last executing test programs: 5.301869923s ago: executing program 4 (id=595): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='kmem_cache_free\x00', r0}, 0x18) creat(&(0x7f0000000000)='./file0\x00', 0x122) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4f0c3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x4000000000000c5, 0x400) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000140)={0xa, 0xe22}, 0x1c) r6 = socket$netlink(0x10, 0x3, 0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, 0x0, 0x0) listen(r7, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03adcac4b74ffffffffffffffffffffffe7ee", 0x4d}], 0x1) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000005c0)={{{@in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4e24, 0x0, 0x4e23, 0xe, 0xa, 0xa0, 0xa0, 0x87}, {0x1, 0x5, 0x8001, 0xa, 0x2, 0x80000001, 0x7, 0x6}, {0x6, 0x8, 0x6, 0x5}, 0x57, 0x0, 0x1, 0x3de5d14c50aa3b33, 0x2, 0x2}, {{@in=@local, 0x4d2, 0xff}, 0x2, @in=@rand_addr=0x64010100, 0x3504, 0x4, 0x0, 0x9, 0x8, 0x10000, 0x3}}, 0xe8) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000940)={'batadv_slave_1\x00'}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b40)={r0, 0xe0, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a00), 0x0, 0x6f, &(0x7f0000000a40)=[{}], 0x8, 0x10, &(0x7f0000000a80), &(0x7f0000000ac0), 0x8, 0x1e, 0x8, 0x0, 0x0}}, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r6, &(0x7f0000000bc0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000ec0)={0xf0, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe}, 0xf0}, 0x1, 0x0, 0x0, 0x2000c801}, 0x4000) (fail_nth: 3) socket$unix(0x1, 0x5, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000780)='./bus\x00', 0x41, &(0x7f0000000c00)={[{@bsdgroups}, {@resgid}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@resuid}, {@auto_da_alloc}, {@noload}, {@jqfmt_vfsv1}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") 5.10022609s ago: executing program 2 (id=597): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x40000, 0x0, 0x2, 0x1}}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x8, 0x0, 0x0, 0x0, 0xff, 0x0, [0x0, 0x25]}}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x3fa1dc947ffe4b82}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="05000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) get_robust_list(0x0, &(0x7f0000000300)=0x0, &(0x7f0000000340)) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000007d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@fallback=r3, r3, 0x13, 0x18, 0x0, @void, @value=r3}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x5e0}, 0x18) r4 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1e7d, 0x2ced, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x5, 0x1, {0x22, 0x2}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000440)={0x2c, &(0x7f0000000280)={0x20, 0x29, 0x2, {0x2, 0xf}}, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) 3.927918824s ago: executing program 1 (id=598): r0 = socket$inet(0x2, 0x6, 0x6) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @multicast1}, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x33}}, 0x81, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5d, 0x27, 0x1}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") creat(&(0x7f0000000000)='./file2\x00', 0x149) mkdirat(0xffffffffffffff9c, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000340)='system.posix_acl_default\x00', &(0x7f0000000000), 0x24, 0x0) getpid() lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) 3.172458835s ago: executing program 4 (id=601): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 2.98745376s ago: executing program 1 (id=602): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r1 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@ethernet={0x0, @local}, &(0x7f0000000180)=0x80, 0x800) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) ioctl$sock_TIOCOUTQ(r3, 0x5411, &(0x7f0000000200)) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x4e1e2563543d84f9}, @TCA_TBF_PBURST={0x8, 0x7, 0x1fc0}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0xffff}, {0x0, 0x0, 0x0, 0x8, 0x2, 0x3}, 0x0, 0x81}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcb59372f370e8465}]}}]}, 0x78}}, 0x4000080) bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @remote}, 0x14) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000005c0)={{{@in=@local, @in6=@remote, 0x4e21, 0x6, 0x4e21, 0xb5b, 0x2, 0x0, 0x20, 0x87, r5, r6}, {0x8, 0x100000000, 0x8, 0x3, 0x60d530f1, 0x0, 0x0, 0xfffffffffffffffa}, {0x9, 0x8000000000000001, 0xfffffffffffff801}, 0xb45, 0x6e6bb9, 0x2, 0x1, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x32}, 0xa, @in=@local, 0x3502, 0x1, 0x1, 0x7, 0x9, 0x4, 0x10000}}, 0xe8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1afb640cf24e459220900000001090212ad8c0000000009042100000806"], 0x0) 2.98667034s ago: executing program 4 (id=603): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='percpu_free_percpu\x00', r0}, 0x18) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newlink={0x44, 0x10, 0x40d, 0x70bd25, 0x25ffdbfc, {0x0, 0x0, 0x0, 0x0, 0x10, 0x44802}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STATS_ENABLED={0x5, 0x2a, 0x1}, @IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x7}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc8b6}, 0x0) 2.934077914s ago: executing program 4 (id=604): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="000005"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000004c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0, 0x0}, 0x0) 1.511172149s ago: executing program 1 (id=606): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sys_enter\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000580)='./bus\x00', 0x200080, &(0x7f0000000180), 0x1, 0x783, &(0x7f0000001000)="$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") r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000080)={@loopback, @broadcast}, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmsg$nl_route_sched(r4, 0x0, 0x20000000) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 1.460481223s ago: executing program 1 (id=607): ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f0000"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$tipc(r5, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x480c0}, 0x0) 1.363740391s ago: executing program 2 (id=608): ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) unshare(0x60000480) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r5, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x480c0}, 0x0) 726.734722ms ago: executing program 4 (id=611): r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x10000, @loopback, 0x5}, 0x1c) r1 = socket$inet6(0xa, 0x3, 0x8) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000040)={{{@in=@initdev, @in=@loopback}}, {{@in6=@mcast2}, 0x0, @in=@empty}}, &(0x7f0000000140)=0xe8) r2 = dup(r1) ioctl$KDADDIO(r2, 0x4b34, 0x1) r3 = socket$packet(0x11, 0x3, 0x300) sendmmsg$sock(r3, &(0x7f0000001d40)=[{{&(0x7f0000000180)=@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80, &(0x7f0000001580)=[{&(0x7f0000000200)="deaa41c930c168a2f9b12dd1c10f54ae465dd3b1fc40852d5db94dcec56523436b4943c5468cb33508ee7257602f67803895cc56edf0c37ea7e4f374ffe51a8193495f0dcd3ce28341aaad1bd4c51e7bb1ba98666e33a3f4554c5390789297bb84483016352c529dd66d4dcf6f86fed4b2940ee03563cc33941e4a45a3", 0x7d}, {&(0x7f0000000280)="3c7903a297b9a7d7c2026183c016a926c6c93a6d278dea37c19090045089dc113c9bfecb09ee2c433b286926d827c8739714bfb70951b9b3c842e103fd4b1a5956e2b451d631c2d3dc8164633c5f6853fafac780a192492c8521e21e7da2bcc6bcfa32a93a760b2cd7fa9b57a30f2f63c47b016f56dc79e9e7981bd26d70e08dcb0e407513f5b1a4c6d71d63f30b7f55697f6e1d84ac349907592173098ea0b2ed88d0f685ac6cda0b921fa8c56167ec8c17b2a3c91ae891d4cfd528befcaae1ef372afa6b4589360368e6481e0f8c4e3ae8675718296f4efc047f9798550a8d58ff696703708693bd3a968e9be8b132896e72ed90e849", 0xf7}, {&(0x7f0000000380)="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", 0xfa}, {&(0x7f0000000480)="e34d0a085bf3be2b1d7ccc33b979431d5110645196b37355ff0a8ba991e79bec949a7d650587a8259b31655187cffdbaafc9497366cde601b74f3094a4032c53406765dfd2d908ffa00c39850f0168d168aa1812ebb13d77072fd5f2407a6b866eb97728f4550e256f3416ea8d7d4dd4d507e701c8ab43c213e5a3d6eebca3928a2faadeb2a41c51e062dc52476c3ca02732455425d4ef3fdcf7dcaa82", 0x9d}, {&(0x7f0000000540)="a19e0166b87563163346bb2e3d022d0943c4d8dda5ade1da6f56905deee3c0b7538608e033f76ab2cf05a41085654296f7d998", 0x33}, {&(0x7f0000000580)="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", 0x1000}], 0x6, &(0x7f0000001600)=[@timestamping={{0x14, 0x1, 0x25, 0x34da}}], 0x18}}, {{&(0x7f0000001640)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x80, &(0x7f0000001840)=[{&(0x7f00000016c0)="65c81422baa318185a6200539fd9875fb45b2c347c3fc645c17da3ef2f0d1a4562c44917cb", 0x25}, {&(0x7f0000001700)="1d7c58f97d3e4a4de362e74617ecacee32fff7abaaed34d5103380f81ce6430b2702b27398bb9a1e1a97be323425e77c7d384f2418d5c154caa8edf7fbf4ef59a69e08ea5f241cfce60e46a4a8b3a268ec6f31ea88871099791ce74635fab5a4f5f9585771fd57a95f13975d5e460755f1e49041594fbd50", 0x78}, {&(0x7f0000001780)="2f27faf85bd6ae1ab97b846172a0d747a4ed7d40bf4f425bc79567400f2b214ef672b8e21ca036c21e0364dc2480beddaba9d26b63d73db502e07051a9fc291ff0f9e2760508c87589b27b5e3fc5d11949b2cfa2fecd138eb394d3e7a8153d66bca82b03acb9e848111232936c6c9d1abb884cbe72c45a71003160a5e8c9c0cac047880b4284440af4cd4de0b2e7ebb8a4e1bab9da9d12187e9a1dc727227b488c28e88ad6bd548809bb", 0xaa}], 0x3, &(0x7f0000001880)=[@txtime={{0x18, 0x1, 0x3d, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}, @timestamping={{0x14}}], 0x78}}, {{&(0x7f0000001900)=@in6={0xa, 0x4e20, 0xcd5c, @mcast2, 0x80000001}, 0x80, &(0x7f0000001a80)=[{&(0x7f0000001980)="b19c22da98d8fc96c1347b025c1dc445bb3f9c637c40c750a46bf1786a1f153ea416df8b31e5bfd60e1ab72714a979c8f2221f52566f79a35181f07aa83e257ae258307396dc148733c42620c3cc2d4b8a1648238b3e52ec1a5cebade53af530c0d5489e4fd9c99242544b417c14fa743aabd8f95acd170325134f428b9ad075da6db455e3d24517437d0eb3bb5f73497b6cfcb00ab46f9ad8a86d7a812a9596ae2f85226d61b41feffa2212d3a79ffc70dbaf3c5fe50a70cdd56b0f896270659e9667b4426c14a9069124b95862261090c6094cb4b304050e4455d19c4a81caf4a7e5918ee9a6a28e0d5f1cff82edb0de936e978628", 0xf6}], 0x1}}, {{&(0x7f0000001ac0)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7}, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x80, &(0x7f0000001d00)=[{&(0x7f0000001b40)="f5e2dacd5c7db4d0b67fdfda593422ae74ec3820e829c88e37ea00f9e1887828e0b4c667c05530fe099ee4ef092e99fa182d46b96d5fab92c6ac8a7cd24c5bdd120e3dd8ba20791b3e2ba334765bbbe99c99f3704ed03d279345ee100a1c487e00c38a9e2af95c358f7ed6ad4baf40febb9444e462929d532f38b5e998d5a3da44fefa601d4476da63d826a0ecbb8eb6", 0x90}, {&(0x7f0000001c00)="3b80aa2f840a", 0x6}, {&(0x7f0000001c40)="2cae425d5b9795f403ea885c591a5bafa08056a898da12cba27f9d3df7434d47aba51aff1540adb34a0c01697559a4fc33a6676f3c50c38109af429c7ce16fdc71a55b4f302fadd092a427f34f3a90917b59502a09f3c037", 0x58}, {&(0x7f0000001cc0)="4c36df78a815a936de587d132c91f072c2bf816cae263e9fbc8621dd49695460a63dfeb0153c0e5f85763c8bd7", 0x2d}], 0x4}}], 0x4, 0x40050) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r2, 0x111, 0x5, 0x4, 0x4) r4 = fcntl$getown(r0, 0x9) setpriority(0x2, r4, 0x1000) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000001e40)={0x6, 0x0, [{0x34c, 0x0, 0xf}, {0x630, 0x0, 0x27e7f287}, {0x20d, 0x0, 0x1a3}, {0x98d}, {0x93a, 0x0, 0x5}, {0xdc0, 0x0, 0x7}]}) prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ffc000/0x4000)=nil) r5 = fcntl$dupfd(r2, 0x0, r1) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000003, 0x2010, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000001ec0)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}}) getsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000001f00)=""/50, &(0x7f0000001f40)=0x32) syz_clone(0x10181080, &(0x7f0000001f80)="bb192e6e7f8fe173aafe5d53b5a1175eac213fbffad2331b34c9764fb4fef602b1fb1a3a4ea2a0358fe7f4bd40d3c474baa0106f7262ec0fb147263d66313c561465e2bd1b769e98f63dac74e271ab24989c37e6e8c683940a9d9770588e6332b80cc5c69f507d40fafc", 0x6a, &(0x7f0000002000), &(0x7f0000002040), &(0x7f0000002080)="ca7f61967996e9eec1268d7869a3dbe54d40fb88ce7a3c16da92b58e01a74211e3e9f90901f0a250f4ab8149a668bb49d73f69bc5f10b8db00dee0ce4cd991b25c3bf4ba19105179da2a0fe4de1a833ea3413c62a703142dba6cc2a5e14b6fb6c02483d635") ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r2) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000002100)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}}) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000002140)) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000021c0), r2) sendmsg$NL80211_CMD_LEAVE_OCB(r5, &(0x7f0000002280)={&(0x7f0000002180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002240)={&(0x7f0000002200)={0x14, r6, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000014}, 0x804) ioctl$BLKDISCARDZEROES(r5, 0x127c, &(0x7f00000022c0)) r7 = add_key(&(0x7f0000002300)='cifs.spnego\x00', &(0x7f0000002340)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, &(0x7f0000002380)='dns_resolver\x00', &(0x7f00000023c0)) syz_open_dev$hiddev(&(0x7f0000002400), 0x1000, 0x10000) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000002440)) quotactl_fd$Q_GETINFO(r0, 0xffffffff80000500, 0xffffffffffffffff, &(0x7f0000002480)) mount(&(0x7f00000024c0)=@filename='./file0\x00', &(0x7f0000002500)='./file0\x00', &(0x7f0000002540)='vfat\x00', 0x8c00, &(0x7f0000002580)='}@/\x00') 666.639967ms ago: executing program 4 (id=613): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @sk_lookup, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x59, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b") r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e7d, 0x2e22, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x2, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x2000, 0x3, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000005c0)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="003eac0000"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f0000000280)={0x2c, &(0x7f0000000480)={0x0, 0x13, 0x9e, {0x9e, 0x21, "0379b38293c57e6620112509f2fd0bff70042821b90b66b8e3cb0eadf60fdfc5a71590d429344536410a013569a1e366f74300658f5b4e3430e4cf1c32ca128b41976329666c43cbfc3ccc1646f661d8cb20044f0d2b3dc5b4edd88d2239e18f71c211956750ffeae9d5b595d4d3def4f85251a33eb4717e8b2b901a5d471b4f7c8f6482af744183081bc2af7c891a8ede2cb615973b596d871a45c3"}}, &(0x7f00000006c0)={0x0, 0x3, 0xb2, @string={0xb2, 0x3, "9dfab820959a481734de53133bc5d880444e370d38da5c6566a0752ec1c77647cf8e67225a583d0ea3e14e71527af4576d9932a62a42fef6dedeb526e0b5b751a47b49b849bc0529882067423b8d45708105f18795accac9cf501034efd90414348dc18e02886f3d1269ffe5381f23edfe0ec383a268144a1c075e1a66cfb8d2e1d8bf4f1d68fc4c7a724cda8d28f23b2e4c81dd017c561bcb86d5f316f69ba0cec14d3df8e92c887a478946977c568c"}}, &(0x7f0000000340)={0x0, 0xf, 0x40, {0x5, 0xf, 0x40, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0xe, 0x3, 0x8}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x6, 0x5, 0x40, 0x7}, @wireless={0xb, 0x10, 0x1, 0x2, 0xd, 0x80, 0x95, 0xffff, 0xcb}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x2, 0x1, 0x5}, @ssp_cap={0x18, 0x10, 0xa, 0x1, 0x3, 0x2b43, 0xf000, 0x2, [0xc0f0, 0x30, 0xc0]}]}}, &(0x7f00000000c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x4, 0x4, 0xf, "364a1be9", "9233a4e9"}}, &(0x7f0000000140)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xf, 0x0, 0x9, 0x2, 0x8, 0x4, 0x5}}}, &(0x7f0000001080)={0x84, &(0x7f0000000540)={0x0, 0x16, 0x94, "71a223b423517c2e6eed5fc4d422af41daaf769ebf2cdc339ec3eb5947468952a18778155bc942ae12065aa0fef0e3bd76fb4a900052dada4f213607fe76a61512cfbcd6a0277e5dacb4c8bdb579e7aa3f4530aa1ae7b1cd3b9975009a93ee12df253399ed8fe3ae1869fb20e123a7580df17f7bb99485ae2fbcb20a83e1b12811406676149060228eb916915f71f4805fa3f1c2"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x10}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000840)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000000880)={0x20, 0x0, 0x4, {0x1c00, 0x10}}, &(0x7f00000008c0)={0x40, 0x7, 0x2, 0x1}, &(0x7f0000000900)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000940)={0x40, 0xb, 0x2, "2498"}, &(0x7f0000000980)={0x40, 0xf, 0x2, 0xe}, &(0x7f0000000ec0)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000f00)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000f40)={0x40, 0x19, 0x2, "79b1"}, &(0x7f0000000f80)={0x40, 0x1a, 0x2, 0x9}, &(0x7f0000000fc0)={0x40, 0x1c, 0x1, 0xd}, &(0x7f0000001000)={0x40, 0x1e, 0x1, 0x83}, &(0x7f0000001040)={0x40, 0x21, 0x1, 0x7e}}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"/1258], &(0x7f0000000240)='syzkaller\x00', 0x4, 0xff0, &(0x7f000062b000)=""/4080, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x3d) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0xa0001f98, 0x1e, 0x0, &(0x7f0000000440)="85f17444", 0x0, 0xa70a, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 551.847226ms ago: executing program 1 (id=614): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 514.732249ms ago: executing program 1 (id=615): sched_setscheduler(0x0, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@newsa={0x154, 0x10, 0x1, 0x8000000, 0x0, {{@in=@private=0xa010101, @in6=@empty}, {@in=@broadcast, 0x0, 0x33}, @in=@local, {}, {}, {0x10, 0xd29}, 0x0, 0x0, 0xa, 0x1}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0x10000000}}, @algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x154}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2$9p(&(0x7f0000000080), 0x800) connect$unix(r2, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) 420.877037ms ago: executing program 2 (id=620): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x8c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x41, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac=@broadcast}, 0x0, @random=0x7, 0x1, @void, @void, @void, @val={0x4, 0x6, {0xf0, 0x2, 0x7f, 0xa706}}, @val={0x6, 