5-1: config 0 has no interface number 0 [ 405.975273][ T808] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 405.985429][ T808] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 406.165685][ T808] usb 5-1: New USB device found, idVendor=0082, idProduct=0000, bcdDevice= f.00 [ 406.176113][ T808] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.190504][ T808] usb 5-1: Product: syz [ 406.194765][ T808] usb 5-1: Manufacturer: syz [ 406.199331][ T808] usb 5-1: SerialNumber: syz [ 406.209929][ T808] usb 5-1: config 0 descriptor?? [ 406.345316][ T1354] plantronics 0003:047F:FFFF.0048: unknown main item tag 0xd [ 406.373840][ T1354] plantronics 0003:047F:FFFF.0048: No inputs registered, leaving [ 406.399453][ T1354] plantronics 0003:047F:FFFF.0048: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 406.694621][ T9446] UDC core: couldn't find an available UDC or it's busy: -16 [ 406.703536][ T9446] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 406.905994][ T6] usb 1-1: USB disconnect, device number 32 [ 407.060132][ T9501] xt_bpf: check failed: parse error [ 409.109791][ T6] usb 5-1: USB disconnect, device number 34 [ 409.219867][ T9528] xt_bpf: check failed: parse error [ 409.298469][ T9548] syz-executor.2[9548] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 409.298538][ T9548] syz-executor.2[9548] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 409.692521][ T9564] xt_bpf: check failed: parse error [ 409.884644][ T9522] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 410.105537][ T721] tipc: Left network mode [ 410.175333][ T9594] syz-executor.1[9594] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 410.175404][ T9594] syz-executor.1[9594] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 410.250875][ T9597] xt_bpf: check failed: parse error [ 410.286886][ T9600] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 410.297349][ T9595] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.304198][ T9595] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.312265][ T9595] device bridge_slave_0 entered promiscuous mode [ 410.321702][ T9600] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 410.329659][ T9522] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 410.329699][ T9522] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 410.338973][ T9595] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.350883][ T9522] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 410.359977][ T9595] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.375252][ T9595] device bridge_slave_1 entered promiscuous mode [ 410.375538][ T9522] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 410.390708][ T9522] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.392967][ T9610] loop1: detected capacity change from 0 to 128 [ 410.399226][ T9522] usb 4-1: config 0 descriptor?? [ 410.441786][ T9610] attempt to access beyond end of device [ 410.441786][ T9610] loop1: rw=2049, want=169, limit=128 [ 410.447427][ T9595] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.459384][ T9595] bridge0: port 2(bridge_slave_1) entered forwarding state [ 410.466431][ T9595] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.473216][ T9595] bridge0: port 1(bridge_slave_0) entered forwarding state [ 410.480698][ T45] attempt to access beyond end of device [ 410.480698][ T45] loop1: rw=1, want=289, limit=128 [ 410.498707][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 410.506411][ T415] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.513600][ T415] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.527123][ T9612] loop1: detected capacity change from 0 to 128 [ 410.534751][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 410.542733][ T415] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.549582][ T415] bridge0: port 1(bridge_slave_0) entered forwarding state [ 410.556802][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 410.565175][ T415] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.572034][ T415] bridge0: port 2(bridge_slave_1) entered forwarding state [ 410.613017][ T456] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 410.623006][ T456] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 410.645806][ T9595] device veth0_vlan entered promiscuous mode [ 410.658727][ T9595] device veth1_macvtap entered promiscuous mode [ 410.692216][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 410.701820][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 410.709955][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 410.717335][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 410.724845][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 410.739707][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 410.749111][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 411.138744][ T9522] plantronics 0003:047F:FFFF.0049: unknown main item tag 0xd [ 411.154150][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 411.181494][ T9522] plantronics 0003:047F:FFFF.0049: No inputs registered, leaving [ 411.239079][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 411.261407][ T9522] plantronics 0003:047F:FFFF.0049: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 411.280032][ T721] device veth1_macvtap left promiscuous mode [ 411.285949][ T721] device veth0_vlan left promiscuous mode [ 411.312678][ T9631] syz-executor.4[9631] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 411.312797][ T9631] syz-executor.4[9631] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 411.416068][ T6] usb 4-1: USB disconnect, device number 34 [ 411.438309][ T9635] xt_bpf: check failed: parse error [ 411.523509][ T9652] overlayfs: failed to create directory ./file0/work (errno: 126); mounting read-only [ 411.533813][ T456] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 411.541535][ T9652] overlayfs: failed to resolve './file1': -2 [ 411.549496][ T9652] overlayfs: failed to create directory ./file0/work (errno: 126); mounting read-only [ 411.723060][ T9657] loop1: detected capacity change from 0 to 512 [ 411.788811][ T9657] EXT4-fs (loop1): 1 truncate cleaned up [ 411.794895][ T9657] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 411.809358][ T9657] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz-executor.1: bg 0: block 7: invalid block bitmap [ 411.934323][ T456] usb 3-1: Using ep0 maxpacket: 16 [ 412.026177][ T9675] loop1: detected capacity change from 0 to 256 [ 412.199065][ T9679] syz-executor.3[9679] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 412.199114][ T9679] syz-executor.3[9679] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 412.244863][ T456] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 412.268194][ T456] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 412.281150][ T456] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 412.281178][ T456] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.281789][ T456] usb 3-1: config 0 descriptor?? [ 412.349333][ T30] audit: type=1400 audit(1718702038.880:13534): avc: denied { create } for pid=9690 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 412.370317][ T30] audit: type=1400 audit(1718702038.880:13535): avc: denied { write } for pid=9690 comm="syz-executor.0" path="socket:[60244]" dev="sockfs" ino=60244 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 412.395071][ T30] audit: type=1400 audit(1718702038.880:13536): avc: denied { nlmsg_read } for pid=9690 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 412.477259][ T9706] syz-executor.4[9706] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 412.477336][ T9706] syz-executor.4[9706] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 412.560790][ T9708] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.579110][ T9708] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.586359][ T9708] device bridge_slave_0 entered promiscuous mode [ 412.593676][ T9708] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.600626][ T415] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 412.608467][ T9708] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.615839][ T9708] device bridge_slave_1 entered promiscuous mode [ 412.676910][ T9708] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.683801][ T9708] bridge0: port 2(bridge_slave_1) entered forwarding state [ 412.690861][ T9708] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.697652][ T9708] bridge0: port 1(bridge_slave_0) entered forwarding state [ 412.722574][ T9522] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 412.730944][ T9522] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.738452][ T9522] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.748533][ T2489] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 412.756580][ T2489] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.763425][ T2489] bridge0: port 1(bridge_slave_0) entered forwarding state [ 412.775204][ T9522] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 412.783263][ T9522] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.790107][ T9522] bridge0: port 2(bridge_slave_1) entered forwarding state [ 412.808542][ T9708] device veth0_vlan entered promiscuous mode [ 412.814775][ T9522] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 412.822772][ T9522] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 412.830618][ T9522] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 412.839115][ T9522] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 412.846686][ T415] usb 4-1: Using ep0 maxpacket: 16 [ 412.851899][ T9522] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 412.860035][ T9522] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 412.868346][ T9522] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 412.876681][ T9522] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 412.884890][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 412.892185][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 412.905734][ T2489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 412.913744][ T2489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 412.923006][ T9708] device veth1_macvtap entered promiscuous mode [ 412.935038][ T6779] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 412.942725][ T6779] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 412.950963][ T6779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 412.959195][ T6779] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 412.964381][ T415] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 412.967386][ T6779] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 412.974977][ T415] usb 4-1: config 0 has no interface number 0 [ 412.988785][ T415] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 412.999508][ T415] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 413.184667][ T415] usb 4-1: New USB device found, idVendor=0082, idProduct=0000, bcdDevice= f.00 [ 413.194217][ T415] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.215784][ T415] usb 4-1: Product: syz [ 413.219930][ T415] usb 4-1: Manufacturer: syz [ 413.301105][ T415] usb 4-1: SerialNumber: syz [ 413.307201][ T415] usb 4-1: config 0 descriptor?? [ 413.553157][ T9687] UDC core: couldn't find an available UDC or it's busy: -16 [ 413.560512][ T9687] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 