last executing test programs: 5.407948447s ago: executing program 0: syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x2000410, &(0x7f0000000000), 0x1, 0x7a8, &(0x7f0000000f80)="$eJzs3ctrXFUYAPDvTl5NGk0EQesqIGigdGJrbBUUKi5EsFDQtW1IpqFmkimZSWlCwRYR3AgqLgTddO2j7sSdj63+Fy6kpWpbrLqQkTuPdtLMTDOkM1PI7wc3c869d+ac7577OJN7uBPArjWV/slE7IuID5OIidr8JCKGKqnBiKPV9W5dPz+fTkmUy2/8kVTWuXn9/Hw0vCe1t5Z5PCJ+fC9if2ZrucX1jaW5fD63WsvPlJbPzBTXNw6cXp5bzC3mVg4fnJ09dOS5I4fvX6x//bIxfvWjV5/++ui/7z52+YOfkjga47VljXHcL1MxVdsmQ+km3OSV+11YnyVtlr3Uw3rQmfTQHKge5bEvJmKgkmphtJc1AwC65Z2IKAMAu0zi+g8Au0xETEbt/ld96vf/JHrp2ssRsacaf/3+ZnXJYO2e3Z7KfdCxm8mmOyNJfcPt0FREfP7tW1+mU3TpPiRAMxcuRsTJyamt5/9ky5iFTj3TbmF5pPIyddds5z/one/T/s/zzfp/mdv9n2jS/0mP3qlyu1E/23Pv4z9zZceFtJH2/15sGNt2qyH+msmBWu6hSp9vKDl1Op9Lz20PR8R0DI2k+YOVVZtvj+kb/91oVX5j/+/Pj9/+Ii1/8wiczJXBkc3vWZgrze0o6AbXLkY8Mdgs/uR2+yct+r/Ht1nGay+8/1mrZWn8adz1KS0/fd1RUB0oX4p4qmn732nLpO34xJnK7jBT3yma+ObXT8dald/Y/umUll//LtALafuPtY9/Mmkcr1nsvIyfL0380GrZveNvvv8PJ29W0sO1eefmSqXVgxHDyetb5x+68956vr5+Gv/0k82P/3b7f/qd8OQ24x+8+vtXtY9qGn/FhY7af+cn3po0/oWO2r9Non49uGvR5VtLA63K3177z1ZS07U5d5//mg1LvEdNd7A3AwAAAAAAAAAAAAAAAAAAAAAAAEDnMhExHkkmezudyWSz1d/wfjTGMvlCsbT/VGFtZSHGv6s+/zRTf9TlRMPzUMsD1efh1/OHYnP+2Yh4JCI+GRmt5LPzhfxCv4MHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJq9LX7/P/XbSL9rBwB0zZ5+VwAA6DnXfwDYfTq7/o92rR4AQO90/P2/nHSnIgBAz2z7+n+yu/UAAHrH/X8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC67PixY+lU/vv6+fk0v3B2fW2pcPbAQq64lF1em8/OF1bPZBcLhcV8LjtfWG75QReqL/lC4cxsrKydmynliqWZ4vrGieXC2krpxOnlucXcidxQzyIDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgO0rrm8szeXzuVWJtonRB6MaPUwk/7RbZzD6X8PdkBjuW+mNZ4nR/p2gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB5w/wcAAP//4zomQA==") truncate(&(0x7f00000001c0)='./file2\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) ftruncate(0xffffffffffffffff, 0x208200) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) pwritev2(r1, &(0x7f0000000440)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x0, 0x0, 0x0) 4.764010258s ago: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000a50000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000d8ffffffb703000008000000b70400000000925e8500000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f0000000040)=""/155, 0x1000000, 0x9b, 0x1}, 0x20) 4.124543037s ago: executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_TARGET={0x4}]}}]}, 0x38}}, 0x0) 3.811035472s ago: executing program 0: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000280)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000001c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000200)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r4, r3, 0x0, 0x0, 0x0, 0x7b43, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, "fe1d2e1cff9583040000003413fcff030000000000000000000000f700"}}) 3.760658324s ago: executing program 1: r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f0000000000)="c5", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x15}, 0x1c) accept4(r0, 0x0, 0x0, 0x0) 3.381949242s ago: executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0000000000000000000006241a0000000905810300020000000904010000020d00000904010102020d0000090582020002000000090503"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 3.316823145s ago: executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000051c0)=[{{0x0, 0x5, &(0x7f0000001c00)=[{&(0x7f0000000b40)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@flushpolicy={0x38, 0x1d, 0x0, 0x0, 0x0, "", [@address_filter={0x28, 0x1a, {@in=@local, @in=@empty}}]}, 0x38}}, 0x0) 961.770375ms ago: executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x20}}, 0x0) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000002800), 0x0, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r4, 0x80045500, &(0x7f0000000040)) 700.817097ms ago: executing program 1: r0 = socket(0x10, 0x803, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000002080)="8cdbfc912b2f5015cd4201ad9746ee95213affe23f8c35e5170be0abd5b03507e79012189e1e64b37f4ad974f59fc51fa1f54dbbe9965a2263f8f27e9eb7c8f3da6b8a2ceaaf2e4d39ce3ac31c9fd63f148369fdf5ab93ba0d574effb74d9045ef022dc492d3f44d5dea22c7b841fcc04eb1c49289f206be0479e83bc738a0c0b4af8078e4196fc461319ad63eb307ce25e4478809f34c4d4260eb8dd2de61ea8ec9b3b1492a881c74ca76df5cfb77002aa143f9eed0d0522867d652a3d8550aabeae3d042976bbc2880b947e381f251002b954397afa87388aac2fc96f97a64ab4ff907ae1529ef438006380d08fa0bb3467af1fb531998277792cdf3074d910a636d341e5d398b46e771cfef2599b8639f8e59ab3d5836457eff22ff2c65569eaa99e255c40f18b952f20d020e7d687bc41142b2a31e82cb45a7e0988dc1b6f261944fd46ca54c067f4ad6d9fcaa2e336148d28e22c5f23714c7a66a18faa639baa7eaffed706242859815cda57d2b4b098ac4b2313118ac27223be51de34edc2252f3566202b4c94d53461e194cd72c3182cc14d7ed81c5f0838b9839dc07c9d477ab24889b145f2cd30f1998016aa19eff5b016847cf5c3e1b33800434803514e145e98b4f8e8e2e44ab8fc59c2465ed6543afa8052a71c835d09c8a8f58add989cb798bf2213f3994ffbb812aeafe14ad4cab9e1c95bfe1acc85b1407a888ca967735d8a2ac078091a456a5f7219e2900b1913efb87cd6cc301fd286e6bb5b2358d6b55afcbe1bb033d0b07ebe0ac540eefc4d13cf8d8e03c8c9d62c61248f3337565fdc105e67662e376310fe35afc7ef8730b619f48159b9d3d6773360a30f37301de38933539c15eed59ad1ce0399de77635d2876e23316ec502ac64bb5d2229e216e5b062869b17daaa3d844329de3b8ab08566adbccbf1fde70d2742b65d6d7b4225264f00b4a02b6e78f18a32d16c57b743a86cad2c8b5daadef06cce62912ef6b5a4b97f05d3757cc48331faa66b37ef4a540776690ce4308550d4e5664a5d1f6d675b0c9f7483a358b53cf56293bec5d835822bc666de1c6bb9b3b1c6f67734bb916036c109c4d2143149cbc38547052acb13ddd3347cacb0a30c82f94349fcfa230886b3a782f07a6f964af6cd3c14c83875a4b89a37866b9730a55cbc04eec08079de184a94986e7a59c3e42ec97f95e97d794455ebc4c31946c8319c56ad96a786bae58bc3d71fd6d5988a9eb15a157d12345bc18b52af4bc77a1bf3ac854e8cda6030337d436a2828cd9fd4cc0099b1f6096633a49b612fe6d779b2a82ffc8be5f792a5eea71641898b88ec9041355d3a17a61eb82515b2ac321dd159c81a862e05c3fa30dad529faf79215c3600e62ccdbbaebf159caa1a583eefcce3aa413a15abd88263107b18257b17b224aa03357de9837ad60aa2189b3a0861c5ada3761563be0ffdf870c58b20cc75ebe0317cf7b6a410ef8524a452b10ac119794b9fa588963f918d1159171c5a8eb4e276bec3e574f3111482748201570582f3508720aa3741c617069acddf2085b2184806126a7745e9c40f644ef3a19066b2b9c690e1d9afbe3e561424779c2da513564134abbe3b43142d4880b25f5f36125f739167267c877335ba0d56adfc5e87e276c17edcd964455b31b5b4205d18e067f2759ecdd65b47fbb2c64d0ecbe09ce45a18194d00c61de20717cfe8acbc9d46b96fc7594786641f6eb491a94072c5088a95f7489fcdc3f91861c21742ca91170e867f394952ede0ecb84bf78ad53a051cf6d4cba7033584a68dfc42dbd4771ef330c7ec3a6265235545a20f83e5f0347e58ee1988addd0f4dbba443bbd1463bc97d54fdfbed37b8444ec96489c5beb9c2f63646d937f69a5fbf7bb23c759b582788bb2daf389c6841daab3d4353164b83339708190881b241a72d4693c16b3e4b7232f6b4673ce89c20875811f31373f7a3d439a47ab86f1e43c8ac2bfd5753debc7f13dd32ea1d91f7fd96209bc999a9bf2b0a9ee330f6301fd916ece8669f8058561816504beae76ff8a0b84677783f86bafd8a128cec5845d00269955b155ff860c57a72c37b4b9fc1bafe4e046e69ff2be01e627b20870073dc61a56b92ae8d993f1cc6704675e26f0ee75c55a08794f9b9830f75ec4e6443767a7aadf864862133b628675e2d5f1cc556ef3a4ab06d92a37e9bcd9fe67712c7ac058e5314ca88811735f06caec6dd0079ccb772f9851c041388874210732e86583406f8df7ecec8a9e9a30ebfcad72dd6d678c0d6110c35f3b9eab5038bd31cf2e1069c60e6f197060189573d7273933283f2e826021643d6499bd13b4d2b58718b3ea319703a03db218c01763a9e47611e741617b4217234f1c56eafa34ef32913fc40ba43e66cc0b5f9cbb41f405ec905206ca1eadf9bf1ea5fb039eb0199177b004e1921606aabb878a110cfd20db78ceb9c59fba6ac089ea01c0c0dff10f1009d780fc115986781a8352dddae602af987d2541d5a72936211a20c3a12bc27c7b448261662d004cafb38a28b631f57176ef8107dd321f9c40a7e75fd47c971e435e3aa87c6ea29d2bb2c548810633a610e08e90c13285eeb2f18de70de2fcb0ad3c60978be6566f17973fa6c7ab95b824913ffa43a75cbef7e499cbc1da3025de57bf19e0d369868dd3ffab58b6702e32574f54ef07a34d300c702e1b62f7488cfcc557b0002310e01e02004b1b51e3044f1a95fc7134bc1cbdbb0f1ecdaccfc769b9ed2e1d0aac16a17395ad092564f6f7f84415c0f7552683b72d165e42034337beed4e184033ec2fbd0b143238c2afef7e1ed5b04d5541786e4d97c0e0b1ee0ca58c91f83eee2ac420409942facbaaa47373adbb47ba877d85506f49b588189183aba3570c2ef4cf911f4dadb029f3ff3dee113fce291a7537e829ddcb4b23cbee081335da4cd4f560e37a836078652afe2c667d54ca503322cc8547208a603bc96824b3feedf31a50b4d8fb57c10ab5b5af3324164dcddb7d83dd2f533f98aadaa20e7f0ae333d9ba8b97164924ca8a5e994417bd255f8c3b71d7d376c81363a4f8dd017b0354fbf9defe22ffc3bfbc941617f139ab84022635e8b09e915391460781870fceed07b96882fc3a145bd4cbc9b08e58a95766d931c67c3835cdbc06675e862110ea995adf6749868131c598df528c7ddaf100e390c19b4becade18782bf1263661559db18310dd1c7f25088e7a3b4485a4415be552fcbd33990b549b1d97ac6a65642be79555cd9078fe2af30a46376b229f76d4139de25602ed49153f5bbfa55b32c82350905559a05e86ba972d