0x2, 0x6}, @void, @val={0x25, 0x3, {0x1, 0x8c, 0x8}}, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}, @NL80211_ATTR_FTM_RESPONDER={0x14, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x7, 0x3, "5ae342"}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16a5}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) 346.918373ms ago: executing program 2 (id=623): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_MPATH(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010125bd7000fbdbdf251700000008000300", @ANYRES32=r2], 0x34}, 0x1, 0x0, 0x0, 0x44084}, 0x4000) 333.727984ms ago: executing program 2 (id=626): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a38000000060a010e00000000000000000200ffff0900020073797a32000000000900010073797a30000000000c000640"], 0x60}, 0x1, 0x0, 0x0, 0x20048880}, 0x0) 278.188878ms ago: executing program 2 (id=628): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x200001}, {{0x0, 0x0, 0x0}, 0x2046}, {{0x0, 0x0, 0x0}, 0x421}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000540)=""/130, 0x82}, {&(0x7f0000001a00)=""/4109, 0x100d}, {&(0x7f0000006080)=""/4085, 0xff5}, {&(0x7f0000000240)=""/112, 0x70}, {&(0x7f0000000040)=""/113, 0x71}, {&(0x7f00000004c0)=""/68, 0x44}, {&(0x7f0000000100)=""/98, 0x62}, {&(0x7f00000003c0)=""/100, 0x64}, {&(0x7f00000007c0)=""/210, 0xd2}, {&(0x7f0000000440)=""/67, 0x43}], 0xa}, 0x4db}, {{0x0, 0x0, 0x0}, 0x8}], 0x8, 0x0, 0x0) 137.841999ms ago: executing program 3 (id=647): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@delnexthop={0x20, 0x69, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) 87.060343ms ago: executing program 0 (id=649): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)={0x34, r2, 0x1, 0x70bd21, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) 86.807204ms ago: executing program 3 (id=650): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r1, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r3, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x12}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4000) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000840)={0x58, r8, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_IE={0x23, 0x2a, [@preq={0x82, 0x1a, {{}, 0xf9, 0x40, 0x14a6, @broadcast, 0x401, @void, 0x9, 0xffffffff}}, @challenge={0x10, 0x1, 0xa}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x24004084}, 0x40000) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x2c, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x2c}}, 0x0) 86.698094ms ago: executing program 0 (id=651): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x5c, r1, 0x5, 0x400003, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_IE={0x33, 0x2a, [@mesh_chsw={0x76, 0x6, {0x5, 0xfd, 0x1b, 0x40}}, @mic={0x8c, 0x10, {0x61b, "a7b920a5c13b", @short="4dafea6afe86ef74"}}, @ibss={0x6, 0x2, 0x1dbe}, @sec_chan_ofs={0x3e, 0x1, 0x1}, @gcr_ga={0xbd, 0x6, @device_b}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x80, 0xb, 0x1}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10800}, 0x24000000) 85.974044ms ago: executing program 3 (id=652): syz_emit_ethernet(0x1012, &(0x7f0000003700)={@local, @local, @val={@void, {0x8100, 0x6, 0x0, 0x3}}, {@generic={0x8864, "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"}}}, &(0x7f0000004740)={0x0, 0x2, [0x6df, 0x483, 0x627, 0xd2c]}) 82.696764ms ago: executing program 0 (id=653): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x204400, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305829, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r2) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x30, r3, 0x5, 0x0, 0x0, {0x7, 0x74, 0x600}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x2}, @NLBL_UNLABEL_A_IPV6MASK={0x8, 0x3, @mcast2={0xff, 0x7, '\x00', 0xa}}]}, 0x30}, 0x1, 0xffffffff00000003}, 0x0) 70.270395ms ago: executing program 0 (id=654): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005f80)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1ff, 0x0, 0x20000001, 0x4, 0x2}, 0x1, r3}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}]}, 0x90}}, 0x0) 760.23µs ago: executing program 3 (id=655): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x58, 0x10, 0x401, 0x70bd2a, 0x2, {0x0, 0x0, 0x0, 0x0, 0x20310, 0xc574450d1af3b73e}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_GROUP_FWD_MASK={0x6, 0x1f, 0xffff}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x80c0}, 0x8c0) 531.28µs ago: executing program 3 (id=656): r0 = socket$inet6(0xa, 0x3, 0xff) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x0, 0x4, @dev, 0x9}, 0x1c, 0x0}, 0x4b00) 367.97µs ago: executing program 3 (id=657): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0xe, 0x4}, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xfffffffd, 0x3ff, 0x7, 0x6, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0) 207.85µs ago: executing program 0 (id=658): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x15, 0x3, 'dh\x00', 0x0, 0x4, 0x76}, 0x2c) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r2, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}}, 0x0) 0s ago: executing program 0 (id=659): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f00000006c0)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0xfffffffc}, 0x1c, 0x0}}], 0x1, 0x2000c8c0) sendmmsg$inet6(r1, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000840)}}], 0x1, 0x40) recvmmsg(r0, 0x0, 0x0, 0x100, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}}, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x10, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0xfffd, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "6d4dfdeb8cf7bbfe143803bec2ce783e04cd32308cdd8dde", "c71cb8adfce542a4bc5a026c208fd0c45787e4aa384e3d26b21ea41cc128364c"}}}}}}, 0x0) kernel console output (not intermixed with test programs): m_r:sysadm_t pid=1203 comm="syz.0.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fcea7d6abe9 code=0x7ffc0000 [ 108.501206][ T30] audit: type=1326 audit(1755149134.419:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1203 comm="syz.0.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcea7d6abe9 code=0x7ffc0000 [ 108.692117][ T342] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 109.002381][ T39] uclogic 0003:256C:006D.0029: failed retrieving Huion firmware version: -71 [ 109.020929][ T39] uclogic 0003:256C:006D.0029: failed probing parameters: -71 [ 109.032119][ T1225] loop4: detected capacity change from 0 to 256 [ 109.038450][ T39] uclogic: probe of 0003:256C:006D.0029 failed with error -71 [ 109.062126][ T342] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.088123][ T1225] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 109.093472][ T39] usb 3-1: USB disconnect, device number 15 [ 109.106519][ T602] usb 1-1: unable to get BOS descriptor or descriptor too short [ 109.119212][ T342] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 109.132026][ T918] usb 4-1: Using ep0 maxpacket: 16 [ 109.135102][ T342] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.350096][ T1230] loop0: detected capacity change from 0 to 512 [ 109.404106][ T602] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 109.412358][ T602] usb 1-1: can't read configurations, error -71 [ 109.418804][ T342] usb 2-1: config 0 descriptor?? [ 109.519499][ T1232] netlink: 12 bytes leftover after parsing attributes in process `syz.3.228'. [ 109.946435][ T342] keytouch 0003:0926:3333.002A: fixing up Keytouch IEC report descriptor [ 109.976158][ T1230] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #15: comm syz.0.231: casefold flag without casefold feature [ 110.049978][ T342] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.002A/input/input27 [ 110.355318][ T342] keytouch 0003:0926:3333.002A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 110.497147][ T1242] UDC core: couldn't find an available UDC or it's busy: -16 [ 110.538228][ T1242] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 110.726380][ T1230] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.231: couldn't read orphan inode 15 (err -117) [ 110.788631][ T342] usb 2-1: USB disconnect, device number 19 [ 110.804421][ T1246] syz.2.233[1246] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 110.804496][ T1246] syz.2.233[1246] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 110.852076][ T918] usb 4-1: unable to get BOS descriptor or descriptor too short [ 110.875904][ T1230] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 110.952072][ T918] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 110.961857][ T918] usb 4-1: can't read configurations, error -71 [ 111.861880][ T1255] syz.4.236 (1255) used greatest stack depth: 21216 bytes left [ 111.912560][ T1266] incfs: Options parsing error. -22 [ 111.922775][ T1266] incfs: mount failed -22 [ 112.721989][ T918] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 112.923756][ T1272] loop2: detected capacity change from 0 to 2048 [ 112.932078][ T1274] syz.3.243[1274] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 112.932157][ T1274] syz.3.243[1274] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 112.950342][ T1274] 9pnet: Insufficient options for proto=fd [ 113.092107][ T918] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.115528][ T918] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 113.469002][ T918] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.508054][ T918] usb 2-1: config 0 descriptor?? [ 113.528889][ T1282] loop0: detected capacity change from 0 to 40427 [ 113.585564][ T1282] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 113.593588][ T1282] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 113.603180][ T1282] F2FS-fs (loop0): invalid crc value [ 113.609961][ T1282] F2FS-fs (loop0): Found nat_bits in checkpoint [ 113.621985][ T20] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 113.633971][ T1282] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 113.641047][ T1282] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 113.872014][ T20] usb 4-1: Using ep0 maxpacket: 16 [ 113.934781][ T30] kauditd_printk_skb: 62 callbacks suppressed [ 113.934809][ T30] audit: type=1326 audit(1755149140.639:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1275 comm="syz.3.245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff96c5ebbe9 code=0x7ffc0000 [ 113.964763][ T30] audit: type=1326 audit(1755149140.649:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1275 comm="syz.3.245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff96c5ebbe9 code=0x7ffc0000 [ 113.988469][ T30] audit: type=1326 audit(1755149140.659:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1275 comm="syz.3.245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff96c5ebbe9 code=0x7ffc0000 [ 114.012335][ T30] audit: type=1326 audit(1755149140.659:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1275 comm="syz.3.245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff96c5ebbe9 code=0x7ffc0000 [ 114.043627][ T30] audit: type=1326 audit(1755149140.659:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1275 comm="syz.3.245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff96c5ebbe9 code=0x7ffc0000 [ 114.066946][ T30] audit: type=1326 audit(1755149140.659:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1275 comm="syz.3.245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff96c5ebbe9 code=0x7ffc0000 [ 114.069100][ T918] keytouch 0003:0926:3333.002B: fixing up Keytouch IEC report descriptor [ 114.090691][ T30] audit: type=1326 audit(1755149140.659:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1275 comm="syz.3.245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7ff96c5ebbe9 code=0x7ffc0000 [ 114.099131][ T58] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 114.122249][ T30] audit: type=1326 audit(1755149140.659:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1275 comm="syz.3.245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff96c5ebbe9 code=0x7ffc0000 [ 114.156813][ T1302] netlink: 12 bytes leftover after parsing attributes in process `syz.3.245'. [ 114.205330][ T30] audit: type=1326 audit(1755149140.659:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1275 comm="syz.3.245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7ff96c5ebbe9 code=0x7ffc0000 [ 114.270295][ T30] audit: type=1326 audit(1755149140.659:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1275 comm="syz.3.245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff96c5ebbe9 code=0x7ffc0000 [ 115.252495][ T1308] UDC core: couldn't find an available UDC or it's busy: -16 [ 115.276718][ T1308] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 115.438717][ T918] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.002B/input/input28 [ 115.514756][ T918] keytouch 0003:0926:3333.002B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 115.551994][ T58] usb 1-1: Using ep0 maxpacket: 16 [ 115.609957][ T1316] syz.4.253[1316] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 115.610254][ T1316] syz.4.253[1316] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 115.851759][ T1317] loop2: detected capacity change from 0 to 512 [ 116.145577][ T1317] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.254: casefold flag without casefold feature [ 116.727218][ T573] usb 2-1: USB disconnect, device number 20 [ 116.733411][ T1317] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.254: couldn't read orphan inode 15 (err -117) [ 116.760001][ T1317] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 116.844608][ T20] usb 4-1: unable to get BOS descriptor or descriptor too short [ 116.853822][ T1323] incfs: Options parsing error. -22 [ 116.883870][ T1323] incfs: mount failed -22 [ 116.892021][ T58] usb 1-1: unable to get BOS descriptor or descriptor too short [ 116.912050][ T20] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 116.919652][ T20] usb 4-1: can't read configurations, error -71 [ 116.936707][ T1328] loop0: detected capacity change from 0 to 2048 [ 116.952064][ T58] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 116.960343][ T58] usb 1-1: can't read configurations, error -71 [ 117.312059][ T20] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 117.933397][ T1343] sit: Dst spoofed 0.0.0.0/400:: -> 0.0.0.0/2002:9476:b3ad:dfab:8150:7b25:977f:5d53 [ 117.945106][ T1343] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1343 comm=syz.4.263 [ 117.962066][ T20] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.978207][ T20] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.988432][ T20] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 117.997685][ T20] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.006531][ T20] usb 4-1: config 0 descriptor?? [ 118.525904][ T1349] loop0: detected capacity change from 0 to 512 [ 118.682612][ T1349] [EXT4 FS bs=4096, gc=1, bpg=71, ipg=32, mo=e84ec028, mo2=0000] [ 118.692245][ T1349] System zones: 0-2, 18-18, 34-34 [ 118.707772][ T1349] EXT4-fs (loop0): 1 orphan inode deleted [ 118.715141][ T1353] loop1: detected capacity change from 0 to 2048 [ 118.721546][ T1349] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,debug,resgid=0x0000000000000000,sysvgroups,discard,usrquota,. Quota mode: writeback. [ 118.745856][ T1349] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.763738][ T1349] EXT4-fs error (device loop0): ext4_lookup:1858: inode #15: comm syz.0.265: iget: bad i_size value: 360287970189639690 [ 118.776808][ T1349] EXT4-fs (loop0): Remounting filesystem read-only [ 118.783542][ T1349] overlayfs: failed to resolve './file1': -117 [ 118.905978][ T1361] loop4: detected capacity change from 0 to 8192 [ 119.212017][ T573] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 119.242009][ T58] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 119.442076][ T20] uclogic 0003:256C:006D.002C: failed retrieving Huion firmware version: -71 [ 119.450906][ T20] uclogic 0003:256C:006D.002C: failed probing parameters: -71 [ 119.458465][ T20] uclogic: probe of 0003:256C:006D.002C failed with error -71 [ 119.462010][ T573] usb 5-1: Using ep0 maxpacket: 32 [ 119.466949][ T20] usb 4-1: USB disconnect, device number 19 [ 119.482024][ T58] usb 3-1: Using ep0 maxpacket: 16 [ 119.544171][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 119.544188][ T30] audit: type=1326 audit(1755149146.249:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1355 comm="syz.2.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaf8a15be9 code=0x7ffc0000 [ 119.573848][ T30] audit: type=1326 audit(1755149146.249:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1355 comm="syz.2.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7feaf8a15be9 code=0x7ffc0000 [ 119.597557][ T30] audit: type=1326 audit(1755149146.249:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1355 comm="syz.2.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaf8a15be9 code=0x7ffc0000 [ 119.621610][ T30] audit: type=1326 audit(1755149146.249:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1355 comm="syz.2.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7feaf8a15be9 code=0x7ffc0000 [ 119.645355][ T30] audit: type=1326 audit(1755149146.249:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1355 comm="syz.2.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaf8a15be9 code=0x7ffc0000 [ 119.668780][ T573] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 119.676953][ T30] audit: type=1326 audit(1755149146.249:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1355 comm="syz.2.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7feaf8a15be9 code=0x7ffc0000 [ 119.676983][ T30] audit: type=1326 audit(1755149146.249:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1355 comm="syz.2.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaf8a15be9 code=0x7ffc0000 [ 119.677008][ T30] audit: type=1326 audit(1755149146.249:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1355 comm="syz.2.