413.573726][ T9737] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.580726][ T9737] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.589641][ T9737] device bridge_slave_0 entered promiscuous mode [ 413.603361][ T9737] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.612483][ T9737] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.621120][ T9737] device bridge_slave_1 entered promiscuous mode [ 413.687550][ T10] device bridge_slave_1 left promiscuous mode [ 413.694747][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.704138][ T10] device bridge_slave_0 left promiscuous mode [ 413.712700][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.721283][ T10] device veth1_macvtap left promiscuous mode [ 413.727320][ T10] device veth0_vlan left promiscuous mode [ 413.806086][ T30] audit: type=1326 audit(1718702040.340:13537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9754 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b4d83bf29 code=0x7ffc0000 [ 413.835822][ T30] audit: type=1326 audit(1718702040.340:13538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9754 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b4d83bf29 code=0x7ffc0000 [ 413.870680][ T9737] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.877610][ T9737] bridge0: port 2(bridge_slave_1) entered forwarding state [ 413.884337][ T456] usbhid 3-1:0.0: can't add hid device: -71 [ 413.884685][ T9737] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.890338][ T456] usbhid: probe of 3-1:0.0 failed with error -71 [ 413.897189][ T9737] bridge0: port 1(bridge_slave_0) entered forwarding state [ 413.911875][ T456] usb 3-1: USB disconnect, device number 19 [ 413.919069][ T30] audit: type=1326 audit(1718702040.340:13539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9754 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=265 compat=0 ip=0x7f7b4d83bf29 code=0x7ffc0000 [ 413.948161][ T30] audit: type=1326 audit(1718702040.340:13540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9754 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b4d83bf29 code=0x7ffc0000 [ 413.963768][ T6] usb 4-1: USB disconnect, device number 35 [ 413.981541][ T415] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.999021][ T415] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.004623][ T30] audit: type=1326 audit(1718702040.340:13541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9754 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b4d83bf29 code=0x7ffc0000 [ 414.056467][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 414.064048][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 414.086313][ T808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 414.095377][ T808] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 414.103448][ T808] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.110345][ T808] bridge0: port 1(bridge_slave_0) entered forwarding state [ 414.117622][ T808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 414.127377][ T808] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 414.135506][ T808] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.142359][ T808] bridge0: port 2(bridge_slave_1) entered forwarding state [ 414.181541][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 414.195310][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 414.221567][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 414.230373][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 414.255336][ T808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 414.268386][ T808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 414.282451][ T9737] device veth0_vlan entered promiscuous mode [ 414.290888][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 414.299366][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 414.320826][ T9737] device veth1_macvtap entered promiscuous mode [ 414.331788][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 414.344149][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 414.352374][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 414.366987][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 414.375203][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 414.397548][ T2489] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 414.406830][ T2489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 414.431327][ T2489] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 414.451618][ T2489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 414.479151][ T9800] loop1: detected capacity change from 0 to 512 [ 414.492744][ T9803] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 414.512152][ T9803] netlink: 216 bytes leftover after parsing attributes in process `syz-executor.2'. [ 414.529276][ T9800] loop1: detected capacity change from 0 to 512 [ 414.589066][ T9800] EXT4-fs (loop1): orphan cleanup on readonly fs [ 414.595993][ T9800] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz-executor.1: bg 0: block 248: padding at end of block bitmap is not set [ 414.610740][ T9800] Quota error (device loop1): write_blk: dquota write failed [ 414.618167][ T9800] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 414.628927][ T9800] EXT4-fs (loop1): 1 truncate cleaned up [ 414.635244][ T9800] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,abort,noload,noload,,errors=continue. Quota mode: writeback. [ 414.654341][ T456] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 414.661885][ T9800] EXT4-fs error (device loop1): ext4_remount:5845: comm syz-executor.1: Abort forced by user [ 414.672132][ T9800] EXT4-fs (loop1): re-mounted. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,abort,noload,noload,. Quota mode: writeback. [ 414.914394][ T456] usb 5-1: Using ep0 maxpacket: 32 [ 414.955558][ T10] device bridge_slave_1 left promiscuous mode [ 414.961618][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.969204][ T10] device bridge_slave_0 left promiscuous mode [ 414.975409][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.983528][ T10] device veth1_macvtap left promiscuous mode [ 415.034642][ T456] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 415.057170][ T456] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 415.144540][ T6] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 415.198063][ T9847] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.206232][ T9847] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.213853][ T9847] device bridge_slave_0 entered promiscuous mode [ 415.221883][ T9847] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.228985][ T9847] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.236418][ T9847] device bridge_slave_1 entered promiscuous mode [ 415.244451][ T456] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 415.258064][ T456] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.266124][ T456] usb 5-1: Product: syz [ 415.270118][ T456] usb 5-1: Manufacturer: syz [ 415.274656][ T456] usb 5-1: SerialNumber: syz [ 415.318699][ T9847] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.325673][ T9847] bridge0: port 2(bridge_slave_1) entered forwarding state [ 415.332818][ T9847] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.339779][ T9847] bridge0: port 1(bridge_slave_0) entered forwarding state [ 415.368764][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 415.378200][ T415] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.385710][ T415] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.414740][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 415.422841][ T415] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.429708][ T415] bridge0: port 1(bridge_slave_0) entered forwarding state [ 415.437402][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 415.445464][ T415] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.452324][ T415] bridge0: port 2(bridge_slave_1) entered forwarding state [ 415.460091][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 415.468201][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 415.490722][ T808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 415.503743][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 415.511865][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 415.520169][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 415.528871][ T9847] device veth0_vlan entered promiscuous mode [ 415.534382][ T6] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 415.543824][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 415.553512][ T808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 415.555154][ T456] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 35 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 415.565306][ T9847] device veth1_macvtap entered promiscuous mode [ 415.573317][ T6] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 415.592956][ T6] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 415.602040][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.610545][ T6] usb 1-1: config 0 descriptor?? [ 415.620007][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 415.640653][ T808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 415.719859][ T9875] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. [ 415.955252][ T10] device bridge_slave_1 left promiscuous mode [ 415.961329][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.969309][ T10] device bridge_slave_0 left promiscuous mode [ 415.975641][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.984572][ T10] device veth1_macvtap left promiscuous mode [ 415.990510][ T10] device veth0_vlan left promiscuous mode [ 416.105122][ T6] plantronics 0003:047F:FFFF.004A: unknown main item tag 0xd [ 416.112952][ T6] plantronics 0003:047F:FFFF.004A: No inputs registered, leaving [ 416.121273][ T6] plantronics 0003:047F:FFFF.004A: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 416.204080][ T9880] bpf_get_probe_write_proto: 4 callbacks suppressed [ 416.204096][ T9880] syz-executor.2[9880] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 416.210662][ T9880] syz-executor.2[9880] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 416.235528][ T9880] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. [ 416.292512][ T808] usb 5-1: USB disconnect, device number 35 [ 416.303184][ T808] usblp0: removed [ 416.384840][ T6] usb 1-1: USB disconnect, device number 33 [ 416.702858][ T9889] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.710584][ T9889] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.718191][ T9889] device bridge_slave_0 entered promiscuous mode [ 416.728141][ T9889] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.735077][ T9889] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.742385][ T9889] device bridge_slave_1 entered promiscuous mode [ 416.811162][ T9889] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.818039][ T9889] bridge0: port 2(bridge_slave_1) entered forwarding state [ 416.825133][ T9889] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.831892][ T9889] bridge0: port 1(bridge_slave_0) entered forwarding state [ 416.854579][ T2489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 416.862283][ T2489] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.870234][ T2489] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.885066][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 416.893442][ T26] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.900344][ T26] bridge0: port 1(bridge_slave_0) entered forwarding state [ 416.907825][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 416.916142][ T26] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.923017][ T26] bridge0: port 2(bridge_slave_1) entered forwarding state [ 416.935682][ T2489] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 416.954422][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 416.962979][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 416.979934][ T9889] device veth0_vlan entered promiscuous mode [ 416.998263][ T456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 417.008441][ T456] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 417.020857][ T456] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 417.052337][ T456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 417.062379][ T9889] device veth1_macvtap entered promiscuous mode [ 417.069789][ T9905] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=9905 comm=syz-executor.2 [ 417.093717][ T456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 417.117256][ T2489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 417.195485][ T10] device bridge_slave_1 left promiscuous mode [ 417.215014][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.223229][ T10] device bridge_slave_0 left promiscuous mode [ 417.234905][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.243191][ T10] device veth1_macvtap left promiscuous mode [ 417.250028][ T10] device veth0_vlan left promiscuous mode [ 417.537288][ T9919] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.0'. [ 417.622230][ C0] ------------[ cut here ]------------ [ 417.627519][ C0] WARNING: CPU: 0 PID: 0 at kernel/softirq.c:358 __local_bh_enable_ip+0x6c/0x80 [ 417.636452][ C0] Modules linked in: [ 417.640185][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G W 5.15.149-syzkaller-00165-g85445b5a2107 #0 [ 417.650947][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 417.660935][ C0] RIP: 0010:__local_bh_enable_ip+0x6c/0x80 [ 417.666565][ C0] Code: 66 8b 05 e7 87 c0 7e 66 85 c0 75 22 bf 01 00 00 00 e8 98 42 09 00 65 8b 05 59 85 bf 7e 85 c0 74 02 5d c3 e8 5a 99 bd ff 5d c3 <0f> 0b eb a2 e8 0b 00 00 00 eb d7 66 0f 1f 84 00 00 00 00 00 55 48 [ 417.686014][ C0] RSP: 0018:ffffc90000007d00 EFLAGS: 00010006 [ 417.691918][ C0] RAX: 0000000080010203 RBX: ffff8881149158d8 RCX: dffffc0000000000 [ 417.699720][ C0] RDX: 0000000080010203 RSI: 0000000000000201 RDI: ffffffff83fe6af2 [ 417.707533][ C0] RBP: ffffc90000007d00 R08: ffffffff83fe694f R09: 0000000000000003 [ 417.715343][ C0] R10: fffff52000000f94 R11: dffffc0000000001 R12: 0000000000000000 [ 417.723156][ C0] R13: dffffc0000000000 R14: 00000000fffffffe R15: ffff88811bf8f590 [ 417.730966][ C0] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 417.739732][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 417.746153][ C0] CR2: 0000000020001100 CR3: 000000000680f000 CR4: 00000000003506b0 [ 417.753970][ C0] Call Trace: [ 417.757094][ C0] [ 417.759786][ C0] ? show_regs+0x58/0x60 [ 417.763860][ C0] ? __warn+0x160/0x2f0 [ 417.767861][ C0] ? __local_bh_enable_ip+0x6c/0x80 [ 417.772897][ C0] ? report_bug+0x3d9/0x5b0 [ 417.777235][ C0] ? __local_bh_enable_ip+0x6c/0x80 [ 417.782264][ C0] ? handle_bug+0x41/0x70 [ 417.786427][ C0] ? exc_invalid_op+0x1b/0x50 [ 417.790940][ C0] ? asm_exc_invalid_op+0x1b/0x20 [ 417.795802][ C0] ? sock_hash_delete_elem+0xff/0x2f0 [ 417.801010][ C0] ? sock_hash_delete_elem+0x2a2/0x2f0 [ 417.806304][ C0] ? __local_bh_enable_ip+0x6c/0x80 [ 417.811518][ C0] _raw_spin_unlock_bh+0x51/0x60 [ 417.816295][ C0] sock_hash_delete_elem+0x2a2/0x2f0 [ 417.821414][ C0] bpf_prog_bc4ba9860fbb0da4+0x3e/0xe44 [ 417.826794][ C0] bpf_trace_run2+0xec/0x210 [ 417.831225][ C0] ? bpf_trace_run1+0x1c0/0x1c0 [ 417.835907][ C0] ? ktime_get+0x12f/0x160 [ 417.840162][ C0] __bpf_trace_tlb_flush+0x23/0x30 [ 417.845107][ C0] switch_mm_irqs_off+0x616/0x9b0 [ 417.849972][ C0] flush_tlb_func+0x11e/0x550 [ 417.854480][ C0] ? sched_clock+0x9/0x10 [ 417.858646][ C0] ? sched_clock_cpu+0x18/0x3b0 [ 417.863333][ C0] flush_smp_call_function_queue+0x222/0x6a0 [ 417.869152][ C0] ? native_flush_tlb_multi+0x210/0x210 [ 417.874531][ C0] generic_smp_call_function_single_interrupt+0x13/0x20 [ 417.881301][ C0] __sysvec_call_function_single+0x63/0x1b0 [ 417.887117][ C0] sysvec_call_function_single+0x92/0xb0 [ 417.892584][ C0] [ 417.895383][ C0] [ 417.898147][ C0] asm_sysvec_call_function_single+0x1b/0x20 [ 417.903964][ C0] RIP: 0010:acpi_idle_enter+0x416/0x760 [ 417.909340][ C0] Code: 89 de 48 83 e6 08 31 ff e8 f7 30 a7 fc 48 83 e3 08 0f 85 b0 00 00 00 0f 1f 44 00 00 e8 a3 2c a7 fc 0f 00 2d fc 41 c0 00 fb f4 e9 e1 00 00 00 49 83 c7 04 4c 89 f8 48 c1 e8 03 42 0f b6 04 30 [ 417.928954][ C0] RSP: 0018:ffffffff86807bf0 EFLAGS: 000002d3 [ 417.934852][ C0] RAX: ffffffff84c90abd RBX: 0000000000000000 RCX: ffffffff8681d280 [ 417.942663][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 417.950489][ C0] RBP: ffffffff86807c30 R08: ffffffff84c90aa9 R09: fffffbfff0d03a51 [ 417.958291][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000001 [ 417.966100][ C0] R13: ffff888102dcb004 R14: dffffc0000000000 R15: ffff888106996064 [ 417.973919][ C0] ? acpi_idle_enter+0x3f9/0x760 [ 417.978682][ C0] ? acpi_idle_enter+0x40d/0x760 [ 417.983460][ C0] ? intel_idle_ibrs+0x130/0x130 [ 417.988318][ C0] cpuidle_enter_state+0x5e1/0x1550 [ 417.993367][ C0] ? cpuidle_enter_s2idle+0x600/0x600 [ 417.998562][ C0] ? menu_enable_device+0x380/0x380 [ 418.003596][ C0] ? sched_clock_cpu+0x18/0x3b0 [ 418.008457][ C0] cpuidle_enter+0x5f/0xa0 [ 418.012706][ C0] do_idle+0x36b/0x5d0 [ 418.016615][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 418.021650][ C0] cpu_startup_entry+0x18/0x20 [ 418.026257][ C0] rest_init+0x10b/0x130 [ 418.030325][ C0] ? time_init+0x38/0x38 [ 418.034411][ C0] arch_call_rest_init+0xe/0x10 [ 418.039093][ C0] start_kernel+0x462/0x4ce [ 418.043431][ C0] x86_64_start_reservations+0x2a/0x2c [ 418.048727][ C0] x86_64_start_kernel+0x5b/0x5e [ 418.053502][ C0] secondary_startup_64_no_verify+0xb1/0xbb [ 418.059236][ C0] [ 418.062092][ C0] ---[ end trace 23736590a5f53143 ]--- [ 418.154505][ C1] ================================================================== [ 418.162398][ C1] BUG: KASAN: null-ptr-deref in flush_tlb_func+0x43/0x550 [ 418.169335][ C1] Read of size 8 at addr 0000000000000329 by task syz-executor.2/9910 [ 418.177320][ C1] [ 418.179497][ C1] CPU: 1 PID: 9910 Comm: syz-executor.2 Tainted: G W 5.15.149-syzkaller-00165-g85445b5a2107 #0 [ 418.191011][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 418.200843][ C1] Call Trace: [ 418.203967][ C1] [ 418.206660][ C1] dump_stack_lvl+0x151/0x1b7 [ 418.211170][ C1] ? io_uring_drop_tctx_refs+0x190/0x190 [ 418.216637][ C1] ? stack_trace_save+0x1c0/0x1c0 [ 418.221496][ C1] ? __kernel_text_address+0x9b/0x110 [ 418.226704][ C1] kasan_report+0x16f/0x1c0 [ 418.231046][ C1] ? flush_tlb_func+0x43/0x550 [ 418.235644][ C1] ? flush_tlb_func+0x43/0x550 [ 418.240245][ C1] kasan_check_range+0x293/0x2a0 [ 418.245019][ C1] __kasan_check_read+0x11/0x20 [ 418.249711][ C1] flush_tlb_func+0x43/0x550 [ 418.254132][ C1] ? kvm_sched_clock_read+0x18/0x40 [ 418.259165][ C1] ? sched_clock+0x9/0x10 [ 418.263331][ C1] ? sched_clock_cpu+0x18/0x3b0 [ 418.268022][ C1] flush_smp_call_function_queue+0x222/0x6a0 [ 418.273834][ C1] ? debug_smp_processor_id+0x17/0x20 [ 418.279044][ C1] ? native_flush_tlb_multi+0x210/0x210 [ 418.284424][ C1] generic_smp_call_function_single_interrupt+0x13/0x20 [ 418.291195][ C1] __sysvec_call_function_single+0x63/0x1b0 [ 418.297010][ C1] sysvec_call_function_single+0x41/0xb0 [ 418.302478][ C1] asm_sysvec_call_function_single+0x1b/0x20 [ 418.308299][ C1] RIP: 0010:find_match+0xc1/0xe70 [ 418.313176][ C1] Code: 00 4c 89 7d d0 49 03 1f 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 12 e7 5a fd 48 8b 1b <48> 85 db 0f 84 06 0b 00 00 48 81 c3 08 04 00 00 48 89 d8 48 c1 e8 [ 418.332602][ C1] RSP: 0000:ffffc900001d01c8 EFLAGS: 00000246 [ 418.338500][ C1] RAX: 1ffff110225f845e RBX: ffff888106bdd000 RCX: dffffc0000000000 [ 418.346394][ C1] RDX: ffff888116e2e2c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 418.354307][ C1] RBP: ffffc900001d0270 R08: ffffffff84578963 R09: ffffc900001d0530 [ 418.362103][ C1] R10: ffffc900001d0520 R11: dffffc0000000001 R12: 1ffff11024b50e16 [ 418.369916][ C1] R13: 0000000000000003 R14: 0000000000000000 R15: ffff888125a870b0 [ 418.377732][ C1] ? find_match+0x63/0xe70 [ 418.381988][ C1] ? find_match+0x63/0xe70 [ 418.386272][ C1] ? get_rps_cpu+0x840/0x840 [ 418.390746][ C1] __find_rr_leaf+0x276/0xb70 [ 418.395260][ C1] ? memcpy+0x56/0x70 [ 418.399076][ C1] ? rt6_remove_exception+0x370/0x370 [ 418.404285][ C1] ? flow_hash_from_keys+0x4c6/0x8e0 [ 418.409405][ C1] ? fib6_node_lookup+0x51e/0x550 [ 418.414268][ C1] fib6_table_lookup+0x338/0xaf0 [ 418.419041][ C1] ? fib6_nh_age_exceptions+0x9e0/0x9e0 [ 418.424421][ C1] ip6_pol_route+0x151/0x14b0 [ 418.428933][ C1] ? fib6_table_lookup+0xaf0/0xaf0 [ 418.433882][ C1] ? __kasan_check_read+0x11/0x20 [ 418.438741][ C1] ? kthread_is_per_cpu+0xbc/0xf0 [ 418.443604][ C1] ip6_pol_route_input+0x55/0x80 [ 418.448375][ C1] fib6_rule_lookup+0x25a/0x620 [ 418.453069][ C1] ? ip6_route_input_lookup+0xd0/0xd0 [ 418.458275][ C1] ? fib6_lookup+0x3f0/0x3f0 [ 418.462936][ C1] ? __local_bh_enable_ip+0x58/0x80 [ 418.467973][ C1] ? local_bh_enable+0x1f/0x30 [ 418.472567][ C1] ? ip6t_do_table+0x1662/0x1850 [ 418.477341][ C1] ? ip6_route_input+0x245/0xb60 [ 418.482112][ C1] ? __ipv6_addr_type+0x15e/0x2f0 [ 418.486971][ C1] ip6_route_input+0x724/0xb60 [ 418.491572][ C1] ? ip6_multipath_l3_keys+0x610/0x610 [ 418.496866][ C1] ? sock_def_write_space+0x214/0x2b0 [ 418.502075][ C1] ? sk_setup_caps+0x430/0x430 [ 418.506672][ C1] ip6_rcv_finish+0x150/0x350 [ 418.511197][ C1] ipv6_rcv+0xeb/0x270 [ 418.515093][ C1] ? ip6_rcv_finish+0x350/0x350 [ 418.519782][ C1] ? refcount_add+0x80/0x80 [ 418.524122][ C1] ? kasan_save_stack+0x4b/0x60 [ 418.528807][ C1] ? kasan_save_stack+0x3b/0x60 [ 418.533492][ C1] ? ip6_rcv_finish+0x350/0x350 [ 418.538183][ C1] __netif_receive_skb+0x1c6/0x530 [ 418.543129][ C1] ? __sysvec_call_function_single+0x63/0x1b0 [ 418.549028][ C1] ? sysvec_call_function_single+0x92/0xb0 [ 418.554670][ C1] ? asm_sysvec_call_function_single+0x1b/0x20 [ 418.560659][ C1] ? __schedule+0xcd4/0x1590 [ 418.565100][ C1] ? schedule+0x11f/0x1e0 [ 418.569255][ C1] ? exit_to_user_mode_loop+0x4d/0xe0 [ 418.574457][ C1] ? exit_to_user_mode_prepare+0x5a/0xa0 [ 418.579926][ C1] ? deliver_ptype_list_skb+0x3b0/0x3b0 [ 418.585308][ C1] ? __kasan_check_write+0x14/0x20 [ 418.590255][ C1] ? _raw_spin_lock+0xa4/0x1b0 [ 418.594856][ C1] ? _raw_spin_trylock_bh+0x190/0x190 [ 418.600065][ C1] process_backlog+0x31c/0x650 [ 418.604664][ C1] __napi_poll+0xc4/0x5a0 [ 418.608831][ C1] net_rx_action+0x47d/0xc50 [ 418.613258][ C1] ? net_tx_action+0x550/0x550 [ 418.617856][ C1] ? kvm_sched_clock_read+0x18/0x40 [ 418.622890][ C1] ? sched_clock+0x9/0x10 [ 418.627055][ C1] ? irqtime_account_irq+0x79/0x3c0 [ 418.632091][ C1] __do_softirq+0x26d/0x5bf [ 418.636431][ C1] do_softirq+0xf6/0x150 [ 418.640585][ C1] [ 418.643290][ C1] [ 418.646066][ C1] ? __local_bh_enable_ip+0x80/0x80 [ 418.651105][ C1] ? _raw_spin_lock_bh+0xa4/0x1b0 [ 418.655960][ C1] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 418.660993][ C1] __local_bh_enable_ip+0x75/0x80 [ 418.665866][ C1] _raw_spin_unlock_bh+0x51/0x60 [ 418.670627][ C1] sock_hash_delete_elem+0x2a2/0x2f0 [ 418.675874][ C1] bpf_prog_bc4ba9860fbb0da4+0x3e/0xe44 [ 418.681215][ C1] bpf_trace_run2+0xec/0x210 [ 418.685649][ C1] ? bpf_trace_run1+0x1c0/0x1c0 [ 418.690327][ C1] ? bpf_trace_run2+0x210/0x210 [ 418.695016][ C1] ? __this_cpu_preempt_check+0x13/0x20 [ 418.700396][ C1] __bpf_trace_tlb_flush+0x23/0x30 [ 418.705347][ C1] switch_mm_irqs_off+0x616/0x9b0 [ 418.710203][ C1] ? __bpf_trace_sched_switch+0xb/0x10 [ 418.715500][ C1] __schedule+0xb2b/0x1590 [ 418.719754][ C1] ? __sched_text_start+0x8/0x8 [ 418.724437][ C1] ? irqtime_account_irq+0x20d/0x3c0 [ 418.729569][ C1] schedule+0x11f/0x1e0 [ 418.733558][ C1] exit_to_user_mode_loop+0x4d/0xe0 [ 418.738588][ C1] exit_to_user_mode_prepare+0x5a/0xa0 [ 418.743880][ C1] irqentry_exit_to_user_mode+0x9/0x20 [ 418.749176][ C1] irqentry_exit+0x12/0x40 [ 418.753427][ C1] sysvec_apic_timer_interrupt+0x55/0xc0 [ 418.758895][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 418.764711][ C1] RIP: 0033:0x7fbed390eacd [ 418.768961][ C1] Code: Unable to access opcode bytes at RIP 0x7fbed390eaa3. [ 418.776260][ C1] RSP: 002b:00007ffc6f1d7480 EFLAGS: 00000216 [ 418.782159][ C1] RAX: 00007fbed33aefe8 RBX: 00007fbed330cbd0 RCX: ffffffff8237cb02 [ 418.789970][ C1] RDX: ffffffff8187cfa8 RSI: ffffffff816a36f4 RDI: 00007fbed340e180 [ 418.797777][ C1] RBP: 00007fbed32d5010 R08: 00007fbed33718c0 R09: 000000008187cb33 [ 418.805593][ C1] R10: 000000000000fd72 R11: 000000008187cb33 R12: 00007fbed32d5008 [ 418.813400][ C1] R13: 0000000000000020 R14: 00000000001ffff8 R15: 00007fbed3a8a018 [ 418.821218][ C1] ? security_unix_may_send+0x22/0xa0 [ 418.826420][ C1] ? bpf_get_current_uid_gid+0x38/0xf0 [ 418.831714][ C1] ? __cgroup_account_cputime+0x24/0x120 [ 418.837194][ C1] [ 418.840048][ C1] ================================================================== [ 418.847945][ C1] Disabling lock debugging due to kernel taint [ 418.853978][ C1] general protection fault, probably for non-canonical address 0xdffffc0000000065: 0000 [#1] PREEMPT SMP KASAN [ 418.865479][ C1] KASAN: null-ptr-deref in range [0x0000000000000328-0x000000000000032f] [ 418.873723][ C1] CPU: 1 PID: 9910 Comm: syz-executor.2 Tainted: G B W 5.15.149-syzkaller-00165-g85445b5a2107 #0 [ 418.885178][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 418.895076][ C1] RIP: 0010:flush_tlb_func+0x4a/0x550 [ 418.900281][ C1] Code: 8b 35 2a 96 cd 7e 65 66 44 8b 25 31 96 cd 7e 49 8d 9e 28 03 00 00 48 89 df be 08 00 00 00 e8 fd 97 7c 00 48 89 d8 48 c1 e8 03 <42> 80 3c 38 00 74 08 48 89 df e8 07 96 7c 00 4c 8b 3b 66 44 89 65 [ 418.919724][ C1] RSP: 0000:ffffc900001cfff0 EFLAGS: 00010006 [ 418.925626][ C1] RAX: 0000000000000065 RBX: 0000000000000329 RCX: ffff888116e2e2c0 [ 418.933436][ C1] RDX: 0000000080010104 RSI: 0000000000000096 RDI: 00000000ffffffff [ 418.941249][ C1] RBP: ffffc900001d0060 R08: ffffffff8141701b R09: 0000000000000003 [ 418.949059][ C1] R10: fffffbfff0e5284c R11: dffffc0000000001 R12: 1ffff1103ee20000 [ 418.956870][ C1] R13: ffff8881f7037180 R14: 0000000000000001 R15: dffffc0000000000 [ 418.964682][ C1] FS: 00005555556cb480(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 418.973452][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 418.979869][ C1] CR2: 0000000020001100 CR3: 000000010f6a2000 CR4: 00000000003506a0 [ 418.987684][ C1] Call Trace: [ 418.990808][ C1] [ 418.993499][ C1] ? __die_body+0x62/0xb0 [ 418.997665][ C1] ? die_addr+0x9f/0xd0 [ 419.001656][ C1] ? exc_general_protection+0x311/0x4b0 [ 419.007042][ C1] ? asm_exc_general_protection+0x27/0x30 [ 419.012591][ C1] ? check_panic_on_warn+0x5b/0xb0 [ 419.017541][ C1] ? flush_tlb_func+0x4a/0x550 [ 419.022139][ C1] ? kvm_sched_clock_read+0x18/0x40 [ 419.027176][ C1] ? sched_clock+0x9/0x10 [ 419.031338][ C1] ? sched_clock_cpu+0x18/0x3b0 [ 419.036028][ C1] flush_smp_call_function_queue+0x222/0x6a0 [ 419.041842][ C1] ? debug_smp_processor_id+0x17/0x20 [ 419.047049][ C1] ? native_flush_tlb_multi+0x210/0x210 [ 419.052430][ C1] generic_smp_call_function_single_interrupt+0x13/0x20 [ 419.059202][ C1] __sysvec_call_function_single+0x63/0x1b0 [ 419.064935][ C1] sysvec_call_function_single+0x41/0xb0 [ 419.070398][ C1] asm_sysvec_call_function_single+0x1b/0x20 [ 419.076298][ C1] RIP: 0010:find_match+0xc1/0xe70 [ 419.081160][ C1] Code: 00 4c 89 7d d0 49 03 1f 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 12 e7 5a fd 48 8b 1b <48> 85 db 0f 84 06 0b 00 00 48 81 c3 08 04 00 00 48 89 d8 48 c1 e8 [ 419.100601][ C1] RSP: 0000:ffffc900001d01c8 EFLAGS: 00000246 [ 419.106503][ C1] RAX: 1ffff110225f845e RBX: ffff888106bdd000 RCX: dffffc0000000000 [ 419.114313][ C1] RDX: ffff888116e2e2c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 419.122126][ C1] RBP: ffffc900001d0270 R08: ffffffff84578963 R09: ffffc900001d0530 [ 419.129939][ C1] R10: ffffc900001d0520 R11: dffffc0000000001 R12: 1ffff11024b50e16 [ 419.137847][ C1] R13: 0000000000000003 R14: 0000000000000000 R15: ffff888125a870b0 [ 419.145660][ C1] ? find_match+0x63/0xe70 [ 419.149909][ C1] ? find_match+0x63/0xe70 [ 419.154161][ C1] ? get_rps_cpu+0x840/0x840 [ 419.158585][ C1] __find_rr_leaf+0x276/0xb70 [ 419.163099][ C1] ? memcpy+0x56/0x70 [ 419.166920][ C1] ? rt6_remove_exception+0x370/0x370 [ 419.172127][ C1] ? flow_hash_from_keys+0x4c6/0x8e0 [ 419.177249][ C1] ? fib6_node_lookup+0x51e/0x550 [ 419.182110][ C1] fib6_table_lookup+0x338/0xaf0 [ 419.186885][ C1] ? fib6_nh_age_exceptions+0x9e0/0x9e0 [ 419.192264][ C1] ip6_pol_route+0x151/0x14b0 [ 419.196776][ C1] ? fib6_table_lookup+0xaf0/0xaf0 [ 419.201724][ C1] ? __kasan_check_read+0x11/0x20 [ 419.206583][ C1] ? kthread_is_per_cpu+0xbc/0xf0 [ 419.211444][ C1] ip6_pol_route_input+0x55/0x80 [ 419.216217][ C1] fib6_rule_lookup+0x25a/0x620 [ 419.220904][ C1] ? ip6_route_input_lookup+0xd0/0xd0 [ 419.226113][ C1] ? fib6_lookup+0x3f0/0x3f0 [ 419.230537][ C1] ? __local_bh_enable_ip+0x58/0x80 [ 419.235571][ C1] ? local_bh_enable+0x1f/0x30 [ 419.240171][ C1] ? ip6t_do_table+0x1662/0x1850 [ 419.244946][ C1] ? ip6_route_input+0x245/0xb60 [ 419.249718][ C1] ? __ipv6_addr_type+0x15e/0x2f0 [ 419.254581][ C1] ip6_route_input+0x724/0xb60 [ 419.259188][ C1] ? ip6_multipath_l3_keys+0x610/0x610 [ 419.264511][ C1] ? sock_def_write_space+0x214/0x2b0 [ 419.269683][ C1] ? sk_setup_caps+0x430/0x430 [ 419.274286][ C1] ip6_rcv_finish+0x150/0x350 [ 419.278797][ C1] ipv6_rcv+0xeb/0x270 [ 419.282702][ C1] ? ip6_rcv_finish+0x350/0x350 [ 419.287562][ C1] ? refcount_add+0x80/0x80 [ 419.291903][ C1] ? kasan_save_stack+0x4b/0x60 [ 419.296596][ C1] ? kasan_save_stack+0x3b/0x60 [ 419.301390][ C1] ? ip6_rcv_finish+0x350/0x350 [ 419.306051][ C1] __netif_receive_skb+0x1c6/0x530 [ 419.311010][ C1] ? __sysvec_call_function_single+0x63/0x1b0 [ 419.316907][ C1] ? sysvec_call_function_single+0x92/0xb0 [ 419.322541][ C1] ? asm_sysvec_call_function_single+0x1b/0x20 [ 419.328535][ C1] ? __schedule+0xcd4/0x1590 [ 419.332990][ C1] ? schedule+0x11f/0x1e0 [ 419.338016][ C1] ? exit_to_user_mode_loop+0x4d/0xe0 [ 419.343282][ C1] ? exit_to_user_mode_prepare+0x5a/0xa0 [ 419.348782][ C1] ? deliver_ptype_list_skb+0x3b0/0x3b0 [ 419.354265][ C1] ? __kasan_check_write+0x14/0x20 [ 419.359193][ C1] ? _raw_spin_lock+0xa4/0x1b0 [ 419.363792][ C1] ? _raw_spin_trylock_bh+0x190/0x190 [ 419.368998][ C1] process_backlog+0x31c/0x650 [ 419.373599][ C1] __napi_poll+0xc4/0x5a0 [ 419.377763][ C1] net_rx_action+0x47d/0xc50 [ 419.382191][ C1] ? net_tx_action+0x550/0x550 [ 419.386792][ C1] ? kvm_sched_clock_read+0x18/0x40 [ 419.391824][ C1] ? sched_clock+0x9/0x10 [ 419.395996][ C1] ? irqtime_account_irq+0x79/0x3c0 [ 419.401037][ C1] __do_softirq+0x26d/0x5bf [ 419.405375][ C1] do_softirq+0xf6/0x150 [ 419.409444][ C1] [ 419.412220][ C1] [ 419.415113][ C1] ? __local_bh_enable_ip+0x80/0x80 [ 419.420125][ C1] ? _raw_spin_lock_bh+0xa4/0x1b0 [ 419.424981][ C1] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 419.430015][ C1] __local_bh_enable_ip+0x75/0x80 [ 419.434875][ C1] _raw_spin_unlock_bh+0x51/0x60 [ 419.439733][ C1] sock_hash_delete_elem+0x2a2/0x2f0 [ 419.444875][ C1] bpf_prog_bc4ba9860fbb0da4+0x3e/0xe44 [ 419.450235][ C1] bpf_trace_run2+0xec/0x210 [ 419.454662][ C1] ? bpf_trace_run1+0x1c0/0x1c0 [ 419.459351][ C1] ? bpf_trace_run2+0x210/0x210 [ 419.464037][ C1] ? __this_cpu_preempt_check+0x13/0x20 [ 419.469418][ C1] __bpf_trace_tlb_flush+0x23/0x30 [ 419.474364][ C1] switch_mm_irqs_off+0x616/0x9b0 [ 419.479224][ C1] ? __bpf_trace_sched_switch+0xb/0x10 [ 419.484521][ C1] __schedule+0xb2b/0x1590 [ 419.488772][ C1] ? __sched_text_start+0x8/0x8 [ 419.493461][ C1] ? irqtime_account_irq+0x20d/0x3c0 [ 419.498583][ C1] schedule+0x11f/0x1e0 [ 419.502572][ C1] exit_to_user_mode_loop+0x4d/0xe0 [ 419.507605][ C1] exit_to_user_mode_prepare+0x5a/0xa0 [ 419.512901][ C1] irqentry_exit_to_user_mode+0x9/0x20 [ 419.518196][ C1] irqentry_exit+0x12/0x40 [ 419.522448][ C1] sysvec_apic_timer_interrupt+0x55/0xc0 [ 419.527918][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 419.533730][ C1] RIP: 0033:0x7fbed390eacd [ 419.537982][ C1] Code: Unable to access opcode bytes at RIP 0x7fbed390eaa3. [ 419.545193][ C1] RSP: 002b:00007ffc6f1d7480 EFLAGS: 00000216 [ 419.551088][ C1] RAX: 00007fbed33aefe8 RBX: 00007fbed330cbd0 RCX: ffffffff8237cb02 [ 419.558902][ C1] RDX: ffffffff8187cfa8 RSI: ffffffff816a36f4 RDI: 00007fbed340e180 [ 419.566711][ C1] RBP: 00007fbed32d5010 R08: 00007fbed33718c0 R09: 000000008187cb33 [ 419.574523][ C1] R10: 000000000000fd72 R11: 000000008187cb33 R12: 00007fbed32d5008 [ 419.582363][ C1] R13: 0000000000000020 R14: 00000000001ffff8 R15: 00007fbed3a8a018 [ 419.590154][ C1] ? security_unix_may_send+0x22/0xa0 [ 419.595356][ C1] ? bpf_get_current_uid_gid+0x38/0xf0 [ 419.600648][ C1] ? __cgroup_account_cputime+0x24/0x120 [ 419.606118][ C1] [ 419.608988][ C1] Modules linked in: [ 419.612726][ C1] ---[ end trace 23736590a5f53144 ]--- [ 419.618019][ C1] RIP: 0010:flush_tlb_func+0x4a/0x550 [ 419.623304][ C1] Code: 8b 35 2a 96 cd 7e 65 66 44 8b 25 31 96 cd 7e 49 8d 9e 28 03 00 00 48 89 df be 08 00 00 00 e8 fd 97 7c 00 48 89 d8 48 c1 e8 03 <42> 80 3c 38 00 74 08 48 89 df e8 07 96 7c 00 4c 8b 3b 66 44 89 65 [ 419.642945][ C1] RSP: 0000:ffffc900001cfff0 EFLAGS: 00010006 [ 419.648842][ C1] RAX: 0000000000000065 RBX: 0000000000000329 RCX: ffff888116e2e2c0 [ 419.656652][ C1] RDX: 0000000080010104 RSI: 0000000000000096 RDI: 00000000ffffffff [ 419.664461][ C1] RBP: ffffc900001d0060 R08: ffffffff8141701b R09: 0000000000000003 [ 419.672271][ C1] R10: fffffbfff0e5284c R11: dffffc0000000001 R12: 1ffff1103ee20000 [ 419.680264][ C1] R13: ffff8881f7037180 R14: 0000000000000001 R15: dffffc0000000000 [ 419.688332][ C1] FS: 00005555556cb480(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 419.697203][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 419.703632][ C1] CR2: 0000000020001100 CR3: 000000010f6a2000 CR4: 00000000003506a0 [ 419.711452][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 420.826297][ C1] Shutting down cpus with NMI [ 420.831019][ C1] Kernel Offset: disabled [ 420.835144][ C1] Rebooting in 86400 seconds..