4bec44e95b53fd48a946a50e6271086edf66f4da211fdb388f6b907857d9f0f4de91f0813ddf2df9a77d3068d171cdc3370c601580433b5d2a0c92f19b2b7d42e1b4a8a1b398e072f358c830533da07e7b5e8d824d4bc770b7a87a9a2f4652a63ef2ef4e1e306c0fbd3acff1f5320fc6e615042c4a8ede07e69c223928c8aafde4506b386d27b43b222196b1aeeab9d1a14e67d571132e736ab6a8d1c11f66f01d3521d5bc876425f92137ef61d48e0759c5df8f4002fac137e4f3bc87683f4f3cf7f23d168fae5dedc9831ab3db605ae615efcb7aa6b5f542fca3189fa5f72d1cfec2a0e70d4d7975f1c3e4dd0fd49e59662e2e703817372a1d44fadf2660343103cce227919f5e9b643a6aa75fda1b0c2e9896fd54e81cf563e0fc359d4cbcea77eecd3f3814668100e4a8b3120f71c7bddef99332b9f90c46ad2437b285bab5c8b3c39412e10801dc4951d21c6ecae7af040eafeb41268a79bb6813299585cb2051cfbf05a049895dac2720a18182850e2484595bb0118bdde62b5cf874513bb2f2cc048851c34be016dfd349a09b9c179e06e1269928cd7eca4c9b333c35a407472b8c9e9065dffbfce3115eff7eb04284e1639c798412251cf120d353a1a21215f1e29e9df4aa5d1e182cff80a03c2bc86dd3aeaf720f2376dfc74ed445e57b9c5d6e870e8978afd8638f159e593e1ba8685eed81e5e1990e2d62c2389c6bf8862c578c51dbe5e4fb6d630b27967a92696aa3aab27c7b1a8932e9219b2ea0b07fe47c4051a5509e6f45975334f9275fdc1ab4d48dd206fa0f1fabbd6836dcfa5d55ddb6c0ac4f0f33f649770e3560110b8be6e4a34661a23ac01c7949aab73c886f529d33ea6d2f781dd92b8864fcb00a82ef8a3e2fb519d6040111966014859f62537755679ecc36b7ad1acbab5dabd8831f3fd58bdfded1b1fb509c825044b9419fc1998c7185af1d7a4ba1b78421899467541f480e5a861c2963f52e719f90a311cfac26ced217123330aa39b6b64e5070b0a67490dc8646d0c7fd7500a764359587d9d19395e525ca711085944d410d708d0a79302171a972e605ab9e5ff154ffb3037b0729787001f0d992623b87c63f524d89c0e9a172c5a24a648e6ccf7fea420890360e254d1e597c7134907bfa8b3245a4a1f3a6fefb8e7051f7e9f0c318024e03c3daeedc2f804bb1acfb18dd9df4edeab9940a032ca9ab3f493cf3231d86434eaa9c1cd22fe69445d95fc385b44aba294e5e1bbdbb25e862dcdb7d39baf3f0bf30a9c2891600836e2df38f22951d6051be3be07e6a22d57174116f6c95f047d7681930b3de5a1b84316443592cd0e824063cfdc2371fd16cd7e5e1389a079d98a5aa81a6cdbaf68a3ca613f9fec1e127f4a50d741aa781e5fca97242e8c283e264b7ac69908163898c9ebe455c3ea0a7406de27058f6b6b48cdb78ddac10f2ea653d0492f86264c5fe134154e1694715a0241aa95365927bb4882d7a54cd46f7d6eef1ce725652768056da932e99c407c3bcddec8bf2af51fcc0edda8199bbce447a57361489e7be7d90524fa0a9f83f9cd20851ae682cb7ba33277059efd0d3dfa4f16d0e444025c1b29796ddcff2be5933df05f3bb15350649444fc615f01ab7ada3a300e01f0fc2b8e6220e48c607b93fc96e367e4750588b595cd965b9bf60e22229e5786845828f9d56514936a98992e95d2d1804d2c0c9c3a5f650cb55438e4ad6edcf74ce1cd268c0c2d83752b27bae82c8642b1b0fcc08776154397fe43b5caa9ed652ef81d53c8182be5e53c13669a7ba3d03b3ce45e04e06f5bb223cff8b5ccc0abe3ad6066fd021bb58f134eb593e06ed90e6559eb653249d9005f7c7465de9fdaf592202e8ae3b0b41e7c46d35d2966fcb532de48c602b087b67ada8d2a86dac78339f4dde6e678c12fbefc623da2c1a35761e6ef55202b4250f5915520a42780a9ee341f966c2a76991cd7127c71f48a8de82912281e8e66028bc8e70ed5f603c49c57233cf721bba920e6eac9f31713206f9b38c0e345c4c99d2980be8fe822ff45b6158e751c75063536ae54ed390b7b17285b2badc9487e145a6650943b16dde22844f87e0b08a09b36f3bf60cc63251a99a0c23b4c39767fc74f4b4934bc2490e9eee9d84d1b5e7bbd4a9c6dd7457d700f141c281ca95b67d01fa47f1d5b1451811af0d2eff19c15f2ab1b26c9d778610c74f09e7cf440e9bb69216f8fd77dd8c6988b52505b584baf53b51056bd39c029455c170beeda69f70c6c653f9e957f1dc29e89ecbafcbc580293baf2450f51f082b7a7f5a667838f4591c3c90e023995fb3e6bb49c9c52373bea56fe4e3bf1710bc5e34199f4070bf4f9a2d71cf39256d34511bbcee23e59a7b0cdffeb2390aa35cb5693dda0f1c6594c129192fafa75c033cb82c9be97bdaf9ba511b39ea2782d1b2c72", 0x1000}, {&(0x7f0000000080)="85", 0x1}, {&(0x7f0000000340)="323b689640a1c808acf42e12514ac68c458f6741766d4159de0cb31b757023ce61bd5f51a9fcc1a6c8acb5097b5e33b32eaac1ad457fbc7f33", 0x39}, {&(0x7f0000000900)="9ee0e8f4f45b9da56ae57931bc8742f49565f276ff6a8720eebb7956dea546d4faa019f81e16b9458898801e21f12067a4a395a7b1408879994e0ea195e85a9b007afca27585b65713f25d88fcf02beed091870f367bdb79dd22a30ee59fddcbb40ece5465d5f370b8", 0x69}], 0x4}, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x28}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x331}, {&(0x7f0000000280)=""/85, 0x5c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x596}, {&(0x7f00000007c0)=""/154, 0x32}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 445.841149ms ago: executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89f1, &(0x7f0000000900)={'ip6_vti0\x00', @random="0600002000"}) 237.970099ms ago: executing program 1: madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) r1 = io_uring_setup(0x3eae, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000080)={&(0x7f0000c15000/0x1000)=nil, &(0x7f0000508000/0x4000)=nil, 0x1000}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) 0s ago: executing program 0: openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x6c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x6c}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:62756' (ED25519) to the list of known hosts. syzkaller login: [ 141.538780][ T1365] net_ratelimit: 6 callbacks suppressed [ 141.539054][ T1365] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 141.544114][ T1365] aoe: packet could not be sent on teql0. consider increasing tx_queue_len 1970/01/01 00:02:21 fuzzer started [ 141.550824][ T1365] aoe: packet could not be sent on tunl0. consider increasing tx_queue_len [ 141.553883][ T1365] aoe: packet could not be sent on gre0. consider increasing tx_queue_len [ 141.558745][ T1365] aoe: packet could not be sent on gretap0. consider increasing tx_queue_len [ 141.560584][ T1365] aoe: packet could not be sent on erspan0. consider increasing tx_queue_len [ 141.561853][ T1365] aoe: packet could not be sent on ip_vti0. consider increasing tx_queue_len [ 141.563098][ T1365] aoe: packet could not be sent on ip6_vti0. consider increasing tx_queue_len [ 141.565390][ T1365] aoe: packet could not be sent on sit0. consider increasing tx_queue_len [ 141.567079][ T1365] aoe: packet could not be sent on ip6tnl0. consider increasing tx_queue_len 1970/01/01 00:02:24 dialing manager at localhost:30006 [ 146.763091][ T3197] cgroup: Unknown subsys name 'net' [ 147.167250][ T3197] cgroup: Unknown subsys name 'rlimit' [ 147.220095][ T3200] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k 1970/01/01 00:02:27 starting 2 executor processes [ 152.944095][ T3210] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 152.959859][ T3210] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 153.270064][ T3211] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 153.307457][ T3211] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 155.167271][ T3210] hsr_slave_0: entered promiscuous mode [ 155.199619][ T3210] hsr_slave_1: entered promiscuous mode [ 155.652061][ T3211] hsr_slave_0: entered promiscuous mode [ 155.696650][ T3211] hsr_slave_1: entered promiscuous mode [ 155.736028][ T3211] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 155.737427][ T3211] Cannot create hsr debugfs directory [ 156.997919][ T3210] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 157.033940][ T3210] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 157.080094][ T3210] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 157.128133][ T3210] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 157.377489][ T3211] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 157.401322][ T3211] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 157.420800][ T3211] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 157.462682][ T3211] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 158.987174][ T3210] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.416883][ T3211] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.080098][ T3210] veth0_vlan: entered promiscuous mode [ 166.090815][ T3211] veth0_vlan: entered promiscuous mode [ 166.172711][ T3210] veth1_vlan: entered promiscuous mode [ 166.192163][ T3211] veth1_vlan: entered promiscuous mode [ 166.398553][ T3210] veth0_macvtap: entered promiscuous mode [ 166.450549][ T3210] veth1_macvtap: entered promiscuous mode [ 166.478120][ T3211] veth0_macvtap: entered promiscuous mode [ 166.523746][ T3211] veth1_macvtap: entered promiscuous mode [ 166.641881][ T3210] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.643279][ T3210] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.644255][ T3210] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.646770][ T3210] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.763286][ T3211] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.764097][ T3211] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.767662][ T3211] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.768440][ T3211] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.076445][ T3357] loop1: detected capacity change from 0 to 512 [ 169.099917][ T3357] ======================================================= [ 169.099917][ T3357] WARNING: The mand mount option has been deprecated and [ 169.099917][ T3357] and is ignored by this kernel. Remove the mand [ 169.099917][ T3357] option from the mount to silence this warning. [ 169.099917][ T3357] ======================================================= [ 169.197842][ T3357] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 169.263492][ T3357] EXT4-fs (loop1): orphan cleanup on readonly fs [ 169.359158][ T3357] EXT4-fs error (device loop1): ext4_validate_block_bitmap:440: comm syz-executor.1: bg 0: block 248: padding at end of block bitmap is not set [ 169.429176][ T3357] Quota error (device loop1): write_blk: dquota write failed [ 169.430747][ T3357] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 169.432674][ T3357] EXT4-fs error (device loop1): ext4_acquire_dquot:6858: comm syz-executor.1: Failed to acquire dquot type 1 [ 169.483720][ T3357] EXT4-fs (loop1): 1 truncate cleaned up [ 169.522596][ T3357] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 169.809872][ T3210] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.153820][ T3362] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 173.365066][ C0] hrtimer: interrupt took 621936 ns [ 179.623893][ T3401] loop0: detected capacity change from 0 to 512 [ 179.782584][ T3401] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.0: corrupted in-inode xattr: invalid ea_ino [ 179.809822][ T3401] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz-executor.0: couldn't read orphan inode 15 (err -117) [ 179.866230][ T3401] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.039737][ T3211] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.788346][ T3416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.791949][ T3416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.226146][ T3453] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 185.227889][ T3453] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 187.136749][ T25] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 187.347469][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.348577][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.350599][ T25] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 187.351987][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.381772][ T25] usb 1-1: config 0 descriptor?? [ 187.912772][ T25] hid-generic 0003:256C:006D.0001: unknown main item tag 0x0 [ 187.914143][ T25] hid-generic 0003:256C:006D.0001: unknown main item tag 0x0 [ 187.925884][ T25] hid-generic 0003:256C:006D.0001: unknown main item tag 0x0 [ 187.927230][ T25] hid-generic 0003:256C:006D.0001: unknown main item tag 0x0 [ 187.928299][ T25] hid-generic 0003:256C:006D.0001: unknown main item tag 0x0 [ 187.962751][ T25] hid-generic 0003:256C:006D.0001: hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.0-1/input0 [ 192.794900][ C0] sched: RT throttling activated [ 198.220277][ T2974] usb 1-1: USB disconnect, device number 2 [ 198.956170][ T3207] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 199.309572][ T3207] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.311574][ T3207] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.313121][ T3207] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 199.328250][ T3207] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.368508][ T3207] usb 1-1: config 0 descriptor?? [ 199.977898][ T3207] hid-generic 0003:256C:006D.0002: unknown main item tag 0x0 [ 199.978715][ T3207] hid-generic 0003:256C:006D.0002: unknown main item tag 0x0 [ 199.979563][ T3207] hid-generic 0003:256C:006D.0002: unknown main item tag 0x0 [ 199.980179][ T3207] hid-generic 0003:256C:006D.0002: unknown main item tag 0x0 [ 199.980774][ T3207] hid-generic 0003:256C:006D.0002: unknown main item tag 0x0 [ 200.091350][ T3207] hid-generic 0003:256C:006D.0002: hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.0-1/input0 [ 205.500603][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 205.502387][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 205.504370][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 205.506665][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 205.507430][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 205.508544][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 205.509259][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 205.510120][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 205.510813][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 205.511664][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 205.512575][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 205.513526][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 205.514339][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 205.529317][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 205.538606][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 205.545189][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 205.546146][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 205.546885][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 205.547602][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 205.548432][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 205.549984][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 205.551150][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 205.552001][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 205.552866][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 205.554158][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 205.569657][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 205.572492][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 205.577822][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 205.579548][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 205.581379][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 205.583194][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 205.590772][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 205.592638][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 205.595937][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 205.599646][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 205.603747][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 205.609703][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 205.610971][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 205.612275][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 205.613567][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 205.620287][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 205.623151][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 205.628389][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 205.656673][ T8] hid-generic 0000:0000:0000.0003: hidraw1: HID v0.00 Device [syz0] on syz0 [ 210.232283][ T3530] Illegal XDP return value 4294967274 on prog (id 5) dev N/A, expect packet loss! [ 210.273085][ T30] usb 1-1: USB disconnect, device number 3 [ 211.231596][ T3536] syzkaller0: entered promiscuous mode [ 211.232378][ T3536] syzkaller0: entered allmulticast mode [ 212.537708][ C0] net_ratelimit: 1 callbacks suppressed [ 212.537918][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 0.0.0.0:20002. Sending cookies. [ 214.821225][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 215.420410][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 0.0.0.0:20002. Sending cookies. [ 216.402002][ T3572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.406786][ T3572] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.481651][ T3584] loop0: detected capacity change from 0 to 2048 [ 220.151885][ T29] audit: type=1326 audit(219.870:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3590 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbd85df28 code=0x7ffc0000 [ 220.165882][ T29] audit: type=1326 audit(219.880:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3590 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c00000b7 syscall=179 compat=0 ip=0xffffbd85df28 code=0x7ffc0000 [ 220.168271][ T29] audit: type=1326 audit(219.880:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3590 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbd85df28 code=0x7ffc0000 [ 220.737075][ T3594] loop1: detected capacity change from 0 to 512 [ 222.257361][ T3605] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 222.603251][ T3610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.606937][ T3610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.032909][ T3612] pim6reg1: entered