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7feaf8a15be9 code=0x7ffc0000 [ 119.701136][ T573] usb 5-1: config 0 has no interface number 0 [ 119.724542][ T30] audit: type=1326 audit(1755149146.249:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1355 comm="syz.2.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaf8a15be9 code=0x7ffc0000 [ 119.747119][ T573] usb 5-1: config 0 interface 184 has no altsetting 0 [ 119.753113][ T30] audit: type=1326 audit(1755149146.249:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1355 comm="syz.2.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaf8a15be9 code=0x7ffc0000 [ 119.860020][ T1369] netlink: 12 bytes leftover after parsing attributes in process `syz.2.267'. [ 120.112361][ T573] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 120.156356][ T573] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.312793][ T573] usb 5-1: Product: syz [ 120.366445][ T573] usb 5-1: Manufacturer: syz [ 120.480691][ T573] usb 5-1: SerialNumber: syz [ 120.600418][ T573] usb 5-1: config 0 descriptor?? [ 120.763667][ T1371] loop1: detected capacity change from 0 to 2048 [ 120.773602][ T573] smsc75xx v1.0.0 [ 120.834281][ T1376] loop3: detected capacity change from 0 to 512 [ 120.905705][ T1376] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 120.938730][ T1378] incfs: Options parsing error. -22 [ 120.968359][ T1376] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 121.024244][ T1378] incfs: mount failed -22 [ 121.031980][ T1376] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 121.068847][ T1376] EXT4-fs (loop3): 1 truncate cleaned up [ 121.074693][ T1376] EXT4-fs (loop3): mounted filesystem without journal. Opts: nogrpid,resuid=0x000000000000ee01,resgid=0x0000000000000000,nomblk_io_submit,nombcache,resgid=0x000000000000ee00,,errors=continue. Quota mode: none. [ 121.445438][ T1387] loop1: detected capacity change from 0 to 2048 [ 121.513462][ T1387] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 121.677855][ T1361] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 121.685606][ T1361] FAT-fs (loop4): Filesystem has been set read-only [ 121.693742][ T1361] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 121.711978][ T918] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 121.712029][ T573] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 121.730415][ T573] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 121.758933][ T1391] loop0: detected capacity change from 0 to 8192 [ 121.762290][ T573] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 121.776106][ T573] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 121.785953][ T573] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 121.796215][ T573] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 121.805698][ T573] smsc75xx: probe of 5-1:0.184 failed with error -71 [ 121.808277][ T1391] loop0: p1[EZD] p2 p3 p4 [ 121.815396][ T573] usb 5-1: USB disconnect, device number 19 [ 121.818980][ T1391] loop0: p3 start 117772289 is beyond EOD, truncated [ 121.829640][ T1391] loop0: p4 size 262144 extends beyond EOD, truncated [ 121.964661][ T413] udevd[413]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 121.964674][ T336] udevd[336]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 121.971182][ T356] udevd[356]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 121.997797][ T356] udevd[356]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 121.997939][ T336] udevd[336]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 122.009592][ T413] udevd[413]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 122.092137][ T918] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.103241][ T918] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.113300][ T58] usb 3-1: unable to get BOS descriptor or descriptor too short [ 122.121083][ T918] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 122.185493][ T1397] loop0: detected capacity change from 0 to 512 [ 122.401310][ T1397] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #15: comm syz.0.278: casefold flag without casefold feature [ 122.463290][ T918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.470588][ T1397] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.278: couldn't read orphan inode 15 (err -117) [ 122.483545][ T1397] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 122.502047][ T58] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 122.509644][ T58] usb 3-1: can't read configurations, error -71 [ 122.520347][ T918] usb 4-1: config 0 descriptor?? [ 122.530385][ T1402] incfs: Can't find or create .index dir in ./file0 [ 122.537182][ T1402] incfs: mount failed -14 [ 122.827556][ T1413] syz.1.283[1413] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 122.827871][ T1413] syz.1.283[1413] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 124.214931][ T1421] loop2: detected capacity change from 0 to 2048 [ 124.233722][ T1423] loop1: detected capacity change from 0 to 128 [ 124.242043][ T918] usb 4-1: language id specifier not provided by device, defaulting to English [ 124.255794][ T1425] incfs: Options parsing error. -22 [ 124.261056][ T1425] incfs: mount failed -22 [ 124.265623][ T1423] EXT4-fs (loop1): Ignoring removed nobh option [ 124.351195][ T1423] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobh,usrjquota=,,errors=continue. Quota mode: none. [ 124.372185][ T1423] ext4 filesystem being mounted at /50/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 124.731979][ T1432] overlayfs: failed to resolve './file0': -2 [ 124.869098][ T918] uclogic 0003:256C:006D.002D: failed retrieving Huion firmware version: -71 [ 124.916878][ T344] Bluetooth: hci0: Frame reassembly failed (-84) [ 124.926520][ T918] uclogic 0003:256C:006D.002D: failed probing parameters: -71 [ 124.951990][ T918] uclogic: probe of 0003:256C:006D.002D failed with error -71 [ 124.994703][ T918] usb 4-1: USB disconnect, device number 20 [ 125.263889][ T1436] loop4: detected capacity change from 0 to 2048 [ 125.308994][ T1436] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 125.451138][ T1449] loop3: detected capacity change from 0 to 16 [ 125.475157][ T1449] erofs: (device loop3): mounted with root inode @ nid 36. [ 125.484141][ T1449] erofs: (device loop3): z_erofs_readahead: readahead error at page 10 @ nid 36 [ 125.493694][ T1449] erofs: (device loop3): z_erofs_readahead: readahead error at page 9 @ nid 36 [ 125.502993][ T1449] erofs: (device loop3): z_erofs_readahead: readahead error at page 4 @ nid 36 [ 125.512308][ T1449] erofs: (device loop3): z_erofs_readahead: readahead error at page 0 @ nid 36 [ 125.521265][ T1449] erofs: (device loop3): z_erofs_pcluster_readmore: readmore error at page 0 @ nid 36 [ 125.530982][ T1449] attempt to access beyond end of device [ 125.530982][ T1449] loop3: rw=524288, want=1049280, limit=16 [ 125.542427][ T918] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 125.553664][ T1449] attempt to access beyond end of device [ 125.553664][ T1449] loop3: rw=524288, want=392, limit=16 [ 125.565063][ T1449] attempt to access beyond end of device [ 125.565063][ T1449] loop3: rw=524288, want=24, limit=16 [ 125.576326][ T1449] attempt to access beyond end of device [ 125.576326][ T1449] loop3: rw=524288, want=736, limit=16 [ 125.587595][ T1449] attempt to access beyond end of device [ 125.587595][ T1449] loop3: rw=524288, want=525160, limit=16 [ 125.671813][ T1452] loop2: detected capacity change from 0 to 40427 [ 125.696038][ T1452] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 125.704232][ T1452] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 125.712667][ T39] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 125.714070][ T1452] F2FS-fs (loop2): invalid crc value [ 125.729828][ T1452] F2FS-fs (loop2): Found nat_bits in checkpoint [ 125.804467][ T1452] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 125.812167][ T1452] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 126.002009][ T39] usb 5-1: device descriptor read/64, error -71 [ 126.022004][ T918] usb 1-1: Using ep0 maxpacket: 16 [ 126.084475][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 126.084492][ T30] audit: type=1326 audit(1755149152.789:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1439 comm="syz.0.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcea7d6abe9 code=0x7ffc0000 [ 126.114025][ T30] audit: type=1326 audit(1755149152.789:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1439 comm="syz.0.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcea7d6abe9 code=0x7ffc0000 [ 126.137403][ T30] audit: type=1326 audit(1755149152.789:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1439 comm="syz.0.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcea7d6abe9 code=0x7ffc0000 [ 126.160893][ T30] audit: type=1326 audit(1755149152.789:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1439 comm="syz.0.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcea7d6abe9 code=0x7ffc0000 [ 126.184418][ T30] audit: type=1326 audit(1755149152.789:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1439 comm="syz.0.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcea7d6abe9 code=0x7ffc0000 [ 126.208148][ T30] audit: type=1326 audit(1755149152.789:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1439 comm="syz.0.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fcea7d6abe9 code=0x7ffc0000 [ 126.232357][ T30] audit: type=1326 audit(1755149152.789:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1439 comm="syz.0.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcea7d6abe9 code=0x7ffc0000 [ 126.256535][ T30] audit: type=1326 audit(1755149152.789:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1439 comm="syz.0.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fcea7d6abe9 code=0x7ffc0000 [ 126.279867][ T30] audit: type=1326 audit(1755149152.789:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1439 comm="syz.0.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcea7d6abe9 code=0x7ffc0000 [ 126.303438][ T30] audit: type=1326 audit(1755149152.789:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1439 comm="syz.0.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcea7d6abe9 code=0x7ffc0000 [ 126.382739][ T1462] netlink: 12 bytes leftover after parsing attributes in process `syz.0.289'. [ 126.733508][ T39] usb 5-1: device descriptor read/64, error -71 [ 126.972707][ T375] Bluetooth: hci0: command 0x1003 tx timeout [ 127.035715][ T1434] Bluetooth: hci0: sending frame failed (-49) [ 127.042567][ T39] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 127.546311][ T1466] syz.3.296[1466] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 127.546395][ T1466] syz.3.296[1466] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 127.632101][ T39] usb 5-1: device descriptor read/64, error -71 [ 127.861652][ T1469] loop2: detected capacity change from 0 to 512 [ 128.051068][ T1469] EXT4-fs (loop2): orphan cleanup on readonly fs [ 128.058511][ T1469] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.295: bg 0: block 248: padding at end of block bitmap is not set [ 128.073781][ T1469] EXT4-fs error (device loop2): ext4_acquire_dquot:6198: comm syz.2.295: Failed to acquire dquot type 1 [ 128.087656][ T1469] EXT4-fs (loop2): 1 truncate cleaned up [ 128.093657][ T1469] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 128.221983][ T39] usb 5-1: device descriptor read/64, error -71 [ 128.277195][ T1474] loop3: detected capacity change from 0 to 2048 [ 128.362573][ T39] usb usb5-port1: attempt power cycle [ 128.627017][ T1480] loop4: detected capacity change from 0 to 512 [ 128.636742][ T1482] loop0: detected capacity change from 0 to 2048 [ 128.642062][ T918] usb 1-1: unable to get BOS descriptor or descriptor too short [ 128.659573][ T1484] incfs: Options parsing error. -22 [ 128.666280][ T1484] incfs: mount failed -22 [ 128.680623][ T1480] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.299: casefold flag without casefold feature [ 128.712019][ T918] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 128.722011][ T918] usb 1-1: can't read configurations, error -71 [ 128.753295][ T1480] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.299: couldn't read orphan inode 15 (err -117) [ 128.754330][ T1482] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 128.776387][ T1480] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 129.051996][ T375] Bluetooth: hci0: command 0x1001 tx timeout [ 129.058220][ T1434] Bluetooth: hci0: sending frame failed (-49) [ 129.401974][ T918] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 129.693579][ T1501] loop2: detected capacity change from 0 to 128 [ 129.713038][ T1501] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 129.724070][ T1501] ext4 filesystem being mounted at /58/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 129.782033][ T918] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.792974][ T918] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.802746][ T918] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 129.812030][ T918] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.049716][ T918] usb 1-1: config 0 descriptor?? [ 130.361983][ T39] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 130.662764][ T39] usb 4-1: Using ep0 maxpacket: 32 [ 130.942493][ T39] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 130.959270][ T39] usb 4-1: config 0 has no interface number 0 [ 130.989131][ T39] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 131.099891][ T39] usb 4-1: config 0 interface 85 has no altsetting 0 [ 131.155731][ T573] Bluetooth: hci0: command 0x1009 tx timeout [ 131.432367][ T39] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 131.451856][ T39] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.468951][ T39] usb 4-1: Product: syz [ 131.477600][ T39] usb 4-1: Manufacturer: syz [ 131.487754][ T39] usb 4-1: SerialNumber: syz [ 131.582407][ T39] usb 4-1: config 0 descriptor?? [ 131.632041][ T918] usb 1-1: language id specifier not provided by device, defaulting to English [ 131.767790][ T1523] loop4: detected capacity change from 0 to 1024 [ 131.901828][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 131.901845][ T30] audit: type=1326 audit(1755149158.599:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1522 comm="syz.4.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81b9ee5be9 code=0x7ffc0000 [ 131.931267][ T30] audit: type=1326 audit(1755149158.599:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1522 comm="syz.4.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81b9ee5be9 code=0x7ffc0000 [ 131.954672][ T30] audit: type=1326 audit(1755149158.609:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1522 comm="syz.4.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f81b9ee5be9 code=0x7ffc0000 [ 131.978679][ T918] uclogic 0003:256C:006D.002E: failed retrieving Huion firmware version: -71 [ 131.987790][ T918] uclogic 0003:256C:006D.002E: failed probing parameters: -71 [ 131.995548][ T918] uclogic: probe of 0003:256C:006D.002E failed with error -71 [ 132.008957][ T918] usb 1-1: USB disconnect, device number 21 [ 132.014976][ T30] audit: type=1326 audit(1755149158.609:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1522 comm="syz.4.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81b9ee5be9 code=0x7ffc0000 [ 132.038673][ T1528] loop4: detected capacity change from 0 to 2048 [ 132.039882][ T30] audit: type=1326 audit(1755149158.609:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1522 comm="syz.4.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f81b9ee5be9 code=0x7ffc0000 [ 132.071437][ T30] audit: type=1326 audit(1755149158.609:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1522 comm="syz.4.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81b9ee5be9 code=0x7ffc0000 [ 132.094920][ T30] audit: type=1326 audit(1755149158.609:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1522 comm="syz.4.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f81b9ee5be9 code=0x7ffc0000 [ 132.118196][ T30] audit: type=1326 audit(1755149158.609:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1522 comm="syz.4.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81b9ee5be9 code=0x7ffc0000 [ 132.120173][ T1528] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 132.141532][ T30] audit: type=1326 audit(1755149158.609:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1522 comm="syz.4.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f81b9ee5be9 code=0x7ffc0000 [ 132.175751][ T30] audit: type=1326 audit(1755149158.609:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1522 comm="syz.4.