promiscuous mode [ 223.033809][ T3612] pim6reg1: entered allmulticast mode [ 224.546893][ T3618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.551358][ T3618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.537346][ T3626] pim6reg1: entered promiscuous mode [ 226.538432][ T3626] pim6reg1: entered allmulticast mode [ 227.249026][ T3632] loop1: detected capacity change from 0 to 512 [ 227.418500][ T3632] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 227.716321][ T3632] loop1: detected capacity change from 0 to 2048 [ 227.903260][ T3632] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.460343][ T3639] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 228.462024][ T3639] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 228.463099][ T3639] IPv6: NLM_F_CREATE should be set when creating new route [ 235.377871][ T3666] syz-executor.0 uses obsolete (PF_INET,SOCK_PACKET) [ 237.579691][ T3677] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 237.581718][ T3677] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 238.849528][ T3210] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.928359][ T3692] loop0: detected capacity change from 0 to 512 [ 240.981584][ T3692] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 240.983055][ T3692] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 241.058515][ T3692] EXT4-fs error (device loop0): ext4_free_branches:1027: inode #16: comm syz-executor.0: invalid indirect mapped block 512 (level 0) [ 241.072375][ T3692] EXT4-fs (loop0): Remounting filesystem read-only [ 241.081061][ T3692] EXT4-fs (loop0): 1 orphan inode deleted [ 241.083237][ T3692] EXT4-fs (loop0): 1 truncate cleaned up [ 241.093591][ T3692] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.232755][ T3211] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.107276][ T3742] process 'syz-executor.0' launched './file2' with NULL argv: empty string added [ 252.061390][ T3766] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 254.319359][ T3784] loop1: detected capacity change from 0 to 512 [ 254.477950][ T3784] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.721844][ T3210] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.135488][ T29] audit: type=1326 audit(255.860:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3795 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbd85df28 code=0x7ffc0000 [ 256.138028][ T29] audit: type=1326 audit(255.860:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3795 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffbd85df28 code=0x7ffc0000 [ 256.140340][ T29] audit: type=1326 audit(255.860:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3795 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbd85df28 code=0x7ffc0000 [ 256.178338][ T29] audit: type=1326 audit(255.870:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3795 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffbd85df28 code=0x7ffc0000 [ 256.182530][ T29] audit: type=1326 audit(255.900:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3795 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbd85df28 code=0x7ffc0000 [ 256.207143][ T29] audit: type=1326 audit(255.900:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3795 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffbd85df28 code=0x7ffc0000 [ 256.210168][ T29] audit: type=1326 audit(255.900:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3795 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbd85df28 code=0x7ffc0000 [ 256.213446][ T29] audit: type=1326 audit(255.910:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3795 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbd85df28 code=0x7ffc0000 [ 256.682208][ T3801] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 257.496461][ T3805] loop0: detected capacity change from 0 to 2048 [ 257.688037][ T3805] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.923089][ T3211] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.430122][ T3817] syz_tun: entered allmulticast mode [ 258.764334][ T3820] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 260.009359][ T3831] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 262.367358][ T3852] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 262.368424][ T3852] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 262.915323][ T29] audit: type=1326 audit(262.630:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3855 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbd85df28 code=0x7ffc0000 [ 262.917624][ T29] audit: type=1326 audit(262.640:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3855 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c00000b7 syscall=26 compat=0 ip=0xffffbd85df28 code=0x7ffc0000 [ 262.919597][ T29] audit: type=1326 audit(262.640:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3855 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbd85df28 code=0x7ffc0000 [ 262.942532][ T29] audit: type=1326 audit(262.660:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3855 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c00000b7 syscall=27 compat=0 ip=0xffffbd85df28 code=0x7ffc0000 [ 262.948011][ T29] audit: type=1326 audit(262.670:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3855 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbd85df28 code=0x7ffc0000 [ 262.950334][ T29] audit: type=1326 audit(262.680:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3855 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c00000b7 syscall=202 compat=0 ip=0xffffbd85df28 code=0x7ffc0000 [ 262.953106][ T29] audit: type=1326 audit(262.680:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3855 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbd85df28 code=0x7ffc0000 [ 262.976251][ T29] audit: type=1326 audit(262.680:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3855 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbd85df28 code=0x7ffc0000 [ 262.980020][ T29] audit: type=1326 audit(262.690:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3855 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c00000b7 syscall=208 compat=0 ip=0xffffbd85df28 code=0x7ffc0000 [ 262.982281][ T29] audit: type=1326 audit(262.690:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3855 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbd85df28 code=0x7ffc0000 [ 263.020915][ T3856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.031213][ T3856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.339340][ T3860] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 272.107079][ T8] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 272.462709][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 272.470629][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 272.472305][ T8] usb 1-1: New USB device found, idVendor=056a, idProduct=030a, bcdDevice= 0.00 [ 272.473457][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.507266][ T8] usb 1-1: config 0 descriptor?? [ 273.029415][ T8] hid-generic 0003:056A:030A.0004: hidraw0: USB HID v0.00 Device [HID 056a:030a] on usb-dummy_hcd.0-1/input0 [ 273.173308][ T30] usb 1-1: USB disconnect, device number 4 [ 273.339441][ T3915] loop1: detected capacity change from 0 to 512 [ 273.487296][ T3915] EXT4-fs error (device loop1): ext4_validate_block_bitmap:440: comm syz-executor.1: bg 0: block 131: padding at end of block bitmap is not set [ 273.505561][ T3915] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 273.533394][ T3915] EXT4-fs (loop1): 1 truncate cleaned up [ 273.629030][ T3915] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 273.828148][ T3210] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.269103][ T3921] loop1: detected capacity change from 0 to 512 [ 274.392944][ T3921] EXT4-fs error (device loop1): ext4_orphan_get:1420: comm syz-executor.1: bad orphan inode 13 [ 274.402233][ T3921] ext4_test_bit(bit=12, block=4) = 1 [ 274.403323][ T3921] is_bad_inode(inode)=0 [ 274.406121][ T3921] NEXT_ORPHAN(inode)=0 [ 274.406830][ T3921] max_ino=32 [ 274.409255][ T3921] i_nlink=1 [ 274.429220][ T3921] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 274.449924][ T3921] EXT4-fs warning (device loop1): dx_probe:831: inode #2: comm syz-executor.1: Unrecognised inode hash code 20 [ 274.452644][ T3921] EXT4-fs warning (device loop1): dx_probe:964: inode #2: comm syz-executor.1: Corrupt directory, running e2fsck is recommended [ 274.462027][ T3921] EXT4-fs warning (device loop1): dx_probe:831: inode #2: comm syz-executor.1: Unrecognised inode hash code 20 [ 274.467109][ T3921] EXT4-fs warning (device loop1): dx_probe:964: inode #2: comm syz-executor.1: Corrupt directory, running e2fsck is