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81b9ee5be9 code=0x7ffc0000 [ 132.475198][ T1537] incfs: Error accessing: ./file0. [ 132.480616][ T1537] incfs: mount failed -2 [ 132.492009][ T20] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 133.020878][ T1544] loop2: detected capacity change from 0 to 512 [ 133.093635][ T1544] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 133.157105][ T1544] EXT4-fs (loop2): Test dummy encryption mode enabled [ 133.164093][ T1544] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 133.203752][ T1544] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2825: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 133.218266][ T1544] EXT4-fs (loop2): 1 truncate cleaned up [ 133.224086][ T1544] EXT4-fs (loop2): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000004,debug_want_extra_isize=0x0000000000000068,nombcache,nomblk_io_submit,quota,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 134.039685][ T1548] incfs: Options parsing error. -22 [ 134.048550][ T1548] incfs: mount failed -22 [ 134.133566][ T918] usb 4-1: USB disconnect, device number 21 [ 134.147818][ T1550] fuse: Bad value for 'user_id' [ 134.490672][ T20] usb 5-1: Using ep0 maxpacket: 16 [ 134.808163][ T1562] netlink: 12 bytes leftover after parsing attributes in process `syz.4.313'. [ 135.038695][ T1571] loop3: detected capacity change from 0 to 2048 [ 135.083205][ T1571] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 135.262005][ T918] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 135.271998][ T573] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 135.521993][ T573] usb 2-1: Using ep0 maxpacket: 8 [ 135.632060][ T918] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.643199][ T918] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.652068][ T573] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 135.652975][ T918] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 135.661677][ T573] usb 2-1: config 179 has no interface number 0 [ 135.670322][ T918] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.676974][ T573] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 135.688602][ T918] usb 1-1: config 0 descriptor?? [ 135.696107][ T573] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 135.712336][ T573] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 135.723723][ T573] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 135.733847][ T573] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 135.747165][ T573] usb 2-1: config 179 interface 65 has no altsetting 0 [ 135.754041][ T573] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 135.763362][ T573] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.803310][ T573] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input29 [ 135.892232][ T1582] loop3: detected capacity change from 0 to 512 [ 135.922039][ T20] usb 5-1: unable to get BOS descriptor or descriptor too short [ 135.933722][ T1582] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 135.944664][ T1582] EXT4-fs (loop3): 1 truncate cleaned up [ 135.950560][ T1582] EXT4-fs (loop3): mounted filesystem without journal. Opts: resuid=0x0000000000000000,max_dir_size_kb=0x00000000000001ff,stripe=0x0000000000000000,noblock_validity,,errors=continue. Quota mode: none. [ 135.982009][ T20] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 135.989610][ T20] usb 5-1: can't read configurations, error -71 [ 135.997798][ T1582] EXT4-fs (loop3): re-mounted. Opts: . Quota mode: none. [ 136.021443][ T1588] loop2: detected capacity change from 0 to 512 [ 136.028471][ T445] usb 2-1: USB disconnect, device number 21 [ 136.034910][ T445] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 136.065096][ T1588] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.329: inode #1: comm syz.2.329: iget: illegal inode # [ 136.078279][ T1588] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.329: error while reading EA inode 1 err=-117 [ 136.091462][ T1588] EXT4-fs (loop2): 1 orphan inode deleted [ 136.097846][ T1588] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 136.117899][ T1588] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 136.265047][ T1593] device batadv_slave_1 entered promiscuous mode [ 136.361975][ T20] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 136.392049][ T58] usb 3-1: new low-speed USB device number 18 using dummy_hcd [ 136.729813][ T1601] netlink: 8 bytes leftover after parsing attributes in process `syz.1.332'. [ 136.960168][ T918] uclogic 0003:256C:006D.002F: failed retrieving Huion firmware version: -71 [ 136.969141][ T918] uclogic 0003:256C:006D.002F: failed probing parameters: -71 [ 136.976620][ T918] uclogic: probe of 0003:256C:006D.002F failed with error -71 [ 136.986502][ T918] usb 1-1: USB disconnect, device number 22 [ 136.998453][ T1590] device batadv_slave_1 left promiscuous mode [ 137.004643][ T20] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.015570][ T58] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 137.024272][ T58] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 137.034546][ T20] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 137.043695][ T58] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 137.052622][ T20] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.061272][ T20] usb 5-1: config 0 descriptor?? [ 137.114182][ T1603] incfs: Options parsing error. -22 [ 137.119465][ T1603] incfs: mount failed -22 [ 137.336695][ T58] usb 3-1: string descriptor 0 read error: -22 [ 137.368115][ T58] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 137.385635][ T58] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.762519][ T20] keytouch 0003:0926:3333.0030: fixing up Keytouch IEC report descriptor [ 137.772861][ T58] usb 3-1: 0:2 : does not exist [ 137.779362][ T20] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0030/input/input30 [ 137.984896][ T375] usb 3-1: USB disconnect, device number 18 [ 138.677946][ T1580] UDC core: couldn't find an available UDC or it's busy: -16 [ 138.685758][ T1580] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 139.713208][ T20] keytouch 0003:0926:3333.0030: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 140.184840][ T39] usb 5-1: USB disconnect, device number 24 [ 140.315708][ T1627] loop2: detected capacity change from 0 to 2048 [ 140.342422][ T342] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 140.365671][ T1633] Zero length message leads to an empty skb [ 140.370032][ T1627] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 140.374441][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 140.374456][ T30] audit: type=1400 audit(1755149167.069:968): avc: denied { ioctl } for pid=1631 comm="syz.3.341" path="socket:[22145]" dev="sockfs" ino=22145 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 140.574629][ T1644] device batadv_slave_1 entered promiscuous mode [ 140.621991][ T342] usb 2-1: Using ep0 maxpacket: 16 [ 140.671974][ T58] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 140.704570][ T30] audit: type=1326 audit(1755149167.409:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1620 comm="syz.1.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe33b891be9 code=0x7ffc0000 [ 140.742016][ T30] audit: type=1326 audit(1755149167.409:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1620 comm="syz.1.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe33b891be9 code=0x7ffc0000 [ 140.789207][ T30] audit: type=1326 audit(1755149167.409:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1620 comm="syz.1.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe33b891be9 code=0x7ffc0000 [ 140.828040][ T30] audit: type=1326 audit(1755149167.409:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1620 comm="syz.1.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe33b891be9 code=0x7ffc0000 [ 140.853367][ T30] audit: type=1326 audit(1755149167.409:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1620 comm="syz.1.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe33b891be9 code=0x7ffc0000 [ 140.878226][ T1645] netlink: 12 bytes leftover after parsing attributes in process `syz.1.338'. [ 140.883696][ T1647] loop4: detected capacity change from 0 to 1024 [ 140.895167][ T30] audit: type=1326 audit(1755149167.409:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1620 comm="syz.1.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe33b891be9 code=0x7ffc0000 [ 140.918859][ T30] audit: type=1326 audit(1755149167.409:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1620 comm="syz.1.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe33b891be9 code=0x7ffc0000 [ 140.942769][ T30] audit: type=1326 audit(1755149167.409:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1620 comm="syz.1.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe33b891be9 code=0x7ffc0000 [ 140.966565][ T30] audit: type=1326 audit(1755149167.409:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1620 comm="syz.1.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fe33b891be9 code=0x7ffc0000 [ 141.008344][ T1647] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: none. [ 141.019215][ T1647] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.094695][ T58] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.104723][ T58] usb 4-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00 [ 141.113938][ T58] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.122527][ T58] usb 4-1: config 0 descriptor?? [ 141.261270][ T1653] incfs: iterate_incfs_dir / -22 [ 141.413001][ T1641] device batadv_slave_1 left promiscuous mode [ 141.525704][ T1659] loop2: detected capacity change from 0 to 2048 [ 141.713230][ T58] pantherlord 0003:0810:0001.0031: item fetching failed at offset 5/7 [ 141.727034][ T58] pantherlord 0003:0810:0001.0031: parse failed [ 141.740622][ T58] pantherlord: probe of 0003:0810:0001.0031 failed with error -22 [ 141.923788][ T58] usb 4-1: USB disconnect, device number 22 [ 142.221976][ T333] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 142.465318][ T1669] loop2: detected capacity change from 0 to 2048 [ 142.473878][ T1671] incfs: Options parsing error. -22 [ 142.479363][ T1671] incfs: mount failed -22 [ 142.484159][ T1672] syz.0.349[1672] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 142.484236][ T1672] syz.0.349[1672] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 142.602076][ T333] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.624589][ T333] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 142.635147][ T333] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.651371][ T1669] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 142.659989][ T333] usb 5-1: config 0 descriptor?? [ 143.142048][ T342] usb 2-1: unable to get BOS descriptor or descriptor too short [ 143.152600][ T333] keytouch 0003:0926:3333.0032: fixing up Keytouch IEC report descriptor [ 143.202065][ T342] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 143.210161][ T342] usb 2-1: can't read configurations, error -71 [ 143.512889][ T333] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0032/input/input31 [ 143.582315][ T1692] syz.2.355[1692] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 143.582391][ T1692] syz.2.355[1692] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 143.596449][ T1692] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1692 comm=syz.2.355 [ 143.622969][ T333] keytouch 0003:0926:3333.0032: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 143.703847][ T1700] UDC core: couldn't find an available UDC or it's busy: -16 [ 143.716838][ T1700] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 143.725016][ T1699] device batadv_slave_1 entered promiscuous mode [ 143.931985][ T333] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 143.973458][ T375] usb 5-1: USB disconnect, device number 25 [ 144.292018][ T333] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.302944][ T333] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.312752][ T333] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 144.321887][ T333] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.333946][ T333] usb 3-1: config 0 descriptor?? [ 144.421867][ T1691] device batadv_slave_1 left promiscuous mode [ 144.534749][ T1708] loop3: detected capacity change from 0 to 2048 [ 144.781965][ T20] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 144.795761][ T1710] loop0: detected capacity change from 0 to 40427 [ 144.816800][ T1710] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 144.824639][ T1710] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 144.838408][ T1710] F2FS-fs (loop0): invalid crc value [ 144.933838][ T1710] F2FS-fs (loop0): Found nat_bits in checkpoint [ 144.970347][ T1710] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 144.977933][ T1710] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 145.262776][ T333] usb 3-1: language id specifier not provided by device, defaulting to English [ 145.412031][ T20] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.423815][ T20] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.433755][ T20] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 145.442851][ T20] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.451440][ T20] usb 5-1: config 0 descriptor?? [ 145.506255][ T1724] loop0: detected capacity change from 0 to 2048 [ 145.523831][ T1724] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 145.582022][ T333] uclogic 0003:256C:006D.0033: failed retrieving string descriptor #200: -71 [ 145.590904][ T333] uclogic 0003:256C:006D.0033: failed retrieving pen parameters: -71 [ 145.599386][ T333] uclogic 0003:256C:006D.0033: failed probing pen v2 parameters: -71 [ 145.607741][ T333] uclogic 0003:256C:006D.0033: failed probing parameters: -71 [ 145.615414][ T333] uclogic: probe of 0003:256C:006D.0033 failed with error -71 [ 145.632272][ T333] usb 3-1: USB disconnect, device number 19 [ 145.662037][ T58] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 145.751995][ T1731] syz.0.366[1731] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 145.752345][ T1731] syz.0.366[1731] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 145.823712][ T1733] incfs: Options parsing error. -22 [ 145.840935][ T1733] incfs: mount failed -22 [ 146.881135][ T1745] loop0: detected capacity change from 0 to 128 [ 146.891093][ T1745] EXT4-fs (loop0): Test dummy encryption mode enabled [ 146.941321][ T1745] EXT4-fs (loop0): Test dummy encryption mode enabled [ 147.032309][ T1745] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,,errors=continue. Quota mode: none. [ 147.099251][ T1745] ext4 filesystem being mounted at /83/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 147.222212][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 147.222232][ T30] audit: type=1400 audit(1755149173.919:1005): avc: denied { create } for pid=1744 comm="syz.0.370" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 147.261998][ T58] usb 4-1: Using ep0 maxpacket: 16 [ 147.303552][ T30] audit: type=1400 audit(1755149174.009:1006): avc: denied { write } for pid=1744 comm="syz.0.370" name="ptp0" dev="devtmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 147.328626][ T1745] netlink: 88 bytes leftover after parsing attributes in process `syz.0.370'. [ 147.352508][ T30] audit: type=1326 audit(1755149174.059:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1721 comm="syz.3.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff96c5ebbe9 code=0x7ffc0000 [ 147.382793][ T30] audit: type=1326 audit(1755149174.059:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1721 comm="syz.3.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff96c5ebbe9 code=0x7ffc0000 [ 147.406169][ T30] audit: type=1326 audit(1755149174.059:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1721 comm="syz.3.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff96c5ebbe9 code=0x7ffc0000 [ 147.438346][ T30] audit: type=1326 audit(1755149174.059:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1721 comm="syz.3.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff96c5ebbe9 code=0x7ffc0000 [ 147.461967][ T30] audit: type=1326 audit(1755149174.059:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1721 comm="syz.3.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff96c5ebbe9 code=0x7ffc0000 [ 147.487404][ T1753] device batadv_slave_1 entered promiscuous mode [ 147.493861][ T30] audit: type=1326 audit(1755149174.059:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1721 comm="syz.3.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7ff96c5ebbe9 code=0x7ffc0000 [ 147.517524][ T30] audit: type=1326 audit(1755149174.059:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1721 comm="syz.3.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff96c5ebbe9 code=0x7ffc0000 [ 147.541081][ T30] audit: type=1326 audit(1755149174.059:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1721 comm="syz.3.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7ff96c5ebbe9 code=0x7ffc0000 [ 147.565681][ T1756] netlink: 12 bytes leftover after parsing attributes in process `syz.3.364'. [ 147.861995][ T333] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 148.014817][ T1761] loop4: detected capacity change from 0 to 2048 [ 148.082030][ T20] usbhid 5-1:0.0: can't add hid device: -71 [ 148.088186][ T20] usbhid: probe of 5-1:0.0 failed with error -71 [ 148.096117][ T20] usb 5-1: USB disconnect, device number 26 [ 148.102456][ T333] usb 3-1: Using ep0 maxpacket: 16 [ 148.247595][ T1750] device batadv_slave_1 left promiscuous mode [ 148.485183][ T1764] netlink: 12 bytes leftover after parsing attributes in process `syz.2.373'. [ 148.829014][ T1766] loop0: detected capacity change from 0 to 40427 [ 148.852033][ T20] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 148.862295][ T1766] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 148.885690][ T1766] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 148.906507][ T1766] F2FS-fs (loop0): invalid crc value [ 148.983851][ T1766] F2FS-fs (loop0): Found nat_bits in checkpoint [ 149.028445][ T1766] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 149.035657][ T1766] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 149.191715][ T1777] loop3: detected capacity change from 0 to 2048 [ 149.202615][ T333] usb 3-1: unable to get BOS descriptor or descriptor too short [ 149.210360][ T58] usb 4-1: unable to get BOS descriptor or descriptor too short [ 149.232143][ T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.244557][ T20] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 149.252701][ T1777] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable=0x0000000000000001,errors=remount-ro,resgid=0x0000000000000000,barrier,bsdgroups,inode_readahead_blks=0x0000000000002000,. Quota mode: none. [ 149.253950][ T20] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.283805][ T20] usb 2-1: config 0 descriptor?? [ 149.292354][ T1777] ext4 filesystem being mounted at /78/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.302865][ T58] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 149.310435][ T58] usb 4-1: can't read configurations, error -71 [ 149.316746][ T333] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 149.325159][ T333] usb 3-1: can't read configurations, error -71 [ 149.388667][ T1785] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.379: bg 0: block 345: padding at end of block bitmap is not set [ 149.403482][ T1785] EXT4-fs (loop3): Remounting filesystem read-only [ 149.509253][ T1787] incfs: Options parsing error. -22 [ 149.514661][ T1787] incfs: mount failed -22 [ 149.621982][ T445] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 149.832306][ T1792] syz.0.381[1792] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 149.832389][ T1792] syz.0.381[1792] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 151.256952][ T20] keytouch 0003:0926:3333.0034: fixing up Keytouch IEC report descriptor [ 151.278356][ T20] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0034/input/input32 [ 151.314051][ T1802] incfs: Error accessing: ./file0. [ 151.323241][ T1802] incfs: mount failed -2 [ 151.356332][ T20] keytouch 0003:0926:3333.0034: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 151.436665][ T1793] UDC core: couldn't find an available UDC or it's busy: -16 [ 151.521015][ T1793] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 151.793504][ T1806] syz.0.384[1806] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 151.793587][ T1806] syz.0.384[1806] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 151.820553][ T445] usb 5-1: Using ep0 maxpacket: 16 [ 154.083048][ T1811] usb 2-1: USB disconnect, device number 24 [ 154.526701][ T1820] loop3: detected capacity change from 0 to 2048 [ 154.552797][ T445] usb 5-1: unable to get BOS descriptor or descriptor too short [ 154.612016][ T445] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 154.621730][ T445] usb 5-1: can't read configurations, error -71 [ 155.001951][ T445] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 155.021971][ T376] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 155.241989][ T445] usb 5-1: Using ep0 maxpacket: 16 [ 155.634574][ T376] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 155.645179][ T30] kauditd_printk_skb: 82 callbacks suppressed [ 155.645198][ T30] audit: type=1326 audit(1755149182.339:1097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1821 comm="syz.4.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81b9ee5be9 code=0x7ffc0000 [ 155.688968][ T30] audit: type=1326 audit(1755149182.339:1098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1821 comm="syz.4.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f81b9ee5be9 code=0x7ffc0000 [ 155.712579][ T30] audit: type=1326 audit(1755149182.339:1099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1821 comm="syz.4.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81b9ee5be9 code=0x7ffc0000 [ 155.749245][ T30] audit: type=1326 audit(1755149182.339:1100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1821 comm="syz.4.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f81b9ee5be9 code=0x7ffc0000 [ 155.802303][ T1842] netlink: 12 bytes leftover after parsing attributes in process `syz.4.390'. [ 155.842316][ T30] audit: type=1326 audit(1755149182.339:1101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1821 comm="syz.4.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81b9ee5be9 code=0x7ffc0000 [ 155.884107][ T376] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 155.893332][ T376] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.904894][ T376] usb 4-1: config 0 descriptor?? [ 155.922793][ T30] audit: type=1326 audit(1755149182.339:1102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1821 comm="syz.4.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f81b9ee5be9 code=0x7ffc0000 [ 155.952050][ T445] usb 5-1: unable to get BOS descriptor or descriptor too short [ 155.959815][ T30] audit: type=1326 audit(1755149182.339:1103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1821 comm="syz.4.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81b9ee5be9 code=0x7ffc0000 [ 155.993339][ T30] audit: type=1326 audit(1755149182.339:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1821 comm="syz.4.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f81b9ee5be9 code=0x7ffc0000 [ 156.017419][ T30] audit: type=1326 audit(1755149182.339:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1821 comm="syz.4.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81b9ee5be9 code=0x7ffc0000 [ 156.034699][ T376] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 156.048381][ T445] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 156.049090][ T30] audit: type=1326 audit(1755149182.339:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1821 comm="syz.4.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81b9ee5be9 code=0x7ffc0000 [ 156.083669][ T445] usb 5-1: can't read configurations, error -71 [ 156.090497][ T445] usb usb5-port1: attempt power cycle [ 156.165898][ T1851] syz.1.395[1851] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 156.166176][ T1851] syz.1.395[1851] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 156.372013][ T376] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 156.925248][ T1855] loop0: detected capacity change from 0 to 1024 [ 156.953956][ T1855] EXT4-fs (loop0): Ignoring removed nobh option [ 156.970473][ T1855] EXT4-fs (loop0): Ignoring removed bh option [ 156.980582][ T1855] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 157.031134][ T1855] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 157.072221][ T376] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.091337][ T376] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 157.103561][ T376] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.115641][ T376] usb 3-1: config 0 descriptor?? [ 157.170684][ T1870] loop1: detected capacity change from 0 to 2048 [ 157.362350][ T1874] UDC core: couldn't find an available UDC or it's busy: -16 [ 157.369900][ T1874] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 157.726037][ T376] keytouch 0003:0926:3333.0035: fixing up Keytouch IEC report descriptor [ 157.801968][ T376] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0035/input/input33 [ 157.904467][ T1881] syz.4.404[1881] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 157.904548][ T1881] syz.4.404[1881] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 157.941522][ T376] keytouch 0003:0926:3333.0035: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 158.367625][ T1885] UDC core: couldn't find an available UDC or it's busy: -16 [ 158.376604][ T1885] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 158.433053][ T20] usb 4-1: USB disconnect, device number 25 [ 158.569506][ T445] usb 3-1: USB disconnect, device number 22 [ 158.701521][ T1895] loop4: detected capacity change from 0 to 2048 [ 158.829394][ T1897] incfs: Error accessing: ./file0. [ 158.836240][ T1897] incfs: mount failed -2 [ 159.962324][ T1907] incfs: iterate_incfs_dir / -22 [ 161.030331][ T1914] loop2: detected capacity change from 0 to 2048 [ 161.048313][ T1916] loop3: detected capacity change from 0 to 2048 [ 161.626140][ T1920] loop4: detected capacity change from 0 to 40427 [ 161.650728][ T1920] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 161.674220][ T1920] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 161.686887][ T1920] F2FS-fs (loop4): invalid crc value [ 161.693783][ T1920] F2FS-fs (loop4): Found nat_bits in checkpoint [ 161.713036][ T1920] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 161.720198][ T1920] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 161.822039][ T1811] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 161.972024][ T376] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 162.140396][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 162.140412][ T30] audit: type=1400 audit(1755149188.839:1123): avc: denied { write } for pid=1939 comm="syz.4.419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 162.180871][ T1942] incfs: Error accessing: ./file0. [ 162.186563][ T1942] incfs: mount failed -2 [ 162.292157][ T1811] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.303935][ T1811] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.314156][ T1811] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 162.327084][ T1811] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.356698][ T1811] usb 2-1: config 0 descriptor?? [ 162.382260][ T376] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.409143][ T376] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.513259][ T376] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 162.522721][ T376] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.532222][ T376] usb 1-1: config 0 descriptor?? [ 163.059319][ T1951] loop3: detected capacity change from 0 to 40427 [ 163.066030][ T1811] usb 2-1: language id specifier not provided by device, defaulting to English [ 163.066886][ T1953] loop4: detected capacity change from 0 to 2048 [ 163.104718][ T1951] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 163.112548][ T1951] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 163.123050][ T1951] F2FS-fs (loop3): Found nat_bits in checkpoint [ 163.160519][ T1951] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 163.167708][ T1951] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 163.262039][ T376] usb 1-1: language id specifier not provided by device, defaulting to English [ 163.711987][ T1811] uclogic 0003:256C:006D.0036: failed retrieving string descriptor #100: -71 [ 163.720816][ T1811] uclogic 0003:256C:006D.0036: failed retrieving pen parameters: -71 [ 163.728945][ T1811] uclogic 0003:256C:006D.0036: failed probing pen v1 parameters: -71 [ 163.737077][ T1811] uclogic 0003:256C:006D.0036: failed probing parameters: -71 [ 163.744555][ T1811] uclogic: probe of 0003:256C:006D.0036 failed with error -71 [ 163.752123][ T375] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 163.761361][ T1811] usb 2-1: USB disconnect, device number 25 [ 163.782016][ T376] uclogic 0003:256C:006D.0037: failed retrieving Huion firmware version: -71 [ 163.790854][ T376] uclogic 0003:256C:006D.0037: failed probing parameters: -71 [ 163.798828][ T30] audit: type=1326 audit(1755149190.489:1124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1950 comm="syz.3.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff96c5ebbe9 code=0x7fc00000 [ 163.806652][ T376] uclogic: probe of 0003:256C:006D.0037 failed with error -71 [ 163.832436][ T376] usb 1-1: USB disconnect, device number 23 [ 163.954864][ T1964] loop3: detected capacity change from 0 to 2048 [ 164.168970][ T375] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.179882][ T375] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.189658][ T375] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 164.198734][ T375] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.210300][ T375] usb 3-1: config 0 descriptor?? [ 164.296312][ T1971] loop1: detected capacity change from 0 to 40427 [ 164.311701][ T1971] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 164.319989][ T1971] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 164.329655][ T1971] F2FS-fs (loop1): invalid crc value [ 164.336780][ T1971] F2FS-fs (loop1): Found nat_bits in checkpoint [ 164.356176][ T1971] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 164.363351][ T1971] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 164.537974][ T1979] loop1: detected capacity change from 0 to 2048 [ 164.573406][ T1979] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 164.592072][ T445] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 164.740958][ T1986] device batadv_slave_1 entered promiscuous mode [ 164.852027][ T445] usb 1-1: Using ep0 maxpacket: 8 [ 164.954838][ T30] audit: type=1400 audit(1755149191.659:1125): avc: denied { bind } for pid=1989 comm="syz.4.434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 164.977553][ T445] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 164.990508][ T445] usb 1-1: config 179 has no interface number 0 [ 164.997183][ T445] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 165.008651][ T30] audit: type=1400 audit(1755149191.689:1126): avc: denied { listen } for pid=1989 comm="syz.4.434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 165.028383][ T445] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 165.044385][ T30] audit: type=1400 audit(1755149191.689:1127): avc: denied { connect } for pid=1989 comm="syz.4.434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 165.222354][ T375] uclogic 0003:256C:006D.0038: failed retrieving Huion firmware version: -71 [ 165.244304][ T375] uclogic 0003:256C:006D.0038: failed probing parameters: -71 [ 165.250041][ T445] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 165.267100][ T375] uclogic: probe of 0003:256C:006D.0038 failed with error -71 [ 165.270290][ T445] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 165.289442][ T445] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 165.290135][ T375] usb 3-1: USB disconnect, device number 23 [ 165.302844][ T445] usb 1-1: config 179 interface 65 has no altsetting 0 [ 165.319814][ T445] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 165.329059][ T445] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.374414][ T445] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input34 [ 165.471732][ T1983] device batadv_slave_1 left promiscuous mode [ 165.642760][ T445] usb 1-1: USB disconnect, device number 24 [ 165.651242][ T445] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 165.902821][ T2006] loop3: detected capacity change from 0 to 2048 [ 166.607441][ T2020] loop2: detected capacity change from 0 to 2048 [ 166.656829][ T2015] loop4: detected capacity change from 0 to 40427 [ 166.667808][ T2015] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 166.711973][ T2015] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 166.752025][ T445] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 166.760060][ T2015] F2FS-fs (loop4): invalid crc value [ 166.790189][ T2015] F2FS-fs (loop4): Found nat_bits in checkpoint [ 166.828013][ T2015] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 166.837014][ T2015] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 166.929018][ T2028] loop3: detected capacity change from 0 to 512 [ 166.956861][ T2028] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.444: inode #1: comm syz.3.444: iget: illegal inode # [ 166.969868][ T2028] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.444: error while reading EA inode 1 err=-117 [ 166.982339][ T2028] EXT4-fs (loop3): 1 orphan inode deleted [ 166.988070][ T2028] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 167.132013][ T445] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.143266][ T445] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 167.152651][ T445] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.161810][ T445] usb 2-1: config 0 descriptor?? [ 167.226629][ T2036] device batadv_slave_1 entered promiscuous mode [ 167.282020][ T1811] usb 4-1: new low-speed USB device number 26 using dummy_hcd [ 167.642452][ T445] keytouch 0003:0926:3333.0039: fixing up Keytouch IEC report descriptor [ 167.651618][ T445] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0039/input/input35 [ 167.672025][ T1811] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 167.680773][ T1811] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 167.691023][ T1811] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 167.734272][ T445] keytouch 0003:0926:3333.0039: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 167.761977][ T375] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 167.932030][ T1811] usb 4-1: string descriptor 0 read error: -22 [ 167.938321][ T1811] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 167.947520][ T1811] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.958879][ T2033] device batadv_slave_1 left promiscuous mode [ 168.024725][ T1811] usb 4-1: 0:2 : does not exist [ 168.162230][ T375] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.188485][ T375] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.247466][ T2049] UDC core: couldn't find an available UDC or it's busy: -16 [ 168.276300][ T375] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 168.287122][ T2049] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 168.357654][ T375] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.429622][ T375] usb 3-1: config 0 descriptor?? [ 168.476250][ T289] usb 4-1: USB disconnect, device number 26 [ 169.019359][ T376] usb 2-1: USB disconnect, device number 26 [ 169.152018][ T375] usb 3-1: language id specifier not provided by device, defaulting to English [ 169.532000][ T1811] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 169.672163][ T375] uclogic 0003:256C:006D.003A: failed retrieving Huion firmware version: -71 [ 169.708730][ T375] uclogic 0003:256C:006D.003A: failed probing parameters: -71 [ 169.752597][ T375] uclogic: probe of 0003:256C:006D.003A failed with error -71 [ 169.855351][ T375] usb 3-1: USB disconnect, device number 24 [ 169.902288][ T1811] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.990031][ T1811] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.476828][ T2063] loop1: detected capacity change from 0 to 2048 [ 170.483710][ T1811] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 170.512061][ T1811] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.534738][ T1811] usb 4-1: config 0 descriptor?? [ 170.566438][ T2067] incfs: Error accessing: ./file0. [ 170.571628][ T2067] incfs: mount failed -2 [ 171.261956][ T58] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 171.455451][ T30] audit: type=1326 audit(1755149198.161:1128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2082 comm="syz.0.