recommended [ 274.480933][ T3921] EXT4-fs error (device loop1): ext4_find_dest_de:2110: inode #2: block 13: comm syz-executor.1: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 274.507104][ T3921] EXT4-fs error (device loop1): htree_dirblock_to_tree:1108: inode #2: block 13: comm syz-executor.1: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 274.609337][ T3210] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.878001][ T3925] input: syz1 as /devices/virtual/input/input2 [ 275.425456][ T3206] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 275.646040][ T3206] usb 1-1: Using ep0 maxpacket: 16 [ 275.718417][ T3206] usb 1-1: config 1 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 63, changing to 9 [ 275.720681][ T3206] usb 1-1: config 1 interface 0 altsetting 4 endpoint 0x2 has an invalid bInterval 255, changing to 11 [ 275.722173][ T3206] usb 1-1: config 1 interface 0 has no altsetting 0 [ 275.761482][ T3206] usb 1-1: New USB device found, idVendor=047f, idProduct=c055, bcdDevice= 0.40 [ 275.762582][ T3206] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.763447][ T3206] usb 1-1: Product: и [ 275.763964][ T3206] usb 1-1: SerialNumber: 씌솧Ⲕ탽ꑮ龟齼染엍ᅁ换陵ꇱЅ瑣❞랃ɗ᳜⨝댓⍢禵섎跮⦥仙⋑꤇㏆䨱ƹ눼볗蠥Ɬᚃ梷⣹눗☔ﶖ跍䙃璨䭖飇 [ 276.094153][ T3206] usbhid 1-1:1.0: can't add hid device: -71 [ 276.096988][ T3206] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 276.121782][ T3206] usb 1-1: USB disconnect, device number 5 [ 276.468009][ T29] kauditd_printk_skb: 54 callbacks suppressed [ 276.468176][ T29] audit: type=1326 audit(276.190:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3934 comm="syz-executor.1" exe="/syz-executor.1" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffbd85df28 code=0x0 [ 278.169585][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 278.325521][ T3206] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 278.585835][ T3206] usb 1-1: Using ep0 maxpacket: 32 [ 278.692496][ T3206] usb 1-1: New USB device found, idVendor=06cd, idProduct=0110, bcdDevice=71.71 [ 278.694064][ T3206] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.697002][ T3206] usb 1-1: Product: syz [ 278.698152][ T3206] usb 1-1: Manufacturer: syz [ 278.698847][ T3206] usb 1-1: SerialNumber: syz [ 278.750660][ T3206] usb 1-1: config 0 descriptor?? [ 278.820074][ T3206] keyspan 1-1:0.0: Keyspan 2 port adapter converter detected [ 278.822475][ T3206] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 87 [ 278.823677][ T3206] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 7 [ 278.842162][ T3206] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 81 [ 278.843534][ T3206] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 1 [ 278.849613][ T3206] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 2 [ 278.851073][ T3206] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 85 [ 278.852174][ T3206] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 5 [ 278.877449][ T3206] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 278.889514][ T3206] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 83 [ 278.895564][ T3206] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 3 [ 278.896779][ T3206] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 4 [ 278.897941][ T3206] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 86 [ 278.899172][ T3206] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 6 [ 278.927194][ T3206] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 279.005909][ T3207] usb 1-1: USB disconnect, device number 6 [ 279.038891][ T3207] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 279.083776][ T3207] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 279.090848][ T3207] keyspan 1-1:0.0: device disconnected [ 279.823266][ T3952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.830214][ T3952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.175846][ T3207] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 283.445664][ T3207] usb 1-1: Using ep0 maxpacket: 16 [ 283.482535][ T3207] usb 1-1: config 1 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 63, changing to 9 [ 283.489523][ T3207] usb 1-1: config 1 interface 0 altsetting 4 endpoint 0x2 has an invalid bInterval 255, changing to 11 [ 283.491172][ T3207] usb 1-1: config 1 interface 0 has no altsetting 0 [ 283.536062][ T3207] usb 1-1: New USB device found, idVendor=047f, idProduct=c055, bcdDevice= 0.40 [ 283.537471][ T3207] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.548057][ T3207] usb 1-1: Product: и [ 283.549001][ T3207] usb 1-1: SerialNumber: 씌솧Ⲕ탽ꑮ龟齼染엍ᅁ换陵ꇱЅ瑣❞랃ɗ᳜⨝댓⍢禵섎跮⦥仙⋑꤇㏆䨱ƹ눼볗蠥Ɬᚃ梷⣹눗☔ﶖ跍䙃璨䭖飇 [ 283.882048][ T3207] usbhid 1-1:1.0: can't add hid device: -71 [ 283.883495][ T3207] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 283.913479][ T3207] usb 1-1: USB disconnect, device number 7 [ 286.947988][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 287.275068][ T3990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.291363][ T3990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.238010][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 292.419033][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 313.416822][ T4106] syzkaller0: entered promiscuous mode [ 313.419603][ T4106] syzkaller0: entered allmulticast mode [ 315.238034][ T4118] pim6reg1: entered promiscuous mode [ 315.239149][ T4118] pim6reg1: entered allmulticast mode [ 315.756230][ T2974] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 316.035686][ T2974] usb 1-1: Using ep0 maxpacket: 32 [ 316.036612][ T4124] tun0: tun_chr_ioctl cmd 1074025676 [ 316.039048][ T4124] tun0: owner set to 0 [ 316.216218][ T2974] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 316.218423][ T2974] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 316.221729][ T2974] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 316.235756][ T2974] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.271747][ T2974] usb 1-1: config 0 descriptor?? [ 316.308218][ T4120] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 316.350942][ T2974] hub 1-1:0.0: USB hub found [ 316.690407][ T2974] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 316.731885][ T2974] usbhid 1-1:0.0: can't add hid device: -71 [ 316.733242][ T2974] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 316.808850][ T2974] usb 1-1: USB disconnect, device number 8 [ 328.517183][ T4175] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 328.524039][ T4175] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 328.526221][ T4175] IPv6: NLM_F_CREATE should be set when creating new route [ 328.527803][ T4175] IPv6: NLM_F_CREATE should be set when creating new route [ 330.775688][ T3206] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 331.136540][ T3206] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 331.138669][ T3206] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 59391, setting to 1024 [ 331.140230][ T3206] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 331.141317][ T3206] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.186801][ T4189] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 331.402627][ T1812] usb 1-1: USB disconnect, device number 9 [ 336.546325][ T4211] capability: warning: `syz-executor.0' uses deprecated v2 capabilities in a way that may be insecure [ 338.459341][ T4227] loop1: detected capacity change from 0 to 512 [ 338.482723][ T4227] EXT4-fs: Ignoring removed orlov option [ 338.536312][ T4227] EXT4-fs (loop1): Test dummy encryption mode enabled [ 338.547256][ T4227] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 338.699747][ T4227] netlink: 232 bytes leftover after parsing attributes in process `syz-executor.1'. [ 341.512599][ T29] audit: type=1326 audit(341.240:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4248 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbd85df28 code=0x7ffc0000 [ 341.520153][ T29] audit: type=1326 audit(341.240:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4248 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbd85df28 code=0x7ffc0000 [ 341.532386][ T29] audit: type=1326 audit(341.250:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4248 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c00000b7 syscall=119 compat=0 ip=0xffffbd85df28 code=0x7ffc0000 [ 341.541706][ T29] audit: type=1326 audit(341.250:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4248 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbd85df28 code=0x7ffc0000 [ 341.554246][ T29] audit: type=1326 audit(341.250:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4248 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c00000b7 syscall=199 compat=0 ip=0xffffbd85df28 code=0x7ffc0000 [ 341.560178][ T29] audit: type=1326 audit(341.250:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4248 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbd85df28 code=0x7ffc0000 [ 341.562296][ T29] audit: type=1326 audit(341.250:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4248 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c00000b7 syscall=97 compat=0 ip=0xffffbd85df28 code=0x7ffc0000 [ 341.564414][ T29] audit: type=1326 audit(341.270:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4248 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbd85df28 code=0x7ffc0000 [ 342.532217][ T4260] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 342.653941][ T4260] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 344.383692][ T4278] xt_connbytes: Forcing CT accounting to be enabled [ 346.240544][ T29] audit: type=1326 audit(345.970:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4293 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8de5df28 code=0x7ffc0000 [ 346.246652][ T29] audit: type=1326 audit(345.970:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4293 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8de5df28 code=0x7ffc0000 [ 348.932941][ T4317] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 348.941008][ T4317] ip_vti0: Master is either lo or non-ether device [ 349.552113][ T4323] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 349.553456][ T4323] : renamed from bridge_slave_1 (while UP) [ 350.506415][ T4331] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 352.566874][ T8] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 352.825330][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 352.859532][ T8] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 352.864354][ T8] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 352.876329][ T8] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 352.879279][ T8] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 352.883709][ T8] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 352.896093][ T8] usb 1-1: config 1 interface 0 has no altsetting 0 [ 352.898903][ T8] usb 1-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 352.901240][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.003084][ T8] ums-sddr09 1-1:1.0: USB Mass Storage device detected [ 353.336725][ T8] scsi host0: usb-storage 1-1:1.0 [ 353.491332][ T30] usb 1-1: USB disconnect, device number 10 [ 354.412844][ T4355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 354.433077][ T4355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 356.753366][ T4366] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 361.489282][ T4407] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 361.506586][ T4407] netem: change failed [ 365.536447][ T3388] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 365.725633][ T3388] usb 1-1: Using ep0 maxpacket: 16 [ 365.752235][ T3388] usb 1-1: config 1 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 63, changing to 9 [ 365.753816][ T3388] usb 1-1: config 1 interface 0 altsetting 4 endpoint 0x2 has an invalid bInterval 255, changing to 11 [ 365.761305][ T3388] usb 1-1: config 1 interface 0 has no altsetting 0 [ 365.792524][ T3388] usb 1-1: New USB device found, idVendor=047f, idProduct=c055, bcdDevice= 0.40 [ 365.793621][ T3388] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.794133][ T3388] usb 1-1: Product: и [ 365.795514][ T3388] usb 1-1: SerialNumber: 씌솧Ⲕ탽ꑮ龟齼染엍ᅁ换陵ꇱЅ瑣❞랃ɗ᳜⨝댓⍢禵섎跮⦥仙⋑꤇㏆䨱ƹ눼볗蠥Ɬᚃ梷⣹눗☔ﶖ跍䙃璨䭖飇 [ 366.126701][ T3388] usbhid 1-1:1.0: can't add hid device: -71 [ 366.129090][ T3388] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 366.182871][ T3388] usb 1-1: USB disconnect, device number 11 [ 368.121783][ T4437] Zero length message leads to an empty skb [ 369.155520][ T4446] pim6reg1: entered promiscuous mode [ 369.156517][ T4446] pim6reg1: entered allmulticast mode [ 375.713285][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 380.551840][ T3207] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 380.815790][ T3207] usb 1-1: Using ep0 maxpacket: 8 [ 380.835671][ T3207] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 380.838431][ T3207] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.891041][ T3207] usb 1-1: config 0 descriptor?? [ 381.066615][ T4527] loop1: detected capacity change from 0 to 2048 [ 381.135867][ T3207] asix 1-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 381.160677][ T4527] loop1: p3 < > p4 < > [ 381.161932][ T4527] loop1: partition table partially beyond EOD, truncated [ 381.195364][ T4527] loop1: p3 start 4284289 is beyond EOD, truncated [ 381.836908][ T3207] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 381.838406][ T3207] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 381.876168][ T3207] asix 1-1:0.0: probe with driver asix failed with error -71 [ 381.898603][ T3207] usb 1-1: USB disconnect, device number 12 [ 382.241299][ T4128] udevd[4128]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 383.883440][ T1812] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 383.885504][ T1812] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 383.887028][ T1812] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 383.888605][ T1812] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 383.889345][ T1812] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 383.890981][ T1812] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 383.893682][ T1812] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 383.899655][ T1812] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 383.905947][ T1812] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 383.907192][ T1812] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 383.908194][ T1812] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 383.909180][ T1812] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 383.910176][ T1812] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 383.911029][ T1812] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 383.911670][ T1812] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 383.912449][ T1812] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 383.913450][ T1812] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 383.914046][ T1812] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 383.941048][ T1812] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 383.949406][ T1812] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 383.950780][ T1812] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 383.951957][ T1812] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 383.952782][ T1812] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 383.953875][ T1812] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 383.972334][ T1812] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 383.976159][ T1812] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 383.981519][ T1812] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 383.987485][ T1812] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 383.989357][ T1812] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 383.991179][ T1812] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 383.992550][ T1812] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 383.994156][ T1812] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 383.996785][ T1812] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 384.000173][ T1812] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 384.007422][ T1812] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 384.010569][ T1812] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 384.013774][ T1812] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 384.042266][ T1812] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 384.052584][ T1812] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 384.056934][ T1812] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 384.097073][ T1812] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz0 [ 384.838754][ T4544] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. [ 386.062605][ T4553] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.1'. [ 389.186554][ T4572] veth0_to_batadv: entered promiscuous mode [ 390.695992][ T4569] veth0_to_batadv: left promiscuous mode [ 396.597503][ T4595] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 399.177269][ T4615] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 401.862240][ T4635] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 405.045858][ T4664] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 414.291691][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 414.291870][ T29] audit: type=1326 audit(414.020:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4774 