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcea7d6abe9 code=0x7ffc0000 [ 171.459942][ T2083] tipc: Started in network mode [ 171.484790][ T30] audit: type=1326 audit(1755149198.161:1129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2082 comm="syz.0.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7fcea7d6abe9 code=0x7ffc0000 [ 171.485143][ T2083] tipc: Node identity baca83f9853d, cluster identity 4711 [ 171.508711][ T30] audit: type=1326 audit(1755149198.161:1130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2082 comm="syz.0.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcea7d6abe9 code=0x7ffc0000 [ 171.516011][ T2083] tipc: Enabled bearer , priority 0 [ 171.539384][ T30] audit: type=1326 audit(1755149198.161:1131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2082 comm="syz.0.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7fcea7d6abe9 code=0x7ffc0000 [ 171.569845][ T30] audit: type=1326 audit(1755149198.161:1132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2082 comm="syz.0.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcea7d6abe9 code=0x7ffc0000 [ 171.582013][ T1811] uclogic 0003:256C:006D.003B: failed retrieving Huion firmware version: -71 [ 171.602469][ T1811] uclogic 0003:256C:006D.003B: failed probing parameters: -71 [ 171.602951][ T30] audit: type=1326 audit(1755149198.161:1133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2082 comm="syz.0.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcea7d6abe9 code=0x7ffc0000 [ 171.610558][ T2082] tipc: Disabling bearer [ 171.639106][ T30] audit: type=1326 audit(1755149198.161:1134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2082 comm="syz.0.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcea7d6abe9 code=0x7ffc0000 [ 171.647210][ T1811] uclogic: probe of 0003:256C:006D.003B failed with error -71 [ 171.663326][ T30] audit: type=1326 audit(1755149198.161:1135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2082 comm="syz.0.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fcea7d6969f code=0x7ffc0000 [ 171.694934][ T30] audit: type=1326 audit(1755149198.161:1136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2082 comm="syz.0.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcea7d6abe9 code=0x7ffc0000 [ 171.718718][ T58] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 171.721602][ T1811] usb 4-1: USB disconnect, device number 27 [ 171.730376][ T30] audit: type=1326 audit(1755149198.161:1137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2082 comm="syz.0.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcea7d6abe9 code=0x7ffc0000 [ 171.762338][ T58] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 171.780555][ T58] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.818169][ T58] usb 3-1: config 0 descriptor?? [ 171.839868][ T2089] loop0: detected capacity change from 0 to 512 [ 171.862769][ T58] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 171.895157][ T2089] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.461: inode #1: comm syz.0.461: iget: illegal inode # [ 171.908439][ T2089] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.461: error while reading EA inode 1 err=-117 [ 171.921384][ T2089] EXT4-fs (loop0): 1 orphan inode deleted [ 171.927271][ T2089] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 172.271996][ T375] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 172.341992][ T445] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 172.632018][ T375] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.642960][ T375] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.652913][ T375] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 172.661983][ T375] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.670773][ T375] usb 1-1: config 0 descriptor?? [ 172.702050][ T445] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.713019][ T445] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.723166][ T445] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 172.732245][ T445] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.740660][ T445] usb 5-1: config 0 descriptor?? [ 172.770309][ T2107] UDC core: couldn't find an available UDC or it's busy: -16 [ 172.777769][ T2107] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 173.153011][ T2113] loop3: detected capacity change from 0 to 2048 [ 173.582009][ T445] usb 5-1: language id specifier not provided by device, defaulting to English [ 173.662017][ T375] uclogic 0003:256C:006D.003C: failed retrieving Huion firmware version: -71 [ 173.670913][ T375] uclogic 0003:256C:006D.003C: failed probing parameters: -71 [ 173.678624][ T375] uclogic: probe of 0003:256C:006D.003C failed with error -71 [ 173.695579][ T375] usb 1-1: USB disconnect, device number 25 [ 173.991334][ T375] usb 3-1: USB disconnect, device number 25 [ 174.009677][ T2120] incfs: Error accessing: ./file0. [ 174.015044][ T2120] incfs: mount failed -2 [ 174.399024][ T445] uclogic 0003:256C:006D.003D: failed retrieving string descriptor #100: -71 [ 174.407922][ T445] uclogic 0003:256C:006D.003D: failed retrieving pen parameters: -71 [ 174.416283][ T445] uclogic 0003:256C:006D.003D: failed probing pen v1 parameters: -71 [ 174.424574][ T445] uclogic 0003:256C:006D.003D: failed probing parameters: -71 [ 174.433476][ T445] uclogic: probe of 0003:256C:006D.003D failed with error -71 [ 174.443634][ T445] usb 5-1: USB disconnect, device number 30 [ 174.546953][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 174.555500][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 174.564097][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 174.573706][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 174.582114][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 174.590690][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 174.599248][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 174.607600][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 174.766539][ T2136] device batadv_slave_1 entered promiscuous mode [ 174.866768][ T2138] loop4: detected capacity change from 0 to 2048 [ 174.944802][ T2140] loop2: detected capacity change from 0 to 2048 [ 175.360225][ T2149] loop0: detected capacity change from 0 to 512 [ 175.378165][ T2149] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #15: comm syz.0.478: casefold flag without casefold feature [ 175.391065][ T2149] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.478: couldn't read orphan inode 15 (err -117) [ 175.403329][ T2149] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 175.428148][ T2149] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 175.437050][ T2149] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 175.492547][ T2133] device batadv_slave_1 left promiscuous mode [ 175.793411][ T2154] loop4: detected capacity change from 0 to 2048 [ 175.827762][ T2156] loop2: detected capacity change from 0 to 2048 [ 175.834377][ T445] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 175.843757][ T2154] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 176.091981][ T445] usb 2-1: Using ep0 maxpacket: 16 [ 176.208816][ T2171] netlink: 12 bytes leftover after parsing attributes in process `syz.1.479'. [ 177.722188][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 177.722326][ T30] audit: type=1326 audit(1755149203.021:1168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2151 comm="syz.1.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe33b891be9 code=0x7ffc0000 [ 177.802100][ T445] usb 2-1: unable to get BOS descriptor or descriptor too short [ 177.805431][ T2176] incfs: Error accessing: ./file0. [ 177.843765][ T2176] incfs: mount failed -2 [ 177.851216][ T30] audit: type=1326 audit(1755149203.021:1169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2151 comm="syz.1.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe33b891be9 code=0x7ffc0000 [ 177.900740][ T30] audit: type=1400 audit(1755149204.601:1170): avc: denied { ioctl } for pid=2177 comm="syz.1.487" path="socket:[25722]" dev="sockfs" ino=25722 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 177.929656][ T445] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 177.942669][ T30] audit: type=1400 audit(1755149204.601:1171): avc: denied { write } for pid=2177 comm="syz.1.487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 177.949252][ T445] usb 2-1: can't read configurations, error -71 [ 177.988620][ T2185] loop2: detected capacity change from 0 to 512 [ 178.091696][ T2185] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.489: inode #1: comm syz.2.489: iget: illegal inode # [ 178.106523][ T2185] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.489: error while reading EA inode 1 err=-117 [ 178.130194][ T2185] EXT4-fs (loop2): 1 orphan inode deleted [ 178.136921][ T2185] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 178.411427][ T2193] loop0: detected capacity change from 0 to 2048 [ 178.725306][ T2209] loop1: detected capacity change from 0 to 1024 [ 178.773431][ T2209] EXT4-fs (loop1): mounted filesystem without journal. Opts: user_xattr,nodioread_nolock,,errors=continue. Quota mode: none. [ 178.787150][ T2209] ext4 filesystem being mounted at /88/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.998730][ T2205] loop2: detected capacity change from 0 to 40427 [ 179.023642][ T2205] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 179.036528][ T2205] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 179.046493][ T2205] F2FS-fs (loop2): invalid crc value [ 179.057954][ T2205] F2FS-fs (loop2): Found nat_bits in checkpoint [ 179.098863][ T2205] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 179.106058][ T2205] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 179.131990][ T58] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 179.300030][ T2221] loop0: detected capacity change from 0 to 40427 [ 179.318821][ T2221] F2FS-fs (loop0): invalid crc value [ 179.330581][ T2221] F2FS-fs (loop0): Found nat_bits in checkpoint [ 179.368143][ T2221] F2FS-fs (loop0): Start checkpoint disabled! [ 179.374372][ T445] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 179.382350][ T58] usb 4-1: Using ep0 maxpacket: 16 [ 179.389162][ T2221] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 179.532985][ T45] attempt to access beyond end of device [ 179.532985][ T45] loop0: rw=2049, want=40968, limit=40427 [ 179.608735][ T2225] netlink: 12 bytes leftover after parsing attributes in process `syz.3.496'. [ 179.734838][ T45] attempt to access beyond end of device [ 179.734838][ T45] loop0: rw=2049, want=41000, limit=40427 [ 180.163784][ T2231] loop2: detected capacity change from 0 to 2048 [ 180.697376][ T2234] loop4: detected capacity change from 0 to 512 [ 180.712047][ T445] usb 2-1: Using ep0 maxpacket: 16 [ 180.720670][ T30] audit: type=1400 audit(1755149207.421:1172): avc: denied { read } for pid=2235 comm="syz.0.500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 180.769637][ T2234] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.502: inode #1: comm syz.4.502: iget: illegal inode # [ 180.783201][ T2234] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.502: error while reading EA inode 1 err=-117 [ 180.796352][ T2234] EXT4-fs (loop4): 1 orphan inode deleted [ 180.802341][ T2234] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 180.854488][ T30] audit: type=1326 audit(1755149207.561:1173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2214 comm="syz.1.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe33b891be9 code=0x7ffc0000 [ 180.915230][ T30] audit: type=1326 audit(1755149207.581:1174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2214 comm="syz.1.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe33b891be9 code=0x7ffc0000 [ 180.947113][ T2244] netlink: 12 bytes leftover after parsing attributes in process `syz.1.497'. [ 180.964492][ T30] audit: type=1326 audit(1755149207.581:1175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2214 comm="syz.1.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe33b891be9 code=0x7ffc0000 [ 181.000395][ T30] audit: type=1326 audit(1755149207.581:1176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2214 comm="syz.1.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe33b891be9 code=0x7ffc0000 [ 181.026642][ T30] audit: type=1326 audit(1755149207.581:1177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2214 comm="syz.1.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe33b891be9 code=0x7ffc0000 [ 181.102112][ T445] usb 2-1: unable to get BOS descriptor or descriptor too short [ 181.113577][ T2247] incfs: Error accessing: ./file0. [ 181.118814][ T2247] incfs: mount failed -2 [ 181.172090][ T445] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 181.181985][ T445] usb 2-1: can't read configurations, error -71 [ 181.196755][ T445] usb usb2-port1: attempt power cycle [ 181.221998][ T20] usb 5-1: new low-speed USB device number 31 using dummy_hcd [ 181.889632][ T2259] loop3: detected capacity change from 0 to 2048 [ 181.912102][ T20] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 181.921094][ T20] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 181.931326][ T20] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 181.940496][ T58] usb 4-1: unable to get BOS descriptor or descriptor too short [ 182.003140][ T58] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 182.010880][ T58] usb 4-1: can't read configurations, error -71 [ 182.181996][ T20] usb 5-1: string descriptor 0 read error: -22 [ 182.188222][ T20] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 182.197407][ T20] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.241976][ T289] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 182.242642][ T20] usb 5-1: 0:2 : does not exist [ 182.452235][ T445] usb 5-1: USB disconnect, device number 31 [ 182.482012][ T289] usb 3-1: Using ep0 maxpacket: 16 [ 182.652608][ T2266] netlink: 12 bytes leftover after parsing attributes in process `syz.2.509'. [ 182.801863][ T2272] loop3: detected capacity change from 0 to 256 [ 182.814633][ T2272] FAT-fs (loop3): Unrecognized mount option "1844674407370955161501777777777777777777777" or missing value [ 182.922407][ T2272] loop3: detected capacity change from 0 to 512 [ 182.933130][ T2272] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 182.943092][ T2272] EXT4-fs (loop3): Project quota feature not enabled. Cannot enable project quota enforcement. [ 182.957631][ T30] kauditd_printk_skb: 54 callbacks suppressed [ 182.957644][ T30] audit: type=1400 audit(1755149209.661:1232): avc: denied { getopt } for pid=2271 comm="syz.3.512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 183.038296][ T2273] loop3: detected capacity change from 0 to 512 [ 183.093904][ T2273] EXT4-fs error (device loop3): ext4_do_update_inode:5235: inode #3: comm syz.3.512: corrupted inode contents [ 183.105819][ T2273] EXT4-fs error (device loop3): ext4_dirty_inode:6071: inode #3: comm syz.3.512: mark_inode_dirty error [ 183.117701][ T2273] EXT4-fs error (device loop3): ext4_do_update_inode:5235: inode #3: comm syz.3.512: corrupted inode contents [ 183.129574][ T2273] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #3: comm syz.3.512: mark_inode_dirty error [ 183.141021][ T2273] Quota error (device loop3): write_blk: dquota write failed [ 183.148488][ T2273] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 183.158435][ T2273] EXT4-fs error (device loop3): ext4_acquire_dquot:6198: comm syz.3.512: Failed to acquire dquot type 0 [ 183.170809][ T2273] EXT4-fs (loop3): 1 orphan inode deleted [ 183.176581][ T2273] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 183.187666][ T2273] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 183.331966][ T376] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 183.531347][ T2280] loop0: detected capacity change from 0 to 2048 [ 183.551083][ T30] audit: type=1400 audit(1755149210.251:1233): avc: denied { write } for pid=2281 comm="syz.1.515" name="001" dev="devtmpfs" ino=160 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 183.702000][ T376] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.726064][ T376] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 183.748915][ T376] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.774490][ T376] usb 5-1: config 0 descriptor?? [ 183.931976][ T445] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 184.181971][ T445] usb 4-1: Using ep0 maxpacket: 16 [ 184.273073][ T376] keytouch 0003:0926:3333.003E: fixing up Keytouch IEC report descriptor [ 184.282875][ T376] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.003E/input/input36 [ 184.398759][ T2294] netlink: 12 bytes leftover after parsing attributes in process `syz.3.518'. [ 184.562581][ T376] keytouch 0003:0926:3333.003E: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 184.934896][ T2296] UDC core: couldn't find an available UDC or it's busy: -16 [ 185.087031][ T2296] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 185.222151][ T289] usb 3-1: unable to get BOS descriptor or descriptor too short [ 185.324717][ T2298] incfs: Error accessing: ./file0. [ 185.371426][ T289] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 185.494681][ T2298] incfs: mount failed -2 [ 185.526185][ T289] usb 3-1: can't read configurations, error -71 [ 185.573774][ T20] usb 5-1: USB disconnect, device number 32 [ 186.095372][ T2308] loop4: detected capacity change from 0 to 2048 [ 186.481971][ T289] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 186.752008][ T445] usb 4-1: unable to get BOS descriptor or descriptor too short [ 186.801965][ T376] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 186.812150][ T445] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 186.821826][ T445] usb 4-1: can't read configurations, error -71 [ 186.872021][ T289] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.892018][ T289] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 186.911393][ T289] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.925485][ T289] usb 3-1: config 0 descriptor?? [ 186.959449][ T2324] loop3: detected capacity change from 0 to 40427 [ 186.971194][ T2324] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 186.979588][ T2324] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 187.005857][ T2324] F2FS-fs (loop3): invalid crc value [ 187.012811][ T2324] F2FS-fs (loop3): Found nat_bits in checkpoint [ 187.048403][ T2324] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 187.055966][ T2324] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 187.125309][ T2332] loop4: detected capacity change from 0 to 512 [ 187.182039][ T376] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.206848][ T376] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.217515][ T376] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 187.232057][ T376] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.260314][ T376] usb 1-1: config 0 descriptor?? [ 187.267288][ T2332] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.529: casefold flag without casefold feature [ 187.282841][ T2332] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.529: couldn't read orphan inode 15 (err -117) [ 187.331970][ T2332] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 187.365062][ T2332] overlayfs: missing 'lowerdir' [ 187.382702][ T289] keytouch 0003:0926:3333.003F: fixing up Keytouch IEC report descriptor [ 187.399457][ T289] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.003F/input/input37 [ 187.485198][ T289] keytouch 0003:0926:3333.003F: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 187.558330][ T2340] loop1: detected capacity change from 0 to 512 [ 187.668599][ T2340] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #15: comm syz.1.531: casefold flag without casefold feature [ 187.750902][ T2340] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.531: couldn't read orphan inode 15 (err -117) [ 187.822214][ T2340] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 187.942835][ T30] audit: type=1400 audit(1755149214.651:1234): avc: denied { create } for pid=2309 comm="syz.2.523" dev="anon_inodefs" ino=25399 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 187.966495][ T2340] overlayfs: missing 'lowerdir' [ 187.972330][ T376] usb 1-1: language id specifier not provided by device, defaulting to English [ 187.999137][ T30] audit: type=1400 audit(1755149214.651:1235): avc: denied { ioctl } for pid=2309 comm="syz.2.523" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=25399 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 188.090001][ T30] audit: type=1400 audit(1755149214.731:1236): avc: denied { block_suspend } for pid=2309 comm="syz.2.523" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 188.641998][ T376] uclogic 0003:256C:006D.0040: failed retrieving string descriptor #100: -71 [ 188.660959][ T376] uclogic 0003:256C:006D.0040: failed retrieving pen parameters: -71 [ 188.681134][ T376] uclogic 0003:256C:006D.0040: failed probing pen v1 parameters: -71 [ 188.689381][ T376] uclogic 0003:256C:006D.0040: failed probing parameters: -71 [ 188.707006][ T376] uclogic: probe of 0003:256C:006D.0040 failed with error -71 [ 188.727632][ T376] usb 1-1: USB disconnect, device number 26 [ 189.257447][ T376] usb 3-1: USB disconnect, device number 27 [ 189.442012][ T2358] loop2: detected capacity change from 0 to 512 [ 189.526925][ T2358] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.535: casefold flag without casefold feature [ 189.559205][ T2362] loop1: detected capacity change from 0 to 256 [ 189.591004][ T2358] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.535: couldn't read orphan inode 15 (err -117) [ 189.603548][ T2358] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 189.606689][ T2362] exFAT-fs (loop1): failed to load upcase table (idx : 0x000106cd, chksum : 0x3aeaf2c0, utbl_chksum : 0xe619d30d) [ 189.642943][ T2362] netlink: 16 bytes leftover after parsing attributes in process `syz.1.536'. [ 189.652187][ T2362] tipc: Invalid UDP bearer configuration [ 189.652215][ T2362] tipc: Enabling of bearer rejected, failed to enable media [ 190.185466][ T2370] loop4: detected capacity change from 0 to 2048 [ 190.395246][ T2374] loop2: detected capacity change from 0 to 40427 [ 190.407513][ T2374] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 190.417905][ T2374] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 190.443253][ T2374] F2FS-fs (loop2): invalid crc value [ 190.450617][ T2374] F2FS-fs (loop2): Found nat_bits in checkpoint [ 190.468829][ T289] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 190.486505][ T2374] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 190.494206][ T2374] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 190.712165][ T289] usb 2-1: Using ep0 maxpacket: 16 [ 191.079585][ T2390] netlink: 12 bytes leftover after parsing attributes in process `syz.1.538'. [ 193.019164][ T2395] loop4: detected capacity change from 0 to 512 [ 193.145299][ T2395] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.544: casefold flag without casefold feature [ 193.158224][ T2395] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.544: couldn't read orphan inode 15 (err -117) [ 193.170405][ T2395] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 193.218802][ T2395] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 193.227761][ T2395] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 193.262166][ T2421] loop0: detected capacity change from 0 to 512 [ 193.380502][ T2421] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #15: comm syz.0.547: casefold flag without casefold feature [ 193.403432][ T2421] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.547: couldn't read orphan inode 15 (err -117) [ 193.422294][ T2421] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 193.488231][ T2421] overlayfs: missing 'lowerdir' [ 194.212017][ T289] usb 2-1: unable to get BOS descriptor or descriptor too short [ 194.271975][ T289] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 194.278565][ T2436] loop4: detected capacity change from 0 to 2048 [ 194.279612][ T289] usb 2-1: can't read configurations, error -71 [ 194.681975][ T375] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 194.921956][ T375] usb 1-1: Using ep0 maxpacket: 16 [ 195.000638][ T2439] netlink: 12 bytes leftover after parsing attributes in process `syz.0.555'. [ 195.021566][ T30] audit: type=1326 audit(1755149221.701:1237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2438 comm="syz.0.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcea7d6abe9 code=0x7ffc0000 [ 195.045126][ T30] audit: type=1326 audit(1755149221.701:1238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2438 comm="syz.0.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcea7d6abe9 code=0x7ffc0000 [ 195.068955][ T30] audit: type=1326 audit(1755149221.701:1239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2438 comm="syz.0.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcea7d6abe9 code=0x7ffc0000 [ 195.094676][ T30] audit: type=1326 audit(1755149221.701:1240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2438 comm="syz.0.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcea7d6abe9 code=0x7ffc0000 [ 195.118043][ T375] usb 1-1: unable to get BOS descriptor or descriptor too short [ 195.164002][ T30] audit: type=1326 audit(1755149221.701:1241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2438 comm="syz.0.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcea7d6abe9 code=0x7ffc0000 [ 195.187810][ T30] audit: type=1326 audit(1755149221.701:1242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2438 comm="syz.0.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fcea7d6abe9 code=0x7ffc0000 [ 195.213485][ T30] audit: type=1326 audit(1755149221.701:1243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2438 comm="syz.0.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcea7d6abe9 code=0x7ffc0000 [ 195.236854][ T375] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 195.236884][ T375] usb 1-1: can't read configurations, error -71 [ 195.297589][ T30] audit: type=1326 audit(1755149221.701:1244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2438 comm="syz.0.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fcea7d6abe9 code=0x7ffc0000 [ 195.535142][ T30] audit: type=1326 audit(1755149221.701:1245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2438 comm="syz.0.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcea7d6abe9 code=0x7ffc0000 [ 195.561278][ T30] audit: type=1326 audit(1755149221.701:1246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2438 comm="syz.0.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcea7d6abe9 code=0x7ffc0000 [ 196.301968][ T289] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 196.458588][ T2466] incfs: Error accessing: ./file0. [ 196.463883][ T2466] incfs: mount failed -2 [ 196.527831][ T342] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 196.581958][ T289] usb 2-1: Using ep0 maxpacket: 16 [ 197.020309][ T2458] netlink: 12 bytes leftover after parsing attributes in process `syz.1.561'. [ 197.082046][ T289] usb 2-1: unable to get BOS descriptor or descriptor too short [ 197.141965][ T289] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 197.149528][ T289] usb 2-1: can't read configurations, error -71 [ 197.462132][ T342] usb 5-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 197.522893][ T342] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.635683][ T2477] loop2: detected capacity change from 0 to 2048 [ 197.648502][ T342] usb 5-1: config 0 descriptor?? [ 199.036894][ T375] usb 5-1: USB disconnect, device number 33 [ 199.332082][ T342] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 199.438515][ T2507] loop0: detected capacity change from 0 to 40427 [ 199.494841][ T2507] F2FS-fs (loop0): fault_injection options not supported [ 199.502160][ T2507] F2FS-fs (loop0): fault_type options not supported [ 199.509807][ T2507] F2FS-fs (loop0): invalid crc value [ 199.516396][ T2507] F2FS-fs (loop0): Found nat_bits in checkpoint [ 199.536258][ T2507] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 199.580888][ T2507] attempt to access beyond end of device [ 199.580888][ T2507] loop0: rw=2049, want=45104, limit=40427 [ 199.702035][ T342] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.712978][ T342] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.722759][ T342] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 199.731881][ T342] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.740867][ T342] usb 4-1: config 0 descriptor?? [ 199.801996][ T289] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 200.042034][ T289] usb 2-1: Using ep0 maxpacket: 16 [ 200.104136][ T30] kauditd_printk_skb: 120 callbacks suppressed [ 200.104151][ T30] audit: type=1326 audit(1755149226.811:1367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2508 comm="syz.1.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe33b891be9 code=0x7ffc0000 [ 200.133879][ T30] audit: type=1326 audit(1755149226.811:1368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2508 comm="syz.1.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe33b891be9 code=0x7ffc0000 [ 200.157537][ T30] audit: type=1326 audit(1755149226.811:1369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2508 comm="syz.1.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe33b891be9 code=0x7ffc0000 [ 200.181572][ T30] audit: type=1326 audit(1755149226.811:1370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2508 comm="syz.1.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe33b891be9 code=0x7ffc0000 [ 200.205770][ T30] audit: type=1326 audit(1755149226.811:1371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2508 comm="syz.1.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe33b891be9 code=0x7ffc0000 [ 200.236409][ T30] audit: type=1326 audit(1755149226.811:1372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2508 comm="syz.1.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe33b891be9 code=0x7ffc0000 [ 200.260774][ T30] audit: type=1326 audit(1755149226.811:1373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2508 comm="syz.1.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe33b891be9 code=0x7ffc0000 [ 200.284848][ T30] audit: type=1326 audit(1755149226.811:1374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2508 comm="syz.1.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe33b891be9 code=0x7ffc0000 [ 200.308596][ T30] audit: type=1326 audit(1755149226.811:1375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2508 comm="syz.1.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fe33b891be9 code=0x7ffc0000 [ 200.309532][ T2509] netlink: 12 bytes leftover after parsing attributes in process `syz.1.578'. [ 200.334018][ T30] audit: type=1326 audit(1755149226.811:1376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2508 comm="syz.1.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe33b891be9 code=0x7ffc0000 [ 200.402221][ T1811] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 200.412281][ T289] usb 2-1: unable to get BOS descriptor or descriptor too short [ 200.440911][ T2521] loop4: detected capacity change from 0 to 2048 [ 200.471998][ T289] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 200.489860][ T289] usb 2-1: can't read configurations, error -71 [ 200.496377][ T342] usb 4-1: language id specifier not provided by device, defaulting to English [ 200.512310][ T2523] syz.0.581 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 201.742037][ T1811] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.753164][ T1811] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.763710][ T1811] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 201.789944][ T2534] loop4: detected capacity change from 0 to 512 [ 201.791975][ T1811] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.811744][ T2534] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.583: inode #1: comm syz.4.583: iget: illegal inode # [ 201.825611][ T1811] usb 3-1: config 0 descriptor?? [ 201.842521][ T2534] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.583: error while reading EA inode 1 err=-117 [ 201.902315][ T2534] EXT4-fs (loop4): 1 orphan inode deleted [ 201.933292][ T2534] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 202.162120][ T342] uclogic 0003:256C:006D.0041: failed retrieving string descriptor #100: -71 [ 202.184976][ T342] uclogic 0003:256C:006D.0041: failed retrieving pen parameters: -71 [ 202.193580][ T342] uclogic 0003:256C:006D.0041: failed probing pen v1 parameters: -71 [ 202.201693][ T342] uclogic 0003:256C:006D.0041: failed probing parameters: -71 [ 202.209654][ T342] uclogic: probe of 0003:256C:006D.0041 failed with error -71 [ 202.218843][ T342] usb 4-1: USB disconnect, device number 32 [ 202.391944][ T375] usb 5-1: new low-speed USB device number 34 using dummy_hcd [ 202.752052][ T375] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 202.760767][ T375] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 202.770978][ T375] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 202.781994][ T1811] uclogic 0003:256C:006D.0042: failed retrieving Huion firmware version: -71 [ 202.790763][ T1811] uclogic 0003:256C:006D.0042: failed probing parameters: -71 [ 202.798342][ T1811] uclogic: probe of 0003:256C:006D.0042 failed with error -71 [ 202.809184][ T1811] usb 3-1: USB disconnect, device number 28 [ 202.981954][ T20] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 203.012002][ T375] usb 5-1: string descriptor 0 read error: -22 [ 203.018244][ T375] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 203.027686][ T375] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.072596][ T375] usb 5-1: 0:2 : does not exist [ 203.263493][ T2563] loop2: detected capacity change from 0 to 2048 [ 203.278273][ T375] usb 5-1: USB disconnect, device number 34 [ 203.342028][ T20] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.353010][ T20] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.362867][ T20] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 203.371945][ T20] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.380857][ T20] usb 4-1: config 0 descriptor?? [ 203.586348][ T2568] incfs: Error accessing: ./file0. [ 203.591818][ T2568] incfs: mount failed -2 [ 204.190113][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 205.366834][ T2580] FAULT_INJECTION: forcing a failure. [ 205.366834][ T2580] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 205.380070][ T2580] CPU: 1 PID: 2580 Comm: syz.4.595 Not tainted 5.15.189-syzkaller-android13-5.15.189_r00 #0 [ 205.390152][ T2580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 205.400393][ T2580] Call Trace: [ 205.403678][ T2580] [ 205.406623][ T2580] __dump_stack+0x21/0x30 [ 205.410966][ T2580] dump_stack_lvl+0xee/0x150 [ 205.415568][ T2580] ? show_regs_print_info+0x20/0x20 [ 205.421037][ T2580] dump_stack+0x15/0x20 [ 205.425202][ T2580] should_fail+0x3c1/0x510 [ 205.429623][ T2580] should_fail_usercopy+0x1a/0x20 [ 205.434656][ T2580] _copy_from_user+0x20/0xd0 [ 205.439255][ T2580] iovec_from_user+0x1bc/0x2f0 [ 205.444036][ T2580] ? __copy_msghdr_from_user+0x302/0x5e0 [ 205.449687][ T2580] __import_iovec+0x71/0x400 [ 205.454295][ T2580] ? __ia32_sys_shutdown+0x1e0/0x1e0 [ 205.459607][ T2580] import_iovec+0x7c/0xb0 [ 205.463953][ T2580] ___sys_sendmsg+0x1b9/0x260 [ 205.468644][ T2580] ? __sys_sendmsg+0x250/0x250 [ 205.473428][ T2580] ? __fdget+0x1a1/0x230 [ 205.477683][ T2580] __x64_sys_sendmsg+0x1e2/0x2a0 [ 205.482631][ T2580] ? ___sys_sendmsg+0x260/0x260 [ 205.487505][ T2580] ? ksys_write+0x1eb/0x240 [ 205.492019][ T2580] ? __kasan_check_write+0x14/0x20 [ 205.497137][ T2580] ? switch_fpu_return+0x15d/0x2c0 [ 205.502350][ T2580] x64_sys_call+0x4b/0x9a0 [ 205.506786][ T2580] do_syscall_64+0x4c/0xa0 [ 205.511210][ T2580] ? clear_bhb_loop+0x50/0xa0 [ 205.516002][ T2580] ? clear_bhb_loop+0x50/0xa0 [ 205.520685][ T2580] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 205.526586][ T2580] RIP: 0033:0x7f81b9ee5be9 [ 205.531181][ T2580] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 205.550799][ T2580] RSP: 002b:00007f81b890c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 205.559235][ T2580] RAX: ffffffffffffffda RBX: 00007f81ba10d180 RCX: 00007f81b9ee5be9 [ 205.567232][ T2580] RDX: 0000000000004000 RSI: 0000200000000bc0 RDI: 000000000000000b [ 205.575232][ T2580] RBP: 00007f81b890c090 R08: 0000000000000000 R09: 0000000000000000 [ 205.583226][ T2580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 205.591218][ T2580] R13: 00007f81ba10d218 R14: 00007f81ba10d180 R15: 00007ffdc9a34cc8 [ 205.599206][ T2580] [ 205.617369][ T2580] loop4: detected capacity change from 0 to 512 [ 205.627711][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 205.627735][ T30] audit: type=1400 audit(1755149232.331:1434): avc: denied { create } for pid=2582 comm="syz.1.598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 205.685168][ T2583] loop1: detected capacity change from 0 to 512 [ 205.693096][ T2580] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 205.749040][ T2584] device veth0_to_team entered promiscuous mode [ 205.787658][ T2580] EXT4-fs (loop4): orphan cleanup on readonly fs [ 205.796253][ T2580] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.595: bg 0: block 248: padding at end of block bitmap is not set [ 205.811277][ T2580] Quota error (device loop4): write_blk: dquota write failed [ 205.818796][ T2580] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 205.828904][ T2580] EXT4-fs error (device loop4): ext4_acquire_dquot:6198: comm syz.4.595: Failed to acquire dquot type 1 [ 205.841968][ T2580] EXT4-fs (loop4): 1 truncate cleaned up [ 205.848492][ T2580] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,resgid=0x0000000000000000,noblock_validity,grpjquota=,grpjquota=,resuid=0x0000000000000000,auto_da_alloc,noload,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 205.995195][ T2583] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 206.022016][ T1811] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 206.031869][ T2583] EXT4-fs (loop1): 1 truncate cleaned up [ 206.038047][ T2583] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,minixdf,quota,,errors=continue. Quota mode: writeback. [ 206.062045][ T20] usb 4-1: string descriptor 0 read error: -71 [ 206.074925][ T30] audit: type=1400 audit(1755149232.781:1435): avc: denied { setattr } for pid=2582 comm="syz.1.598" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 206.103926][ T20] uclogic 0003:256C:006D.0043: failed retrieving string descriptor #200: -71 [ 206.112803][ T20] uclogic 0003:256C:006D.0043: failed retrieving pen parameters: -71 [ 206.120891][ T20] uclogic 0003:256C:006D.0043: failed probing pen v2 parameters: -71 [ 206.129095][ T20] uclogic 0003:256C:006D.0043: failed probing parameters: -71 [ 206.136773][ T20] uclogic: probe of 0003:256C:006D.0043 failed with error -71 [ 206.145433][ T20] usb 4-1: USB disconnect, device number 33 [ 206.176456][ T2597] netlink: 12 bytes leftover after parsing attributes in process `syz.1.602'. [ 206.189329][ T30] audit: type=1400 audit(1755149232.891:1436): avc: denied { bind } for pid=2596 comm="syz.1.602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 206.222036][ T342] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 206.392011][ T1811] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.403045][ T1811] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 206.412863][ T1811] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 206.421949][ T1811] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.430362][ T1811] usb 1-1: config 0 descriptor?? [ 206.461976][ T342] usb 3-1: Using ep0 maxpacket: 8 [ 206.471991][ T289] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 206.571980][ T58] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 206.582011][ T342] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 206.591817][ T342] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 206.600991][ T342] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.609676][ T342] usb 3-1: config 0 descriptor?? [ 206.831989][ T289] usb 2-1: config index 0 descriptor too short (expected 44306, got 18) [ 206.840364][ T289] usb 2-1: config 0 has too many interfaces: 140, using maximum allowed: 32 [ 206.849078][ T289] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 140 [ 206.858193][ T289] usb 2-1: config 0 has no interface number 0 [ 206.864334][ T289] usb 2-1: New USB device found, idVendor=24cf, idProduct=59e4, bcdDevice= 9.22 [ 206.873402][ T289] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.881846][ T289] usb 2-1: config 0 descriptor?? [ 206.922519][ T289] usb-storage 2-1:0.33: USB Mass Storage device detected [ 206.962022][ T58] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.973049][ T58] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 206.982973][ T58] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 206.992217][ T58] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.001089][ T58] usb 5-1: config 0 descriptor?? [ 207.072574][ T342] kone 0003:1E7D:2CED.0045: item fetching failed at offset 0/2 [ 207.080228][ T342] kone 0003:1E7D:2CED.0045: parse failed [ 207.085888][ T342] kone: probe of 0003:1E7D:2CED.0045 failed with error -22 [ 207.165755][ T342] usb 2-1: USB disconnect, device number 36 [ 207.172092][ T1811] usb 1-1: language id specifier not provided by device, defaulting to English [ 207.365566][ T20] usb 3-1: USB disconnect, device number 29 [ 207.700068][ T2610] loop1: detected capacity change from 0 to 2048 [ 207.763341][ T2610] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 207.867331][ T1811] uclogic 0003:256C:006D.0044: failed retrieving string descriptor #100: -71 [ 207.886349][ T1811] uclogic 0003:256C:006D.0044: failed retrieving pen parameters: -71 [ 207.894980][ T1811] uclogic 0003:256C:006D.0044: failed probing pen v1 parameters: -71 [ 207.974875][ T1811] uclogic 0003:256C:006D.0044: failed probing parameters: -71 [ 207.982575][ T1811] uclogic: probe of 0003:256C:006D.0044 failed with error -71 [ 207.990933][ T1811] usb 1-1: USB disconnect, device number 29 [ 208.012080][ T58] uclogic 0003:256C:006D.0046: failed retrieving Huion firmware version: -71 [ 208.316300][ T58] uclogic 0003:256C:006D.0046: failed probing parameters: -71 [ 208.323853][ T58] uclogic: probe of 0003:256C:006D.0046 failed with error -71 [ 208.333009][ T58] usb 5-1: USB disconnect, device number 35 [ 208.419549][ T2625] loop0: detected capacity change from 0 to 256 [ 208.487704][ T2625] exFAT-fs (loop0): failed to load upcase table (idx : 0x000106cd, chksum : 0x3aeaf2c0, utbl_chksum : 0xe619d30d) [ 208.505801][ T2625] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 208.518186][ T2625] tipc: Enabled bearer , priority 10 [ 208.525566][ T30] audit: type=1400 audit(1755149235.231:1437): avc: denied { write } for pid=2626 comm="syz.4.611" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 208.686653][ T2631] mmap: syz.0.612 (2631) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 208.788922][ T2631] syz.0.612 (2631) used greatest stack depth: 20832 bytes left [ 208.852041][ T375] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 208.876895][ T2653] netlink: 24 bytes leftover after parsing attributes in process `syz.2.623'. [ 208.877218][ T2654] netlink: 4 bytes leftover after parsing attributes in process `syz.3.622'. [ 208.991226][ T2678] netlink: 48 bytes leftover after parsing attributes in process `syz.3.634'. [ 209.056154][ T2691] netlink: 8 bytes leftover after parsing attributes in process `syz.0.641'. [ 209.210419][ T2722] ================================================================== [ 209.218539][ T2722] BUG: KASAN: slab-out-of-bounds in tc_setup_flow_action+0x870/0x3240 [ 209.226690][ T2722] Read of size 8 at addr ffff8881171b1dc0 by task syz.3.657/2722 [ 209.234429][ T2722] [ 209.236770][ T2722] CPU: 1 PID: 2722 Comm: syz.3.657 Not tainted 5.15.189-syzkaller-android13-5.15.189_r00 #0 [ 209.246849][ T2722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 209.257076][ T2722] Call Trace: [ 209.260369][ T2722] [ 209.263311][ T2722] __dump_stack+0x21/0x30 [ 209.267657][ T2722] dump_stack_lvl+0xee/0x150 [ 209.272269][ T2722] ? show_regs_print_info+0x20/0x20 [ 209.277487][ T2722] ? load_image+0x3a0/0x3a0 [ 209.281994][ T2722] print_address_description+0x7f/0x2c0 [ 209.287523][ T2722] ? tc_setup_flow_action+0x870/0x3240 [ 209.292959][ T2722] kasan_report+0xf1/0x140 [ 209.297364][ T2722] ? tc_setup_flow_action+0x870/0x3240 [ 209.302798][ T2722] __asan_report_load8_noabort+0x14/0x20 [ 209.308414][ T2722] tc_setup_flow_action+0x870/0x3240 [ 209.313686][ T2722] mall_replace_hw_filter+0x293/0x820 [ 209.319054][ T2722] ? pcpu_block_update_hint_alloc+0x8c1/0xc50 [ 209.325106][ T2722] ? mall_set_parms+0x520/0x520 [ 209.329943][ T2722] ? tcf_exts_destroy+0xb0/0xb0 [ 209.334793][ T2722] ? mall_set_parms+0x1e8/0x520 [ 209.339624][ T2722] mall_change+0x526/0x740 [ 209.344019][ T2722] ? __kasan_check_write+0x14/0x20 [ 209.349202][ T2722] ? mall_get+0xa0/0xa0 [ 209.353346][ T2722] ? tcf_chain_tp_insert_unique+0xac1/0xc10 [ 209.359234][ T2722] tc_new_tfilter+0x12a2/0x1870 [ 209.364084][ T2722] ? tcf_gate_entry_destructor+0x20/0x20 [ 209.369714][ T2722] ? security_capable+0x87/0xb0 [ 209.374550][ T2722] ? ns_capable+0x8c/0xf0 [ 209.378876][ T2722] ? netlink_net_capable+0x125/0x160 [ 209.384155][ T2722] ? tcf_gate_entry_destructor+0x20/0x20 [ 209.389779][ T2722] rtnetlink_rcv_msg+0x81b/0xb90 [ 209.394705][ T2722] ? rtnetlink_bind+0x80/0x80 [ 209.399371][ T2722] ? memcpy+0x56/0x70 [ 209.403345][ T2722] ? avc_has_perm_noaudit+0x2f4/0x460 [ 209.408706][ T2722] ? arch_stack_walk+0xee/0x140 [ 209.413542][ T2722] ? avc_denied+0x1b0/0x1b0 [ 209.418258][ T2722] ? stack_trace_save+0x98/0xe0 [ 209.423092][ T2722] ? avc_has_perm+0x158/0x240 [ 209.427758][ T2722] ? avc_has_perm_noaudit+0x460/0x460 [ 209.433113][ T2722] ? x64_sys_call+0x4b/0x9a0 [ 209.437681][ T2722] ? selinux_nlmsg_lookup+0x416/0x4c0 [ 209.443027][ T2722] netlink_rcv_skb+0x1e0/0x430 [ 209.447777][ T2722] ? rtnetlink_bind+0x80/0x80 [ 209.452439][ T2722] ? netlink_ack+0xb60/0xb60 [ 209.457103][ T2722] ? __netlink_lookup+0x387/0x3b0 [ 209.462119][ T2722] rtnetlink_rcv+0x1c/0x20 [ 209.466530][ T2722] netlink_unicast+0x876/0xa40 [ 209.471290][ T2722] netlink_sendmsg+0x86a/0xb70 [ 209.476046][ T2722] ? netlink_getsockopt+0x530/0x530 [ 209.481372][ T2722] ? security_socket_sendmsg+0x82/0xa0 [ 209.486816][ T2722] ? netlink_getsockopt+0x530/0x530 [ 209.491990][ T2722] ____sys_sendmsg+0x5a2/0x8c0 [ 209.496733][ T2722] ? __sys_sendmsg_sock+0x40/0x40 [ 209.501734][ T2722] ? import_iovec+0x7c/0xb0 [ 209.506221][ T2722] ___sys_sendmsg+0x1f0/0x260 [ 209.510892][ T2722] ? __sys_sendmsg+0x250/0x250 [ 209.515634][ T2722] ? sock_show_fdinfo+0xa0/0xa0 [ 209.520462][ T2722] ? __fdget+0x1a1/0x230 [ 209.524685][ T2722] __x64_sys_sendmsg+0x1e2/0x2a0 [ 209.529612][ T2722] ? ___sys_sendmsg+0x260/0x260 [ 209.534441][ T2722] ? __kasan_check_write+0x14/0x20 [ 209.539528][ T2722] ? switch_fpu_return+0x15d/0x2c0 [ 209.544613][ T2722] x64_sys_call+0x4b/0x9a0 [ 209.549112][ T2722] do_syscall_64+0x4c/0xa0 [ 209.553502][ T2722] ? clear_bhb_loop+0x50/0xa0 [ 209.558157][ T2722] ? clear_bhb_loop+0x50/0xa0 [ 209.562808][ T2722] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 209.568689][ T2722] RIP: 0033:0x7ff96c5ebbe9 [ 209.573091][ T2722] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 209.592670][ T2722] RSP: 002b:00007ff96b054038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 209.601061][ T2722] RAX: ffffffffffffffda RBX: 00007ff96c812fa0 RCX: 00007ff96c5ebbe9 [ 209.609010][ T2722] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000006 [ 209.616956][ T2722] RBP: 00007ff96c66ee19 R08: 0000000000000000 R09: 0000000000000000 [ 209.624903][ T2722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 209.632848][ T2722] R13: 00007ff96c813038 R14: 00007ff96c812fa0 R15: 00007ffc44ffada8 [ 209.640798][ T2722] [ 209.643821][ T2722] [ 209.646118][ T2722] Allocated by task 2722: [ 209.650429][ T2722] __kasan_kmalloc+0xda/0x110 [ 209.655081][ T2722] __kmalloc+0x13d/0x2c0 [ 209.659297][ T2722] tcf_idr_create+0x5f/0x790 [ 209.663858][ T2722] tcf_idr_create_from_flags+0x61/0x70 [ 209.669291][ T2722] tcf_gact_init+0x346/0x580 [ 209.673853][ T2722] tcf_action_init_1+0x3f7/0x6a0 [ 209.678768][ T2722] tcf_action_init+0x1e9/0x710 [ 209.683500][ T2722] tcf_exts_validate+0x217/0x520 [ 209.688414][ T2722] mall_set_parms+0x48/0x520 [ 209.692988][ T2722] mall_change+0x45a/0x740 [ 209.697376][ T2722] tc_new_tfilter+0x12a2/0x1870 [ 209.702198][ T2722] rtnetlink_rcv_msg+0x81b/0xb90 [ 209.707126][ T2722] netlink_rcv_skb+0x1e0/0x430 [ 209.711874][ T2722] rtnetlink_rcv+0x1c/0x20 [ 209.716266][ T2722] netlink_unicast+0x876/0xa40 [ 209.721003][ T2722] netlink_sendmsg+0x86a/0xb70 [ 209.725745][ T2722] ____sys_sendmsg+0x5a2/0x8c0 [ 209.730482][ T2722] ___sys_sendmsg+0x1f0/0x260 [ 209.735137][ T2722] __x64_sys_sendmsg+0x1e2/0x2a0 [ 209.740047][ T2722] x64_sys_call+0x4b/0x9a0 [ 209.744433][ T2722] do_syscall_64+0x4c/0xa0 [ 209.748821][ T2722] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 209.754684][ T2722] [ 209.756981][ T2722] Last potentially related work creation: [ 209.762678][ T2722] kasan_save_stack+0x3a/0x60 [ 209.767341][ T2722] __kasan_record_aux_stack+0xd2/0x100 [ 209.772771][ T2722] kasan_record_aux_stack_noalloc+0xb/0x10 [ 209.778547][ T2722] kvfree_call_rcu+0xae/0x7e0 [ 209.783207][ T2722] drop_sysctl_table+0x2ef/0x410 [ 209.788114][ T2722] unregister_sysctl_table+0x7a/0x120 [ 209.793457][ T2722] unregister_net_sysctl_table+0x15/0x20 [ 209.799149][ T2722] ipv6_frags_exit_net+0x60/0xb0 [ 209.804061][ T2722] cleanup_net+0x58b/0xad0 [ 209.808452][ T2722] process_one_work+0x6be/0xba0 [ 209.813285][ T2722] worker_thread+0xa59/0x1200 [ 209.817948][ T2722] kthread+0x411/0x500 [ 209.822005][ T2722] ret_from_fork+0x1f/0x30 [ 209.826394][ T2722] [ 209.828694][ T2722] The buggy address belongs to the object at ffff8881171b1d00 [ 209.828694][ T2722] which belongs to the cache kmalloc-192 of size 192 [ 209.842732][ T2722] The buggy address is located 0 bytes to the right of [ 209.842732][ T2722] 192-byte region [ffff8881171b1d00, ffff8881171b1dc0) [ 209.856340][ T2722] The buggy address belongs to the page: [ 209.861951][ T2722] page:ffffea00045c6c40 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1171b1 [ 209.872160][ T2722] flags: 0x4000000000000200(slab|zone=1) [ 209.877771][ T2722] raw: 4000000000000200 ffffea0004639980 0000000400000004 ffff888100042c00 [ 209.886328][ T2722] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 209.894879][ T2722] page dumped because: kasan: bad access detected [ 209.901289][ T2722] page_owner tracks the page as allocated [ 209.906975][ T2722] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 101, ts 4624842708, free_ts 0 [ 209.921959][ T2722] post_alloc_hook+0x192/0x1b0 [ 209.926710][ T2722] prep_new_page+0x1c/0x110 [ 209.931186][ T2722] get_page_from_freelist+0x2cc5/0x2d50 [ 209.936706][ T2722] __alloc_pages+0x18f/0x440 [ 209.941269][ T2722] new_slab+0xa1/0x4d0 [ 209.945312][ T2722] ___slab_alloc+0x381/0x810 [ 209.949872][ T2722] __slab_alloc+0x49/0x90 [ 209.954188][ T2722] kmem_cache_alloc_trace+0x146/0x270 [ 209.959532][ T2722] kernfs_fop_open+0x343/0xb30 [ 209.964325][ T2722] do_dentry_open+0x834/0x1010 [ 209.969066][ T2722] vfs_open+0x73/0x80 [ 209.973031][ T2722] path_openat+0x2646/0x2f10 [ 209.977771][ T2722] do_filp_open+0x1b3/0x3e0 [ 209.982248][ T2722] do_sys_openat2+0x14c/0x7b0 [ 209.986909][ T2722] __x64_sys_openat+0x136/0x160 [ 209.991759][ T2722] x64_sys_call+0x219/0x9a0 [ 209.996239][ T2722] page_owner free stack trace missing [ 210.001592][ T2722] [ 210.003923][ T2722] Memory state around the buggy address: [ 210.009535][ T2722] ffff8881171b1c80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 210.017574][ T2722] ffff8881171b1d00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 210.025643][ T2722] >ffff8881171b1d80: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 210.033698][ T2722] ^ [ 210.039850][ T2722] ffff8881171b1e00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 210.047891][ T2722] ffff8881171b1e80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 210.055924][ T2722] ================================================================== [ 210.063962][ T2722] Disabling lock debugging due to kernel taint [ 210.076028][ T1811] tipc: Node number set to 1073185785 [ 210.081632][ T375] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.092888][ T30] audit: type=1400 audit(1755149236.781:1438): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 210.115340][ T375] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 210.124740][ T375] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.128687][ T30] audit: type=1400 audit(1755149236.781:1439): avc: denied { search } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 210.133389][ T375] usb 5-1: config 0 descriptor?? [ 210.159460][ T30] audit: type=1400 audit(1755149236.781:1440): avc: denied { write } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 210.180937][ T30] audit: type=1400 audit(1755149236.781:1441): avc: denied { add_name } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 210.642484][ T375] keytouch 0003:0926:3333.0047: fixing up Keytouch IEC report descriptor [ 210.651703][ T375] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0047/input/input38 [ 210.733930][ T375] keytouch 0003:0926:3333.0047: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 211.197299][ T2732] UDC core: couldn't find an available UDC or it's busy: -16 [ 211.204717][ T2732] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 211.282627][ T20] usb 5-1: USB disconnect, device number 36