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8de5df28 code=0x7ffc0000 [ 414.321744][ T29] audit: type=1326 audit(414.020:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4774 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8de5df28 code=0x7ffc0000 [ 414.336132][ T29] audit: type=1326 audit(414.060:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4774 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8de5df28 code=0x7ffc0000 [ 414.365729][ T29] audit: type=1326 audit(414.080:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4774 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8de5df28 code=0x7ffc0000 [ 414.387862][ T29] audit: type=1326 audit(414.110:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4774 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8de5df28 code=0x7ffc0000 [ 414.390229][ T29] audit: type=1326 audit(414.120:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4774 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c00000b7 syscall=446 compat=0 ip=0xffff8de5df28 code=0x7ffc0000 [ 414.393204][ T29] audit: type=1326 audit(414.120:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4774 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8de5df28 code=0x7ffc0000 [ 414.417947][ T29] audit: type=1326 audit(414.130:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4774 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8de5df28 code=0x7ffc0000 [ 421.188888][ T4815] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 430.606821][ T30] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 430.915736][ T30] usb 1-1: Using ep0 maxpacket: 8 [ 430.982217][ T30] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 430.991087][ T30] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 430.994031][ T30] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.027041][ T30] usb 1-1: config 0 descriptor?? [ 438.662677][ T4893] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 439.188967][ T4893] bond3: (slave vcan1): The slave device specified does not support setting the MAC address [ 439.233129][ T4893] bond3: (slave vcan1): Error -95 calling set_mac_address [ 440.033878][ T4898] loop1: detected capacity change from 0 to 512 [ 440.059582][ T4898] EXT4-fs: Ignoring removed mblk_io_submit option [ 440.089707][ T4898] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 440.181562][ T4898] EXT4-fs (loop1): 1 truncate cleaned up [ 440.189850][ T4898] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 440.394351][ T3210] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 441.016202][ T4902] loop1: detected capacity change from 0 to 1024 [ 441.050045][ T4902] EXT4-fs: Ignoring removed orlov option [ 441.051014][ T4902] EXT4-fs: Ignoring removed nomblk_io_submit option [ 441.116819][ T4902] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84ec018, mo2=0002] [ 441.121348][ T4902] System zones: 0-1, 3-36 [ 441.160435][ T4902] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 441.337855][ T8] usb 1-1: USB disconnect, device number 13 [ 441.470786][ T3210] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 443.845937][ T4924] loop1: detected capacity change from 0 to 2048 [ 444.013215][ T4924] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 444.106974][ T4924] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1217: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 444.112250][ T4924] EXT4-fs (loop1): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 444.114099][ T4924] EXT4-fs (loop1): This should not happen!! Data will be lost [ 444.114099][ T4924] [ 444.119575][ T4924] EXT4-fs (loop1): Total free blocks count 0 [ 444.124438][ T4924] EXT4-fs (loop1): Free/Dirty block details [ 444.137369][ T4924] EXT4-fs (loop1): free_blocks=2415919104 [ 444.137942][ T4924] EXT4-fs (loop1): dirty_blocks=16 [ 444.138705][ T4924] EXT4-fs (loop1): Block reservation details [ 444.139178][ T4924] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 444.307703][ T3210] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 444.644334][ T4928] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 447.902665][ T4953] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 447.906329][ T4953] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 447.907870][ T4953] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 451.709743][ T4960] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 452.851186][ T4964] input: syz0 as /devices/virtual/input/input3 [ 453.335547][ T3388] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 453.582687][ T3388] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 453.584222][ T3388] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 453.587154][ T3388] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 453.625790][ T3388] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 453.627221][ T3388] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.628349][ T3388] usb 1-1: Product: syz [ 453.629035][ T3388] usb 1-1: Manufacturer: syz [ 453.629813][ T3388] usb 1-1: SerialNumber: syz [ 453.703999][ T3388] cdc_ncm 1-1:1.0: skipping garbage [ 453.715929][ T3388] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 453.717282][ T3388] cdc_ncm 1-1:1.0: bind() failure [ 453.917594][ T3388] usb 1-1: USB disconnect, device number 14 [ 457.648828][ T4995] loop1: detected capacity change from 0 to 512 [ 458.029886][ T4995] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 458.288744][ T3210] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 463.363800][ T5021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 463.367984][ T5021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 465.155933][ T5026] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 466.012189][ T5034] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (23680) [ 466.013712][ T5034] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 475.332060][ T29] audit: type=1400 audit(475.050:104): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=5065 comm="syz-executor.1" src=3 dest=20002 netif=gretap0 [ 475.998734][ T5072] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 476.985820][ T25] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 477.192064][ T25] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 477.193535][ T25] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 477.257380][ T25] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 477.258271][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.258974][ T25] usb 1-1: Product: syz [ 477.259719][ T25] usb 1-1: Manufacturer: syz [ 477.260457][ T25] usb 1-1: SerialNumber: syz [ 477.791598][ T25] cdc_ncm 1-1:1.0: bind() failure [ 477.837326][ T25] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71 [ 477.840264][ T25] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 477.866014][ T25] usbtest 1-1:1.1: probe with driver usbtest failed with error -71 [ 477.886013][ T25] usb 1-1: USB disconnect, device number 15 [ 480.555613][ C1] Unable to handle kernel paging request at virtual address 007000007f8e7900 [ 480.557201][ C1] Mem abort info: [ 480.558441][ C1] ESR = 0x0000000096000004 [ 480.559321][ C1] EC = 0x25: DABT (current EL), IL = 32 bits [ 480.561428][ C1] SET = 0, FnV = 0 [ 480.562186][ C1] EA = 0, S1PTW = 0 [ 480.563081][ C1] FSC = 0x04: level 0 translation fault [ 480.564051][ C1] Data abort info: [ 480.564942][ C1] ISV = 0, ISS = 0x00000004, ISS2 = 0x00000000 [ 480.565998][ C1] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 480.567255][ C1] GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0 [ 480.568353][ C1] [007000007f8e7900] address between user and kernel address ranges [ 480.569636][ C1] Internal error: Oops: 0000000096000004 [#1] PREEMPT SMP [ 480.570799][ C1] Modules linked in: [ 480.572157][ C1] CPU: 1 PID: 5101 Comm: modprobe Not tainted 6.10.0-rc1-syzkaller-00021-ge0cce98fe279 #0 [ 480.573916][ C1] Hardware name: linux,dummy-virt (DT) [ 480.575248][ C1] pstate: 804000c9 (Nzcv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 480.576771][ C1] pc : timerqueue_add+0x48/0xcc [ 480.578107][ C1] lr : enqueue_hrtimer.constprop.0+0x44/0x60 [ 480.579335][ C1] sp : ffff80008000be60 [ 480.580222][ C1] x29: ffff80008000be60 x28: 0000000000000000 x27: 0000000000000001 [ 480.582182][ C1] x26: 0000000000000001 x25: 00000000000000c0 x24: 0000006fd3880a20 [ 480.583923][ C1] x23: fff000007f8e7780 x22: fff000007f8e77e0 x21: fff000007f8e7780 [ 480.585528][ C1] x20: 0000000000000001 x19: fff000007f8e7ce8 x18: 0000000000000000 [ 480.587516][ C1] x17: fff07ffffd331000 x16: ffff800080008000 x15: 00004c4b40000000 [ 480.589062][ C1] x14: 00000000000001ae x13: 00000000000001ae x12: 0000000000000001 [ 480.590507][ C1] x11: 0000000000000009 x10: 0000000000000001 x9 : 0000000000000400 [ 480.592330][ C1] x8 : 0000006fd383cc80 x7 : 7fffffffffffffff x6 : 0000006fd383cc80 [ 480.594136][ C1] x5 : 0000006fd41c6300 x4 : ffff800083c33d40 x3 : ff7000007f8e78e8 [ 480.595984][ C1] x2 : ff7000007f8e78e8 x1 : fff000007f8e77e0 x0 : fff000007f8e7ce8 [ 480.598251][ C1] Call trace: [ 480.598945][ C1] timerqueue_add+0x48/0xcc [ 480.600503][ C1] enqueue_hrtimer.constprop.0+0x44/0x60 [ 480.601613][ C1] __hrtimer_run_queues+0x15c/0x1bc [ 480.602559][ C1] hrtimer_interrupt+0xe8/0x244 [ 480.603822][ C1] arch_timer_handler_phys+0x2c/0x44 [ 480.604891][ C1] handle_percpu_devid_irq+0x84/0x130 [ 480.606158][ C1] generic_handle_domain_irq+0x2c/0x44 [ 480.607323][ C1] gic_handle_irq+0x40/0xc4 [ 480.608439][ C1] call_on_irq_stack+0x24/0x4c [ 480.609241][ C1] do_interrupt_handler+0x80/0x84 [ 480.610066][ C1] el1_interrupt+0x34/0x64 [ 480.610812][ C1] el1h_64_irq_handler+0x18/0x24 [ 480.611636][ C1] el1h_64_irq+0x64/0x68 [ 480.612376][ C1] mntput_no_expire+0xa8/0x314 [ 480.613193][ C1] mntput+0x24/0x3c [ 480.613865][ C1] walk_component+0x188/0x190 [ 480.614882][ C1] link_path_walk.part.0.constprop.0+0x238/0x394 [ 480.616696][ C1] path_openat+0xa8/0xf18 [ 480.618281][ C1] do_filp_open+0x9c/0x14c [ 480.619480][ C1] do_sys_openat2+0xc0/0xf4 [ 480.620552][ C1] __arm64_sys_openat+0x64/0xa4 [ 480.621418][ C1] invoke_syscall+0x48/0x118 [ 480.622171][ C1] el0_svc_common.constprop.0+0x40/0xe0 [ 480.623058][ C1] do_el0_svc+0x1c/0x28 [ 480.623847][ C1] el0_svc+0x34/0xf8 [ 480.624641][ C1] el0t_64_sync_handler+0x100/0x12c [ 480.625598][ C1] el0t_64_sync+0x19c/0x1a0 [ 480.626746][ C1] Code: f9400843 91004044 b4000123 aa0303e2 (f9400c43) [ 480.628206][ C1] ---[ end trace 0000000000000000 ]--- [ 480.629368][ C1] Kernel panic - not syncing: Oops: Fatal exception in interrupt [ 480.630752][ C1] SMP: stopping secondary CPUs [ 485.701886][ C1] SMP: failed to stop secondary CPUs 0-1 [ 485.704729][ C1] Kernel Offset: disabled [ 485.706178][ C1] CPU features: 0x00,00000006,8f17bd7c,1767f6bf [ 485.707244][ C1] Memory Limit: none [ 485.708233][ C1] Rebooting in 86400 seconds.. VM DIAGNOSIS: 09:43:28 Registers: info registers vcpu 0 CPU#0 PC=ffff800081970f3c X00=ffff800081970f38 X01=0000000000000000 X02=0000000000000004 X03=0000000000000c72 X04=0000000000000000 X05=fff07ffffd331000 X06=00000000017a14df X07=000000010000466e X08=ffff8000800038c8 X09=0000000000000038 X10=0000000000000001 X11=0f1325bd1e5209f5 X12=0000000000007283 X13=46a4fe550f435b05 X14=1a01160072830f02 X15=1850cc090ad1ced1 X16=267000004274ffff X17=9496d586b9601889 X18=0000000000000000 X19=ffff8000826ed688 X20=ffff8000826ed680 X21=0000000000000000 X22=0000000000000004 X23=ffff8000826ed688 X24=0000000000000028 X25=fff000007f8ee340 X26=0000000000000001 X27=ffff8000829108c0 X28=f0f000000fd77d00 X29=ffff8000800035e0 X30=ffff800081970750 SP=ffff8000800035e0 PSTATE=404000c9 -Z-- EL2h SVCR=00000000 -- BTYPE=0 FPCR=00000000 FPSR=00000000 P00=0000000000000000 P01=0000000000000000 P02=0000000000000000 P03=0000000000000000 P04=0000000000000000 P05=0000000000000000 P06=0000000000000000 P07=0000000000000000 P08=0000000000000000 P09=0000000000000000 P10=0000000000000000 P11=0000000000000000 P12=0000000000000000 P13=0000000000000000 P14=0000000000000000 P15=0000000000000000 FFR=0000000000000000 Z00=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0200000000000000:0200000000000000 Z01=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000200000000:0000000000000000 Z02=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000002:0000000000000000 Z03=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:00d000a800000000:0000000000000000 Z04=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000002 Z05=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000002:0000000000000002 Z06=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:6edc4d3a2914b135:d8e9c869e2695c88 Z07=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:b20fae707afde253:388e9c6c4fa85ca0 Z08=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z09=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z10=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z11=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z12=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z13=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z14=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z15=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z16=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000ffffd6cb77d0:0000ffffd6cb77d0 Z17=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:ffffff80ffffffd0:0000ffffd6cb77a0 Z18=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z19=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z20=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z21=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z22=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z23=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z24=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z25=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z26=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z27=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z28=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z29=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z30=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z31=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 info registers vcpu 1 CPU#1 PC=ffff800081970f3c X00=ffff800081970f38 X01=00000000ffffffff X02=0000000000000000 X03=ffff800082156ce0 X04=ffff80008000bab0 X05=f9f0000008a06d80 X06=ffff80008000bbb0 X07=00000000ffffffc8 X08=ffff80008000bbf0 X09=ffff80008000bbf0 X10=ffff8000826bb080 X11=0000000000000513 X12=0000000000000f39 X13=ffff80008260b080 X14=0000000000000000 X15=ffff80008000b630 X16=736572646461206c X17=3030303730302073 X18=ffffffffffffffff X19=ffff8000826ed688 X20=ffff8000826ed680 X21=0000000000000000 X22=0000000000000004 X23=ffff8000826ed688 X24=0000000000000028 X25=ffff800082604000 X26=0000000000000000 X27=0000000000000001 X28=f9f0000008a06d80 X29=ffff80008000b8d0 X30=ffff800081970750 SP=ffff80008000b8d0 PSTATE=804000c9 N--- EL2h SVCR=00000000 -- BTYPE=0 FPCR=00000000 FPSR=00000000 P00=0000000000000000 P01=0000000000000000 P02=0000000000000000 P03=0000000000000000 P04=0000000000000000 P05=0000000000000000 P06=0000000000000000 P07=0000000000000000 P08=0000000000000000 P09=0000000000000000 P10=0000000000000000 P11=0000000000000000 P12=0000000000000000 P13=0000000000000000 P14=0000000000000000 P15=0000000000000000 FFR=0000000000000000 Z00=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:6f732e78756e696c:657362696c00322e Z01=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:00000000000f0000 Z02=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:f00ff00ff00ff00f:f00ff00ff00ff00f Z03=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000f00:0000000000000f00 Z04=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:3003300330033003:3003300330033003 Z05=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:f00ff00ff00ff00f:f00ff00ff00ff00f Z06=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000c00:0000000000000c00 Z07=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z08=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z09=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z10=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z11=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z12=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z13=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z14=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z15=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z16=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z17=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z18=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z19=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z20=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z21=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z22=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z23=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z24=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z25=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z26=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z27=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z28=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z29=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z30=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z31=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000